Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/eec70a-aa9f-42ae-8ad6-b7bbf5a1ac73/1/5NYI4PehCGyEUd5dY3hHtSIXq7Q.mft
File: 5NYI4PehCGyEUd5dY3hHtSIXq7Q.mft (raw, json)
Hash identifier: +tvxGtagtiAbN5H1MPkv2mpKCQz/g1bDqVrsb1yI9P4=
Subject key identifier: B1:4F:FA:8A:A0:5D:55:C0:27:19:43:F0:97:53:6F:5C:E9:5C:76:FE
Authority key identifier: E4:D6:08:E0:F7:A1:08:6C:84:51:DE:5D:63:78:47:B5:22:17:AB:B4
Certificate issuer: /CN=e4d608e0f7a1086c8451de5d637847b52217abb4
Certificate serial: 019D389C5C6F9EF7D92E16419DE7C5D8F6FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5NYI4PehCGyEUd5dY3hHtSIXq7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/eec70a-aa9f-42ae-8ad6-b7bbf5a1ac73/1/5NYI4PehCGyEUd5dY3hHtSIXq7Q.mft
Manifest number: 0742
Signing time: Sun 29 Mar 2026 08:01:04 +0000
Manifest this update: Sun 29 Mar 2026 08:01:04 +0000
Manifest next update: Mon 30 Mar 2026 08:01:04 +0000
Files and hashes: 1: 5NYI4PehCGyEUd5dY3hHtSIXq7Q.crl (hash: XOIW4aOtxuTRfzB3CY7J0v1sn7EWxHdrzjSlks4qaZ0=)
2: vkNSQ_Tc3Bfe3joOVDGgbN6CQtk.roa (hash: Ft3k1GMH35DD813n5Ke6tEuRDCxpQCa27sS+PQPuKK0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/eec70a-aa9f-42ae-8ad6-b7bbf5a1ac73/1/5NYI4PehCGyEUd5dY3hHtSIXq7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/eec70a-aa9f-42ae-8ad6-b7bbf5a1ac73/1/5NYI4PehCGyEUd5dY3hHtSIXq7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/5NYI4PehCGyEUd5dY3hHtSIXq7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:5c:6f:9e:f7:d9:2e:16:41:9d:e7:c5:d8:f6:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4d608e0f7a1086c8451de5d637847b52217abb4
Validity
Not Before: Mar 29 08:01:04 2026 GMT
Not After : Mar 30 08:01:04 2026 GMT
Subject: CN=b14ffa8aa05d55c0271943f097536f5ce95c76fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5c:3e:1a:11:0e:ac:11:73:43:93:52:b0:47:
d0:94:a1:38:8e:3b:27:af:5c:f2:55:f6:f5:c0:7d:
7f:88:75:4a:10:0f:dd:07:8a:32:6c:40:25:d9:69:
99:a7:92:84:e7:84:2a:32:89:32:6f:7a:7b:14:d2:
0b:62:f5:d3:1d:78:01:0b:a9:e7:c6:a8:0d:21:dd:
36:a0:72:04:30:86:de:87:29:d8:bf:85:11:be:17:
0e:d2:d8:0c:92:41:60:b6:12:b7:eb:51:35:41:96:
d4:c1:72:69:a0:62:90:d5:fa:14:85:93:d9:51:a6:
93:73:6e:b4:e9:f4:ac:f7:77:e4:4c:51:72:01:02:
dd:44:59:17:b2:df:41:58:88:c8:fc:cf:76:70:74:
cf:ed:0a:a3:e9:8c:bd:bb:d7:fb:f1:77:ed:06:17:
97:2f:15:d9:b8:99:63:32:02:47:72:36:2f:d4:ce:
f2:0d:d2:44:75:31:a3:69:fb:bd:0b:1f:9d:1d:07:
46:8b:4c:25:3e:c2:22:62:78:8d:9a:cc:4d:68:0a:
f4:8e:9c:c1:83:f6:6a:b2:1f:25:16:dd:46:ff:cc:
42:dc:7c:c1:89:60:ab:35:59:48:03:99:2e:e3:f4:
b9:75:3c:eb:5c:52:42:ba:48:20:4c:73:40:a4:f1:
d2:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:4F:FA:8A:A0:5D:55:C0:27:19:43:F0:97:53:6F:5C:E9:5C:76:FE
X509v3 Authority Key Identifier:
