Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/b41d13-cc7a-49d6-91c4-70aa645ecc29/1/5UTrMoWRGEs_r55xqTHLMl3LEag.mft
File: 5UTrMoWRGEs_r55xqTHLMl3LEag.mft (raw, json)
Hash identifier: P8Ljqc8zPzUcrXgZzQQbRK/QFDOxLpoakRABT7RnZ74=
Subject key identifier: 8A:C5:F4:A3:23:0B:84:C9:DD:B3:5C:9F:A5:0A:BE:DF:14:D6:E4:F1
Authority key identifier: E5:44:EB:32:85:91:18:4B:3F:AF:9E:71:A9:31:CB:32:5D:CB:11:A8
Certificate issuer: /CN=e544eb328591184b3faf9e71a931cb325dcb11a8
Certificate serial: 019D371B3872137C13DB4B4F75088B82DE79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5UTrMoWRGEs_r55xqTHLMl3LEag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/b41d13-cc7a-49d6-91c4-70aa645ecc29/1/5UTrMoWRGEs_r55xqTHLMl3LEag.mft
Manifest number: 04AA
Signing time: Sun 29 Mar 2026 01:00:23 +0000
Manifest this update: Sun 29 Mar 2026 01:00:23 +0000
Manifest next update: Mon 30 Mar 2026 01:00:23 +0000
Files and hashes: 1: 5UTrMoWRGEs_r55xqTHLMl3LEag.crl (hash: D0H5fzsXZZLB07aJERW8HkO7ALbjDMGWLRtYWSWmFiY=)
2: rhEDto9LAcb21HwkdYYZj263_-Y.roa (hash: vpJNUlsikgDQkbTcXSuN12zAPLHXSB+mONKm4pukuXs=)
3: yD0u6CnOVpuk9WvVpytgxRU4D0s.roa (hash: hrSKknGCTUHrpDRk30g1RyFkiWwqNDnyIxOmbM3GicI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/b41d13-cc7a-49d6-91c4-70aa645ecc29/1/5UTrMoWRGEs_r55xqTHLMl3LEag.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/b41d13-cc7a-49d6-91c4-70aa645ecc29/1/5UTrMoWRGEs_r55xqTHLMl3LEag.mft
rsync://rpki.ripe.net/repository/DEFAULT/5UTrMoWRGEs_r55xqTHLMl3LEag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:38:72:13:7c:13:db:4b:4f:75:08:8b:82:de:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e544eb328591184b3faf9e71a931cb325dcb11a8
Validity
Not Before: Mar 29 01:00:23 2026 GMT
Not After : Mar 30 01:00:23 2026 GMT
Subject: CN=8ac5f4a3230b84c9ddb35c9fa50abedf14d6e4f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:00:bf:4f:2d:b2:ab:19:79:9e:13:2c:78:f9:
05:38:71:b1:ea:53:69:4b:ff:3b:8f:4e:5b:b8:79:
65:ad:41:37:f7:7c:c5:1a:a2:5c:78:0c:bf:ce:67:
6e:b7:59:88:6a:7b:77:f2:4a:cb:7f:cf:d4:3a:5a:
73:90:c9:88:00:0b:10:c6:6c:cd:88:32:ca:20:70:
da:e5:89:59:61:9a:10:d7:a0:0e:6d:e4:3a:50:dd:
a8:23:ef:58:79:07:d4:ea:df:58:71:39:67:cb:af:
28:b8:ad:f2:fd:78:87:ce:31:0d:bb:d9:ee:31:d0:
78:aa:c8:bb:8e:e7:27:2a:c3:b6:ae:c6:f9:c3:59:
ea:12:00:82:f2:b3:ec:bb:1a:06:fd:77:f9:f0:46:
65:dd:43:cf:2e:1a:0c:50:2f:d4:48:d7:a4:0a:94:
60:14:cb:ee:94:7f:d7:b2:b1:d4:a4:94:c9:78:8e:
90:a3:7c:a6:c3:b6:59:47:db:cc:68:48:af:b9:e2:
12:08:58:0e:4c:25:1f:31:ba:5b:a3:d3:65:5a:77:
e6:0c:ef:2b:fe:7f:58:32:9f:8a:0a:0b:d9:87:fc:
77:36:04:3f:8c:9c:4a:08:e3:14:f7:a1:97:bb:d1:
ce:60:20:b4:7a:4b:2e:5a:32:83:d3:3d:85:6b:9e:
6a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:C5:F4:A3:23:0B:84:C9:DD:B3:5C:9F:A5:0A:BE:DF:14:D6:E4:F1
X509v3 Authority Key Identifier:
keyid:E5:44:EB:32:85:91:18:4B:3F:AF:9E:71:A9:31:CB:32:5D:CB:11:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5UTrMoWRGEs_r55xqTHLMl3LEag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41d13-cc7a-49d6-91c4-70aa645ecc29/1/5UTrMoWRGEs_r55xqTHLMl3LEag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41d13-cc7a-49d6-91c4-70aa645ecc29/1/5UTrMoWRGEs_r55xqTHLMl3LEag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:e8:88:05:ce:d7:f1:ad:0e:a9:61:0a:10:50:6a:3d:ce:76:
52:8b:7d:53:06:3a:7b:37:47:85:32:d2:1d:b7:60:00:58:0a:
1b:ed:db:ad:35:41:df:3f:51:9a:8b:ee:d7:d8:ef:37:5a:58:
c3:ca:03:18:08:93:1c:74:94:d3:4b:34:f6:6a:1a:3a:13:ba:
9f:b7:c2:c5:59:e9:26:1a:67:ea:42:14:5b:6d:c9:19:1b:a5:
74:70:da:42:28:0a:e1:a5:9f:a7:81:a7:30:55:58:7c:e3:66:
ab:0b:a2:cb:ed:33:7a:18:bf:f7:fa:e1:28:60:94:aa:36:1a:
b9:45:89:1f:e9:0e:d8:ce:e1:6e:42:05:db:c4:99:54:61:19:
56:ee:d1:f7:54:49:02:5c:71:4f:66:cc:a3:46:53:bb:fc:89:
5b:d2:54:76:0d:d3:e1:a8:4a:ac:74:b8:36:78:02:2c:b3:76:
5e:5a:5b:99:da:45:e3:71:66:14:d4:8c:10:fb:20:4e:2a:3e:
df:6c:f1:45:67:74:4c:51:60:90:9b:b4:42:2d:b5:36:30:1d:
6a:9a:4d:a0:2d:e7:a8:e2:b9:99:d6:96:cd:5c:5b:e4:11:c4:
3e:78:11:c5:b6:30:d7:08:90:5d:2c:08:1a:75:35:55:74:bc:
f7:2f:74:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03GzhyE3wT20tPdQiLgt55MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1NDRlYjMyODU5MTE4NGIzZmFmOWU3MWE5MzFjYjMyNWRj
YjExYTgwHhcNMjYwMzI5MDEwMDIzWhcNMjYwMzMwMDEwMDIzWjAzMTEwLwYDVQQD
Eyg4YWM1ZjRhMzIzMGI4NGM5ZGRiMzVjOWZhNTBhYmVkZjE0ZDZlNGYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0QC/Ty2yqxl5nhMsePkFOHGx6lNp
S/87j05buHllrUE393zFGqJceAy/zmdut1mIant38krLf8/UOlpzkMmIAAsQxmzN
iDLKIHDa5YlZYZoQ16AObeQ6UN2oI+9YeQfU6t9YcTlny68ouK3y/XiHzjENu9nu
MdB4qsi7jucnKsO2rsb5w1nqEgCC8rPsuxoG/Xf58EZl3UPPLhoMUC/USNekCpRg
FMvulH/XsrHUpJTJeI6Qo3ymw7ZZR9vMaEivueISCFgOTCUfMbpbo9NlWnfmDO8r
/n9YMp+KCgvZh/x3NgQ/jJxKCOMU96GXu9HOYCC0eksuWjKD0z2Fa55qNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIrF9KMjC4TJ3bNcn6UKvt8U1uTxMB8GA1UdIwQY
MBaAFOVE6zKFkRhLP6+ecakxyzJdyxGoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVVUck1vV1JHRXNfcjU1eHFUSExNbDNMRWFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9iNDFkMTMtY2M3YS00OWQ2LTkxYzQt
NzBhYTY0NWVjYzI5LzEvNVVUck1vV1JHRXNfcjU1eHFUSExNbDNMRWFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9iNDFkMTMtY2M3YS00OWQ2LTkxYzQtNzBhYTY0NWVjYzI5
LzEvNVVUck1vV1JHRXNfcjU1eHFUSExNbDNMRWFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg+iIBc7X
8a0OqWEKEFBqPc52Uot9UwY6ezdHhTLSHbdgAFgKG+3brTVB3z9Rmovu19jvN1pY
w8oDGAiTHHSU00s09moaOhO6n7fCxVnpJhpn6kIUW23JGRuldHDaQigK4aWfp4Gn
MFVYfONmqwuiy+0zehi/9/rhKGCUqjYauUWJH+kO2M7hbkIF28SZVGEZVu7R91RJ
AlxxT2bMo0ZTu/yJW9JUdg3T4ahKrHS4NngCLLN2XlpbmdpF43FmFNSMEPsgTio+
32zxRWd0TFFgkJu0Qi21NjAdappNoC3nqOK5mdaWzVxb5BHEPngRxbYw1wiQXSwI
GnU1VXS89y90Pg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:13 2026 by rpki-client