Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/51e3a5-31db-4bdd-b0cd-828022043ea3/1/5fTyS0D9qblSjkqO3K1huEHfbBg.mft
File: 5fTyS0D9qblSjkqO3K1huEHfbBg.mft (raw, json)
Hash identifier: vzT4gWmtiN+7mUFKKFndIML/dAAhm3gTkYFDYIXb2rk=
Subject key identifier: 74:E1:87:9E:A7:1E:F3:5D:38:E9:EE:54:AB:68:CB:8A:3B:83:37:F4
Authority key identifier: E5:F4:F2:4B:40:FD:A9:B9:52:8E:4A:8E:DC:AD:61:B8:41:DF:6C:18
Certificate issuer: /CN=e5f4f24b40fda9b9528e4a8edcad61b841df6c18
Certificate serial: 019D277209AD132DBDD227A575A7C7EA0F32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5fTyS0D9qblSjkqO3K1huEHfbBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/51e3a5-31db-4bdd-b0cd-828022043ea3/1/5fTyS0D9qblSjkqO3K1huEHfbBg.mft
Manifest number: 1618
Signing time: Thu 26 Mar 2026 00:01:18 +0000
Manifest this update: Thu 26 Mar 2026 00:01:18 +0000
Manifest next update: Fri 27 Mar 2026 00:01:18 +0000
Files and hashes: 1: 5fTyS0D9qblSjkqO3K1huEHfbBg.crl (hash: 2nikZvmlwD3JTB5R0zy43xaoK7R0oBBG1VcDt8R/8R8=)
2: Wu9t7d9tnZW1AA2IWZCyVHCZEmo.roa (hash: kOHm2lN17Qca/qCn59+JS7mNSFFu2Gxe0p/zQAQ3878=)
3: ew282-AhNX4FMYFmo40ImlhZsYU.roa (hash: 7VW/QfG/Z+KeGR3BpgjUt4A9hj2uza0zmvqYLXTnLC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/51e3a5-31db-4bdd-b0cd-828022043ea3/1/5fTyS0D9qblSjkqO3K1huEHfbBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/51e3a5-31db-4bdd-b0cd-828022043ea3/1/5fTyS0D9qblSjkqO3K1huEHfbBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/5fTyS0D9qblSjkqO3K1huEHfbBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:09:ad:13:2d:bd:d2:27:a5:75:a7:c7:ea:0f:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5f4f24b40fda9b9528e4a8edcad61b841df6c18
Validity
Not Before: Mar 26 00:01:18 2026 GMT
Not After : Mar 27 00:01:18 2026 GMT
Subject: CN=74e1879ea71ef35d38e9ee54ab68cb8a3b8337f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9b:09:1a:7a:b6:c5:81:62:22:b1:fe:fa:8e:
83:d4:75:04:d7:df:99:60:f9:f4:b7:f0:fe:53:af:
4a:8e:e3:3c:a1:07:b8:c6:f2:0f:74:de:d7:37:49:
36:b4:22:30:58:c8:85:ec:1d:59:42:34:d4:00:b2:
f7:90:2b:5b:df:f9:4b:32:1a:f6:50:6f:94:32:60:
35:64:fa:ec:94:36:7c:f5:b7:aa:61:6d:0b:45:19:
82:79:ad:c4:15:b4:f0:2e:b1:ba:67:a3:c3:90:d7:
33:96:d7:f1:ed:e6:a2:7b:92:11:6b:3e:fb:2b:f9:
fb:29:fe:a3:93:a7:29:fb:fd:5c:fc:08:1c:14:c3:
fc:f5:03:27:f6:2e:d9:39:c6:e9:07:ea:80:64:7c:
1c:c5:de:20:19:e8:5b:f0:3b:a5:c8:fc:14:4b:fa:
9a:c6:21:c4:3c:b1:4a:18:48:7b:61:ae:07:00:49:
44:cd:54:d1:30:77:9d:b7:60:97:07:80:93:a7:1b:
21:c8:99:92:97:13:94:ba:6b:05:20:00:05:60:2a:
12:7e:b3:00:b2:73:f7:a5:bb:6c:bb:7c:af:77:54:
d2:54:17:97:7d:f9:ba:b9:b3:d2:6c:dc:c5:7b:1b:
1a:06:28:70:82:89:c5:a1:ff:42:88:12:3d:2d:76:
bd:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:E1:87:9E:A7:1E:F3:5D:38:E9:EE:54:AB:68:CB:8A:3B:83:37:F4
X509v3 Authority Key Identifier:
keyid:E5:F4:F2:4B:40:FD:A9:B9:52:8E:4A:8E:DC:AD:61:B8:41:DF:6C:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5fTyS0D9qblSjkqO3K1huEHfbBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/51e3a5-31db-4bdd-b0cd-828022043ea3/1/5fTyS0D9qblSjkqO3K1huEHfbBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/51e3a5-31db-4bdd-b0cd-828022043ea3/1/5fTyS0D9qblSjkqO3K1huEHfbBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:92:e3:e4:44:a0:28:ab:1e:bf:87:bb:00:f4:11:1d:73:9a:
75:df:02:9a:15:20:ef:16:35:69:c5:64:30:97:d8:e6:f1:f5:
a3:0b:26:61:5e:f7:34:fb:5a:ae:b2:ec:36:e6:2c:2e:65:60:
22:31:2d:3b:da:c1:a5:28:9a:95:41:b7:56:91:d2:10:c0:55:
61:e1:9d:ac:d4:a0:50:15:06:ad:08:2b:a2:8c:8f:76:a6:e2:
bf:65:9a:df:e1:2a:35:ce:aa:30:ea:51:65:b2:0b:c9:42:a9:
03:e3:bf:9e:72:96:62:70:37:94:f5:9d:bf:75:59:08:37:d8:
27:12:78:2b:65:87:a8:5a:bf:ff:6f:e5:f7:ad:4b:7c:d7:d9:
38:2b:dd:fe:d7:3e:4d:93:fd:a9:fa:a7:30:bc:58:43:45:eb:
7c:cf:1b:d5:a8:2a:d3:f4:8b:5b:8b:8d:7b:0a:b9:e6:c7:cb:
98:76:6c:f3:7a:2b:33:15:0a:93:8c:8c:55:9b:aa:91:62:26:
68:78:39:b1:48:b1:d5:41:84:a4:8c:f6:96:6e:59:20:e0:ec:
db:f5:9a:02:15:a2:2c:c2:0e:61:9d:59:87:11:a3:50:8b:60:
85:6a:99:1e:16:96:41:31:ab:6b:8f:9f:cc:95:95:11:25:fb:
f0:d0:85:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:10:17 2026 by rpki-client