Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.mft
File: 5jAHYU9ncAssp21gtJQreo5LXOQ.mft (raw, json)
Hash identifier: 5JIgqijZqpKoogYrvxZIiadwwYvvL+ODb5BWQqfQh1Q=
Subject key identifier: C0:01:FD:B2:15:59:64:E7:6E:12:60:C0:9A:59:5E:4A:8C:BB:C6:37
Authority key identifier: E6:30:07:61:4F:67:70:0B:2C:A7:6D:60:B4:94:2B:7A:8E:4B:5C:E4
Certificate issuer: /CN=e63007614f67700b2ca76d60b4942b7a8e4b5ce4
Certificate serial: 019CE447C1AEB4ED43EC5B937C241D6C0B6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5jAHYU9ncAssp21gtJQreo5LXOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.mft
Manifest number: 099B
Signing time: Thu 12 Mar 2026 23:00:33 +0000
Manifest this update: Thu 12 Mar 2026 23:00:33 +0000
Manifest next update: Fri 13 Mar 2026 23:00:33 +0000
Files and hashes: 1: 5jAHYU9ncAssp21gtJQreo5LXOQ.crl (hash: UEqUO9Mjyp8gJrQ61TCQueHRdsU566BclzNEKyh4zxE=)
2: jmnDOsm4XHUSPILw7nGYM1oOQEs.roa (hash: 0inc/wmsdWPIKoI7fVSGb11ctPl1XySYsdqtu8Ok5kc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5jAHYU9ncAssp21gtJQreo5LXOQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 23:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:47:c1:ae:b4:ed:43:ec:5b:93:7c:24:1d:6c:0b:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e63007614f67700b2ca76d60b4942b7a8e4b5ce4
Validity
Not Before: Mar 12 23:00:33 2026 GMT
Not After : Mar 13 23:00:33 2026 GMT
Subject: CN=c001fdb2155964e76e1260c09a595e4a8cbbc637
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:47:46:61:a1:24:7d:cd:a4:b2:5b:6e:c2:92:
96:0a:7d:c0:66:40:6e:29:b9:98:d8:38:26:69:a5:
75:9f:6c:8b:4e:4a:b1:7c:3e:2d:bb:78:68:8f:f9:
8b:c9:81:22:a6:63:02:9a:0a:66:9a:45:16:3c:d0:
e8:46:e2:29:94:61:01:cc:d9:d9:01:8e:da:c8:22:
00:18:90:e9:fc:b6:7a:21:6d:3f:91:7a:01:cd:e8:
6e:17:69:9e:9a:22:c5:47:0d:ad:ce:20:78:e9:6c:
62:d4:e7:41:8a:bd:81:7b:11:5e:0a:41:91:e3:73:
23:88:da:e2:9e:9d:cc:98:9b:65:c8:3e:27:31:8c:
1b:33:db:c5:78:0d:aa:99:d7:59:6f:83:60:c4:bd:
bf:dd:54:57:6c:24:df:24:5a:dc:03:54:0a:3d:1f:
90:20:67:1c:d2:83:5b:29:b6:3b:3a:5e:91:5a:e4:
ca:d2:fa:16:80:e2:9f:17:e1:2c:52:7e:e3:f5:69:
7a:fd:01:07:61:6f:eb:a3:36:3e:d0:60:e0:4a:53:
3d:c6:3d:e3:68:70:b2:1d:f3:91:b4:62:48:f0:4c:
e1:fd:39:f3:a6:70:9e:c9:84:06:c7:86:78:b6:bd:
7b:d2:ee:22:af:c7:3b:b5:00:a0:15:48:6c:87:d2:
7e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:01:FD:B2:15:59:64:E7:6E:12:60:C0:9A:59:5E:4A:8C:BB:C6:37
X509v3 Authority Key Identifier:
