
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/d7dc8d-e386-404c-88b4-283ec42c2c94/1/5gRDG1VUd8GaP0xcttEHNljVs-M.mft
File: 5gRDG1VUd8GaP0xcttEHNljVs-M.mft (raw, json)
Hash identifier: AJE+1tdi4YFAK4n76ui2yfQD+UYtKW6Y1t9Dj7l8sgQ=
Subject key identifier: 88:49:82:EA:E8:B3:67:92:BA:D7:F7:AD:CF:6E:41:D8:12:A3:E8:C9
Authority key identifier: E6:04:43:1B:55:54:77:C1:9A:3F:4C:5C:B6:D1:07:36:58:D5:B3:E3
Certificate issuer: /CN=e604431b555477c19a3f4c5cb6d1073658d5b3e3
Certificate serial: 019D371B795A1DC461EDD377EF9CBA9598E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5gRDG1VUd8GaP0xcttEHNljVs-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/d7dc8d-e386-404c-88b4-283ec42c2c94/1/5gRDG1VUd8GaP0xcttEHNljVs-M.mft
Manifest number: 0ED0
Signing time: Sun 29 Mar 2026 01:00:40 +0000
Manifest this update: Sun 29 Mar 2026 01:00:40 +0000
Manifest next update: Mon 30 Mar 2026 01:00:40 +0000
Files and hashes: 1: 5gRDG1VUd8GaP0xcttEHNljVs-M.crl (hash: DKEpcCf6slpwpXl0qN4cyzEwvhipKUHyed6ZBHlAwgA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/d7dc8d-e386-404c-88b4-283ec42c2c94/1/5gRDG1VUd8GaP0xcttEHNljVs-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/d7dc8d-e386-404c-88b4-283ec42c2c94/1/5gRDG1VUd8GaP0xcttEHNljVs-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/5gRDG1VUd8GaP0xcttEHNljVs-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:79:5a:1d:c4:61:ed:d3:77:ef:9c:ba:95:98:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e604431b555477c19a3f4c5cb6d1073658d5b3e3
Validity
Not Before: Mar 29 01:00:40 2026 GMT
Not After : Mar 30 01:00:40 2026 GMT
Subject: CN=884982eae8b36792bad7f7adcf6e41d812a3e8c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:77:20:67:06:45:51:a4:bf:fa:bf:4e:2a:fe:
ff:0a:b5:da:f0:81:94:44:13:2d:8e:eb:e1:08:fb:
2d:1b:69:de:65:17:89:18:61:43:3b:92:6b:69:b3:
43:7c:41:43:78:f1:37:89:9f:34:df:17:4e:69:d6:
fa:3d:85:9d:81:0d:28:dd:c7:f1:17:16:8d:cf:e0:
74:c5:7b:fa:b8:0b:b4:10:a0:44:43:e3:9f:20:f6:
bc:af:b3:f0:20:2b:ff:c8:0e:cb:f2:12:7e:8f:68:
24:2e:92:a1:55:91:60:35:c3:bc:80:44:c8:be:76:
e1:8b:2d:61:66:83:09:a0:bd:ac:a4:84:2f:a6:25:
65:d5:d9:7b:64:da:d1:9e:6b:88:7f:8c:16:18:82:
17:39:a3:ff:e9:85:8a:6d:4e:ba:cf:da:11:66:70:
c1:3b:5a:e6:e2:5b:d2:1b:77:4b:3d:e3:2a:e6:7a:
76:8b:95:11:09:43:92:53:e3:5a:39:c0:c4:37:69:
a6:e1:32:a9:47:22:75:6a:cc:cc:94:e4:8b:48:a3:
91:17:a0:9a:4a:dc:01:6c:e8:18:59:b6:f6:80:52:
55:d8:d6:f3:ae:35:11:40:65:d7:ed:ff:ab:2f:20:
65:94:db:05:a6:68:12:43:e5:d6:53:a4:fb:ba:e5:
21:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:49:82:EA:E8:B3:67:92:BA:D7:F7:AD:CF:6E:41:D8:12:A3:E8:C9
X509v3 Authority Key Identifier:
