Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0bda4a-5c10-44db-8f62-ae4fa7f17f9c/1/5wn3YuCC6tPW1-TK4p77tNEvV14.mft
File: 5wn3YuCC6tPW1-TK4p77tNEvV14.mft (raw, json)
Hash identifier: IGhA+Pg2uR5tH42ck0IR50cAkjLN8NcXu4k4Y2qlQqA=
Subject key identifier: 10:94:87:06:91:CE:4B:94:FA:E8:9E:2A:C3:4A:EF:F1:46:76:E4:54
Authority key identifier: E7:09:F7:62:E0:82:EA:D3:D6:D7:E4:CA:E2:9E:FB:B4:D1:2F:57:5E
Certificate issuer: /CN=e709f762e082ead3d6d7e4cae29efbb4d12f575e
Certificate serial: 019D378914973C93FD3561D63C5C4B03E127
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5wn3YuCC6tPW1-TK4p77tNEvV14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0bda4a-5c10-44db-8f62-ae4fa7f17f9c/1/5wn3YuCC6tPW1-TK4p77tNEvV14.mft
Manifest number: 0EE6
Signing time: Sun 29 Mar 2026 03:00:23 +0000
Manifest this update: Sun 29 Mar 2026 03:00:23 +0000
Manifest next update: Mon 30 Mar 2026 03:00:23 +0000
Files and hashes: 1: 5wn3YuCC6tPW1-TK4p77tNEvV14.crl (hash: r6HxSA9diM2Iw0K5hDtKBhatNo29RpRsZ5GXXJa8cB4=)
2: WYQDjBxDm_OoBGcgcgmE7OCjFt0.roa (hash: eECr25yVYsujT6+QLvSz9j18MPQkn37aHPMM7Z3Jdzg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/0bda4a-5c10-44db-8f62-ae4fa7f17f9c/1/5wn3YuCC6tPW1-TK4p77tNEvV14.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/0bda4a-5c10-44db-8f62-ae4fa7f17f9c/1/5wn3YuCC6tPW1-TK4p77tNEvV14.mft
rsync://rpki.ripe.net/repository/DEFAULT/5wn3YuCC6tPW1-TK4p77tNEvV14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:14:97:3c:93:fd:35:61:d6:3c:5c:4b:03:e1:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e709f762e082ead3d6d7e4cae29efbb4d12f575e
Validity
Not Before: Mar 29 03:00:23 2026 GMT
Not After : Mar 30 03:00:23 2026 GMT
Subject: CN=1094870691ce4b94fae89e2ac34aeff14676e454
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:4e:74:a2:57:f8:68:1e:ea:47:2b:67:d4:79:
2f:b4:79:6a:22:3f:f2:ab:42:b3:46:11:5a:db:e2:
af:b9:10:88:f3:b4:79:2f:19:d7:e9:95:af:dc:be:
3c:4a:2c:cf:8d:4f:56:77:51:6c:19:93:f4:a4:d6:
aa:cd:fc:31:c7:93:89:f2:3e:94:0f:07:95:0b:26:
c9:ca:27:28:e3:23:b1:82:e0:0f:bf:6b:00:3d:6c:
07:c0:6e:19:94:4c:b4:d9:82:c2:f4:22:16:06:6b:
72:16:d7:c8:93:c6:69:d8:f0:1a:bb:03:31:fe:51:
17:71:92:aa:e2:1a:be:1a:4c:9e:7e:68:6d:21:0e:
53:2b:7d:57:6d:1d:75:68:a5:04:eb:b4:a1:05:07:
9d:14:17:98:4e:d1:de:4e:a4:21:63:a5:e0:89:1a:
59:be:cf:8a:c8:bd:90:27:6e:ed:3d:9c:c4:a0:6f:
f5:cf:16:64:2b:73:09:5c:9b:a6:4e:23:6c:bd:e9:
3a:82:c6:79:6e:20:dd:30:2c:8a:38:46:57:ac:13:
d6:0a:19:85:4b:88:ac:83:15:26:43:b9:b9:ba:d9:
6f:0a:b7:49:c9:6f:35:e3:2a:98:81:97:4a:64:e9:
8c:ee:0a:fc:31:ea:e0:c7:47:c0:da:9c:13:c1:5a:
04:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:94:87:06:91:CE:4B:94:FA:E8:9E:2A:C3:4A:EF:F1:46:76:E4:54
X509v3 Authority Key Identifier:
