Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/57d908-207d-497c-ab18-de7be1e5c776/1/5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.mft
File: 5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.mft (raw, json)
Hash identifier: m+k+M4ZuELa3UJISU5D64T/69D4Pc4TgFNEYo8R50sI=
Subject key identifier: 0D:E8:A5:A5:7D:D2:FB:89:59:8A:86:8A:CE:97:9A:2B:67:E2:CE:40
Authority key identifier: E4:98:4F:8F:36:EB:F9:F8:F5:4C:12:17:4F:46:36:64:D7:B2:3A:EE
Certificate issuer: /CN=e4984f8f36ebf9f8f54c12174f463664d7b23aee
Certificate serial: 019D382E7328CAD2F8CD9F631FEAD62F266C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/57d908-207d-497c-ab18-de7be1e5c776/1/5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.mft
Manifest number: 1373
Signing time: Sun 29 Mar 2026 06:01:01 +0000
Manifest this update: Sun 29 Mar 2026 06:01:01 +0000
Manifest next update: Mon 30 Mar 2026 06:01:01 +0000
Files and hashes: 1: 5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.crl (hash: U1ITdDGAlDrD2nU6taAsvA3nl7vrdKPeNRnjUSYWuc0=)
2: hTC91o4ZtMO-04ZIsmw_aK8gJeA.roa (hash: War1ZIX95W/VPK4FUZA8Xa/ZSNStMaoIUos///YIBIQ=)
3: rR6bC3nGRb0R25RzXiMQeGJ-1sc.roa (hash: 0alGeHDZjg/Rc5/CXBTY3qIbzWIm6w6jf9n9/91FunA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/57d908-207d-497c-ab18-de7be1e5c776/1/5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/57d908-207d-497c-ab18-de7be1e5c776/1/5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.mft
rsync://rpki.ripe.net/repository/DEFAULT/5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:73:28:ca:d2:f8:cd:9f:63:1f:ea:d6:2f:26:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4984f8f36ebf9f8f54c12174f463664d7b23aee
Validity
Not Before: Mar 29 06:01:01 2026 GMT
Not After : Mar 30 06:01:01 2026 GMT
Subject: CN=0de8a5a57dd2fb89598a868ace979a2b67e2ce40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:63:56:30:03:16:2c:ce:79:fd:ef:11:51:1b:
ca:f7:e2:22:ce:65:56:02:72:7d:a1:a0:52:a2:55:
a1:c6:34:3f:97:f9:f1:8d:99:f3:bd:46:60:f0:00:
9c:70:c5:27:14:c7:eb:27:24:10:a1:fb:59:8d:3e:
42:75:a0:ab:de:da:a9:27:f0:5c:61:ea:ac:07:b7:
7e:0e:91:18:ca:c6:4a:e3:b7:db:6a:57:1d:37:fc:
f2:ed:51:da:5c:db:e4:d3:a7:7a:e5:55:56:f0:33:
94:02:41:8f:04:28:56:08:8d:13:ec:24:af:ee:78:
b1:0a:db:50:8c:be:26:b1:45:e5:7e:cb:38:fc:7d:
92:f2:c4:fe:14:1b:20:42:a7:c9:43:52:e7:fd:ea:
ec:fd:10:c1:6f:52:19:c5:39:ec:91:48:49:15:b9:
ad:8b:45:da:ba:3d:e2:01:66:ab:19:5f:c0:5c:9e:
b3:47:d4:96:d3:3e:b5:00:eb:22:6d:93:fb:e0:0d:
31:78:64:b3:09:1c:11:8b:58:7a:0d:d8:7a:11:bd:
0d:6b:11:d6:a6:a9:0c:a3:f4:58:ae:13:32:1f:12:
ec:4f:53:6a:41:15:cc:43:b5:c7:9a:d7:cd:9f:d3:
07:1c:c6:db:89:af:df:94:62:a8:b4:68:94:5e:e4:
0a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:E8:A5:A5:7D:D2:FB:89:59:8A:86:8A:CE:97:9A:2B:67:E2:CE:40
