Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/8c8524-7f85-4313-8ed2-bf866da747af/1/5c4xqiBddBAUR-_9bDE1GGFGRTo.mft
File: 5c4xqiBddBAUR-_9bDE1GGFGRTo.mft (raw, json)
Hash identifier: 0ynaJ4y7EiUntUSbu3b7GqImn+9wMVN7tL3CdTq3xqs=
Subject key identifier: 66:C1:45:C1:87:06:BC:B7:DD:BF:B9:60:5F:DB:E3:F1:12:28:EC:28
Authority key identifier: E5:CE:31:AA:20:5D:74:10:14:47:EF:FD:6C:31:35:18:61:46:45:3A
Certificate issuer: /CN=e5ce31aa205d74101447effd6c3135186146453a
Certificate serial: 019D288452F9529379CE296EE1EB21D6A938
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5c4xqiBddBAUR-_9bDE1GGFGRTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/8c8524-7f85-4313-8ed2-bf866da747af/1/5c4xqiBddBAUR-_9bDE1GGFGRTo.mft
Manifest number: 1885
Signing time: Thu 26 Mar 2026 05:00:53 +0000
Manifest this update: Thu 26 Mar 2026 05:00:53 +0000
Manifest next update: Fri 27 Mar 2026 05:00:53 +0000
Files and hashes: 1: 5c4xqiBddBAUR-_9bDE1GGFGRTo.crl (hash: bkKIHMwfbYCBdNzQTkS3A5F1aByq/Bs/9y21++TqSbI=)
2: Ro7iV5ZNVYzNssuuDgGoEbDMQoI.roa (hash: keE5gBWDN7d06/rNw4aGS5QaZg/Yuv2eluYkRO/QO9I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/8c8524-7f85-4313-8ed2-bf866da747af/1/5c4xqiBddBAUR-_9bDE1GGFGRTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/8c8524-7f85-4313-8ed2-bf866da747af/1/5c4xqiBddBAUR-_9bDE1GGFGRTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5c4xqiBddBAUR-_9bDE1GGFGRTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:52:f9:52:93:79:ce:29:6e:e1:eb:21:d6:a9:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5ce31aa205d74101447effd6c3135186146453a
Validity
Not Before: Mar 26 05:00:53 2026 GMT
Not After : Mar 27 05:00:53 2026 GMT
Subject: CN=66c145c18706bcb7ddbfb9605fdbe3f11228ec28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ab:72:be:85:af:ff:02:fb:35:f1:5f:85:96:
78:a3:ab:c2:ea:cb:00:a6:03:2b:8e:dc:84:e3:6f:
8c:a7:e8:4a:53:6f:00:b7:73:fa:ae:1d:18:18:10:
12:23:5a:70:c1:9c:85:f7:8e:a8:f1:d3:13:17:f8:
06:a5:c1:f8:ac:fd:d8:d1:72:a8:65:f9:0c:7a:aa:
2f:9c:3f:2d:30:f0:35:e1:ac:99:46:ca:f8:41:4a:
41:ac:9d:cf:e0:21:5d:3f:85:c2:49:78:c9:4a:30:
02:27:22:08:ed:35:cc:a6:01:05:ba:d9:75:58:e4:
27:8a:a9:f4:2c:ac:fa:be:86:e9:3b:70:44:e7:d7:
51:5b:4c:0b:e0:06:61:67:93:eb:86:c7:a9:d2:6d:
50:29:3d:f9:c8:4e:e2:d7:5f:34:89:05:a1:0a:b8:
0b:88:92:31:a2:02:d1:48:14:0d:40:ec:94:25:84:
fa:d8:2b:95:35:fa:e2:f8:39:ab:2f:07:75:f3:0a:
ff:9a:e3:ef:03:d6:bb:76:d1:f8:e6:ee:84:84:9f:
f9:eb:57:09:c4:53:11:2c:3d:dd:2e:bf:b9:ca:7d:
3c:a1:d7:f7:a4:03:f2:09:20:c0:d8:38:dc:d0:eb:
fd:98:0e:fb:bd:c1:3b:ad:d1:9f:52:18:82:c4:20:
2b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:C1:45:C1:87:06:BC:B7:DD:BF:B9:60:5F:DB:E3:F1:12:28:EC:28
X509v3 Authority Key Identifier:
