Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/AH5rWqQ302kxUVAqIRSW431K4sU.mft
File: AH5rWqQ302kxUVAqIRSW431K4sU.mft (raw, json)
Hash identifier: VVrdc4apwR8Qbop4gp6TV2+ISxwIIwy9kRP9fTM8ZKs=
Subject key identifier: 5E:D1:1E:B9:18:58:04:05:67:8E:CF:6F:6B:DD:91:82:51:36:63:25
Authority key identifier: 00:7E:6B:5A:A4:37:D3:69:31:51:50:2A:21:14:96:E3:7D:4A:E2:C5
Certificate issuer: /CN=007e6b5aa437d3693151502a211496e37d4ae2c5
Certificate serial: 019D25F102C9F61462976A4B8FD8219BF46D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AH5rWqQ302kxUVAqIRSW431K4sU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/AH5rWqQ302kxUVAqIRSW431K4sU.mft
Manifest number: 1604
Signing time: Wed 25 Mar 2026 17:00:45 +0000
Manifest this update: Wed 25 Mar 2026 17:00:45 +0000
Manifest next update: Thu 26 Mar 2026 17:00:45 +0000
Files and hashes: 1: 0UtZJpaH9ZhWJzvOUmqS1m2r370.roa (hash: UdeibxbzHWRgn3KJEu2PyWPjfgCf2fUauCUDT1MFzeU=)
2: 2i6ET0xmeFNNwjckPtEiXMzR1A8.roa (hash: RMMo6cNDlmb7w7WUvvn6btB8oEeGkC5RlJSJmweHPSg=)
3: AH5rWqQ302kxUVAqIRSW431K4sU.crl (hash: In9zJ9KS5ZA4NJ1WuVdBZpKY4pvAd7ba6g/5CN6APgk=)
4: R1KgvQsI1PNvvWsNYjSHXjmCUko.roa (hash: eSfdxnu6Fm6Qr8tRqOcchhcxy/tWOkcHERSE8N3r8uI=)
5: XdtoN-G6_JHehbj0D7l71OQKEXE.roa (hash: bDoA0XebMdpMlFP6CJH1fk3V+NG+IRgcZpROF4NtHwY=)
6: Yx7l960TQn9HM_7QR6gs0XY-qcA.roa (hash: O+2F1pg3A5EVSk1DJbaRJDwXaNusK4Cx5sLgaLCJXdM=)
7: vV4kfM7-tPnyYx_K2ljxEExtxso.roa (hash: iQoz4P+KRDJgWwM5+v9IkBekoevvl7t44wSOdaiYAvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/AH5rWqQ302kxUVAqIRSW431K4sU.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/AH5rWqQ302kxUVAqIRSW431K4sU.mft
rsync://rpki.ripe.net/repository/DEFAULT/AH5rWqQ302kxUVAqIRSW431K4sU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:02:c9:f6:14:62:97:6a:4b:8f:d8:21:9b:f4:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=007e6b5aa437d3693151502a211496e37d4ae2c5
Validity
Not Before: Mar 25 17:00:45 2026 GMT
Not After : Mar 26 17:00:45 2026 GMT
Subject: CN=5ed11eb918580405678ecf6f6bdd918251366325
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:62:3b:30:a5:e4:a7:19:d7:1b:8f:81:1f:15:
04:3d:db:0b:2a:74:7b:67:84:ee:10:2c:a6:27:69:
75:31:8c:d9:67:f7:4b:7e:ce:4c:9b:bc:35:b6:ed:
6b:ca:47:4f:94:e5:9c:2e:b7:02:4c:62:b0:9a:5f:
0d:82:2c:35:89:fb:c7:02:51:83:15:63:a0:41:fe:
1c:97:83:eb:10:4d:2a:2a:82:51:7f:32:43:da:b0:
b1:be:86:61:4d:05:c1:36:1d:2d:60:5a:f9:98:97:
8e:d0:90:69:55:56:14:20:fd:da:56:3c:11:ad:9e:
dc:17:63:11:f9:b0:5f:c4:99:31:40:b7:1b:dc:85:
b7:65:05:af:1e:d0:a9:47:84:4c:e6:eb:b7:3f:93:
30:f4:4f:8c:35:90:6a:94:1b:b4:2a:54:3e:3a:55:
59:bf:89:33:79:b0:ab:46:be:b6:ac:ea:4c:1c:a8:
32:00:41:b8:d1:e3:0e:df:d6:82:a0:00:53:2a:32:
d2:e5:02:37:28:bd:1c:f9:d3:ad:50:f6:ba:76:07:
f7:a7:62:ac:25:f8:bb:84:c1:e6:64:ee:b2:26:fa:
12:01:56:67:93:5a:b0:ba:cd:4c:02:b8:ef:b4:00:
6e:e0:9e:46:66:87:92:a8:cf:6c:23:56:09:3e:b7:
b2:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:D1:1E:B9:18:58:04:05:67:8E:CF:6F:6B:DD:91:82:51:36:63:25
X509v3 Authority Key Identifier:
keyid:00:7E:6B:5A:A4:37:D3:69:31:51:50:2A:21:14:96:E3:7D:4A:E2:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AH5rWqQ302kxUVAqIRSW431K4sU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/AH5rWqQ302kxUVAqIRSW431K4sU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/AH5rWqQ302kxUVAqIRSW431K4sU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:d9:a0:ee:43:f9:ff:e8:52:02:9c:e3:fc:92:7e:8c:73:95:
b5:c4:60:6b:59:2b:2a:fc:45:89:aa:fd:25:0c:34:19:c4:fb:
a9:26:71:cd:25:aa:24:8f:a5:25:10:6d:17:4d:fe:d4:04:70:
7c:93:35:f5:b4:bf:bb:8d:33:02:e8:73:c8:0a:88:1a:98:de:
3c:21:34:27:9b:d5:10:fc:c3:d3:5c:98:61:d6:d2:75:95:23:
af:2d:6b:85:3f:54:69:c8:82:77:93:bd:95:42:d4:1c:83:44:
11:6d:52:07:b2:1b:9c:9d:35:5c:af:00:ce:81:70:8a:d2:3a:
26:a5:7b:4e:4b:0b:08:00:e5:65:52:13:1b:e8:5c:1c:fc:09:
be:0a:b8:2f:cb:c9:14:09:28:c7:02:fe:8d:a1:6c:d6:98:39:
69:41:e5:7f:86:c0:d3:26:bd:2f:4d:24:d7:af:4a:04:11:43:
a8:1b:1b:a7:88:6a:97:25:e7:e5:fd:39:7f:26:45:f3:51:7d:
e1:11:be:08:e9:40:12:ae:03:ed:99:61:f9:a8:3f:f2:02:e0:
8e:de:f1:4e:ff:20:00:ed:f2:6a:be:d9:fb:29:af:ec:15:0d:
66:b2:56:f4:59:31:36:5b:58:99:fd:6d:f3:b7:d1:9a:cb:54:
c9:0f:fe:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:22:02 2026 by rpki-client