Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/5c265e-4187-4a74-996e-ae8c5830cc20/1/5nEAZ58HKCzUjLUQe_l69684ick.mft
File: 5nEAZ58HKCzUjLUQe_l69684ick.mft (raw, json)
Hash identifier: SZAwWTvoT8P8d8FdalsANBHo55lG8YGjVb/hNguydIs=
Subject key identifier: 41:30:A1:5A:C4:1B:DE:6B:33:35:0E:C8:08:B6:33:16:04:B3:98:C9
Authority key identifier: E6:71:00:67:9F:07:28:2C:D4:8C:B5:10:7B:F9:7A:F7:AF:38:89:C9
Certificate issuer: /CN=e67100679f07282cd48cb5107bf97af7af3889c9
Certificate serial: 019D28BB37292D3AD58B48802A1E57F10BA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5nEAZ58HKCzUjLUQe_l69684ick.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/5c265e-4187-4a74-996e-ae8c5830cc20/1/5nEAZ58HKCzUjLUQe_l69684ick.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 06:00:51 +0000
Manifest this update: Thu 26 Mar 2026 06:00:51 +0000
Manifest next update: Fri 27 Mar 2026 06:00:51 +0000
Files and hashes: 1: 5nEAZ58HKCzUjLUQe_l69684ick.crl (hash: 9kL/oKtmI0Z0uq5NrFBrBu56oGSpM7p9A77jAwgaUQM=)
2: DKP0PbTK1N5jCO5TTlWyX5Rw5cM.roa (hash: FTS7rWAdFS8UyAMp19YH0zdu88+Df8yK+Znwjqplx54=)
3: sA6Qf2_ToIyGcsbWCFpl1ww3zYM.roa (hash: wfbilCSxn7pd6CKUaeLQcmM0OSGs3jIpHSCViiEgaxU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/5c265e-4187-4a74-996e-ae8c5830cc20/1/5nEAZ58HKCzUjLUQe_l69684ick.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/5c265e-4187-4a74-996e-ae8c5830cc20/1/5nEAZ58HKCzUjLUQe_l69684ick.mft
rsync://rpki.ripe.net/repository/DEFAULT/5nEAZ58HKCzUjLUQe_l69684ick.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:37:29:2d:3a:d5:8b:48:80:2a:1e:57:f1:0b:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e67100679f07282cd48cb5107bf97af7af3889c9
Validity
Not Before: Mar 26 06:00:51 2026 GMT
Not After : Mar 27 06:00:51 2026 GMT
Subject: CN=4130a15ac41bde6b33350ec808b6331604b398c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:1b:e6:99:1c:8e:f2:76:0d:fe:ae:f2:8f:cb:
9f:c5:e2:b0:34:1e:7c:85:4c:04:1b:a5:f0:96:28:
1a:41:56:bb:e6:49:0e:45:9c:a1:3b:b1:89:90:a2:
57:ee:8d:3b:74:0e:25:e0:6c:52:ad:3a:dc:20:05:
5e:49:69:03:ee:47:99:e9:23:2e:af:ef:c7:2c:df:
45:ce:f8:d2:32:b4:ef:43:54:e5:f7:8f:b2:88:66:
59:11:59:f3:a7:56:39:9d:90:4d:82:9c:cf:3f:89:
a8:47:f2:50:6f:07:4e:00:f6:35:58:cb:fa:38:39:
56:97:2a:da:10:d1:16:04:b2:d9:5b:4b:bb:c9:fd:
a0:f6:8a:bb:86:eb:56:5b:fe:5f:67:ae:c2:35:44:
de:50:55:46:29:39:f2:51:06:39:74:73:96:2a:6a:
32:89:73:be:0a:a8:81:f2:b1:90:3d:cd:88:db:d5:
d5:20:b3:ed:ea:35:cc:6a:00:0f:da:cc:a9:2c:d5:
5a:04:c2:5f:3c:8f:f9:24:23:3d:26:55:2a:21:99:
aa:3f:ab:63:87:f3:43:03:87:71:38:70:8e:1f:79:
7c:df:0d:a0:91:57:c7:18:dc:5c:0c:b0:06:9f:ee:
21:0a:c9:cc:16:18:5e:bb:0f:e8:6e:d3:ba:35:d6:
2c:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:30:A1:5A:C4:1B:DE:6B:33:35:0E:C8:08:B6:33:16:04:B3:98:C9
X509v3 Authority Key Identifier:
keyid:E6:71:00:67:9F:07:28:2C:D4:8C:B5:10:7B:F9:7A:F7:AF:38:89:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5nEAZ58HKCzUjLUQe_l69684ick.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/5c265e-4187-4a74-996e-ae8c5830cc20/1/5nEAZ58HKCzUjLUQe_l69684ick.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/5c265e-4187-4a74-996e-ae8c5830cc20/1/5nEAZ58HKCzUjLUQe_l69684ick.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:40:ed:fa:a5:d4:14:07:a2:55:97:4e:92:2f:5d:99:a5:38:
5d:9f:13:e2:f0:f2:d8:54:cf:e5:b2:70:72:b2:2f:48:43:97:
76:5b:46:d7:0d:fd:26:dd:e5:0b:80:ba:48:55:9b:73:25:e6:
00:99:cb:a7:87:24:69:f4:ce:36:43:ac:62:22:68:21:b3:0f:
60:3e:00:7a:3b:9b:e0:06:6b:b5:8e:72:8a:aa:10:5c:0f:66:
54:01:c1:ab:10:41:43:2b:77:06:77:96:26:25:7d:5c:6a:9a:
90:68:5e:5c:54:3b:e7:a7:d4:8e:c4:b0:16:07:0f:89:66:1c:
a3:58:96:e2:ac:62:0e:82:48:79:15:28:6e:40:bc:0f:77:b4:
59:98:af:28:16:7f:2c:06:38:9d:a1:79:0b:f4:82:db:47:6c:
1c:ac:f0:54:23:d2:e3:0e:c8:67:e1:f6:e6:3a:f2:ca:71:d7:
87:ee:df:a0:56:49:bc:a2:6d:f6:a6:06:3e:74:7d:79:1a:4a:
b4:41:eb:dd:b9:27:1b:13:b7:48:eb:46:6c:fc:72:69:a7:4a:
48:92:b7:7f:94:64:f6:c8:9f:e2:0a:28:db:fc:f3:7b:78:57:
1a:61:2e:af:81:72:70:61:47:c9:3a:2f:f0:e7:9b:54:64:5b:
fa:e5:23:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:06:41 2026 by rpki-client