Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/a56723-d37c-417b-a8a1-6e22bf436304/1/G_5rmg5omKei6dhNPb9jJ7RT5mI.mft
File: G_5rmg5omKei6dhNPb9jJ7RT5mI.mft (raw, json)
Hash identifier: 6oeDETHa/q0bhULB9Qt6O5ubcIjswDCfvj2Z44D9Ih0=
Subject key identifier: 5E:40:2A:06:E4:9B:A2:A1:FC:69:59:2F:87:F0:B8:B0:66:DF:65:AD
Authority key identifier: 1B:FE:6B:9A:0E:68:98:A7:A2:E9:D8:4D:3D:BF:63:27:B4:53:E6:62
Certificate issuer: /CN=1bfe6b9a0e6898a7a2e9d84d3dbf6327b453e662
Certificate serial: 019D2628753DB0B29212BE0459D0D2292196
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G_5rmg5omKei6dhNPb9jJ7RT5mI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/a56723-d37c-417b-a8a1-6e22bf436304/1/G_5rmg5omKei6dhNPb9jJ7RT5mI.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 18:01:18 +0000
Manifest this update: Wed 25 Mar 2026 18:01:18 +0000
Manifest next update: Thu 26 Mar 2026 18:01:18 +0000
Files and hashes: 1: G_5rmg5omKei6dhNPb9jJ7RT5mI.crl (hash: 5WUPJ7ig/20WnEo3QYUVRSNInxPMXyHSiOVlk4GcvF4=)
2: POtSiaRU3J6NN-3FcEzbyyc3iz4.roa (hash: xQmKcGL1aOnWYp2nu+qGyN+OtS+NUIMwhRaeCUEKn08=)
3: TKnfOm4ncEvg1o32_XggY8G_M1w.roa (hash: 0iZMIhG/WHr4eSkp/IKOXtdgHPLNekvLpZ/qpsVoNRs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/a56723-d37c-417b-a8a1-6e22bf436304/1/G_5rmg5omKei6dhNPb9jJ7RT5mI.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/a56723-d37c-417b-a8a1-6e22bf436304/1/G_5rmg5omKei6dhNPb9jJ7RT5mI.mft
rsync://rpki.ripe.net/repository/DEFAULT/G_5rmg5omKei6dhNPb9jJ7RT5mI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 18:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:75:3d:b0:b2:92:12:be:04:59:d0:d2:29:21:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bfe6b9a0e6898a7a2e9d84d3dbf6327b453e662
Validity
Not Before: Mar 25 18:01:18 2026 GMT
Not After : Mar 26 18:01:18 2026 GMT
Subject: CN=5e402a06e49ba2a1fc69592f87f0b8b066df65ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a0:52:5b:b9:9f:a3:d5:b0:81:59:31:19:f7:
ea:05:7d:f8:15:20:29:88:31:90:20:a2:92:7c:e6:
67:3c:b2:25:d8:0f:7a:bf:b2:ca:63:ca:d8:b4:b3:
4d:b1:bc:04:1f:39:0a:0c:5e:52:f1:70:07:b4:ec:
05:b2:ed:95:2b:25:a0:32:1f:ca:35:c9:8d:33:bb:
5e:0b:76:2a:7c:17:c0:56:22:17:66:93:ae:da:e7:
7d:f9:6e:71:92:25:db:f3:2d:4d:ea:93:fc:24:2c:
4b:ec:a3:47:ea:88:85:0c:8b:cb:4e:7d:02:ac:fc:
18:e4:a5:db:8f:2c:33:6e:c7:ef:b9:07:34:ea:d2:
e9:50:43:d5:16:06:e4:4a:d3:98:26:ef:36:72:a7:
92:6c:48:60:ad:9f:c2:dd:15:86:90:14:5a:03:46:
0e:d3:de:f2:ae:92:0d:14:07:7c:29:03:3e:88:87:
4a:92:aa:f9:12:11:89:c8:2d:4a:c1:d8:70:25:73:
87:f0:d6:7a:b6:a4:0e:09:41:fe:4e:03:b5:28:82:
49:8e:01:47:2e:ab:81:a9:d4:c6:d8:cd:47:75:24:
24:42:d4:57:46:92:6e:d1:2e:52:61:1b:ea:31:09:
33:c7:1f:31:99:b8:65:85:08:fe:c8:51:e0:1b:99:
e1:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:40:2A:06:E4:9B:A2:A1:FC:69:59:2F:87:F0:B8:B0:66:DF:65:AD
X509v3 Authority Key Identifier:
keyid:1B:FE:6B:9A:0E:68:98:A7:A2:E9:D8:4D:3D:BF:63:27:B4:53:E6:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_5rmg5omKei6dhNPb9jJ7RT5mI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/a56723-d37c-417b-a8a1-6e22bf436304/1/G_5rmg5omKei6dhNPb9jJ7RT5mI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/a56723-d37c-417b-a8a1-6e22bf436304/1/G_5rmg5omKei6dhNPb9jJ7RT5mI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:3f:fd:59:d6:66:b6:b2:c8:d9:03:1e:23:8d:10:30:1b:74:
d4:5a:db:7e:f3:cb:1b:05:5f:26:2a:20:30:71:54:41:5a:dd:
12:da:d0:b3:a4:35:3d:0b:50:3e:0c:64:91:b7:b7:56:21:76:
c9:43:17:4e:b1:74:56:7c:a7:51:7a:31:f4:4d:3f:2a:74:54:
7b:d0:d2:20:86:d3:d9:3b:89:a4:be:a8:e7:4a:ed:4f:1d:be:
7f:60:17:bc:26:dd:c8:a3:2c:12:ee:73:d9:1e:ce:06:60:c7:
1f:d5:6e:aa:31:3f:08:0d:ad:87:fa:83:27:95:88:e4:90:21:
6b:ae:76:f6:73:6c:f8:a3:3f:40:ea:7d:ea:6a:82:54:f4:53:
bf:46:e4:1d:14:04:6a:31:f5:ae:6f:28:a1:a7:e1:18:78:be:
a2:0a:cf:0b:87:35:86:93:9a:7c:04:7e:e8:60:bf:c9:d9:bb:
55:6b:9e:60:25:91:0f:4c:85:c6:45:d9:6a:4f:82:6f:5c:4f:
2a:f0:e4:bd:ce:cd:ea:6b:01:c2:d0:5e:1f:27:2c:22:ff:e3:
54:06:04:77:dc:d1:ef:47:1b:93:9b:4d:0b:af:73:e9:36:a2:
33:51:ca:e8:88:ee:14:e2:a6:40:1a:eb:9b:6a:e7:f9:c9:92:
de:f2:4d:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:04:34 2026 by rpki-client