Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/d612e3-94eb-4866-b43c-e40b301401a9/1/5_4i9VHpWw8VAzxQNVLkm8phfGo.mft
File: 5_4i9VHpWw8VAzxQNVLkm8phfGo.mft (raw, json)
Hash identifier: DyN4jtSaGSA7xjgh/BKxw7s0mfO+L2BSrU5ryluaTOo=
Subject key identifier: D7:06:46:36:52:C4:EC:C8:ED:13:B3:CB:DE:CE:2E:F0:C0:97:B2:F2
Authority key identifier: E7:FE:22:F5:51:E9:5B:0F:15:03:3C:50:35:52:E4:9B:CA:61:7C:6A
Certificate issuer: /CN=e7fe22f551e95b0f15033c503552e49bca617c6a
Certificate serial: 019D27E00E5373C247B8C3847D6363E47B3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_4i9VHpWw8VAzxQNVLkm8phfGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/d612e3-94eb-4866-b43c-e40b301401a9/1/5_4i9VHpWw8VAzxQNVLkm8phfGo.mft
Manifest number: 04F0
Signing time: Thu 26 Mar 2026 02:01:28 +0000
Manifest this update: Thu 26 Mar 2026 02:01:28 +0000
Manifest next update: Fri 27 Mar 2026 02:01:28 +0000
Files and hashes: 1: 5_4i9VHpWw8VAzxQNVLkm8phfGo.crl (hash: vEG1AnclZYQPsReBVO814Bqop10NvGoDeD/Uf2SWJtM=)
2: O12iTFYfdA2zCw72150Nud1E6y0.roa (hash: z5mYMpvdZLPaUzxNIg/54hb62dd6baAvlEXsN8ohQB8=)
3: _fFHLP85mXG233c_oo6_tp_deIs.roa (hash: n25U7OP6QQrrsEGd6Mi0uXlEH7hkC7fcd6BN0xsYQhk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/d612e3-94eb-4866-b43c-e40b301401a9/1/5_4i9VHpWw8VAzxQNVLkm8phfGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/d612e3-94eb-4866-b43c-e40b301401a9/1/5_4i9VHpWw8VAzxQNVLkm8phfGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5_4i9VHpWw8VAzxQNVLkm8phfGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:0e:53:73:c2:47:b8:c3:84:7d:63:63:e4:7b:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7fe22f551e95b0f15033c503552e49bca617c6a
Validity
Not Before: Mar 26 02:01:28 2026 GMT
Not After : Mar 27 02:01:28 2026 GMT
Subject: CN=d706463652c4ecc8ed13b3cbdece2ef0c097b2f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b7:10:fc:17:80:6f:d4:c2:0a:37:16:81:20:
62:67:6a:1c:1f:d3:7a:66:0e:30:7d:62:1e:90:e5:
10:f6:80:4e:3c:b4:55:b2:81:95:bf:1c:84:9f:10:
9f:18:54:e0:99:9d:ec:85:e1:fc:57:1e:0d:0d:30:
9b:73:e8:a5:d9:f1:e0:54:d8:30:52:3d:d3:59:12:
0b:55:d9:bb:0f:ab:10:58:c2:bc:da:55:a0:0f:8d:
c3:cd:32:9b:03:64:43:15:01:0a:ce:34:d0:1b:4e:
fb:0b:e4:19:40:df:4b:cc:9c:8c:71:63:86:6b:13:
2f:d6:d6:85:7c:99:e4:e7:26:7e:72:fd:f5:7a:8c:
d3:c7:64:d0:68:8e:ac:68:34:57:6c:7a:9e:9c:e8:
ce:49:97:b2:5d:6f:a3:a2:1d:e0:7d:8d:4d:a7:36:
aa:ac:a8:d0:2c:8e:4a:78:1a:83:7e:f6:95:28:6f:
c4:f0:bf:4d:e0:ce:be:26:1c:12:49:d6:c9:52:a8:
78:ab:2d:18:f3:51:aa:6a:fb:2d:82:74:52:1e:96:
31:d7:f7:7f:8b:63:ab:9b:ff:3a:72:c7:80:ff:c9:
84:06:7d:b0:f6:f7:e8:f7:48:97:99:59:12:6b:45:
19:25:58:04:67:fc:57:36:02:c7:4c:e9:68:c5:d0:
47:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:06:46:36:52:C4:EC:C8:ED:13:B3:CB:DE:CE:2E:F0:C0:97:B2:F2
X509v3 Authority Key Identifier:
keyid:E7:FE:22:F5:51:E9:5B:0F:15:03:3C:50:35:52:E4:9B:CA:61:7C:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_4i9VHpWw8VAzxQNVLkm8phfGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d612e3-94eb-4866-b43c-e40b301401a9/1/5_4i9VHpWw8VAzxQNVLkm8phfGo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d612e3-94eb-4866-b43c-e40b301401a9/1/5_4i9VHpWw8VAzxQNVLkm8phfGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:e0:54:58:e6:7a:33:cd:0b:a0:32:e3:08:e4:60:56:20:fd:
68:05:4a:0a:2d:1b:35:98:9d:ad:13:75:df:f5:9a:12:6b:a4:
c3:7a:5c:aa:ae:79:f2:5d:78:54:a3:f3:a6:c3:91:17:ea:37:
0e:c9:36:84:fc:fa:90:d0:7d:f0:90:1c:d3:b3:b7:8e:dc:a0:
7d:70:2e:7d:ff:ad:c1:8f:be:f5:99:56:e7:88:83:24:8f:74:
73:1d:b7:cd:93:6c:14:9f:66:91:84:da:54:ed:20:e1:d1:7b:
96:57:0a:71:0f:a5:45:1b:31:80:c1:bb:8a:92:7f:ae:65:2f:
46:44:74:60:37:a8:a5:c7:ca:b2:c8:18:52:66:d5:c6:9e:36:
db:46:69:49:6f:8e:8a:5b:7f:89:db:ef:7e:7a:c4:4b:38:3d:
1b:79:d5:00:81:a2:cb:9c:23:9d:9a:85:06:24:ba:32:0b:4c:
8a:c4:84:70:f8:49:fb:b9:e8:84:a6:1f:9d:6d:56:d2:76:d5:
24:d0:d7:b9:40:8b:67:25:a5:90:77:ab:a5:0c:f1:7a:ba:b7:
bf:dc:5d:9a:7b:93:23:97:7b:d9:01:a1:d4:be:74:7d:f2:fb:
bf:26:18:9e:b3:b8:5f:20:a6:f1:22:e5:3a:6f:4e:91:bd:01:
37:4d:be:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:56:35 2026 by rpki-client