keyid:E6:30:07:61:4F:67:70:0B:2C:A7:6D:60:B4:94:2B:7A:8E:4B:5C:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5jAHYU9ncAssp21gtJQreo5LXOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:5d:09:1b:29:30:73:f5:c6:48:ae:58:a1:8f:4d:be:16:3c:
8b:d3:4f:5b:93:3d:cd:ea:a3:2f:4b:67:1f:33:dc:c7:26:f8:
40:b2:8c:1a:18:6e:4e:c7:05:d3:5c:22:fc:21:51:fd:ad:34:
0e:c1:36:c2:fd:b9:d4:6b:04:0c:11:a4:21:b7:1e:9f:9c:ab:
c7:24:88:7d:0b:0e:67:87:34:df:9b:6d:f3:22:db:1d:6d:c3:
1d:c9:a3:d0:c5:56:70:52:d3:71:a7:9c:9b:4c:a3:e6:a8:26:
4d:d8:02:e2:fa:3d:48:a1:be:97:be:60:23:79:a0:98:f0:a4:
6f:7e:0a:f7:07:7d:6c:01:f7:f2:11:11:6c:44:e9:ce:56:2d:
99:45:52:51:ea:07:61:ee:17:db:01:b0:42:81:1e:19:44:c3:
ff:54:76:04:3e:c7:d6:80:7d:fa:12:22:8c:b3:51:3b:83:15:
c5:48:80:f8:b7:29:0b:ac:bb:88:18:b3:b1:87:a9:81:05:77:
c5:b8:ba:91:4d:b8:f0:25:10:a0:be:4f:0a:a9:e5:3b:8d:89:
79:31:ac:61:5b:e8:11:9d:41:df:1e:03:5e:ef:08:b7:cb:ce:
21:10:c5:b6:cb:16:21:b0:1a:42:41:28:36:ec:a9:c2:2a:d2:
82:25:de:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzkR8GutO1D7FuTfCQdbAtvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2MzAwNzYxNGY2NzcwMGIyY2E3NmQ2MGI0OTQyYjdhOGU0
YjVjZTQwHhcNMjYwMzEyMjMwMDMzWhcNMjYwMzEzMjMwMDMzWjAzMTEwLwYDVQQD
EyhjMDAxZmRiMjE1NTk2NGU3NmUxMjYwYzA5YTU5NWU0YThjYmJjNjM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUdGYaEkfc2ksltuwpKWCn3AZkBu
KbmY2DgmaaV1n2yLTkqxfD4tu3hoj/mLyYEipmMCmgpmmkUWPNDoRuIplGEBzNnZ
AY7ayCIAGJDp/LZ6IW0/kXoBzehuF2memiLFRw2tziB46Wxi1OdBir2BexFeCkGR
43MjiNrinp3MmJtlyD4nMYwbM9vFeA2qmddZb4NgxL2/3VRXbCTfJFrcA1QKPR+Q
IGcc0oNbKbY7Ol6RWuTK0voWgOKfF+EsUn7j9Wl6/QEHYW/rozY+0GDgSlM9xj3j
aHCyHfORtGJI8Ezh/TnzpnCeyYQGx4Z4tr170u4ir8c7tQCgFUhsh9J+wwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMAB/bIVWWTnbhJgwJpZXkqMu8Y3MB8GA1UdIwQY
MBaAFOYwB2FPZ3ALLKdtYLSUK3qOS1zkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWpBSFlVOW5jQXNzcDIxZ3RKUXJlbzVMWE9RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC8wNDIzZGItZjIzMy00OTIyLTgwMjQt
YjIxMTEwZDhmZmExLzEvNWpBSFlVOW5jQXNzcDIxZ3RKUXJlbzVMWE9RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC8wNDIzZGItZjIzMy00OTIyLTgwMjQtYjIxMTEwZDhmZmEx
LzEvNWpBSFlVOW5jQXNzcDIxZ3RKUXJlbzVMWE9RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm10JGykw
c/XGSK5YoY9NvhY8i9NPW5M9zeqjL0tnHzPcxyb4QLKMGhhuTscF01wi/CFR/a00
DsE2wv251GsEDBGkIbcen5yrxySIfQsOZ4c035tt8yLbHW3DHcmj0MVWcFLTcaec
m0yj5qgmTdgC4vo9SKG+l75gI3mgmPCkb34K9wd9bAH38hERbETpzlYtmUVSUeoH
Ye4X2wGwQoEeGUTD/1R2BD7H1oB9+hIijLNRO4MVxUiA+LcpC6y7iBizsYepgQV3
xbi6kU248CUQoL5PCqnlO42JeTGsYVvoEZ1B3x4DXu8It8vOIRDFtssWIbAaQkEo
NuypwirSgiXeyg==
-----END CERTIFICATE-----
Generated at Fri Mar 13 09:27:23 2026 by rpki-client