Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/5XRVuKiwV21vlPfgFPazTVqmxNc.mft
File: 5XRVuKiwV21vlPfgFPazTVqmxNc.mft (raw, json)
Hash identifier: I7rMKcgshSnuSvx/1RXYMhRgvEEOgNkDpLqo0oRqCX4=
Subject key identifier: F3:6F:A1:B2:7D:BA:A2:53:48:C3:3F:C5:1A:BF:C1:37:19:51:6F:C8
Authority key identifier: E5:74:55:B8:A8:B0:57:6D:6F:94:F7:E0:14:F6:B3:4D:5A:A6:C4:D7
Certificate issuer: /CN=e57455b8a8b0576d6f94f7e014f6b34d5aa6c4d7
Certificate serial: 019D25F1BA32F434AE32F9221FDACF88AE9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5XRVuKiwV21vlPfgFPazTVqmxNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/5XRVuKiwV21vlPfgFPazTVqmxNc.mft
Manifest number: 0540
Signing time: Wed 25 Mar 2026 17:01:32 +0000
Manifest this update: Wed 25 Mar 2026 17:01:32 +0000
Manifest next update: Thu 26 Mar 2026 17:01:32 +0000
Files and hashes: 1: 5XRVuKiwV21vlPfgFPazTVqmxNc.crl (hash: Q32Jok+LIudtzkGfAP8kje3u1ECrrHKj/AUs3UnpfUU=)
2: Gki0ECoPAysMOyKXl5MRgDPOl8U.asa (hash: E0R2O9JvpmCh8PA1gKVXhP81+K3nRGm/rwyvvFQeeqI=)
3: NPoJ48rOlMylXSV9suu4vTiIJd8.roa (hash: aQKCUY2SNtZbLIRkM+mjutTaN8ryl5E8Zuu6G5SpnXw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/5XRVuKiwV21vlPfgFPazTVqmxNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/5XRVuKiwV21vlPfgFPazTVqmxNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/5XRVuKiwV21vlPfgFPazTVqmxNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:ba:32:f4:34:ae:32:f9:22:1f:da:cf:88:ae:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e57455b8a8b0576d6f94f7e014f6b34d5aa6c4d7
Validity
Not Before: Mar 25 17:01:32 2026 GMT
Not After : Mar 26 17:01:32 2026 GMT
Subject: CN=f36fa1b27dbaa25348c33fc51abfc13719516fc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4d:e7:22:8a:41:1d:db:ff:a6:fa:46:10:ee:
a5:a3:6e:3d:75:36:5d:f7:96:a0:13:25:2b:2f:46:
ba:e6:8f:54:bd:ac:35:24:30:05:65:61:d2:47:9d:
a0:e3:72:fb:89:8f:60:48:6e:bd:6e:c4:13:a7:93:
af:4d:a9:65:47:9e:7c:3a:ed:ca:a8:25:d4:67:d5:
f4:af:0c:3b:e3:ee:2c:f7:1d:42:ec:db:1f:87:71:
fa:ce:b9:8d:c9:9a:3a:71:50:f9:19:76:bf:bc:7b:
b9:3e:b6:75:61:36:73:91:ff:e9:c0:e7:99:e4:6a:
3c:ff:38:97:ad:bc:73:fd:ec:3a:ac:fd:0c:9e:64:
af:92:ef:bd:c7:5f:09:75:3b:77:c4:06:52:5d:49:
d5:d8:05:a5:64:04:79:68:76:a3:7e:43:80:4a:6e:
4f:52:e3:ba:27:07:41:9f:30:ae:32:65:50:26:ba:
25:ab:53:4b:c7:65:61:0d:f6:df:92:bd:3b:b5:2e:
14:e4:28:21:be:75:e7:35:be:ca:ad:2b:d9:d8:47:
da:fb:09:7d:c9:70:5b:bc:43:fc:e2:e1:16:36:07:
1f:86:2a:1c:1c:c0:a3:1e:3e:a3:c3:05:84:b3:d4:
e3:de:2d:77:b6:e8:af:b2:47:55:75:5d:00:28:83:
3e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:6F:A1:B2:7D:BA:A2:53:48:C3:3F:C5:1A:BF:C1:37:19:51:6F:C8
X509v3 Authority Key Identifier:
keyid:E5:74:55:B8:A8:B0:57:6D:6F:94:F7:E0:14:F6:B3:4D:5A:A6:C4:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5XRVuKiwV21vlPfgFPazTVqmxNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/5XRVuKiwV21vlPfgFPazTVqmxNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/5XRVuKiwV21vlPfgFPazTVqmxNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:cc:6d:7b:fd:f7:bc:a5:8c:0a:4b:94:c3:77:fd:68:43:7b:
b2:2b:c2:b3:5a:ca:85:2e:1b:c2:7e:94:ca:7c:b2:47:72:2d:
d1:5a:5f:4e:e3:34:19:15:e8:07:b9:29:65:b6:1c:64:34:f6:
a7:29:c4:c0:49:23:c0:e3:3c:8a:b9:e2:3c:21:92:95:89:0a:
cc:6b:c6:d7:05:7b:76:7b:e2:39:92:9d:87:71:be:41:ff:37:
7b:71:80:16:eb:11:81:0a:e2:e6:d4:53:97:11:a1:53:d4:3b:
af:23:75:6e:e8:29:c2:df:ce:a1:67:9d:89:62:cd:2c:03:09:
53:cb:54:0d:65:70:22:98:bb:01:2a:bf:28:66:84:52:37:b2:
a0:93:02:a6:d4:4a:4f:88:06:22:a4:c7:56:05:63:0d:9d:67:
c5:65:24:a8:d1:51:9a:b0:7a:de:d1:59:28:80:8a:d3:cd:07:
c5:f5:84:17:d6:a6:4f:d0:2e:a7:47:3f:17:13:94:96:52:f7:
d8:26:8e:8b:da:60:81:ec:32:51:3a:fc:86:cb:85:14:c6:59:
61:61:de:74:64:81:e3:0c:84:1c:a4:94:c8:6b:84:55:5f:3e:
8e:b5:64:8c:f7:fa:c0:f3:f9:be:5e:40:e5:f6:37:42:d7:bd:
c0:2f:67:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:26:05 2026 by rpki-client