Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8d8307-4a0e-4453-a94b-6866a401a67d/1/5ZRpVl9xm-2Grcc_tubIhvYL2qs.mft
File: 5ZRpVl9xm-2Grcc_tubIhvYL2qs.mft (raw, json)
Hash identifier: Yw1zQ4/kHFrThhT+n7EOLZrg9YijJbra0tQKx834/wU=
Subject key identifier: 06:0B:22:3A:CA:5C:47:93:CB:80:76:B1:DC:A8:6D:CA:C1:37:7E:8C
Authority key identifier: E5:94:69:56:5F:71:9B:ED:86:AD:C7:3F:B6:E6:C8:86:F6:0B:DA:AB
Certificate issuer: /CN=e59469565f719bed86adc73fb6e6c886f60bdaab
Certificate serial: 019D37BFF01E92BAE7DD5A325550F82A06EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5ZRpVl9xm-2Grcc_tubIhvYL2qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8d8307-4a0e-4453-a94b-6866a401a67d/1/5ZRpVl9xm-2Grcc_tubIhvYL2qs.mft
Manifest number: C7
Signing time: Sun 29 Mar 2026 04:00:18 +0000
Manifest this update: Sun 29 Mar 2026 04:00:18 +0000
Manifest next update: Mon 30 Mar 2026 04:00:18 +0000
Files and hashes: 1: 5ZRpVl9xm-2Grcc_tubIhvYL2qs.crl (hash: iJ059D+42ev0OlVYVbjMTuL9qNGuEHCk11lUEmfyC+E=)
2: k_j9kCZuBTWuvSVZ-WdJ_g1t6wY.asa (hash: dESwUIcXPpUiW9oc03it11tJGDFnuCkshgfLGftBad8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/8d8307-4a0e-4453-a94b-6866a401a67d/1/5ZRpVl9xm-2Grcc_tubIhvYL2qs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/8d8307-4a0e-4453-a94b-6866a401a67d/1/5ZRpVl9xm-2Grcc_tubIhvYL2qs.mft
rsync://rpki.ripe.net/repository/DEFAULT/5ZRpVl9xm-2Grcc_tubIhvYL2qs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:bf:f0:1e:92:ba:e7:dd:5a:32:55:50:f8:2a:06:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e59469565f719bed86adc73fb6e6c886f60bdaab
Validity
Not Before: Mar 29 04:00:18 2026 GMT
Not After : Mar 30 04:00:18 2026 GMT
Subject: CN=060b223aca5c4793cb8076b1dca86dcac1377e8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b6:d7:df:c6:97:a4:4c:7c:47:7b:60:74:f7:
37:58:86:6a:9b:36:7c:1b:16:01:2f:cd:84:98:91:
65:b5:3b:88:4c:55:00:8d:0b:10:49:0d:cd:92:04:
bc:75:25:de:52:d8:f8:66:89:c1:a1:33:43:cc:86:
d4:29:3b:53:c3:e3:1e:a4:c4:1a:94:51:b3:13:90:
be:07:f8:93:c0:86:5c:51:17:ec:e4:07:cb:2a:c6:
ea:13:bc:f2:21:04:9f:35:65:f8:6e:d3:a8:b2:4b:
57:75:71:99:db:ca:d8:ba:87:f1:0b:66:2a:72:35:
d5:2a:e0:f0:9a:61:5c:3e:db:20:73:0c:53:00:5d:
8c:16:5e:90:f4:88:29:62:b3:d8:18:11:4e:c2:9e:
96:fd:4f:a0:2c:b5:71:05:92:19:a5:79:27:ef:00:
91:6f:4e:68:e8:8b:f4:f4:e5:a5:a0:42:66:8a:5f:
18:9c:e7:c0:10:bb:f1:7b:9b:1b:42:10:11:79:e3:
be:e6:89:23:8a:06:f1:e0:4d:a4:5b:cf:d3:e1:f9:
90:cf:be:d6:37:15:e6:d4:31:c4:7e:4b:39:e6:0f:
ef:bd:27:ce:ee:4f:e0:90:10:4d:f4:78:1f:fa:39:
23:6d:bb:9f:3d:96:b2:56:b0:1a:91:9e:0c:63:42:
44:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:0B:22:3A:CA:5C:47:93:CB:80:76:B1:DC:A8:6D:CA:C1:37:7E:8C
X509v3 Authority Key Identifier:
keyid:E5:94:69:56:5F:71:9B:ED:86:AD:C7:3F:B6:E6:C8:86:F6:0B:DA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5ZRpVl9xm-2Grcc_tubIhvYL2qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8d8307-4a0e-4453-a94b-6866a401a67d/1/5ZRpVl9xm-2Grcc_tubIhvYL2qs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8d8307-4a0e-4453-a94b-6866a401a67d/1/5ZRpVl9xm-2Grcc_tubIhvYL2qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:91:29:ea:9f:1a:95:19:5e:d6:5c:85:2a:dc:f7:57:28:b8:
04:b4:24:2b:0a:9e:05:f6:3c:73:3e:03:79:ba:db:12:6d:4f:
a3:ef:9c:d6:b5:1e:25:45:76:18:32:49:29:30:33:7b:61:1f:
6c:96:0f:5a:94:6e:a0:cf:ec:5e:be:22:f8:f5:81:bf:e5:41:
3f:a3:4c:6a:ec:e3:26:6b:2e:fb:0d:2f:d0:c1:36:29:d1:76:
a7:e6:57:e5:83:aa:2d:47:45:d1:75:72:08:fc:2a:d3:0f:36:
98:b3:6f:7d:da:92:e3:75:a2:05:b9:45:ad:a7:a5:c7:56:3a:
4e:50:c5:ba:5d:59:d7:ab:ec:53:7a:57:45:ab:f5:65:cf:c1:
16:0d:04:ad:4b:9b:3c:62:f6:09:4a:0e:fa:03:32:de:b3:c7:
6f:2f:2f:37:da:1c:54:4f:bc:f1:ad:b4:30:6a:54:03:79:64:
aa:db:cd:aa:e1:0a:d5:97:a4:e0:d0:8a:a9:a4:fd:27:24:82:
3d:2d:62:03:6f:0d:a5:9e:77:92:5c:f1:af:b7:7a:04:37:d1:
96:17:fa:b1:0b:cc:b9:92:b1:f9:c3:5e:cc:7f:40:24:e1:a8:
a9:dc:43:73:28:0b:89:f8:42:5b:3b:cc:85:21:ce:0a:4c:b9:
5b:44:d4:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03v/Aekrrn3VoyVVD4KgbvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1OTQ2OTU2NWY3MTliZWQ4NmFkYzczZmI2ZTZjODg2ZjYw
YmRhYWIwHhcNMjYwMzI5MDQwMDE4WhcNMjYwMzMwMDQwMDE4WjAzMTEwLwYDVQQD
EygwNjBiMjIzYWNhNWM0NzkzY2I4MDc2YjFkY2E4NmRjYWMxMzc3ZThjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrbX38aXpEx8R3tgdPc3WIZqmzZ8
GxYBL82EmJFltTuITFUAjQsQSQ3NkgS8dSXeUtj4ZonBoTNDzIbUKTtTw+MepMQa
lFGzE5C+B/iTwIZcURfs5AfLKsbqE7zyIQSfNWX4btOosktXdXGZ28rYuofxC2Yq
cjXVKuDwmmFcPtsgcwxTAF2MFl6Q9IgpYrPYGBFOwp6W/U+gLLVxBZIZpXkn7wCR
b05o6Iv09OWloEJmil8YnOfAELvxe5sbQhAReeO+5okjigbx4E2kW8/T4fmQz77W
NxXm1DHEfks55g/vvSfO7k/gkBBN9Hgf+jkjbbufPZayVrAakZ4MY0JE5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAYLIjrKXEeTy4B2sdyobcrBN36MMB8GA1UdIwQY
MBaAFOWUaVZfcZvthq3HP7bmyIb2C9qrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVpScFZsOXhtLTJHcmNjX3R1YklodllMMnFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS84ZDgzMDctNGEwZS00NDUzLWE5NGIt
Njg2NmE0MDFhNjdkLzEvNVpScFZsOXhtLTJHcmNjX3R1YklodllMMnFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS84ZDgzMDctNGEwZS00NDUzLWE5NGItNjg2NmE0MDFhNjdk
LzEvNVpScFZsOXhtLTJHcmNjX3R1YklodllMMnFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMJEp6p8a
lRle1lyFKtz3Vyi4BLQkKwqeBfY8cz4DebrbEm1Po++c1rUeJUV2GDJJKTAze2Ef
bJYPWpRuoM/sXr4i+PWBv+VBP6NMauzjJmsu+w0v0ME2KdF2p+ZX5YOqLUdF0XVy
CPwq0w82mLNvfdqS43WiBblFraelx1Y6TlDFul1Z16vsU3pXRav1Zc/BFg0ErUub
PGL2CUoO+gMy3rPHby8vN9ocVE+88a20MGpUA3lkqtvNquEK1Zek4NCKqaT9JySC
PS1iA28NpZ53klzxr7d6BDfRlhf6sQvMuZKx+cNezH9AJOGoqdxDcygLifhCWzvM
hSHOCky5W0TU+g==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:12:39 2026 by rpki-client