keyid:E7:09:F7:62:E0:82:EA:D3:D6:D7:E4:CA:E2:9E:FB:B4:D1:2F:57:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5wn3YuCC6tPW1-TK4p77tNEvV14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0bda4a-5c10-44db-8f62-ae4fa7f17f9c/1/5wn3YuCC6tPW1-TK4p77tNEvV14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0bda4a-5c10-44db-8f62-ae4fa7f17f9c/1/5wn3YuCC6tPW1-TK4p77tNEvV14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:e6:92:3d:45:5b:48:c4:6f:43:b7:ba:8d:35:97:d4:2a:70:
ba:a7:16:01:30:f6:f8:51:ba:e2:1c:d4:8b:0a:59:92:c5:89:
37:68:59:91:8c:bf:d2:cb:74:17:a3:86:d8:4e:7e:bf:c2:4e:
77:5f:d0:68:4d:5d:81:84:98:b5:cd:70:a8:f7:2a:ed:69:5d:
d0:d0:24:ff:07:33:32:51:e3:6d:2a:ba:d2:75:68:76:7d:e8:
1c:f2:9c:0e:7f:f4:29:f0:04:ff:e8:a5:f0:16:1b:17:9e:db:
5f:88:d4:47:97:2b:44:62:8b:cd:96:39:9d:9b:2c:95:db:90:
04:a2:21:84:50:cd:43:ca:ac:5c:14:a6:02:06:4f:45:4d:b9:
50:4b:fe:9c:31:c3:4a:f2:bc:89:3e:36:e1:8c:da:2e:1c:01:
9e:d7:4c:d5:cd:80:b8:74:14:89:96:48:97:b7:6c:3b:84:15:
6a:7a:8d:50:a2:8d:f6:55:9f:e3:9a:c4:f2:69:78:1c:0d:8f:
53:2c:6c:73:01:96:77:bf:bc:75:4d:d2:7f:ff:ac:ef:ef:0a:
0f:11:d2:57:24:88:cd:aa:e4:62:68:7d:97:df:5f:47:54:a2:
0f:19:98:a4:d8:4a:96:89:11:84:5c:20:bd:e0:6c:76:12:0b:
33:b8:62:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03iRSXPJP9NWHWPFxLA+EnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3MDlmNzYyZTA4MmVhZDNkNmQ3ZTRjYWUyOWVmYmI0ZDEy
ZjU3NWUwHhcNMjYwMzI5MDMwMDIzWhcNMjYwMzMwMDMwMDIzWjAzMTEwLwYDVQQD
EygxMDk0ODcwNjkxY2U0Yjk0ZmFlODllMmFjMzRhZWZmMTQ2NzZlNDU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyE50olf4aB7qRytn1HkvtHlqIj/y
q0KzRhFa2+KvuRCI87R5LxnX6ZWv3L48SizPjU9Wd1FsGZP0pNaqzfwxx5OJ8j6U
DweVCybJyico4yOxguAPv2sAPWwHwG4ZlEy02YLC9CIWBmtyFtfIk8Zp2PAauwMx
/lEXcZKq4hq+GkyefmhtIQ5TK31XbR11aKUE67ShBQedFBeYTtHeTqQhY6XgiRpZ
vs+KyL2QJ27tPZzEoG/1zxZkK3MJXJumTiNsvek6gsZ5biDdMCyKOEZXrBPWChmF
S4isgxUmQ7m5utlvCrdJyW814yqYgZdKZOmM7gr8Mergx0fA2pwTwVoEWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBCUhwaRzkuU+uieKsNK7/FGduRUMB8GA1UdIwQY
MBaAFOcJ92LggurT1tfkyuKe+7TRL1deMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXduM1l1Q0M2dFBXMS1USzRwNzd0TkV2VjE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8wYmRhNGEtNWMxMC00NGRiLThmNjIt
YWU0ZmE3ZjE3ZjljLzEvNXduM1l1Q0M2dFBXMS1USzRwNzd0TkV2VjE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC8wYmRhNGEtNWMxMC00NGRiLThmNjItYWU0ZmE3ZjE3Zjlj
LzEvNXduM1l1Q0M2dFBXMS1USzRwNzd0TkV2VjE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQuaSPUVb
SMRvQ7e6jTWX1CpwuqcWATD2+FG64hzUiwpZksWJN2hZkYy/0st0F6OG2E5+v8JO
d1/QaE1dgYSYtc1wqPcq7Wld0NAk/wczMlHjbSq60nVodn3oHPKcDn/0KfAE/+il
8BYbF57bX4jUR5crRGKLzZY5nZsslduQBKIhhFDNQ8qsXBSmAgZPRU25UEv+nDHD
SvK8iT424YzaLhwBntdM1c2AuHQUiZZIl7dsO4QVanqNUKKN9lWf45rE8ml4HA2P
UyxscwGWd7+8dU3Sf/+s7+8KDxHSVySIzarkYmh9l99fR1SiDxmYpNhKlokRhFwg
veBsdhILM7hijQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:34 2026 by rpki-client