Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/2c36d9-06a0-4163-88e0-589566604c9b/1/51WWeHKHatI452yZttOchuVxKP0.mft
File: 51WWeHKHatI452yZttOchuVxKP0.mft (raw, json)
Hash identifier: G029FoLXS+BLr/wNtH5HE9hRyMEiNhWHz3uwBkAReSY=
Subject key identifier: 9F:5D:78:21:ED:DD:DB:90:17:0E:84:EF:5A:22:C3:B6:BE:DF:E2:57
Authority key identifier: E7:55:96:78:72:87:6A:D2:38:E7:6C:99:B6:D3:9C:86:E5:71:28:FD
Certificate issuer: /CN=e755967872876ad238e76c99b6d39c86e57128fd
Certificate serial: 019D3789B313976DED85EC07E32E05545A6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51WWeHKHatI452yZttOchuVxKP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/2c36d9-06a0-4163-88e0-589566604c9b/1/51WWeHKHatI452yZttOchuVxKP0.mft
Manifest number: 41
Signing time: Sun 29 Mar 2026 03:01:04 +0000
Manifest this update: Sun 29 Mar 2026 03:01:04 +0000
Manifest next update: Mon 30 Mar 2026 03:01:04 +0000
Files and hashes: 1: 51WWeHKHatI452yZttOchuVxKP0.crl (hash: ZqlHnQxcWzxbBz4Bylb/l8QIafTLtdqqEUGB9BfSdvo=)
2: UJ07a1M-XC-XQKmlBcwTPux-TnY.roa (hash: bOg6Q+myJu9GET6HuRgSyDwdCM8RKO+iu8CQGrW5M98=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/2c36d9-06a0-4163-88e0-589566604c9b/1/51WWeHKHatI452yZttOchuVxKP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/2c36d9-06a0-4163-88e0-589566604c9b/1/51WWeHKHatI452yZttOchuVxKP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/51WWeHKHatI452yZttOchuVxKP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:b3:13:97:6d:ed:85:ec:07:e3:2e:05:54:5a:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e755967872876ad238e76c99b6d39c86e57128fd
Validity
Not Before: Mar 29 03:01:04 2026 GMT
Not After : Mar 30 03:01:04 2026 GMT
Subject: CN=9f5d7821eddddb90170e84ef5a22c3b6bedfe257
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8b:f2:c0:44:df:fb:33:9b:ce:8e:02:de:90:
f2:8d:f9:35:4b:84:de:2c:8e:0b:2c:01:28:2c:1c:
1d:00:04:28:aa:bd:6b:53:6c:80:10:8f:12:7f:e1:
d0:22:68:5a:ef:9d:2f:50:1d:76:12:b4:74:3e:d1:
a1:5c:a6:85:dd:b7:b2:71:db:fb:98:06:4c:46:f0:
e2:2c:fb:3d:9d:e1:66:d6:7c:e3:49:71:67:1f:41:
36:31:55:12:63:c7:e4:3e:02:ee:96:7a:fd:d9:f1:
71:8e:75:d2:d2:85:4d:20:73:34:58:10:3a:69:23:
b6:5a:32:83:ec:28:f2:5f:60:a7:cb:d4:a2:22:80:
83:84:2c:b1:9d:f7:84:32:6e:b6:b4:8a:4e:d7:9b:
79:d0:0b:7b:c8:d5:d0:63:41:19:30:00:a0:8b:ae:
fd:59:aa:ed:03:1b:ce:40:8f:34:54:c0:4e:b4:a5:
2c:56:b6:a3:c4:02:74:e4:fd:48:21:a1:f1:d9:6f:
45:8b:74:b3:f1:79:e3:15:b4:e3:da:ae:22:32:d8:
5b:21:ec:7c:b7:8c:92:e6:55:62:97:c9:49:fa:a0:
d5:45:5f:b1:14:cd:1a:52:c4:d6:70:07:80:02:c7:
cd:ec:7b:3d:07:69:13:c7:34:b3:64:0b:97:38:d8:
f0:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:5D:78:21:ED:DD:DB:90:17:0E:84:EF:5A:22:C3:B6:BE:DF:E2:57
X509v3 Authority Key Identifier:
keyid:E7:55:96:78:72:87:6A:D2:38:E7:6C:99:B6:D3:9C:86:E5:71:28:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51WWeHKHatI452yZttOchuVxKP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/2c36d9-06a0-4163-88e0-589566604c9b/1/51WWeHKHatI452yZttOchuVxKP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/2c36d9-06a0-4163-88e0-589566604c9b/1/51WWeHKHatI452yZttOchuVxKP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:04:32:a8:ac:5c:9f:10:e5:e4:60:fd:e0:bc:a9:5a:17:25:
28:f3:15:d0:94:57:09:e2:2c:51:85:40:04:2b:77:a9:e6:d8:
bf:7a:51:5f:87:b0:38:98:84:89:1c:f6:81:a8:ea:21:72:8c:
40:ee:39:ba:f7:ec:c2:ac:3c:f5:84:03:d6:11:01:d6:0b:1c:
3b:ab:48:ec:80:39:a8:21:1b:c6:eb:3b:50:db:76:ed:39:0f:
7a:6d:82:98:52:39:31:42:9c:24:87:44:84:fe:e8:62:ed:c7:
7a:96:a1:b7:99:32:1a:a5:50:b4:1d:58:84:2d:5a:2f:a2:7e:
eb:f3:9e:e4:d7:33:2e:cd:74:5b:2d:19:f6:54:e6:aa:ed:50:
fd:c3:42:de:0f:e6:39:8c:78:a7:f0:4a:50:59:0e:44:50:56:
96:69:24:4d:14:b6:8a:ad:2a:54:e6:45:c0:cd:28:54:9f:99:
35:35:da:91:c2:1a:80:1b:fc:f7:0c:3c:9b:61:fa:73:8e:53:
e5:ce:ea:f9:8f:36:53:6a:e8:7b:4e:e2:87:51:07:3e:b0:e8:
89:8f:b4:d2:9d:cb:5d:c1:f4:ef:2e:93:64:c0:f7:05:27:6b:
28:49:47:38:46:d0:0b:09:ab:9e:71:45:be:0e:2d:c4:59:27:
d7:c2:39:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03ibMTl23thewH4y4FVFprMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3NTU5Njc4NzI4NzZhZDIzOGU3NmM5OWI2ZDM5Yzg2ZTU3
MTI4ZmQwHhcNMjYwMzI5MDMwMTA0WhcNMjYwMzMwMDMwMTA0WjAzMTEwLwYDVQQD
Eyg5ZjVkNzgyMWVkZGRkYjkwMTcwZTg0ZWY1YTIyYzNiNmJlZGZlMjU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArovywETf+zObzo4C3pDyjfk1S4Te
LI4LLAEoLBwdAAQoqr1rU2yAEI8Sf+HQImha750vUB12ErR0PtGhXKaF3beycdv7
mAZMRvDiLPs9neFm1nzjSXFnH0E2MVUSY8fkPgLulnr92fFxjnXS0oVNIHM0WBA6
aSO2WjKD7CjyX2Cny9SiIoCDhCyxnfeEMm62tIpO15t50At7yNXQY0EZMACgi679
WartAxvOQI80VMBOtKUsVrajxAJ05P1IIaHx2W9Fi3Sz8XnjFbTj2q4iMthbIex8
t4yS5lVil8lJ+qDVRV+xFM0aUsTWcAeAAsfN7Hs9B2kTxzSzZAuXONjwHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ9deCHt3duQFw6E71oiw7a+3+JXMB8GA1UdIwQY
MBaAFOdVlnhyh2rSOOdsmbbTnIblcSj9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTFXV2VIS0hhdEk0NTJ5WnR0T2NodVZ4S1AwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS8yYzM2ZDktMDZhMC00MTYzLTg4ZTAt
NTg5NTY2NjA0YzliLzEvNTFXV2VIS0hhdEk0NTJ5WnR0T2NodVZ4S1AwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS8yYzM2ZDktMDZhMC00MTYzLTg4ZTAtNTg5NTY2NjA0Yzli
LzEvNTFXV2VIS0hhdEk0NTJ5WnR0T2NodVZ4S1AwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADQQyqKxc
nxDl5GD94LypWhclKPMV0JRXCeIsUYVABCt3qebYv3pRX4ewOJiEiRz2gajqIXKM
QO45uvfswqw89YQD1hEB1gscO6tI7IA5qCEbxus7UNt27TkPem2CmFI5MUKcJIdE
hP7oYu3Hepaht5kyGqVQtB1YhC1aL6J+6/Oe5NczLs10Wy0Z9lTmqu1Q/cNC3g/m
OYx4p/BKUFkORFBWlmkkTRS2iq0qVOZFwM0oVJ+ZNTXakcIagBv89ww8m2H6c45T
5c7q+Y82U2roe07ih1EHPrDoiY+00p3LXcH07y6TZMD3BSdrKElHOEbQCwmrnnFF
vg4txFkn18I55A==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:28:04 2026 by rpki-client