Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.mft
File: 5NsDAf4kYcbeP3GNhHy13HwAstI.mft (raw, json)
Hash identifier: ioo/ikeMm81IgtUzrm+YrDoSUctoEwVeHVbLYT7KjzE=
Subject key identifier: 3F:46:C1:2F:84:C9:8E:F0:73:03:AE:2C:1F:5A:8C:11:94:A2:D6:9E
Authority key identifier: E4:DB:03:01:FE:24:61:C6:DE:3F:71:8D:84:7C:B5:DC:7C:00:B2:D2
Certificate issuer: /CN=e4db0301fe2461c6de3f718d847cb5dc7c00b2d2
Certificate serial: 019D390A5ECEA1CDD6C0ABE973A7F8E19724
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5NsDAf4kYcbeP3GNhHy13HwAstI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.mft
Manifest number: 1476
Signing time: Sun 29 Mar 2026 10:01:14 +0000
Manifest this update: Sun 29 Mar 2026 10:01:14 +0000
Manifest next update: Mon 30 Mar 2026 10:01:14 +0000
Files and hashes: 1: 2_kKsluZPpTjZPOr9nXKxoDbv6o.roa (hash: oJRwhRHFVN4UC8uIJgD85cpNy3gmR91KVrX4wcGTHWc=)
2: 5NsDAf4kYcbeP3GNhHy13HwAstI.crl (hash: ZDkv+dzaHnhOC3xrdW2cwQfrhxcNfUZJmLppFoFg4BA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5NsDAf4kYcbeP3GNhHy13HwAstI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:5e:ce:a1:cd:d6:c0:ab:e9:73:a7:f8:e1:97:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4db0301fe2461c6de3f718d847cb5dc7c00b2d2
Validity
Not Before: Mar 29 10:01:14 2026 GMT
Not After : Mar 30 10:01:14 2026 GMT
Subject: CN=3f46c12f84c98ef07303ae2c1f5a8c1194a2d69e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c1:6a:8c:e6:18:3a:33:a0:46:c3:63:34:39:
74:67:15:1f:82:ce:cd:d3:fa:b4:b8:de:6e:be:57:
c4:ff:64:e3:15:88:e9:92:cc:37:d7:f8:a9:64:06:
9e:ef:68:a0:8a:e2:4d:0d:6b:2c:d4:a8:5c:ca:6f:
01:cd:ec:f0:ff:86:10:6c:b3:58:df:56:34:a3:5c:
67:9f:16:fd:99:b2:6e:25:c0:8e:b4:f9:8e:20:b6:
9e:75:13:13:74:49:d7:ca:cd:f0:09:3b:9e:7f:b2:
8c:ca:d8:7d:41:54:4b:5d:b8:85:47:6e:7c:78:bf:
2a:4e:17:a2:9b:cc:ce:8f:42:a8:91:84:e3:c1:00:
e8:27:e4:b3:68:fe:cc:28:ef:0f:82:10:d4:43:e9:
09:54:37:53:1d:b1:e1:37:33:9f:eb:47:ac:5a:e3:
ed:54:3b:b0:1c:b8:be:55:86:3b:27:3f:f4:58:97:
c6:19:65:f2:73:0b:ea:33:5a:ee:72:20:af:93:dd:
4d:1e:d8:ad:08:75:f8:73:b9:ac:de:6e:ab:0d:96:
25:68:b6:ad:bc:43:c3:e1:e8:98:4e:db:8c:89:de:
1c:98:6a:be:d8:43:6a:48:5d:df:60:8c:45:67:9e:
52:b5:ac:b6:13:64:07:24:af:ae:4d:67:85:67:ea:
c8:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:46:C1:2F:84:C9:8E:F0:73:03:AE:2C:1F:5A:8C:11:94:A2:D6:9E
X509v3 Authority Key Identifier:
keyid:E4:DB:03:01:FE:24:61:C6:DE:3F:71:8D:84:7C:B5:DC:7C:00:B2:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5NsDAf4kYcbeP3GNhHy13HwAstI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:89:e0:dc:ac:0d:63:6a:5f:9f:eb:7f:5d:7d:fa:40:83:4f:
69:2f:79:05:ec:d7:4e:fa:27:c6:b8:65:71:4c:97:a2:ba:04:
8b:c8:97:74:ab:25:21:d7:38:3f:a6:4f:9f:17:ca:a0:e4:51:
b8:dd:7d:de:14:6c:b4:6a:89:7c:ca:4b:8e:75:98:58:44:fc:
44:fe:d7:cd:94:52:f6:ab:e7:b3:92:98:0f:f2:24:cf:6f:09:
3a:cc:fc:8e:1d:c1:7f:ad:16:7a:49:4f:62:18:3d:7e:f6:cd:
5f:c3:01:8d:28:cc:12:e0:9f:62:91:51:77:9c:d4:81:68:72:
ea:a0:97:cb:df:ec:b6:89:fa:89:ff:16:30:f5:e5:0a:a8:0b:
16:8e:1c:57:cc:1b:83:db:b4:d5:65:91:f1:62:20:49:86:34:
78:f6:df:35:16:dd:3c:de:46:45:1d:5a:a4:6a:65:54:9b:b6:
c3:c9:b9:d2:2f:ed:a0:8e:5f:50:25:ba:c8:78:62:cc:7d:e1:
cb:a4:d0:8a:a9:22:9d:53:48:3b:9a:27:27:52:0e:0b:8c:93:
c5:37:eb:b5:18:c3:28:98:3b:0f:56:fe:6e:38:a5:a7:73:9c:
84:5f:14:83:8f:16:3d:08:76:bf:aa:28:a5:99:57:c4:0e:df:
d1:5b:ad:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05Cl7Ooc3WwKvpc6f44ZckMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0ZGIwMzAxZmUyNDYxYzZkZTNmNzE4ZDg0N2NiNWRjN2Mw
MGIyZDIwHhcNMjYwMzI5MTAwMTE0WhcNMjYwMzMwMTAwMTE0WjAzMTEwLwYDVQQD
EygzZjQ2YzEyZjg0Yzk4ZWYwNzMwM2FlMmMxZjVhOGMxMTk0YTJkNjllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzMFqjOYYOjOgRsNjNDl0ZxUfgs7N
0/q0uN5uvlfE/2TjFYjpksw31/ipZAae72igiuJNDWss1Khcym8Bzezw/4YQbLNY
31Y0o1xnnxb9mbJuJcCOtPmOILaedRMTdEnXys3wCTuef7KMyth9QVRLXbiFR258
eL8qTheim8zOj0KokYTjwQDoJ+SzaP7MKO8PghDUQ+kJVDdTHbHhNzOf60esWuPt
VDuwHLi+VYY7Jz/0WJfGGWXycwvqM1ruciCvk91NHtitCHX4c7ms3m6rDZYlaLat
vEPD4eiYTtuMid4cmGq+2ENqSF3fYIxFZ55Stay2E2QHJK+uTWeFZ+rIOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD9GwS+EyY7wcwOuLB9ajBGUotaeMB8GA1UdIwQY
MBaAFOTbAwH+JGHG3j9xjYR8tdx8ALLSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNU5zREFmNGtZY2JlUDNHTmhIeTEzSHdBc3RJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC82ZTY0MDUtZGJlNy00MmIyLTg4N2Mt
ZmZkZWJlYzhmNTA1LzEvNU5zREFmNGtZY2JlUDNHTmhIeTEzSHdBc3RJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC82ZTY0MDUtZGJlNy00MmIyLTg4N2MtZmZkZWJlYzhmNTA1
LzEvNU5zREFmNGtZY2JlUDNHTmhIeTEzSHdBc3RJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh4ng3KwN
Y2pfn+t/XX36QINPaS95BezXTvonxrhlcUyXoroEi8iXdKslIdc4P6ZPnxfKoORR
uN193hRstGqJfMpLjnWYWET8RP7XzZRS9qvns5KYD/Ikz28JOsz8jh3Bf60WeklP
Yhg9fvbNX8MBjSjMEuCfYpFRd5zUgWhy6qCXy9/ston6if8WMPXlCqgLFo4cV8wb
g9u01WWR8WIgSYY0ePbfNRbdPN5GRR1apGplVJu2w8m50i/toI5fUCW6yHhizH3h
y6TQiqkinVNIO5onJ1IOC4yTxTfrtRjDKJg7D1b+bjilp3OchF8Ug48WPQh2v6oo
pZlXxA7f0VuteA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:21 2026 by rpki-client