Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.mft
File: 5-XEyZ1hMQSZgq-a2bhmArKSm7g.mft (raw, json)
Hash identifier: d0+tFzcTRHTaGqyLnCmwwbscwfD2Hu9vZwsP9J9Rfl0=
Subject key identifier: 8A:1D:07:9B:3E:E9:50:17:59:9F:7B:49:FC:40:0B:3D:CF:ED:14:A7
Authority key identifier: E7:E5:C4:C9:9D:61:31:04:99:82:AF:9A:D9:B8:66:02:B2:92:9B:B8
Certificate issuer: /CN=e7e5c4c99d6131049982af9ad9b86602b2929bb8
Certificate serial: 019D3A1CD845B31EF5BD28169BB325BEE4DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5-XEyZ1hMQSZgq-a2bhmArKSm7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 15:01:01 +0000
Manifest this update: Sun 29 Mar 2026 15:01:01 +0000
Manifest next update: Mon 30 Mar 2026 15:01:01 +0000
Files and hashes: 1: 5-XEyZ1hMQSZgq-a2bhmArKSm7g.crl (hash: 3+V7DUyjdZq6zFgj1w11dYfkbWdLz12HPBKZMWHUEi8=)
2: z-3swOq83iQal-4HNbXMWQFTmtk.roa (hash: 2AnlHpZVm/nKwMz5eQ79wwh/KAfXL/jahLqbUXf70ls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/5-XEyZ1hMQSZgq-a2bhmArKSm7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 15:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:d8:45:b3:1e:f5:bd:28:16:9b:b3:25:be:e4:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7e5c4c99d6131049982af9ad9b86602b2929bb8
Validity
Not Before: Mar 29 15:01:01 2026 GMT
Not After : Mar 30 15:01:01 2026 GMT
Subject: CN=8a1d079b3ee95017599f7b49fc400b3dcfed14a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:a9:73:bd:b9:c3:01:8d:cf:2c:48:32:49:fa:
d4:f4:fb:86:24:dd:6c:d5:14:a9:ba:b8:7c:b1:d0:
02:ca:a4:bb:0c:a1:99:f8:e0:ea:23:ae:d9:6d:64:
4a:f5:27:5f:5d:ab:60:3b:61:db:26:1a:2a:8c:1a:
94:8b:ee:7d:ed:e6:af:b2:24:f1:4b:72:25:3c:10:
38:a7:29:6e:70:ff:26:b8:d8:b9:78:94:fd:23:db:
1c:3e:e8:b3:fe:e7:aa:88:b6:7c:e0:a3:0b:7b:af:
3a:ca:ac:95:2b:4e:ce:2a:2f:5b:ec:50:4b:b7:7e:
8e:06:9e:d3:49:86:92:5f:73:df:13:09:cd:34:86:
29:f9:0e:a2:9a:21:44:98:8f:1f:a1:0d:c2:96:9a:
4f:73:21:21:d5:5a:fd:de:6b:b9:d2:87:93:83:30:
71:98:26:db:61:bd:73:6a:5f:6c:43:d2:e4:5e:e6:
ff:e9:c2:27:e2:80:b0:17:62:fd:b0:76:44:26:9b:
cc:b0:ab:8b:2e:3f:b9:fd:5b:bf:6b:bd:f5:4e:ae:
b4:93:b0:aa:ba:e1:a4:19:fb:32:87:62:2d:33:47:
f3:e8:ec:cc:12:5f:06:dc:62:37:d1:f7:a2:cf:c9:
9c:f1:7c:76:ca:52:f0:33:f9:cd:4f:17:37:4d:21:
f0:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:1D:07:9B:3E:E9:50:17:59:9F:7B:49:FC:40:0B:3D:CF:ED:14:A7
X509v3 Authority Key Identifier:
keyid:E7:E5:C4:C9:9D:61:31:04:99:82:AF:9A:D9:B8:66:02:B2:92:9B:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5-XEyZ1hMQSZgq-a2bhmArKSm7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:c3:92:f8:b7:d4:ae:45:c2:47:69:07:85:7a:62:2d:17:8a:
b6:2d:7e:d5:46:ee:82:22:54:9b:8b:e4:db:31:ed:ff:44:84:
68:df:46:d7:91:46:00:9b:2c:78:eb:6c:26:5e:a8:f1:5b:c8:
fe:5a:82:bc:58:3b:0f:3f:74:73:17:2b:38:41:55:2d:b8:16:
d1:3e:6d:f8:1c:7b:fc:d3:85:68:de:cb:d7:86:4d:12:eb:76:
d8:b8:56:d2:d2:6e:b0:c8:35:6d:c5:5e:ef:b4:e2:68:2d:d5:
10:46:f5:b8:ee:7b:0d:71:80:26:22:12:b5:07:13:1a:98:39:
0d:e5:9b:26:84:f2:b2:09:5e:f7:9a:16:63:03:81:ff:b8:fb:
28:4e:c9:d3:3a:9d:f8:3a:71:fb:90:f6:72:41:13:f5:a2:26:
89:63:9f:da:1b:19:fe:62:ef:0d:bf:87:b8:80:6a:de:49:23:
a1:ab:bc:96:fa:a4:54:e9:10:e9:6a:bb:cb:c0:93:0d:b3:c8:
be:56:55:2a:d8:b7:31:09:b4:8f:f3:92:d8:cc:1a:ea:0b:ac:
e2:36:84:a0:49:2b:02:12:fe:15:db:08:38:b2:ce:91:53:72:
ec:74:d4:73:fd:f8:1a:30:81:9e:bb:61:c5:06:ee:b3:49:4c:
15:9b:8f:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ06HNhFsx71vSgWm7MlvuTbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3ZTVjNGM5OWQ2MTMxMDQ5OTgyYWY5YWQ5Yjg2NjAyYjI5
MjliYjgwHhcNMjYwMzI5MTUwMTAxWhcNMjYwMzMwMTUwMTAxWjAzMTEwLwYDVQQD
Eyg4YTFkMDc5YjNlZTk1MDE3NTk5ZjdiNDlmYzQwMGIzZGNmZWQxNGE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6KlzvbnDAY3PLEgySfrU9PuGJN1s
1RSpurh8sdACyqS7DKGZ+ODqI67ZbWRK9SdfXatgO2HbJhoqjBqUi+597eavsiTx
S3IlPBA4pylucP8muNi5eJT9I9scPuiz/ueqiLZ84KMLe686yqyVK07OKi9b7FBL
t36OBp7TSYaSX3PfEwnNNIYp+Q6imiFEmI8foQ3ClppPcyEh1Vr93mu50oeTgzBx
mCbbYb1zal9sQ9LkXub/6cIn4oCwF2L9sHZEJpvMsKuLLj+5/Vu/a731Tq60k7Cq
uuGkGfsyh2ItM0fz6OzMEl8G3GI30feiz8mc8Xx2ylLwM/nNTxc3TSHw+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIodB5s+6VAXWZ97SfxACz3P7RSnMB8GA1UdIwQY
MBaAFOflxMmdYTEEmYKvmtm4ZgKykpu4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNS1YRXlaMWhNUVNaZ3EtYTJiaG1BcktTbTdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9lNzA5ZGUtNmIyZC00YmU0LTg1MDMt
YTFlNDg3N2NlZTQ4LzEvNS1YRXlaMWhNUVNaZ3EtYTJiaG1BcktTbTdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9lNzA5ZGUtNmIyZC00YmU0LTg1MDMtYTFlNDg3N2NlZTQ4
LzEvNS1YRXlaMWhNUVNaZ3EtYTJiaG1BcktTbTdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACsOS+LfU
rkXCR2kHhXpiLReKti1+1UbugiJUm4vk2zHt/0SEaN9G15FGAJsseOtsJl6o8VvI
/lqCvFg7Dz90cxcrOEFVLbgW0T5t+Bx7/NOFaN7L14ZNEut22LhW0tJusMg1bcVe
77TiaC3VEEb1uO57DXGAJiIStQcTGpg5DeWbJoTysgle95oWYwOB/7j7KE7J0zqd
+Dpx+5D2ckET9aImiWOf2hsZ/mLvDb+HuIBq3kkjoau8lvqkVOkQ6Wq7y8CTDbPI
vlZVKti3MQm0j/OS2Mwa6gus4jaEoEkrAhL+FdsIOLLOkVNy7HTUc/34GjCBnrth
xQbus0lMFZuPxg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 19:51:16 2026 by rpki-client