X509v3 Authority Key Identifier:
keyid:E4:98:4F:8F:36:EB:F9:F8:F5:4C:12:17:4F:46:36:64:D7:B2:3A:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/57d908-207d-497c-ab18-de7be1e5c776/1/5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/57d908-207d-497c-ab18-de7be1e5c776/1/5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:e5:41:8f:fd:25:63:9f:46:3d:c0:3e:b4:e1:60:7c:75:05:
d8:79:ce:68:84:c1:ae:5c:52:a7:a5:d3:17:88:58:f7:eb:d0:
21:68:31:de:a3:c4:ea:e2:14:24:a0:48:42:68:62:bc:27:65:
92:05:28:01:50:80:15:e6:1c:38:d2:e6:81:54:71:ce:ab:74:
1e:7d:17:4b:29:63:6a:f7:bf:06:b2:77:4b:ce:32:19:a5:31:
60:a9:1a:74:b9:6b:10:4b:18:d2:8a:fb:b0:d7:1c:23:24:9e:
6f:3f:e6:2a:36:65:5e:38:c0:d2:36:4a:6b:24:7f:15:aa:5b:
f7:93:5f:8f:20:b7:83:ba:df:4d:36:71:a8:a8:62:c4:ca:e7:
aa:f1:dd:ea:23:4d:bd:08:d8:d6:1b:da:07:0f:c4:dc:f1:08:
4f:cb:aa:7c:63:bb:a6:1f:d3:08:0c:0f:b7:7d:3a:3d:20:ea:
17:7e:e1:1f:b3:94:cf:bd:cd:42:22:33:55:1b:5a:1e:61:4a:
d7:15:2d:49:0d:7b:d3:3d:f3:f3:fd:eb:19:35:2a:5c:0b:e7:
04:6a:85:3f:b6:80:4d:32:c1:5a:01:a4:2e:2d:9a:d6:9c:fa:
e9:98:33:71:d8:97:54:0f:9a:f7:3e:af:7f:34:eb:1c:6e:42:
04:08:a3:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04LnMoytL4zZ9jH+rWLyZsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0OTg0ZjhmMzZlYmY5ZjhmNTRjMTIxNzRmNDYzNjY0ZDdi
MjNhZWUwHhcNMjYwMzI5MDYwMTAxWhcNMjYwMzMwMDYwMTAxWjAzMTEwLwYDVQQD
EygwZGU4YTVhNTdkZDJmYjg5NTk4YTg2OGFjZTk3OWEyYjY3ZTJjZTQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmNWMAMWLM55/e8RURvK9+IizmVW
AnJ9oaBSolWhxjQ/l/nxjZnzvUZg8ACccMUnFMfrJyQQoftZjT5CdaCr3tqpJ/Bc
YeqsB7d+DpEYysZK47fbalcdN/zy7VHaXNvk06d65VVW8DOUAkGPBChWCI0T7CSv
7nixCttQjL4msUXlfss4/H2S8sT+FBsgQqfJQ1Ln/ers/RDBb1IZxTnskUhJFbmt
i0Xauj3iAWarGV/AXJ6zR9SW0z61AOsibZP74A0xeGSzCRwRi1h6Ddh6Eb0NaxHW
pqkMo/RYrhMyHxLsT1NqQRXMQ7XHmtfNn9MHHMbbia/flGKotGiUXuQKmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA3opaV90vuJWYqGis6Xmitn4s5AMB8GA1UdIwQY
MBaAFOSYT4826/n49UwSF09GNmTXsjruMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUpoUGp6YnItZmoxVEJJWFQwWTJaTmV5T3U0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi81N2Q5MDgtMjA3ZC00OTdjLWFiMTgt
ZGU3YmUxZTVjNzc2LzEvNUpoUGp6YnItZmoxVEJJWFQwWTJaTmV5T3U0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi81N2Q5MDgtMjA3ZC00OTdjLWFiMTgtZGU3YmUxZTVjNzc2
LzEvNUpoUGp6YnItZmoxVEJJWFQwWTJaTmV5T3U0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXOVBj/0l
Y59GPcA+tOFgfHUF2HnOaITBrlxSp6XTF4hY9+vQIWgx3qPE6uIUJKBIQmhivCdl
kgUoAVCAFeYcONLmgVRxzqt0Hn0XSyljave/BrJ3S84yGaUxYKkadLlrEEsY0or7
sNccIySebz/mKjZlXjjA0jZKayR/Fapb95NfjyC3g7rfTTZxqKhixMrnqvHd6iNN
vQjY1hvaBw/E3PEIT8uqfGO7ph/TCAwPt306PSDqF37hH7OUz73NQiIzVRtaHmFK
1xUtSQ170z3z8/3rGTUqXAvnBGqFP7aATTLBWgGkLi2a1pz66ZgzcdiXVA+a9z6v
fzTrHG5CBAijWA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:12:24 2026 by rpki-client