keyid:E6:04:43:1B:55:54:77:C1:9A:3F:4C:5C:B6:D1:07:36:58:D5:B3:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5gRDG1VUd8GaP0xcttEHNljVs-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d7dc8d-e386-404c-88b4-283ec42c2c94/1/5gRDG1VUd8GaP0xcttEHNljVs-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d7dc8d-e386-404c-88b4-283ec42c2c94/1/5gRDG1VUd8GaP0xcttEHNljVs-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:eb:19:e2:63:a3:4a:cf:3d:a0:8d:89:00:5f:03:ed:bf:e2:
d3:51:c1:16:55:9c:a7:da:de:42:f3:aa:30:3e:d2:99:b1:a2:
4d:2e:ca:1a:26:f2:e8:03:12:f3:e0:1d:e3:89:06:b9:fd:69:
bb:ee:c8:56:fe:f8:c2:2d:e8:20:9a:2b:4d:43:bc:9d:67:66:
58:18:fb:a9:5c:e3:f2:12:8e:69:06:d6:a8:ce:34:c1:05:55:
be:8f:53:a5:ab:0b:11:7e:b8:27:83:09:57:11:4b:47:63:b9:
34:94:0b:1f:05:e4:0b:2c:b3:17:f3:8e:95:58:98:57:6d:00:
14:38:60:c2:a3:36:cc:c8:17:04:2e:d0:1d:5c:a7:b6:d8:ee:
e9:cd:c0:fc:b1:0e:75:79:d6:e6:e4:27:8e:2e:38:0a:b5:0a:
30:3c:b7:84:9a:0e:19:64:9d:bc:3d:a6:70:14:07:3d:63:e9:
f3:19:24:e1:13:4f:ab:b8:1f:a0:0c:15:ba:fc:04:32:f3:3f:
26:e0:21:7d:68:19:db:78:22:1c:6f:59:70:cb:61:18:70:2a:
1f:90:17:1a:ef:1c:de:1c:8e:fe:e4:1b:98:a4:9a:0f:3e:66:
27:80:bb:51:46:20:e8:ee:48:94:cb:cb:0e:75:ca:3c:07:3e:
a0:28:ba:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03G3laHcRh7dN375y6lZjhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2MDQ0MzFiNTU1NDc3YzE5YTNmNGM1Y2I2ZDEwNzM2NThk
NWIzZTMwHhcNMjYwMzI5MDEwMDQwWhcNMjYwMzMwMDEwMDQwWjAzMTEwLwYDVQQD
Eyg4ODQ5ODJlYWU4YjM2NzkyYmFkN2Y3YWRjZjZlNDFkODEyYTNlOGM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXcgZwZFUaS/+r9OKv7/CrXa8IGU
RBMtjuvhCPstG2neZReJGGFDO5JrabNDfEFDePE3iZ803xdOadb6PYWdgQ0o3cfx
FxaNz+B0xXv6uAu0EKBEQ+OfIPa8r7PwICv/yA7L8hJ+j2gkLpKhVZFgNcO8gETI
vnbhiy1hZoMJoL2spIQvpiVl1dl7ZNrRnmuIf4wWGIIXOaP/6YWKbU66z9oRZnDB
O1rm4lvSG3dLPeMq5np2i5URCUOSU+NaOcDEN2mm4TKpRyJ1aszMlOSLSKORF6Ca
StwBbOgYWbb2gFJV2NbzrjURQGXX7f+rLyBllNsFpmgSQ+XWU6T7uuUhqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIhJguros2eSutf3rc9uQdgSo+jJMB8GA1UdIwQY
MBaAFOYEQxtVVHfBmj9MXLbRBzZY1bPjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWdSREcxVlVkOEdhUDB4Y3R0RUhObGpWcy1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9kN2RjOGQtZTM4Ni00MDRjLTg4YjQt
MjgzZWM0MmMyYzk0LzEvNWdSREcxVlVkOEdhUDB4Y3R0RUhObGpWcy1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy9kN2RjOGQtZTM4Ni00MDRjLTg4YjQtMjgzZWM0MmMyYzk0
LzEvNWdSREcxVlVkOEdhUDB4Y3R0RUhObGpWcy1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEusZ4mOj
Ss89oI2JAF8D7b/i01HBFlWcp9reQvOqMD7SmbGiTS7KGiby6AMS8+Ad44kGuf1p
u+7IVv74wi3oIJorTUO8nWdmWBj7qVzj8hKOaQbWqM40wQVVvo9TpasLEX64J4MJ
VxFLR2O5NJQLHwXkCyyzF/OOlViYV20AFDhgwqM2zMgXBC7QHVynttju6c3A/LEO
dXnW5uQnji44CrUKMDy3hJoOGWSdvD2mcBQHPWPp8xkk4RNPq7gfoAwVuvwEMvM/
JuAhfWgZ23giHG9ZcMthGHAqH5AXGu8c3hyO/uQbmKSaDz5mJ4C7UUYg6O5IlMvL
DnXKPAc+oCi6zw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:33 2026 by rpki-client