Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/2884a1-c124-4565-b841-e104c982d7a0/1/S5PGoQ0UHwCu-t4BvNNJL3VPToM.mft
File: S5PGoQ0UHwCu-t4BvNNJL3VPToM.mft (raw, json)
Hash identifier: AKTnAf25FMHKTWAGNmbinspQDP00VFvmma6M0IcboZc=
Subject key identifier: 0A:56:6A:72:7F:C8:64:2F:94:57:92:1D:33:BB:23:87:18:6F:B9:EB
Authority key identifier: 4B:93:C6:A1:0D:14:1F:00:AE:FA:DE:01:BC:D3:49:2F:75:4F:4E:83
Certificate issuer: /CN=4b93c6a10d141f00aefade01bcd3492f754f4e83
Certificate serial: 019D37897C3CDE36FA6054FAA75FFF5E3C05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S5PGoQ0UHwCu-t4BvNNJL3VPToM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/2884a1-c124-4565-b841-e104c982d7a0/1/S5PGoQ0UHwCu-t4BvNNJL3VPToM.mft
Manifest number: 17E8
Signing time: Sun 29 Mar 2026 03:00:50 +0000
Manifest this update: Sun 29 Mar 2026 03:00:50 +0000
Manifest next update: Mon 30 Mar 2026 03:00:50 +0000
Files and hashes: 1: S5PGoQ0UHwCu-t4BvNNJL3VPToM.crl (hash: KZL6dzrFcpRfTF83Nmsm+EK800tZ8LhtVKMF3ljY6pQ=)
2: UVqvYO52B_mDbYpTXh7tiRMFdiw.roa (hash: dr+1/4Wpnd9WCKYo0XBHvqSgnCOs5Ovx5Q+q94HABKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/2884a1-c124-4565-b841-e104c982d7a0/1/S5PGoQ0UHwCu-t4BvNNJL3VPToM.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/2884a1-c124-4565-b841-e104c982d7a0/1/S5PGoQ0UHwCu-t4BvNNJL3VPToM.mft
rsync://rpki.ripe.net/repository/DEFAULT/S5PGoQ0UHwCu-t4BvNNJL3VPToM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:7c:3c:de:36:fa:60:54:fa:a7:5f:ff:5e:3c:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b93c6a10d141f00aefade01bcd3492f754f4e83
Validity
Not Before: Mar 29 03:00:50 2026 GMT
Not After : Mar 30 03:00:50 2026 GMT
Subject: CN=0a566a727fc8642f9457921d33bb2387186fb9eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:05:7c:01:1e:56:71:00:6b:bd:77:03:6a:bd:
62:19:6f:3e:48:ee:93:13:7a:68:91:d0:cd:56:6d:
ea:5b:85:a0:53:d8:d3:89:08:49:13:88:1f:39:a6:
6e:30:6c:4b:7a:18:d3:db:f4:90:f1:2c:b5:56:ad:
ae:2e:dd:18:d5:4e:1b:71:10:4b:88:40:36:c8:19:
5d:e4:1d:6a:26:36:bd:75:39:dc:4a:a7:c5:bf:47:
50:08:c3:69:eb:dd:a9:0e:19:e7:91:54:8c:e5:64:
0d:77:9b:0a:35:8d:cd:6d:1f:ca:43:f1:3c:c7:10:
c4:bf:77:9a:2f:b7:23:c5:bd:64:ef:1d:d6:a0:70:
46:7e:9e:63:75:a3:79:d7:47:25:cf:cb:36:98:a0:
ad:4b:f1:b4:a1:5e:1f:98:b1:17:2e:c1:da:46:ab:
d1:01:cb:1f:91:4b:31:6b:6c:0d:6f:f8:0b:1a:f2:
73:a8:02:ff:78:a9:0c:4f:0f:95:ae:9c:a4:c5:6e:
c1:44:93:9e:d8:b4:b4:22:9d:d0:8b:9d:96:e8:41:
0e:6b:57:30:11:b1:21:f4:cc:a3:cd:21:34:f8:f0:
bb:9b:95:00:35:10:ac:a1:19:e0:c0:cc:b1:0d:91:
a9:2d:1e:34:40:96:0b:3b:64:5d:f2:9a:d5:2b:b4:
dd:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:56:6A:72:7F:C8:64:2F:94:57:92:1D:33:BB:23:87:18:6F:B9:EB
X509v3 Authority Key Identifier:
