Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.mft
File: 5hNdY5doo6Y-2cX_QK9e0B33Qcs.mft (raw, json)
Hash identifier: QJRlm5eu9bFOiomzlF1syqukZfLeJrihfSqv3mbaZMY=
Subject key identifier: B3:FE:DB:C1:29:49:5F:0F:A1:63:D2:D5:D4:37:D4:5E:A7:87:9F:2F
Authority key identifier: E6:13:5D:63:97:68:A3:A6:3E:D9:C5:FF:40:AF:5E:D0:1D:F7:41:CB
Certificate issuer: /CN=e6135d639768a3a63ed9c5ff40af5ed01df741cb
Certificate serial: 019D26CD949EF095455C107168063A1FFA25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5hNdY5doo6Y-2cX_QK9e0B33Qcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.mft
Manifest number: 147F
Signing time: Wed 25 Mar 2026 21:01:40 +0000
Manifest this update: Wed 25 Mar 2026 21:01:40 +0000
Manifest next update: Thu 26 Mar 2026 21:01:40 +0000
Files and hashes: 1: 5hNdY5doo6Y-2cX_QK9e0B33Qcs.crl (hash: DI21UDZqKa1vdIUupw20Zk08vn31I4K46jeQKc1Qyqg=)
2: JZiy3r9PkYB8MElyL5xGJo1pVPk.roa (hash: xvNOkN38iMVfLqxF6m1PTaRdbwBZf+HM7rmKu9Qh53U=)
3: l8hfM0tA1hlOp9-gmuJ6WOfIhu0.roa (hash: IAmuOAJMto9pgwbf2c7PBZN6/VWyoBQiETP/DoJwG+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/5hNdY5doo6Y-2cX_QK9e0B33Qcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:94:9e:f0:95:45:5c:10:71:68:06:3a:1f:fa:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6135d639768a3a63ed9c5ff40af5ed01df741cb
Validity
Not Before: Mar 25 21:01:40 2026 GMT
Not After : Mar 26 21:01:40 2026 GMT
Subject: CN=b3fedbc129495f0fa163d2d5d437d45ea7879f2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:da:10:d1:fb:c7:8b:2f:79:f1:76:fa:d7:e7:
69:6b:83:78:58:93:90:b6:c9:b7:9f:69:fa:d4:b4:
9d:a3:d5:72:3b:f0:5a:05:17:5a:3f:24:1f:9c:7c:
df:cf:1c:72:b1:0b:2b:12:50:10:92:f8:af:82:df:
e1:7c:c8:d5:ef:59:49:8a:b1:9e:3b:8d:ba:9d:9c:
e2:df:82:8c:f2:cf:5f:8e:1f:62:57:82:7f:26:4f:
c5:bd:dc:29:b3:3b:67:f2:60:5c:23:0d:b9:2b:47:
36:a8:60:72:34:64:1d:fd:94:54:54:72:a2:0f:db:
93:bc:25:f1:4e:81:60:d2:70:ef:ff:6d:5e:4d:18:
36:29:a9:ea:3d:37:9d:a4:c0:35:97:66:c2:f0:5d:
40:c7:27:5a:e8:41:51:a3:88:b7:31:6d:31:44:d6:
73:31:ef:f2:f0:ec:e7:d7:d5:0a:be:9c:b9:99:76:
ab:9d:b0:68:39:de:44:a3:ad:35:8b:eb:ff:c3:84:
ef:94:9f:f2:22:64:42:1e:95:4c:07:49:0e:88:c0:
f3:18:c2:9f:94:2e:24:27:4b:30:34:90:65:88:8c:
12:a1:8e:35:d5:c4:90:24:f5:e1:d3:4a:58:18:55:
ba:2e:61:99:1d:4b:d5:89:5a:e4:72:22:5f:3c:a0:
ac:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:FE:DB:C1:29:49:5F:0F:A1:63:D2:D5:D4:37:D4:5E:A7:87:9F:2F
X509v3 Authority Key Identifier:
keyid:E6:13:5D:63:97:68:A3:A6:3E:D9:C5:FF:40:AF:5E:D0:1D:F7:41:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hNdY5doo6Y-2cX_QK9e0B33Qcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:f1:48:9e:1c:20:c4:9a:d5:75:53:92:c5:31:54:0a:cd:e5:
31:2b:45:82:04:e8:01:c6:36:67:69:c9:b9:a9:ec:28:b0:21:
89:31:44:13:ba:74:32:47:2c:99:ff:76:cf:ef:02:f9:b0:7a:
c1:66:88:a2:34:69:db:1b:45:ef:cc:0f:23:f0:a6:d5:0e:55:
57:40:a1:38:8b:21:13:f1:82:f6:ab:d0:fb:95:36:8a:80:0e:
f2:fd:21:71:a8:32:11:9e:4d:7b:2c:77:da:d5:33:07:93:3c:
5b:de:70:f6:fa:ea:c6:51:77:45:44:2d:f2:55:74:93:3d:04:
ff:92:01:de:73:d7:03:85:c2:e0:d7:ec:87:27:c3:54:b8:2a:
0d:f7:c1:bd:a4:5a:19:6a:c7:3c:e4:0c:de:ae:ba:ca:75:d9:
95:af:37:9b:57:1a:9e:a4:bf:6d:ea:af:bc:85:eb:47:c2:b7:
29:df:85:a7:26:59:13:47:b6:2a:3a:a7:0c:35:c6:1b:2f:31:
bd:8f:fd:48:92:49:d3:5a:75:13:99:39:06:d2:b5:db:5e:c7:
d6:5a:df:ed:06:07:9a:b4:36:55:af:e8:59:c9:d9:00:8f:84:
bf:c0:2c:2e:bf:93:11:ea:ed:29:79:76:7f:d6:98:41:62:3b:
3b:87:82:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:30:06 2026 by rpki-client