Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/f2ab0f-be43-4665-bbaa-1cd3cb07ef5d/1/5DusShu7pWzENIYaTHaf-c4tFew.mft
File: 5DusShu7pWzENIYaTHaf-c4tFew.mft (raw, json)
Hash identifier: IaLcKUJUzAMW0GbaMPUSjozqozF9VNkkQOimRzOFWfM=
Subject key identifier: 19:E5:5D:AE:7D:9F:89:E7:98:94:BA:B0:82:54:FC:1F:87:62:52:BB
Authority key identifier: E4:3B:AC:4A:1B:BB:A5:6C:C4:34:86:1A:4C:76:9F:F9:CE:2D:15:EC
Certificate issuer: /CN=e43bac4a1bbba56cc434861a4c769ff9ce2d15ec
Certificate serial: 019D3940CB2790B48DE10BCF4BDC9FA8F36D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5DusShu7pWzENIYaTHaf-c4tFew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/f2ab0f-be43-4665-bbaa-1cd3cb07ef5d/1/5DusShu7pWzENIYaTHaf-c4tFew.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 11:00:40 +0000
Manifest this update: Sun 29 Mar 2026 11:00:40 +0000
Manifest next update: Mon 30 Mar 2026 11:00:40 +0000
Files and hashes: 1: 5DusShu7pWzENIYaTHaf-c4tFew.crl (hash: TzOdlJ9LDxV+yqlriYBgM23G2OaqNC4uaaTB684+vV8=)
2: 8enyMWor3_lYLKCjn1VyH8Tmvvo.roa (hash: DXWyK0t3vYkJHhUpLWAQ4emSxTNzSh9hNAKfoEpHYRo=)
3: JeNUkUBnpSW-vlRNGpNwNRUA7lY.roa (hash: BiO9H+K+d0OkI09wy+9OSVdZztlHwZneYZ1DCzlG8SU=)
4: vdUIsDHGDNbLOxL0Ly4406GeYvQ.roa (hash: CpHPotO66LaiTXBrpXnTFyDFuhRN5pLaJobhuRza6R4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/f2ab0f-be43-4665-bbaa-1cd3cb07ef5d/1/5DusShu7pWzENIYaTHaf-c4tFew.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/f2ab0f-be43-4665-bbaa-1cd3cb07ef5d/1/5DusShu7pWzENIYaTHaf-c4tFew.mft
rsync://rpki.ripe.net/repository/DEFAULT/5DusShu7pWzENIYaTHaf-c4tFew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:cb:27:90:b4:8d:e1:0b:cf:4b:dc:9f:a8:f3:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e43bac4a1bbba56cc434861a4c769ff9ce2d15ec
Validity
Not Before: Mar 29 11:00:40 2026 GMT
Not After : Mar 30 11:00:40 2026 GMT
Subject: CN=19e55dae7d9f89e79894bab08254fc1f876252bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c9:6b:16:75:0d:74:14:f6:05:38:eb:64:76:
fa:d6:fb:be:4c:33:39:ac:08:0f:7b:7a:b2:75:6b:
f3:f9:03:58:bb:61:7f:9b:07:2f:ea:65:e8:87:cb:
bc:a0:45:4f:ab:54:43:d2:fa:7e:3d:c7:a3:16:eb:
be:b1:45:d5:65:c7:61:0e:5e:76:6e:d3:74:96:80:
47:09:66:b6:b2:bd:b8:f7:05:3b:c0:90:a5:f3:32:
35:c3:bd:1d:cc:a3:80:10:e0:00:f9:15:bb:7a:d5:
ab:10:d5:43:7a:6a:f4:69:46:7b:0a:bc:ff:f2:04:
fd:9e:73:03:7f:d2:b9:4b:e9:3f:c2:be:a2:58:11:
49:73:f5:0e:5c:36:5a:3d:28:d2:b7:28:d0:d0:9d:
f1:7e:f0:fa:7c:60:37:a7:66:ce:c4:f3:70:97:59:
00:58:0f:8b:cf:57:da:ad:42:f1:d0:ed:8f:e1:3b:
50:5f:e6:05:b7:a8:b0:f0:02:84:10:23:96:c1:8f:
80:d9:ea:f1:ad:0e:42:ef:1d:9c:fe:8b:bc:a4:bd:
80:85:be:03:24:8b:00:6a:62:5a:a9:b8:e2:3b:45:
e8:37:d6:e8:e6:8f:2f:20:64:4a:c7:a1:0d:82:ea:
9c:55:3d:29:d6:ca:5a:77:3d:0b:15:86:c8:80:ec:
d3:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:E5:5D:AE:7D:9F:89:E7:98:94:BA:B0:82:54:FC:1F:87:62:52:BB
X509v3 Authority Key Identifier:
keyid:E4:3B:AC:4A:1B:BB:A5:6C:C4:34:86:1A:4C:76:9F:F9:CE:2D:15:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5DusShu7pWzENIYaTHaf-c4tFew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f2ab0f-be43-4665-bbaa-1cd3cb07ef5d/1/5DusShu7pWzENIYaTHaf-c4tFew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f2ab0f-be43-4665-bbaa-1cd3cb07ef5d/1/5DusShu7pWzENIYaTHaf-c4tFew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:18:76:66:d0:be:d8:79:16:aa:94:f8:63:21:61:82:b0:48:
65:0b:ac:25:1e:26:2f:cf:d1:c6:ba:8d:ee:ea:41:81:12:2e:
68:87:9e:9d:10:03:36:5c:b0:74:4a:d5:34:9d:e6:04:d8:6f:
04:e1:8a:90:59:6d:64:30:d4:de:f7:15:2f:18:14:a8:f6:5e:
0a:44:4e:cd:b7:12:1f:3f:08:7b:7b:35:7a:38:10:5f:c8:48:
fd:ba:a1:d3:81:0d:41:1d:27:5e:79:09:46:5e:be:55:e0:d2:
a3:e3:88:af:8b:95:7d:ae:fc:4e:8f:40:15:bd:3d:97:97:c4:
d0:9e:b6:62:08:3f:60:e9:31:41:97:1d:84:9c:4a:b4:0c:13:
ae:b1:04:83:9c:18:1d:7f:90:56:f2:4f:c3:ac:dc:da:ba:5e:
8e:34:9b:ca:d4:64:50:7b:e9:6d:30:4d:1e:cd:0f:a5:c0:87:
74:37:64:a1:58:64:84:ab:6f:dc:28:28:d3:79:7e:1a:7a:0f:
59:71:2d:ba:e0:ac:2a:06:1b:a0:5a:c5:cd:b0:17:2d:e3:bd:
78:97:c5:74:b3:67:cc:6a:b1:71:12:fb:a5:27:32:8c:24:93:
08:cf:81:aa:f0:dc:43:13:80:af:d6:54:08:a3:59:c6:b5:b2:
86:69:48:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QMsnkLSN4QvPS9yfqPNtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0M2JhYzRhMWJiYmE1NmNjNDM0ODYxYTRjNzY5ZmY5Y2Uy
ZDE1ZWMwHhcNMjYwMzI5MTEwMDQwWhcNMjYwMzMwMTEwMDQwWjAzMTEwLwYDVQQD
EygxOWU1NWRhZTdkOWY4OWU3OTg5NGJhYjA4MjU0ZmMxZjg3NjI1MmJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuslrFnUNdBT2BTjrZHb61vu+TDM5
rAgPe3qydWvz+QNYu2F/mwcv6mXoh8u8oEVPq1RD0vp+PcejFuu+sUXVZcdhDl52
btN0loBHCWa2sr249wU7wJCl8zI1w70dzKOAEOAA+RW7etWrENVDemr0aUZ7Crz/
8gT9nnMDf9K5S+k/wr6iWBFJc/UOXDZaPSjStyjQ0J3xfvD6fGA3p2bOxPNwl1kA
WA+Lz1farULx0O2P4TtQX+YFt6iw8AKEECOWwY+A2erxrQ5C7x2c/ou8pL2Ahb4D
JIsAamJaqbjiO0XoN9bo5o8vIGRKx6ENguqcVT0p1spadz0LFYbIgOzTEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBnlXa59n4nnmJS6sIJU/B+HYlK7MB8GA1UdIwQY
MBaAFOQ7rEobu6VsxDSGGkx2n/nOLRXsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUR1c1NodTdwV3pFTklZYVRIYWYtYzR0RmV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9mMmFiMGYtYmU0My00NjY1LWJiYWEt
MWNkM2NiMDdlZjVkLzEvNUR1c1NodTdwV3pFTklZYVRIYWYtYzR0RmV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy9mMmFiMGYtYmU0My00NjY1LWJiYWEtMWNkM2NiMDdlZjVk
LzEvNUR1c1NodTdwV3pFTklZYVRIYWYtYzR0RmV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKRh2ZtC+
2HkWqpT4YyFhgrBIZQusJR4mL8/RxrqN7upBgRIuaIeenRADNlywdErVNJ3mBNhv
BOGKkFltZDDU3vcVLxgUqPZeCkROzbcSHz8Ie3s1ejgQX8hI/bqh04ENQR0nXnkJ
Rl6+VeDSo+OIr4uVfa78To9AFb09l5fE0J62Ygg/YOkxQZcdhJxKtAwTrrEEg5wY
HX+QVvJPw6zc2rpejjSbytRkUHvpbTBNHs0PpcCHdDdkoVhkhKtv3Cgo03l+GnoP
WXEtuuCsKgYboFrFzbAXLeO9eJfFdLNnzGqxcRL7pScyjCSTCM+BqvDcQxOAr9ZU
CKNZxrWyhmlIFQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 18:33:19 2026 by rpki-client