Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/417c1d-a2e4-44a6-af24-d4f5027600ae/1/5dJyqNwEH1rcer0A1k0_MsIE2rI.mft
File: 5dJyqNwEH1rcer0A1k0_MsIE2rI.mft (raw, json)
Hash identifier: kd6br0iYAcPgLd5jBYLx0PLccuO/BNHc/FlASJ0p+e8=
Subject key identifier: B1:3F:05:E1:AC:77:18:33:E5:02:A0:AF:00:85:F0:B0:8D:B1:79:7A
Authority key identifier: E5:D2:72:A8:DC:04:1F:5A:DC:7A:BD:00:D6:4D:3F:32:C2:04:DA:B2
Certificate issuer: /CN=e5d272a8dc041f5adc7abd00d64d3f32c204dab2
Certificate serial: 019D2771F4D10209E0CCFB906B91A379B2D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5dJyqNwEH1rcer0A1k0_MsIE2rI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/417c1d-a2e4-44a6-af24-d4f5027600ae/1/5dJyqNwEH1rcer0A1k0_MsIE2rI.mft
Manifest number: 0F40
Signing time: Thu 26 Mar 2026 00:01:12 +0000
Manifest this update: Thu 26 Mar 2026 00:01:12 +0000
Manifest next update: Fri 27 Mar 2026 00:01:12 +0000
Files and hashes: 1: 5dJyqNwEH1rcer0A1k0_MsIE2rI.crl (hash: SBM/KoyqTqrbl0X85PnGAOPNUsrDMVGuvALo1yOAqPg=)
2: JB8RpMy8Elqc90uZwoSTL7Ub9OM.roa (hash: EhChNPxJv+f83uqvMXFZRPaKproZQgsDNAIW+MBK7d0=)
3: iRQgfXGareNueuLCIctR3v98BqA.roa (hash: kAKY6Tag+JlVYUh6YTHrUL0leqbQ2DPtbgkhBL53tDU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/417c1d-a2e4-44a6-af24-d4f5027600ae/1/5dJyqNwEH1rcer0A1k0_MsIE2rI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/417c1d-a2e4-44a6-af24-d4f5027600ae/1/5dJyqNwEH1rcer0A1k0_MsIE2rI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5dJyqNwEH1rcer0A1k0_MsIE2rI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:f4:d1:02:09:e0:cc:fb:90:6b:91:a3:79:b2:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5d272a8dc041f5adc7abd00d64d3f32c204dab2
Validity
Not Before: Mar 26 00:01:12 2026 GMT
Not After : Mar 27 00:01:12 2026 GMT
Subject: CN=b13f05e1ac771833e502a0af0085f0b08db1797a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:58:af:1c:ca:06:00:cf:31:07:0e:97:91:f8:
7a:5a:3e:a0:fe:4a:54:96:17:ea:91:b7:01:43:74:
66:c2:28:f5:b3:ad:fc:31:34:02:d3:db:8b:ef:c2:
28:7c:d4:f6:5e:2b:c9:d3:cc:ea:54:ae:fc:9a:d8:
ba:8c:03:18:0a:49:be:f5:44:ea:0b:4f:df:5f:d9:
a9:ca:0e:78:65:69:42:52:ca:e3:8e:ee:c0:ef:f6:
5c:4f:c7:1e:39:eb:5d:87:c9:75:4a:00:87:cb:5a:
38:17:a8:4c:bd:c1:d2:22:1c:f4:9b:05:12:ee:8d:
b3:58:78:ee:4e:85:29:10:4a:7e:f5:7d:ca:1c:0a:
33:6d:37:38:de:4d:2b:d9:68:81:b7:69:b8:18:84:
6b:7d:0d:9a:48:e1:64:89:8b:3f:8e:04:d1:72:10:
d4:53:a9:4b:f0:0d:ac:12:a9:e4:b7:a1:6e:ca:e0:
86:f9:57:92:20:82:64:0f:ec:ad:ef:28:f5:7b:10:
36:ec:14:3d:c2:44:70:11:56:59:ff:11:66:50:38:
90:cf:3c:83:c8:5a:09:48:c1:89:a3:0a:4a:81:d4:
a1:3d:cc:63:59:ba:f0:73:22:0e:d0:ff:a9:ff:d5:
98:e6:0f:3d:41:85:be:5b:56:e8:34:16:4b:01:5e:
e3:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:3F:05:E1:AC:77:18:33:E5:02:A0:AF:00:85:F0:B0:8D:B1:79:7A
X509v3 Authority Key Identifier:
keyid:E5:D2:72:A8:DC:04:1F:5A:DC:7A:BD:00:D6:4D:3F:32:C2:04:DA:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5dJyqNwEH1rcer0A1k0_MsIE2rI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/417c1d-a2e4-44a6-af24-d4f5027600ae/1/5dJyqNwEH1rcer0A1k0_MsIE2rI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/417c1d-a2e4-44a6-af24-d4f5027600ae/1/5dJyqNwEH1rcer0A1k0_MsIE2rI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:e2:01:c5:7b:0a:ba:75:bf:cf:26:96:90:26:6b:15:e5:88:
d9:68:1e:03:d9:44:7b:db:12:a3:40:83:fb:fd:7f:65:1a:b3:
5b:bb:c0:71:b4:39:37:2b:2f:05:19:08:f9:3a:e6:2d:e3:6f:
00:42:37:93:9d:91:38:ae:c6:f0:76:95:6f:7d:f9:fb:29:01:
c9:d0:9d:43:2b:49:79:a6:23:b0:27:22:cd:0a:76:65:e1:38:
b7:6c:3b:c0:99:d7:23:3e:b0:f3:6c:5a:cb:7a:1f:4c:24:70:
fa:a8:99:88:ca:99:b0:05:e6:a6:41:2c:2c:ab:2f:c4:65:6c:
30:8a:07:cd:3b:42:bd:ff:23:46:3c:e7:ae:b2:b3:ad:58:fe:
53:cc:34:57:72:75:cf:4a:b4:46:92:a8:10:ed:f7:2c:26:ab:
9c:f6:ae:67:71:4e:21:3a:e4:48:5f:e2:ae:38:97:a1:87:cf:
e0:81:aa:68:12:3f:a6:d9:7f:45:6c:5c:d1:7c:9a:01:5d:5c:
96:c9:fd:2c:35:c7:66:05:ac:8d:4a:78:16:ac:78:65:45:7c:
a9:2c:a9:13:c0:7e:18:dd:48:a3:dd:2d:31:e0:cf:ac:d2:0c:
88:ce:9f:32:05:b2:db:51:4b:07:b4:31:60:13:fd:82:d7:02:
47:c1:bc:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:15:26 2026 by rpki-client