keyid:E5:CE:31:AA:20:5D:74:10:14:47:EF:FD:6C:31:35:18:61:46:45:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c4xqiBddBAUR-_9bDE1GGFGRTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8c8524-7f85-4313-8ed2-bf866da747af/1/5c4xqiBddBAUR-_9bDE1GGFGRTo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8c8524-7f85-4313-8ed2-bf866da747af/1/5c4xqiBddBAUR-_9bDE1GGFGRTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:0a:b4:a5:fa:46:62:2a:80:bd:c1:fd:06:ab:43:b4:e5:2d:
7f:94:a2:52:19:af:5c:0e:17:70:b7:00:8b:9d:09:a0:a8:7a:
fc:61:d8:08:7d:37:d9:7f:67:f3:d4:35:89:79:0e:63:2e:48:
55:3b:9f:4e:65:86:d3:6d:2e:eb:5f:77:be:f0:ff:bb:34:a2:
ce:e4:56:22:5e:e3:de:9c:fb:5a:c5:69:1b:0c:60:0f:30:da:
b1:97:28:0b:bd:8a:be:5f:45:4e:07:0f:c0:91:77:61:69:32:
1e:4f:34:3e:32:fb:35:14:c5:f5:bb:0b:72:89:f2:ad:1b:7c:
ed:19:d2:ac:61:f0:98:b9:0d:2d:f3:0a:30:19:80:cd:db:0d:
bd:fb:6a:44:16:78:3c:eb:cb:7a:d4:0e:50:86:51:2a:03:28:
5c:35:f2:55:22:cd:b9:c5:f3:bf:ee:af:de:51:6d:bd:94:5f:
53:8e:f8:6d:42:3a:b6:d4:55:58:4d:08:b3:2d:15:63:e7:57:
18:22:4d:16:a2:c7:da:49:18:a1:38:a6:2b:ae:af:dc:9c:4d:
6e:5a:2e:8c:ce:bf:be:d1:36:fc:07:bd:da:d1:54:f1:3f:89:
86:19:a8:5a:a9:70:ad:e9:2d:db:6d:bf:4e:a2:f1:99:b4:8b:
fc:93:a7:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ohFL5UpN5zilu4esh1qk4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1Y2UzMWFhMjA1ZDc0MTAxNDQ3ZWZmZDZjMzEzNTE4NjE0
NjQ1M2EwHhcNMjYwMzI2MDUwMDUzWhcNMjYwMzI3MDUwMDUzWjAzMTEwLwYDVQQD
Eyg2NmMxNDVjMTg3MDZiY2I3ZGRiZmI5NjA1ZmRiZTNmMTEyMjhlYzI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0atyvoWv/wL7NfFfhZZ4o6vC6ssA
pgMrjtyE42+Mp+hKU28At3P6rh0YGBASI1pwwZyF946o8dMTF/gGpcH4rP3Y0XKo
ZfkMeqovnD8tMPA14ayZRsr4QUpBrJ3P4CFdP4XCSXjJSjACJyII7TXMpgEFutl1
WOQniqn0LKz6vobpO3BE59dRW0wL4AZhZ5Prhsep0m1QKT35yE7i1180iQWhCrgL
iJIxogLRSBQNQOyUJYT62CuVNfri+DmrLwd18wr/muPvA9a7dtH45u6EhJ/561cJ
xFMRLD3dLr+5yn08odf3pAPyCSDA2Djc0Ov9mA77vcE7rdGfUhiCxCArqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGbBRcGHBry33b+5YF/b4/ESKOwoMB8GA1UdIwQY
MBaAFOXOMaogXXQQFEfv/WwxNRhhRkU6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWM0eHFpQmRkQkFVUi1fOWJERTFHR0ZHUlRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC84Yzg1MjQtN2Y4NS00MzEzLThlZDIt
YmY4NjZkYTc0N2FmLzEvNWM0eHFpQmRkQkFVUi1fOWJERTFHR0ZHUlRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC84Yzg1MjQtN2Y4NS00MzEzLThlZDItYmY4NjZkYTc0N2Fm
LzEvNWM0eHFpQmRkQkFVUi1fOWJERTFHR0ZHUlRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgQq0pfpG
YiqAvcH9BqtDtOUtf5SiUhmvXA4XcLcAi50JoKh6/GHYCH032X9n89Q1iXkOYy5I
VTufTmWG020u6193vvD/uzSizuRWIl7j3pz7WsVpGwxgDzDasZcoC72Kvl9FTgcP
wJF3YWkyHk80PjL7NRTF9bsLconyrRt87RnSrGHwmLkNLfMKMBmAzdsNvftqRBZ4
POvLetQOUIZRKgMoXDXyVSLNucXzv+6v3lFtvZRfU474bUI6ttRVWE0Isy0VY+dX
GCJNFqLH2kkYoTimK66v3JxNbloujM6/vtE2/Ae92tFU8T+JhhmoWqlwrekt222/
TqLxmbSL/JOnAQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:26:53 2026 by rpki-client