Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/5LqR1iZQTMvGTYl0C2PLLrQjT3A.mft
File: 5LqR1iZQTMvGTYl0C2PLLrQjT3A.mft (raw, json)
Hash identifier: JyfCKXTmh6HkGMdjqEeTN1CDIWJo3ywvjx5eJxrqgfE=
Subject key identifier: 41:94:38:50:E1:60:DC:0B:DB:66:F9:2D:4D:18:95:D2:BE:C4:88:9D
Authority key identifier: E4:BA:91:D6:26:50:4C:CB:C6:4D:89:74:0B:63:CB:2E:B4:23:4F:70
Certificate issuer: /CN=e4ba91d626504ccbc64d89740b63cb2eb4234f70
Certificate serial: 019D2816C8DA80C345AD07473168BAD15A5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5LqR1iZQTMvGTYl0C2PLLrQjT3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/5LqR1iZQTMvGTYl0C2PLLrQjT3A.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 03:01:14 +0000
Manifest this update: Thu 26 Mar 2026 03:01:14 +0000
Manifest next update: Fri 27 Mar 2026 03:01:14 +0000
Files and hashes: 1: 5LqR1iZQTMvGTYl0C2PLLrQjT3A.crl (hash: nPcyg+AXkTnt99fwqpesJPXbjseZG/Lh0Tzsm4iQZbk=)
2: 8nPl3AcrOpCxoPHI-yYhk20Z4jo.roa (hash: xYCGhk8KRGNgVElrhL//wuDH3rNsau4dVCz023td3io=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/5LqR1iZQTMvGTYl0C2PLLrQjT3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/5LqR1iZQTMvGTYl0C2PLLrQjT3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/5LqR1iZQTMvGTYl0C2PLLrQjT3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:c8:da:80:c3:45:ad:07:47:31:68:ba:d1:5a:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4ba91d626504ccbc64d89740b63cb2eb4234f70
Validity
Not Before: Mar 26 03:01:14 2026 GMT
Not After : Mar 27 03:01:14 2026 GMT
Subject: CN=41943850e160dc0bdb66f92d4d1895d2bec4889d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e0:a5:9e:4b:f3:05:d8:00:ce:80:f6:bc:c0:
3f:da:ea:b9:8c:d5:82:15:ce:c9:78:09:2e:8b:0d:
61:13:af:cc:b6:0b:37:99:07:0f:c2:fc:df:ea:95:
dd:cf:cf:d2:aa:3b:22:3a:ac:7b:43:15:df:0e:e9:
df:b8:4e:45:41:c3:64:14:8f:b4:f9:12:4c:6f:d0:
bf:6f:0d:c2:91:91:c0:c3:4c:ca:a0:a1:e7:ff:4d:
f5:5d:63:7a:c2:58:9c:cc:cf:d3:22:5e:bf:49:9d:
e3:2b:67:6c:d4:d9:9a:cf:da:74:8b:ba:a0:e0:80:
c4:fa:ba:a5:14:6c:6a:6d:19:5b:71:62:0c:6a:52:
75:65:25:35:04:4c:32:6c:e8:4f:c9:17:e1:28:bc:
6d:a4:0f:8f:41:27:3a:22:83:45:ef:8f:33:87:b4:
4f:04:8f:46:66:5a:e3:c4:f2:c2:e5:03:d7:17:d4:
05:27:21:56:22:0a:8a:de:97:cc:1d:b1:5c:7c:52:
d8:2d:99:2f:6f:a3:77:c2:31:c8:69:35:55:1d:cf:
5e:97:26:52:aa:cd:bf:f3:56:d4:73:30:f6:71:5b:
f6:86:a4:90:8a:cc:9c:5c:3c:c1:83:e9:06:62:92:
2e:c7:83:68:51:09:51:0d:bb:ca:1a:f4:c5:01:91:
2a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:94:38:50:E1:60:DC:0B:DB:66:F9:2D:4D:18:95:D2:BE:C4:88:9D
X509v3 Authority Key Identifier:
keyid:E4:BA:91:D6:26:50:4C:CB:C6:4D:89:74:0B:63:CB:2E:B4:23:4F:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5LqR1iZQTMvGTYl0C2PLLrQjT3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/5LqR1iZQTMvGTYl0C2PLLrQjT3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/5LqR1iZQTMvGTYl0C2PLLrQjT3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:a8:17:f1:2f:97:88:e4:c9:29:65:a3:85:b3:e1:9d:fa:e5:
c8:c1:92:a5:04:af:d1:5a:c1:a6:35:9b:c6:61:79:2d:c3:8a:
80:6f:47:08:f0:31:44:3d:12:ac:09:c5:d5:bd:ff:38:ad:96:
c2:a5:df:a1:17:73:94:a3:ee:8b:a5:2b:c6:bf:64:fa:f1:85:
a3:a4:4a:2b:4d:71:31:70:15:f0:1c:ad:56:c2:e6:1a:a2:3e:
5f:a6:42:99:78:88:b3:ec:65:2a:7a:fc:a0:a7:52:a9:02:72:
b7:99:1e:35:ac:cd:50:b3:fb:3e:d6:f5:45:b6:ef:97:e5:10:
a5:c0:80:bc:eb:9a:d8:50:5e:48:ad:05:b3:7f:e3:98:76:67:
0a:cc:02:fa:7b:a7:56:7a:b2:a1:9b:49:39:76:3f:14:b2:a6:
92:8e:0b:ee:c9:d3:eb:94:c7:f8:6f:59:5e:8b:2f:cc:9b:dc:
94:e8:85:d4:74:92:a3:fd:f4:19:8b:9f:38:6b:c3:ad:7a:6d:
38:0e:4f:ac:1f:cd:d9:ec:f7:c9:83:56:1a:3d:9d:ae:74:f1:
1f:20:40:85:d6:65:8a:09:9c:f9:5d:cb:cb:04:9e:9b:e5:5f:
81:df:ab:68:9a:5c:8d:6b:34:b9:cc:c8:36:25:b4:17:9d:15:
59:b4:a0:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:25:28 2026 by rpki-client