Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9f5223-a56c-465b-ac65-fd152a6a0587/1/5ar3bSe6gS4NXOIwXxfFMYjCWAw.mft
File: 5ar3bSe6gS4NXOIwXxfFMYjCWAw.mft (raw, json)
Hash identifier: kPsDawiJT6oW2Egjn5QQX2P9rhH1gKJys1KVoQ1Fbe4=
Subject key identifier: BD:A6:9F:47:97:8A:E7:03:BD:89:25:40:C5:88:C7:A1:2A:8E:6D:02
Authority key identifier: E5:AA:F7:6D:27:BA:81:2E:0D:5C:E2:30:5F:17:C5:31:88:C2:58:0C
Certificate issuer: /CN=e5aaf76d27ba812e0d5ce2305f17c53188c2580c
Certificate serial: 019D378939E792A829F73015AADA1A89945C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5ar3bSe6gS4NXOIwXxfFMYjCWAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9f5223-a56c-465b-ac65-fd152a6a0587/1/5ar3bSe6gS4NXOIwXxfFMYjCWAw.mft
Manifest number: 0A9E
Signing time: Sun 29 Mar 2026 03:00:33 +0000
Manifest this update: Sun 29 Mar 2026 03:00:33 +0000
Manifest next update: Mon 30 Mar 2026 03:00:33 +0000
Files and hashes: 1: 5ar3bSe6gS4NXOIwXxfFMYjCWAw.crl (hash: CUGoB50zHQk4AMAK3wpipJJRsHaza9dj8DGc/XEA4pQ=)
2: oPgrYeYQdKE5w12V1Qsc5asf-z0.roa (hash: DyrqcRbA6WGivtdHIlCxrVDtSLyegGOpED1YlRSd3w0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9f5223-a56c-465b-ac65-fd152a6a0587/1/5ar3bSe6gS4NXOIwXxfFMYjCWAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/9f5223-a56c-465b-ac65-fd152a6a0587/1/5ar3bSe6gS4NXOIwXxfFMYjCWAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5ar3bSe6gS4NXOIwXxfFMYjCWAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:39:e7:92:a8:29:f7:30:15:aa:da:1a:89:94:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5aaf76d27ba812e0d5ce2305f17c53188c2580c
Validity
Not Before: Mar 29 03:00:33 2026 GMT
Not After : Mar 30 03:00:33 2026 GMT
Subject: CN=bda69f47978ae703bd892540c588c7a12a8e6d02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ba:8b:3c:e5:f5:dd:25:27:92:37:f2:34:35:
47:2d:d2:fa:e5:f2:6c:d7:ba:3c:47:75:52:b9:0b:
ad:d5:c3:33:37:89:90:c3:10:de:91:49:a6:fd:37:
95:ce:f8:9e:1f:31:f3:be:66:6d:55:6f:d3:96:ae:
7c:db:91:f9:7e:d0:db:44:38:21:25:d4:44:e4:be:
c9:1a:88:89:f0:7d:5c:11:16:1e:f8:6d:d7:ee:9c:
24:87:46:c4:a8:c9:91:4a:52:2c:0a:69:bc:f7:5f:
24:7e:5c:c9:ef:bb:14:a6:c6:35:c6:4c:fe:d5:36:
cc:ee:7a:34:b8:6c:6f:0c:b0:c8:b0:b0:05:a8:6e:
af:71:c9:dd:f4:92:9c:9c:a4:4d:39:ff:88:f8:5f:
42:ea:b9:32:da:42:aa:a4:a8:92:93:2a:95:f3:a2:
f4:a9:6e:fb:f6:13:b1:51:5e:87:0b:67:bc:ea:dc:
28:0f:c7:d8:a4:ad:4e:1e:e7:e4:cd:11:ed:39:39:
73:67:e8:36:d0:d0:aa:e2:bd:c6:1a:24:b5:87:46:
8f:fb:a5:3d:08:e9:cf:82:1a:ff:13:ec:f8:1b:c1:
72:16:f5:4d:d0:c7:61:4a:bd:58:03:3e:29:8e:14:
f2:c2:ce:08:c8:aa:96:15:a5:22:eb:ea:ec:f4:1a:
d0:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:A6:9F:47:97:8A:E7:03:BD:89:25:40:C5:88:C7:A1:2A:8E:6D:02
X509v3 Authority Key Identifier:
keyid:E5:AA:F7:6D:27:BA:81:2E:0D:5C:E2:30:5F:17:C5:31:88:C2:58:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5ar3bSe6gS4NXOIwXxfFMYjCWAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9f5223-a56c-465b-ac65-fd152a6a0587/1/5ar3bSe6gS4NXOIwXxfFMYjCWAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9f5223-a56c-465b-ac65-fd152a6a0587/1/5ar3bSe6gS4NXOIwXxfFMYjCWAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:2d:b0:c0:43:6e:2a:22:1a:6b:a8:b4:49:e6:42:58:cd:0d:
5d:b0:0b:fc:78:04:78:17:dc:13:2d:59:b6:ac:8d:34:0e:02:
36:b5:4c:ea:00:59:8a:07:45:01:30:d7:5d:7f:e2:cb:36:2b:
10:4b:19:e9:e9:97:82:52:e0:7d:ac:41:0a:b8:e4:41:52:36:
60:a4:04:c7:dc:9f:ca:d0:9e:00:c9:ad:23:fc:f4:36:0f:db:
55:62:cd:37:7c:aa:f6:12:0c:bf:73:5a:8e:9e:29:34:8e:cf:
28:10:95:c4:24:32:bd:fe:aa:c9:db:1b:19:f1:0d:4d:03:b0:
38:6d:f8:2d:c4:5a:e8:5a:64:6e:6b:24:19:79:3d:ec:36:bc:
79:e4:2b:b2:c9:de:24:80:b1:a7:b7:26:7b:08:4d:45:48:7f:
18:0c:6d:28:a5:17:e9:a9:e0:8a:33:c6:a8:b4:1b:3b:05:b4:
ff:9d:48:c7:91:17:38:54:a3:15:70:a2:f4:51:8c:cc:5d:48:
f6:18:5a:30:20:a4:52:f2:2d:f1:43:ba:df:42:dd:13:2b:c1:
7a:88:94:68:b1:79:38:c0:fe:08:d6:73:2e:89:61:58:a0:60:
a8:0a:c3:f4:15:8c:f0:57:3c:fa:41:08:3f:7e:71:6b:95:79:
a8:5b:8e:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03iTnnkqgp9zAVqtoaiZRcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1YWFmNzZkMjdiYTgxMmUwZDVjZTIzMDVmMTdjNTMxODhj
MjU4MGMwHhcNMjYwMzI5MDMwMDMzWhcNMjYwMzMwMDMwMDMzWjAzMTEwLwYDVQQD
EyhiZGE2OWY0Nzk3OGFlNzAzYmQ4OTI1NDBjNTg4YzdhMTJhOGU2ZDAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrqLPOX13SUnkjfyNDVHLdL65fJs
17o8R3VSuQut1cMzN4mQwxDekUmm/TeVzvieHzHzvmZtVW/Tlq5825H5ftDbRDgh
JdRE5L7JGoiJ8H1cERYe+G3X7pwkh0bEqMmRSlIsCmm8918kflzJ77sUpsY1xkz+
1TbM7no0uGxvDLDIsLAFqG6vccnd9JKcnKRNOf+I+F9C6rky2kKqpKiSkyqV86L0
qW779hOxUV6HC2e86twoD8fYpK1OHufkzRHtOTlzZ+g20NCq4r3GGiS1h0aP+6U9
COnPghr/E+z4G8FyFvVN0MdhSr1YAz4pjhTyws4IyKqWFaUi6+rs9BrQAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL2mn0eXiucDvYklQMWIx6Eqjm0CMB8GA1UdIwQY
MBaAFOWq920nuoEuDVziMF8XxTGIwlgMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWFyM2JTZTZnUzROWE9Jd1h4ZkZNWWpDV0F3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC85ZjUyMjMtYTU2Yy00NjViLWFjNjUt
ZmQxNTJhNmEwNTg3LzEvNWFyM2JTZTZnUzROWE9Jd1h4ZkZNWWpDV0F3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC85ZjUyMjMtYTU2Yy00NjViLWFjNjUtZmQxNTJhNmEwNTg3
LzEvNWFyM2JTZTZnUzROWE9Jd1h4ZkZNWWpDV0F3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjS2wwENu
KiIaa6i0SeZCWM0NXbAL/HgEeBfcEy1ZtqyNNA4CNrVM6gBZigdFATDXXX/iyzYr
EEsZ6emXglLgfaxBCrjkQVI2YKQEx9yfytCeAMmtI/z0Ng/bVWLNN3yq9hIMv3Na
jp4pNI7PKBCVxCQyvf6qydsbGfENTQOwOG34LcRa6FpkbmskGXk97Da8eeQrssne
JICxp7cmewhNRUh/GAxtKKUX6angijPGqLQbOwW0/51Ix5EXOFSjFXCi9FGMzF1I
9hhaMCCkUvIt8UO630LdEyvBeoiUaLF5OMD+CNZzLolhWKBgqArD9BWM8Fc8+kEI
P35xa5V5qFuOtQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 13:43:07 2026 by rpki-client