Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.mft
File: 5aGzZVL52sy5KsXDtEtCbWQ3SeI.mft (raw, json)
Hash identifier: j+9nqK0R3WzhvBbATmX1UhGjJHgvk2hvDEWPJV5x+j8=
Subject key identifier: 11:3E:74:88:02:AD:E7:4B:18:5B:AC:55:1B:F5:C6:8C:B6:0A:3D:EF
Authority key identifier: E5:A1:B3:65:52:F9:DA:CC:B9:2A:C5:C3:B4:4B:42:6D:64:37:49:E2
Certificate issuer: /CN=e5a1b36552f9daccb92ac5c3b44b426d643749e2
Certificate serial: 019D25BA4704C1AC33EED9A45F682A2835C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5aGzZVL52sy5KsXDtEtCbWQ3SeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.mft
Manifest number: 1891
Signing time: Wed 25 Mar 2026 16:00:58 +0000
Manifest this update: Wed 25 Mar 2026 16:00:58 +0000
Manifest next update: Thu 26 Mar 2026 16:00:58 +0000
Files and hashes: 1: 5aGzZVL52sy5KsXDtEtCbWQ3SeI.crl (hash: 09VRNbVAZ/FiGaYzFpj+9zXZBGYbkst7rt2zi5GnsqA=)
2: 79l3omq8_o54S6Kg8vandlH5J_o.roa (hash: KLDOrBiQlVs1TSmknTa83fxTQ2tVpuuxWM3N66P3QGg=)
3: Hp__tFbaZdaiAofy6QbTMuwaJyg.roa (hash: gy/Ii3yXNRU7ahYXH/J+iAr5bw4XRUBaMk0HedWPciE=)
4: SQTwMRoxF7FRyK6nUUWbCz4A9eo.roa (hash: uliL74kF/+emKLIjlFsJMg/YLv06A/SZL5XAxmC6u0o=)
5: bTW2H9C_f0Zyl4rbIo3Z2-aBupw.roa (hash: DXNshREIVgHPI/cdx6PYhMXkKa/NwvrXqrgQumwjc+8=)
6: fqTbi0RgE-7D6SKzQWOs1v9kD84.roa (hash: WZR3ueqxzI32wKwkJGwTbu9WI2FMxl/49YxT+UAs7do=)
7: gAoi5KcKNfH9vaBb2_wpm_FwOcw.roa (hash: cJ8BX4jA9U2tBUDrfO2OTPW3pXUTcKwubUVTAQu92zI=)
8: wULQ1rFany44hlJUjVnf6JD1px0.roa (hash: G805BanUjf0p0J0sQcSfwl8Lk7XU9K4q5pkH78H9/cE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5aGzZVL52sy5KsXDtEtCbWQ3SeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:47:04:c1:ac:33:ee:d9:a4:5f:68:2a:28:35:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5a1b36552f9daccb92ac5c3b44b426d643749e2
Validity
Not Before: Mar 25 16:00:58 2026 GMT
Not After : Mar 26 16:00:58 2026 GMT
Subject: CN=113e748802ade74b185bac551bf5c68cb60a3def
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b6:b4:00:27:e9:35:5c:d0:ce:52:96:1f:9d:
09:81:c1:e9:11:ee:33:9a:b7:1b:dd:6d:b3:e0:ec:
30:cd:53:80:5a:9c:73:46:f6:08:25:8f:b2:b5:7f:
89:b8:ba:ae:55:74:63:fc:2f:72:6f:27:e2:e9:95:
4f:b3:5c:8d:88:72:2d:16:93:c6:97:fb:b8:c0:b1:
b1:49:ef:9e:e7:7d:be:5d:3e:72:f7:ed:10:78:ae:
cd:3b:c0:6f:31:92:2f:b1:8f:ea:95:1b:e6:be:3a:
c0:a8:00:96:31:19:90:31:06:f5:7b:50:ce:d1:5d:
4a:ed:b8:d3:08:d4:ee:3a:c7:e0:ce:4c:0f:07:6c:
2e:ef:4f:a1:56:a5:95:83:76:63:3f:96:d9:bf:ea:
33:27:dc:68:ac:1c:fe:42:b4:8b:c5:74:ce:f8:ca:
48:ae:dd:e0:46:a9:50:1b:b4:67:73:8e:dd:e3:b5:
4d:cc:b9:d4:4d:12:dd:d1:5e:40:72:f7:fc:28:ea:
95:81:1d:b0:af:4e:ea:72:d2:91:b4:8a:68:07:61:
5d:ff:b2:cb:7f:ce:1b:4c:ca:e0:12:c4:6c:40:8f:
b8:fc:08:7c:2f:00:02:0d:ca:de:cc:62:9f:e7:0e:
25:b0:2d:20:40:42:11:e9:48:98:1b:ff:27:28:2b:
1f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:3E:74:88:02:AD:E7:4B:18:5B:AC:55:1B:F5:C6:8C:B6:0A:3D:EF
X509v3 Authority Key Identifier:
keyid:E5:A1:B3:65:52:F9:DA:CC:B9:2A:C5:C3:B4:4B:42:6D:64:37:49:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5aGzZVL52sy5KsXDtEtCbWQ3SeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:e3:d9:14:af:05:65:7f:d1:16:cd:cf:52:f8:62:80:d2:7e:
47:1d:24:ec:19:2c:c1:cc:e7:25:aa:1f:af:75:7a:ca:bb:1b:
b6:53:05:9d:8e:a0:fc:55:91:54:77:f6:75:7d:c3:c7:19:1d:
f9:9e:89:6f:29:e1:e5:58:62:cb:db:6e:5a:4d:01:5d:10:99:
d7:e4:8c:d1:e4:ff:73:d6:53:2c:9f:fa:14:93:c2:46:f5:d6:
fd:c9:7b:92:4a:7d:89:6c:6d:c8:ec:bf:af:4e:14:44:42:08:
ce:22:37:6c:30:16:f2:6a:42:c5:7e:ce:7b:dd:a6:ee:02:37:
83:47:cc:15:c8:6f:3a:ef:80:a5:0c:34:7e:b4:f8:4d:87:e7:
2a:8d:d4:dd:08:9d:c5:f6:d7:81:22:cb:03:b4:f1:7b:72:f4:
9a:1e:2d:c4:c1:d6:2d:46:4d:30:6e:4c:26:91:2f:aa:96:bc:
57:22:04:76:de:10:73:03:d0:e0:04:24:25:cd:a0:0e:84:ad:
dd:2a:f2:ed:81:b1:a0:d3:a9:2f:b6:fb:48:6c:62:01:d2:dd:
7a:fb:d9:96:15:db:48:51:d6:11:a7:f4:6b:c8:d2:60:80:d6:
cd:28:ad:84:bd:be:0b:36:ef:94:0a:b4:e2:1e:d6:09:5d:0e:
e7:de:38:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:15 2026 by rpki-client