Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.mft
File: 5cNA7ludrxpoGPDfQH-ll1iGsQ8.mft (raw, json)
Hash identifier: prKWrnwWQnPpzrtEeziunT7fAHXJFjaS6D1bpgZRJsE=
Subject key identifier: 29:B5:C3:CA:86:E3:B0:F8:35:4C:37:AB:46:20:66:F2:88:71:B3:2D
Authority key identifier: E5:C3:40:EE:5B:9D:AF:1A:68:18:F0:DF:40:7F:A5:97:58:86:B1:0F
Certificate issuer: /CN=e5c340ee5b9daf1a6818f0df407fa5975886b10f
Certificate serial: 019D28BBDDDEA80C443914F144EE17640F0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5cNA7ludrxpoGPDfQH-ll1iGsQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.mft
Manifest number: 0CF8
Signing time: Thu 26 Mar 2026 06:01:33 +0000
Manifest this update: Thu 26 Mar 2026 06:01:33 +0000
Manifest next update: Fri 27 Mar 2026 06:01:33 +0000
Files and hashes: 1: 5cNA7ludrxpoGPDfQH-ll1iGsQ8.crl (hash: SLONwLj2/6H/X2KeWlcNB2FbOaaA7AyN7v81Y/k+YeI=)
2: N0NwAtFb84h0xfganWJihzoCSpE.roa (hash: /Ubv+K+n65IZQaZN4AFBb/50l8Puw9jgWyG9wc4RYFM=)
3: OxaeKc7pRBgah12v_9xLvX75AHM.roa (hash: qygdd+Z/MhrVDqAYLLnF2qLBOy48W3eHlGWo3g+C2qA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/5cNA7ludrxpoGPDfQH-ll1iGsQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:dd:de:a8:0c:44:39:14:f1:44:ee:17:64:0f:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5c340ee5b9daf1a6818f0df407fa5975886b10f
Validity
Not Before: Mar 26 06:01:33 2026 GMT
Not After : Mar 27 06:01:33 2026 GMT
Subject: CN=29b5c3ca86e3b0f8354c37ab462066f28871b32d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a5:2a:88:0e:18:62:ff:e0:0c:c0:ef:35:ec:
a9:3e:a1:0c:eb:a3:68:47:63:60:b2:35:f1:0d:1c:
11:f0:d5:f2:0c:be:e6:a8:97:9a:f5:cf:49:c7:f2:
e4:52:64:e2:4a:02:f8:16:7e:6b:04:d3:a5:72:a3:
c6:aa:b1:d3:d7:c0:e0:f6:4b:ae:c4:84:c3:f3:11:
32:56:7b:74:fa:00:9f:63:36:2c:c8:32:c8:b4:b4:
2c:1f:63:b9:9a:9a:94:09:d6:1a:fe:86:8a:46:50:
f4:87:23:b5:2a:b5:60:3b:4e:e8:67:e7:38:0c:34:
25:86:af:3d:cb:c6:19:63:24:a8:cc:9a:66:c9:cc:
39:36:c5:17:fb:b1:3a:16:af:15:22:e6:db:cf:e6:
3c:32:6f:a8:37:61:dd:ce:7d:ff:96:49:d9:63:cc:
ee:bd:48:8d:12:e0:db:09:4b:2a:b1:c5:4e:d5:7e:
db:2a:16:1a:d6:63:e9:d3:2a:b1:63:47:b8:0b:c1:
10:7f:10:f5:84:2d:8d:f7:2b:d6:d8:fd:b2:a9:b5:
c4:72:1f:70:66:2f:22:bd:12:23:5c:65:68:bc:8b:
68:12:e8:b2:a2:82:d7:9a:0a:6c:88:dc:bc:fa:df:
57:a1:98:3f:9a:65:7a:a3:b1:c0:c7:23:0b:09:44:
c9:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:B5:C3:CA:86:E3:B0:F8:35:4C:37:AB:46:20:66:F2:88:71:B3:2D
X509v3 Authority Key Identifier:
keyid:E5:C3:40:EE:5B:9D:AF:1A:68:18:F0:DF:40:7F:A5:97:58:86:B1:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5cNA7ludrxpoGPDfQH-ll1iGsQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:88:62:b7:6b:22:78:71:d3:10:2e:6b:b7:41:d7:62:70:14:
96:41:91:b6:11:e9:07:41:58:44:44:b0:15:61:48:87:77:07:
ff:ca:94:01:02:76:dc:bf:e4:46:a0:04:c9:5c:45:f6:98:7b:
42:ce:c5:6c:60:d4:58:61:23:3d:09:09:10:a8:21:6b:f5:c3:
3b:66:26:97:0a:1f:9c:b8:d6:9f:ab:71:45:74:f2:25:08:2b:
b3:02:bb:f4:4c:a3:f3:b9:4f:53:98:66:5f:06:41:ba:d6:98:
a2:ba:64:c0:1c:f5:16:95:3e:c1:59:84:78:ce:71:01:de:e0:
14:01:98:98:d5:da:6d:11:f8:aa:09:72:60:91:36:25:2f:65:
39:f8:a9:79:35:fd:fa:b5:2d:3b:68:9d:2a:4c:45:03:d0:56:
47:60:dd:2f:f4:37:c3:af:36:45:7b:2f:ce:4c:eb:e4:8c:85:
6b:cd:ab:6e:4b:8a:66:80:75:24:2d:16:07:93:e1:da:d5:d6:
bc:44:1a:9a:c9:8c:d3:f0:d4:46:68:1d:04:01:3f:78:13:ca:
b6:0c:9e:d1:53:f6:51:35:31:4f:89:3b:e6:bf:ea:ab:3d:16:
0d:b8:9c:8b:44:19:ac:19:00:5d:8b:07:08:cb:2f:16:7e:78:
a6:59:b3:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:59:00 2026 by rpki-client