Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/2d0ca2-8c3e-4f8c-906c-6ce60226a9e8/1/5NozpY-0djTWFOwJpomN4PWABv4.mft
File: 5NozpY-0djTWFOwJpomN4PWABv4.mft (raw, json)
Hash identifier: 1N/A3+xqy5mQ+RWIL4QPIyCj7WMkj87GoFZwVxpbqXQ=
Subject key identifier: 98:C5:72:60:0C:03:DD:08:2E:B7:9E:A8:58:46:91:EE:5A:9B:49:FD
Authority key identifier: E4:DA:33:A5:8F:B4:76:34:D6:14:EC:09:A6:89:8D:E0:F5:80:06:FE
Certificate issuer: /CN=e4da33a58fb47634d614ec09a6898de0f58006fe
Certificate serial: 019D26960BDF3B0ABBB26D89A285D036F2FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5NozpY-0djTWFOwJpomN4PWABv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/2d0ca2-8c3e-4f8c-906c-6ce60226a9e8/1/5NozpY-0djTWFOwJpomN4PWABv4.mft
Manifest number: 0F5D
Signing time: Wed 25 Mar 2026 20:01:00 +0000
Manifest this update: Wed 25 Mar 2026 20:01:00 +0000
Manifest next update: Thu 26 Mar 2026 20:01:00 +0000
Files and hashes: 1: 5NozpY-0djTWFOwJpomN4PWABv4.crl (hash: c9w2GIU73H4Kz3PvuHSp7iw9YLu+1TOry7TpUz8ldCA=)
2: X3KSPRpScg7W0Ns5vBLAW7YVOAY.roa (hash: gCWNoXRiXdqXJ9sAUoBn9JpM+1ZIHNyGOsBQSFKX4Lc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/2d0ca2-8c3e-4f8c-906c-6ce60226a9e8/1/5NozpY-0djTWFOwJpomN4PWABv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/2d0ca2-8c3e-4f8c-906c-6ce60226a9e8/1/5NozpY-0djTWFOwJpomN4PWABv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/5NozpY-0djTWFOwJpomN4PWABv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:0b:df:3b:0a:bb:b2:6d:89:a2:85:d0:36:f2:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4da33a58fb47634d614ec09a6898de0f58006fe
Validity
Not Before: Mar 25 20:01:00 2026 GMT
Not After : Mar 26 20:01:00 2026 GMT
Subject: CN=98c572600c03dd082eb79ea8584691ee5a9b49fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ef:1a:13:b2:13:34:d3:b8:d6:12:dd:c0:3a:
02:52:2a:75:35:a1:fa:51:26:a7:aa:8d:09:73:9e:
2b:b6:47:70:52:d1:c2:be:2a:ef:72:84:06:7f:ea:
3e:f9:43:fc:7c:15:c3:d1:42:5c:af:9e:45:bf:ed:
9b:1a:bc:42:a2:e2:e8:8a:5a:26:41:66:54:24:0c:
0f:67:41:8c:76:4c:80:eb:82:11:39:15:c8:95:56:
6d:6e:c5:af:c6:46:61:13:14:2e:ce:fc:92:0c:d6:
00:d4:08:d9:06:bd:cc:ee:17:dc:49:56:b1:3a:1c:
a7:8a:c2:83:80:fa:0d:a0:9f:49:d5:15:05:ac:77:
85:26:3b:27:fa:1c:c9:a2:b9:89:b2:5d:92:22:70:
89:64:0b:56:42:c6:ac:0f:19:ea:91:d2:93:71:2a:
43:68:f1:7b:ff:74:61:67:2a:05:fe:da:ee:e3:ed:
d9:e9:fd:a1:db:df:0b:2f:cd:43:83:78:3e:41:e2:
a0:f1:dc:ca:71:d9:92:bd:b7:5a:95:14:be:45:59:
a4:5e:50:00:bf:32:22:30:89:17:c8:1e:f9:d0:ab:
74:52:ed:e6:aa:b3:44:7f:bd:37:a2:b1:02:7c:8e:
09:61:7b:05:d1:02:a2:34:e7:21:8f:b8:a6:c5:ac:
e1:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:C5:72:60:0C:03:DD:08:2E:B7:9E:A8:58:46:91:EE:5A:9B:49:FD
X509v3 Authority Key Identifier:
keyid:E4:DA:33:A5:8F:B4:76:34:D6:14:EC:09:A6:89:8D:E0:F5:80:06:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5NozpY-0djTWFOwJpomN4PWABv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/2d0ca2-8c3e-4f8c-906c-6ce60226a9e8/1/5NozpY-0djTWFOwJpomN4PWABv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/2d0ca2-8c3e-4f8c-906c-6ce60226a9e8/1/5NozpY-0djTWFOwJpomN4PWABv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:cb:75:ad:5c:a7:f5:1f:30:af:a3:5f:da:3d:d9:4a:49:f5:
1c:4b:0d:9e:e8:9d:8c:76:fd:7c:2b:31:50:8b:8e:83:ef:65:
57:41:21:df:96:cd:e0:91:6f:12:e9:5d:ae:ec:86:75:df:4a:
d0:08:23:10:23:98:88:be:70:ca:6d:42:2f:36:21:74:ba:65:
9d:26:a0:e4:dc:ac:ee:33:b4:a2:35:13:43:cd:6e:bc:c9:4e:
9d:7d:3f:1f:70:fd:7b:4e:e8:ef:16:94:58:46:68:72:0c:76:
a1:93:30:1f:65:37:7e:db:bd:ff:70:2a:42:14:64:89:06:f3:
d5:bb:2b:86:f3:d2:ba:4c:e2:a6:58:81:ed:a6:a0:fd:b7:39:
e3:34:52:c9:23:aa:09:36:c4:14:da:dc:ca:c3:6c:2c:f9:79:
1b:d0:f4:a5:ad:b4:a4:85:1a:0b:39:b9:57:a3:4c:69:0e:f5:
da:a1:61:4d:86:56:af:49:e0:e9:10:da:c9:c3:f1:fc:d2:2d:
e8:f1:51:1c:d2:02:80:8f:8a:dc:94:47:0a:1b:e1:1d:6e:ba:
01:2f:fb:6a:27:b3:61:4b:23:09:3c:68:81:b0:0e:ad:37:1c:
4c:d3:2a:1b:8b:f9:f0:9e:b6:4b:84:83:54:1b:88:5d:ec:94:
00:84:6b:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:11:12 2026 by rpki-client