keyid:E4:D6:08:E0:F7:A1:08:6C:84:51:DE:5D:63:78:47:B5:22:17:AB:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5NYI4PehCGyEUd5dY3hHtSIXq7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/eec70a-aa9f-42ae-8ad6-b7bbf5a1ac73/1/5NYI4PehCGyEUd5dY3hHtSIXq7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/eec70a-aa9f-42ae-8ad6-b7bbf5a1ac73/1/5NYI4PehCGyEUd5dY3hHtSIXq7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:17:8b:fd:8f:ab:01:c7:80:13:4d:74:55:5a:e8:dd:67:d9:
b0:f0:69:36:d0:20:16:8f:42:06:fb:5e:ee:8d:0a:74:f2:1a:
b5:ee:f2:54:8f:81:37:42:d7:dd:3e:b7:55:6e:91:2f:57:47:
3e:27:81:9f:30:a4:64:17:d1:ac:67:27:88:2b:26:01:d5:ef:
ec:f5:44:25:51:50:b2:6b:d1:de:4b:7f:25:80:23:fd:c5:b2:
0f:fe:f2:f3:f8:bb:76:f9:50:50:df:6a:b7:c4:3d:69:59:08:
68:8d:fb:d3:3f:19:86:13:58:34:8b:60:ad:d0:14:c7:c3:bf:
89:d4:a1:ba:c0:bb:db:cd:87:13:d0:ee:a1:dc:d2:ae:a9:f5:
45:8b:82:be:9f:84:40:5d:05:20:61:0c:8d:b9:51:48:ce:35:
15:8f:cb:ca:2e:b4:80:f7:a1:4e:fe:d3:83:86:43:5c:f2:fe:
00:1b:34:95:c1:d7:a8:5f:3b:ac:8b:bf:a1:a0:00:4f:02:5c:
33:d2:7a:c5:48:1d:7d:6b:99:99:ad:6f:ae:f6:15:2a:a6:10:
25:74:40:fb:4b:6c:10:3d:2d:82:89:94:5a:37:3e:69:94:0c:
d5:41:0c:18:48:ff:99:64:6b:48:00:ed:f4:ec:b6:1a:3d:b5:
10:b8:44:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04nFxvnvfZLhZBnefF2Pb9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0ZDYwOGUwZjdhMTA4NmM4NDUxZGU1ZDYzNzg0N2I1MjIx
N2FiYjQwHhcNMjYwMzI5MDgwMTA0WhcNMjYwMzMwMDgwMTA0WjAzMTEwLwYDVQQD
EyhiMTRmZmE4YWEwNWQ1NWMwMjcxOTQzZjA5NzUzNmY1Y2U5NWM3NmZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslw+GhEOrBFzQ5NSsEfQlKE4jjsn
r1zyVfb1wH1/iHVKEA/dB4oybEAl2WmZp5KE54QqMokyb3p7FNILYvXTHXgBC6nn
xqgNId02oHIEMIbehynYv4URvhcO0tgMkkFgthK361E1QZbUwXJpoGKQ1foUhZPZ
UaaTc2606fSs93fkTFFyAQLdRFkXst9BWIjI/M92cHTP7Qqj6Yy9u9f78XftBheX
LxXZuJljMgJHcjYv1M7yDdJEdTGjafu9Cx+dHQdGi0wlPsIiYniNmsxNaAr0jpzB
g/Zqsh8lFt1G/8xC3HzBiWCrNVlIA5ku4/S5dTzrXFJCukggTHNApPHS6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLFP+oqgXVXAJxlD8JdTb1zpXHb+MB8GA1UdIwQY
MBaAFOTWCOD3oQhshFHeXWN4R7UiF6u0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNU5ZSTRQZWhDR3lFVWQ1ZFkzaEh0U0lYcTdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9lZWM3MGEtYWE5Zi00MmFlLThhZDYt
YjdiYmY1YTFhYzczLzEvNU5ZSTRQZWhDR3lFVWQ1ZFkzaEh0U0lYcTdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9lZWM3MGEtYWE5Zi00MmFlLThhZDYtYjdiYmY1YTFhYzcz
LzEvNU5ZSTRQZWhDR3lFVWQ1ZFkzaEh0U0lYcTdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZBeL/Y+r
AceAE010VVro3WfZsPBpNtAgFo9CBvte7o0KdPIate7yVI+BN0LX3T63VW6RL1dH
PieBnzCkZBfRrGcniCsmAdXv7PVEJVFQsmvR3kt/JYAj/cWyD/7y8/i7dvlQUN9q
t8Q9aVkIaI370z8ZhhNYNItgrdAUx8O/idShusC7282HE9DuodzSrqn1RYuCvp+E
QF0FIGEMjblRSM41FY/Lyi60gPehTv7Tg4ZDXPL+ABs0lcHXqF87rIu/oaAATwJc
M9J6xUgdfWuZma1vrvYVKqYQJXRA+0tsED0tgomUWjc+aZQM1UEMGEj/mWRrSADt
9Oy2Gj21ELhEGQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 13:52:23 2026 by rpki-client