Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/1b8d92-e157-4141-82c9-87e1f3866362/1/00_-5-di-aBv4vR-eh5S2eun-v0.mft
File: 00_-5-di-aBv4vR-eh5S2eun-v0.mft (raw, json)
Hash identifier: 1JoST+ZAX/87gE1GtkgE7pfL5Y6r4bURX82vTDUQTSc=
Subject key identifier: 04:EC:5B:AA:B6:22:F0:D1:33:47:A5:E7:7F:54:14:E8:FD:C3:3D:4B
Authority key identifier: D3:4F:FE:E7:E7:62:F9:A0:6F:E2:F4:7E:7A:1E:52:D9:EB:A7:FA:FD
Certificate issuer: /CN=d34ffee7e762f9a06fe2f47e7a1e52d9eba7fafd
Certificate serial: 019D37C0703087C609B92B7F8B07D8837332
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/00_-5-di-aBv4vR-eh5S2eun-v0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/1b8d92-e157-4141-82c9-87e1f3866362/1/00_-5-di-aBv4vR-eh5S2eun-v0.mft
Manifest number: 12DC
Signing time: Sun 29 Mar 2026 04:00:51 +0000
Manifest this update: Sun 29 Mar 2026 04:00:51 +0000
Manifest next update: Mon 30 Mar 2026 04:00:51 +0000
Files and hashes: 1: 00_-5-di-aBv4vR-eh5S2eun-v0.crl (hash: gp05UUhRsbfmwL0ndeU8/LmWcXHhG0wc9M1MGqa1PEA=)
2: NaC2EXhqguVissfFb8R9GK-pfWk.roa (hash: /tVqb/8j9ibKJcyJbXGCxzBW5/AN/dkNicwbisF6Ij8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/1b8d92-e157-4141-82c9-87e1f3866362/1/00_-5-di-aBv4vR-eh5S2eun-v0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/1b8d92-e157-4141-82c9-87e1f3866362/1/00_-5-di-aBv4vR-eh5S2eun-v0.mft
rsync://rpki.ripe.net/repository/DEFAULT/00_-5-di-aBv4vR-eh5S2eun-v0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:70:30:87:c6:09:b9:2b:7f:8b:07:d8:83:73:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d34ffee7e762f9a06fe2f47e7a1e52d9eba7fafd
Validity
Not Before: Mar 29 04:00:51 2026 GMT
Not After : Mar 30 04:00:51 2026 GMT
Subject: CN=04ec5baab622f0d13347a5e77f5414e8fdc33d4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:41:08:69:cc:01:19:3d:18:28:3b:ed:ab:d2:
e4:e3:b8:8a:71:8b:00:54:f9:17:b2:15:e4:1b:7d:
f9:79:47:37:5e:4a:b9:5d:fb:ee:2d:e5:b5:df:0c:
25:c8:99:6f:44:14:61:d6:d6:f1:2e:bd:9d:c6:26:
cd:99:a9:6c:17:ef:e3:7b:a4:b7:23:44:00:ed:07:
4a:07:39:f1:3d:16:2c:61:a4:5f:ce:d9:e8:39:15:
c1:94:50:5e:2e:41:1b:f5:e1:b4:e5:18:6d:d1:8d:
04:42:59:ac:b5:43:54:4b:90:31:0d:1c:7c:7d:44:
14:ad:18:55:5a:3d:17:27:65:2e:83:67:c5:6f:1b:
a6:1f:16:ff:5b:4b:6e:85:cd:78:a5:2c:ed:86:a1:
35:06:64:d2:3e:f8:af:88:49:8b:f5:3e:3a:16:1f:
5d:e8:43:42:2f:0c:df:05:d5:a8:cb:6d:c4:0a:81:
77:7b:53:53:f6:5f:76:17:94:63:17:0d:bd:73:8c:
bc:35:a7:a0:ca:cf:d7:0a:09:2f:41:34:37:74:e2:
2c:5a:0b:31:59:88:3a:15:05:bd:31:c1:0b:e8:2e:
8f:03:3c:fb:60:e3:fe:ac:93:75:a7:5d:48:30:0a:
8b:da:a6:87:ff:da:4c:4f:8c:9b:0e:ab:61:f9:75:
7d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:EC:5B:AA:B6:22:F0:D1:33:47:A5:E7:7F:54:14:E8:FD:C3:3D:4B
X509v3 Authority Key Identifier:
keyid:D3:4F:FE:E7:E7:62:F9:A0:6F:E2:F4:7E:7A:1E:52:D9:EB:A7:FA:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00_-5-di-aBv4vR-eh5S2eun-v0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1b8d92-e157-4141-82c9-87e1f3866362/1/00_-5-di-aBv4vR-eh5S2eun-v0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1b8d92-e157-4141-82c9-87e1f3866362/1/00_-5-di-aBv4vR-eh5S2eun-v0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:f5:08:83:a5:f6:ee:65:49:e1:d7:15:2f:20:f9:18:ed:6a:
27:fa:e0:c9:4f:ca:89:a2:07:5c:32:d6:4e:a0:a9:14:c2:6a:
c8:ec:67:b5:7d:db:e8:5d:89:bd:d9:72:21:fe:8c:68:c9:02:
eb:db:3e:4d:9c:0b:1b:d0:76:dd:2c:23:c0:df:ed:8b:68:7f:
f9:c5:dc:7d:9e:e6:c3:83:71:6b:e7:c9:96:7c:e4:2c:ce:8d:
70:7d:a8:01:45:1a:bd:c7:61:72:b4:e7:d6:58:6c:df:a3:e3:
0c:5d:38:ab:ab:fe:e4:f8:36:60:26:f1:f8:c2:a8:d9:20:59:
78:0f:d3:e7:0c:64:ff:22:00:14:75:c7:10:c8:b5:14:26:19:
0f:b1:c3:e1:27:14:27:ef:f9:b0:36:bf:7c:4d:36:ab:e3:39:
e0:fc:0a:ac:59:81:ac:e1:1a:de:5c:5d:0b:52:34:56:60:38:
51:51:98:08:22:e3:8a:a9:e1:fc:65:b6:f9:81:88:f5:89:f3:
48:13:6b:3f:87:96:c6:17:0a:45:64:1d:db:78:de:a8:83:fc:
9e:86:ec:40:61:53:79:74:73:6a:fd:24:56:78:47:61:b2:6f:
e3:a9:20:a0:1e:ad:d6:bb:20:5a:48:a9:52:4c:11:63:46:2d:
2f:fc:d9:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wHAwh8YJuSt/iwfYg3MyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzNGZmZWU3ZTc2MmY5YTA2ZmUyZjQ3ZTdhMWU1MmQ5ZWJh
N2ZhZmQwHhcNMjYwMzI5MDQwMDUxWhcNMjYwMzMwMDQwMDUxWjAzMTEwLwYDVQQD
EygwNGVjNWJhYWI2MjJmMGQxMzM0N2E1ZTc3ZjU0MTRlOGZkYzMzZDRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9kEIacwBGT0YKDvtq9Lk47iKcYsA
VPkXshXkG335eUc3Xkq5XfvuLeW13wwlyJlvRBRh1tbxLr2dxibNmalsF+/je6S3
I0QA7QdKBznxPRYsYaRfztnoORXBlFBeLkEb9eG05Rht0Y0EQlmstUNUS5AxDRx8
fUQUrRhVWj0XJ2Uug2fFbxumHxb/W0tuhc14pSzthqE1BmTSPviviEmL9T46Fh9d
6ENCLwzfBdWoy23ECoF3e1NT9l92F5RjFw29c4y8Naegys/XCgkvQTQ3dOIsWgsx
WYg6FQW9McEL6C6PAzz7YOP+rJN1p11IMAqL2qaH/9pMT4ybDqth+XV9ZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFATsW6q2IvDRM0el539UFOj9wz1LMB8GA1UdIwQY
MBaAFNNP/ufnYvmgb+L0fnoeUtnrp/r9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDBfLTUtZGktYUJ2NHZSLWVoNVMyZXVuLXYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8xYjhkOTItZTE1Ny00MTQxLTgyYzkt
ODdlMWYzODY2MzYyLzEvMDBfLTUtZGktYUJ2NHZSLWVoNVMyZXVuLXYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi8xYjhkOTItZTE1Ny00MTQxLTgyYzktODdlMWYzODY2MzYy
LzEvMDBfLTUtZGktYUJ2NHZSLWVoNVMyZXVuLXYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgPUIg6X2
7mVJ4dcVLyD5GO1qJ/rgyU/KiaIHXDLWTqCpFMJqyOxntX3b6F2JvdlyIf6MaMkC
69s+TZwLG9B23SwjwN/ti2h/+cXcfZ7mw4Nxa+fJlnzkLM6NcH2oAUUavcdhcrTn
1lhs36PjDF04q6v+5Pg2YCbx+MKo2SBZeA/T5wxk/yIAFHXHEMi1FCYZD7HD4ScU
J+/5sDa/fE02q+M54PwKrFmBrOEa3lxdC1I0VmA4UVGYCCLjiqnh/GW2+YGI9Ynz
SBNrP4eWxhcKRWQd23jeqIP8nobsQGFTeXRzav0kVnhHYbJv46kgoB6t1rsgWkip
UkwRY0YtL/zZvw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:44 2026 by rpki-client