Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/7309a9-46c8-4240-afef-840881a4d30d/1/ds5jfUe3gATQzPrjceaBh2isP6U.mft
File: ds5jfUe3gATQzPrjceaBh2isP6U.mft (raw, json)
Hash identifier: euPccUhf0gZJW5bUtvk4NCysCa1sbckLNm2/eJLns/U=
Subject key identifier: 11:28:1D:15:36:B9:C5:B7:8E:FE:B5:2F:C9:8D:33:F7:21:EA:ED:88
Authority key identifier: 76:CE:63:7D:47:B7:80:04:D0:CC:FA:E3:71:E6:81:87:68:AC:3F:A5
Certificate issuer: /CN=76ce637d47b78004d0ccfae371e6818768ac3fa5
Certificate serial: 019D265F952BABE97CD5D5C1765C87E5E865
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ds5jfUe3gATQzPrjceaBh2isP6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/7309a9-46c8-4240-afef-840881a4d30d/1/ds5jfUe3gATQzPrjceaBh2isP6U.mft
Manifest number: 16A8
Signing time: Wed 25 Mar 2026 19:01:31 +0000
Manifest this update: Wed 25 Mar 2026 19:01:31 +0000
Manifest next update: Thu 26 Mar 2026 19:01:31 +0000
Files and hashes: 1: ds5jfUe3gATQzPrjceaBh2isP6U.crl (hash: cz28hnzpOFR31Tdkhd5ql4aaiA8iCC26kSWV4rSiekU=)
2: huM-GkqhBk0Re8XPHSnKFpnI1VQ.roa (hash: yMEbieQN4mmr0B4PHYgIfIopNkBH4Ovpl20WF2oTeLc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/7309a9-46c8-4240-afef-840881a4d30d/1/ds5jfUe3gATQzPrjceaBh2isP6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/7309a9-46c8-4240-afef-840881a4d30d/1/ds5jfUe3gATQzPrjceaBh2isP6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/ds5jfUe3gATQzPrjceaBh2isP6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:95:2b:ab:e9:7c:d5:d5:c1:76:5c:87:e5:e8:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76ce637d47b78004d0ccfae371e6818768ac3fa5
Validity
Not Before: Mar 25 19:01:31 2026 GMT
Not After : Mar 26 19:01:31 2026 GMT
Subject: CN=11281d1536b9c5b78efeb52fc98d33f721eaed88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:2b:4e:a1:71:05:47:9c:dc:8a:08:07:51:5d:
86:93:a2:c8:02:a1:51:7d:60:e8:b2:fb:ae:f3:66:
e8:bb:f3:ed:4b:fe:87:3a:f3:da:e2:ff:b0:88:73:
b6:13:b4:a8:8f:45:86:4a:5e:fa:86:e0:69:3d:75:
73:73:fa:f7:ed:a5:55:8a:97:b3:1e:da:1d:e1:bb:
6e:7e:ab:76:2f:96:7e:5b:b4:13:0c:ba:e4:c1:79:
46:d0:56:af:73:03:47:85:9d:3d:57:04:11:a9:4f:
2b:6f:57:d2:2a:f2:f5:03:d3:a3:7a:e2:35:70:2c:
b4:5f:69:0d:b7:91:ff:d5:f9:71:ed:f0:78:54:d2:
43:7f:01:95:de:6f:01:83:64:c7:07:df:d2:8b:bf:
ce:62:64:a1:08:d9:00:b9:f8:62:a6:7b:b9:de:f0:
30:65:ff:ad:a3:a5:3e:e1:0a:ee:42:3a:6f:bd:3a:
f9:31:fc:e3:30:43:94:ef:82:49:a3:80:17:6f:2b:
55:20:e7:49:47:b4:46:fa:b9:54:24:f3:77:23:cb:
bc:55:52:b2:25:89:8d:f5:7c:79:32:3f:9c:47:5e:
1d:5f:c8:d1:76:2d:77:20:c5:09:da:2f:6a:d9:e1:
9a:ca:a8:38:a8:4c:1b:1a:4a:93:3b:e3:04:21:fd:
d0:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:28:1D:15:36:B9:C5:B7:8E:FE:B5:2F:C9:8D:33:F7:21:EA:ED:88
X509v3 Authority Key Identifier:
keyid:76:CE:63:7D:47:B7:80:04:D0:CC:FA:E3:71:E6:81:87:68:AC:3F:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ds5jfUe3gATQzPrjceaBh2isP6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/7309a9-46c8-4240-afef-840881a4d30d/1/ds5jfUe3gATQzPrjceaBh2isP6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/7309a9-46c8-4240-afef-840881a4d30d/1/ds5jfUe3gATQzPrjceaBh2isP6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:c2:9e:9b:68:9a:fb:c5:f0:39:3e:b1:c1:38:e3:54:78:bf:
a5:87:10:18:4e:d4:5b:53:24:f8:07:d1:e3:92:4f:34:a8:87:
38:ea:e6:23:dd:68:e7:59:f0:e7:88:6f:a6:3b:8b:17:c3:1c:
4b:f1:01:4c:59:bd:6b:11:12:a1:30:f2:6d:0f:8e:b8:54:69:
e0:f3:5c:04:fe:dc:68:0b:f7:6f:78:b3:e8:d8:5a:00:3c:08:
bb:e6:db:4d:a3:a7:d0:40:93:71:07:b5:26:ec:4b:87:a0:f1:
f2:5b:03:cd:81:78:00:01:17:96:c1:c9:aa:7a:fe:46:17:ad:
5f:df:77:37:5b:96:bc:74:02:4a:b1:94:9e:fa:10:a6:40:7e:
68:5e:f7:73:9c:04:e4:f7:56:58:dd:2a:13:d9:da:42:37:4e:
fb:53:56:08:d1:da:9f:62:46:2b:af:62:d7:a1:c1:1f:06:92:
e8:73:2f:81:a7:fb:cb:8a:b2:c9:5e:39:08:25:65:2b:ee:bd:
08:4c:8e:72:f4:c6:7e:da:4f:93:2b:76:89:f3:5d:28:81:1f:
36:65:f6:3e:9f:79:cb:30:7a:26:72:ce:90:d5:93:dd:56:7b:
f6:c0:32:ee:94:1b:d3:c7:1c:97:b3:c8:51:da:67:f5:36:c4:
ae:44:7c:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:23:37 2026 by rpki-client