keyid:4B:93:C6:A1:0D:14:1F:00:AE:FA:DE:01:BC:D3:49:2F:75:4F:4E:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S5PGoQ0UHwCu-t4BvNNJL3VPToM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/2884a1-c124-4565-b841-e104c982d7a0/1/S5PGoQ0UHwCu-t4BvNNJL3VPToM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/2884a1-c124-4565-b841-e104c982d7a0/1/S5PGoQ0UHwCu-t4BvNNJL3VPToM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:00:78:03:42:28:b0:d4:67:a1:dd:d1:e0:6d:c6:86:59:b2:
9e:67:11:28:5c:5f:3d:a8:24:c7:7e:7a:5d:90:36:c8:ff:5c:
83:be:96:6f:da:49:1e:56:18:f2:b1:4a:e8:bd:e6:1b:e1:95:
db:bd:a1:41:5d:56:5f:b4:f7:2b:04:14:2b:8c:fe:c2:72:2e:
43:39:ba:96:18:5f:37:52:59:bb:d9:ee:c6:82:3c:6e:22:04:
b3:43:25:d3:34:89:4b:a2:46:35:a4:94:31:d9:bc:33:0b:5e:
9c:13:25:ff:e1:83:e9:12:95:63:61:8c:29:b7:66:8c:9b:f5:
5d:ea:2f:18:c6:b5:1d:ae:ca:c9:5c:48:af:76:2d:cb:3e:bc:
cc:4a:21:6d:c8:f3:29:f4:f9:d3:57:e9:f0:d2:7b:04:8a:cd:
1d:ad:d4:ef:f2:28:99:cd:c1:fa:9a:a3:dd:aa:12:fb:c9:d3:
d1:9f:49:17:48:c1:65:7d:ff:e3:18:d6:89:ac:35:56:cd:5e:
46:f6:5a:dd:bf:0f:90:4d:1f:4d:17:fc:ef:d9:85:d3:d5:80:
99:b0:10:f6:f0:84:00:a3:52:09:26:71:6f:2e:7b:a8:f7:2c:
37:59:23:8c:68:39:28:4e:0b:c4:49:bb:9c:da:e8:bf:ea:29:
e3:90:5a:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03iXw83jb6YFT6p1//XjwFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiOTNjNmExMGQxNDFmMDBhZWZhZGUwMWJjZDM0OTJmNzU0
ZjRlODMwHhcNMjYwMzI5MDMwMDUwWhcNMjYwMzMwMDMwMDUwWjAzMTEwLwYDVQQD
EygwYTU2NmE3MjdmYzg2NDJmOTQ1NzkyMWQzM2JiMjM4NzE4NmZiOWViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgV8AR5WcQBrvXcDar1iGW8+SO6T
E3pokdDNVm3qW4WgU9jTiQhJE4gfOaZuMGxLehjT2/SQ8Sy1Vq2uLt0Y1U4bcRBL
iEA2yBld5B1qJja9dTncSqfFv0dQCMNp692pDhnnkVSM5WQNd5sKNY3NbR/KQ/E8
xxDEv3eaL7cjxb1k7x3WoHBGfp5jdaN510clz8s2mKCtS/G0oV4fmLEXLsHaRqvR
AcsfkUsxa2wNb/gLGvJzqAL/eKkMTw+VrpykxW7BRJOe2LS0Ip3Qi52W6EEOa1cw
EbEh9MyjzSE0+PC7m5UANRCsoRngwMyxDZGpLR40QJYLO2Rd8prVK7TdLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFApWanJ/yGQvlFeSHTO7I4cYb7nrMB8GA1UdIwQY
MBaAFEuTxqENFB8ArvreAbzTSS91T06DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzVQR29RMFVId0N1LXQ0QnZOTkpMM1ZQVG9NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS8yODg0YTEtYzEyNC00NTY1LWI4NDEt
ZTEwNGM5ODJkN2EwLzEvUzVQR29RMFVId0N1LXQ0QnZOTkpMM1ZQVG9NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS8yODg0YTEtYzEyNC00NTY1LWI4NDEtZTEwNGM5ODJkN2Ew
LzEvUzVQR29RMFVId0N1LXQ0QnZOTkpMM1ZQVG9NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVAB4A0Io
sNRnod3R4G3GhlmynmcRKFxfPagkx356XZA2yP9cg76Wb9pJHlYY8rFK6L3mG+GV
272hQV1WX7T3KwQUK4z+wnIuQzm6lhhfN1JZu9nuxoI8biIEs0Ml0zSJS6JGNaSU
Mdm8MwtenBMl/+GD6RKVY2GMKbdmjJv1XeovGMa1Ha7KyVxIr3Ytyz68zEohbcjz
KfT501fp8NJ7BIrNHa3U7/Iomc3B+pqj3aoS+8nT0Z9JF0jBZX3/4xjWiaw1Vs1e
RvZa3b8PkE0fTRf879mF09WAmbAQ9vCEAKNSCSZxby57qPcsN1kjjGg5KE4LxEm7
nNrov+op45BaAw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:51 2026 by rpki-client