Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/5oBHj67Itn3f7OY1fPJc8sodhdA.mft
File: 5oBHj67Itn3f7OY1fPJc8sodhdA.mft (raw, json)
Hash identifier: ANTfDvwciye4OjHX4BvP840Y3yzdEodTgc9iLrIJ/54=
Subject key identifier: D8:FB:A8:87:E6:3D:16:B0:D4:88:A2:F2:5D:D3:60:C1:01:C7:D5:D2
Authority key identifier: E6:80:47:8F:AE:C8:B6:7D:DF:EC:E6:35:7C:F2:5C:F2:CA:1D:85:D0
Certificate issuer: /CN=e680478faec8b67ddfece6357cf25cf2ca1d85d0
Certificate serial: 019D277211D3C9CFA4BF2F1587F7E96B013D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5oBHj67Itn3f7OY1fPJc8sodhdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/5oBHj67Itn3f7OY1fPJc8sodhdA.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 00:01:20 +0000
Manifest this update: Thu 26 Mar 2026 00:01:20 +0000
Manifest next update: Fri 27 Mar 2026 00:01:20 +0000
Files and hashes: 1: 5oBHj67Itn3f7OY1fPJc8sodhdA.crl (hash: efqFkw7Nct925FthKu85OlrqdhSyIiwjiA7qbubuVAA=)
2: ymGU-blAl3Eiudw-0pPU5E8cWuM.roa (hash: sR3zp4LyEopkmIvV+/IzzZmry6sELnZ6ai0YOhaDCBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/5oBHj67Itn3f7OY1fPJc8sodhdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/5oBHj67Itn3f7OY1fPJc8sodhdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5oBHj67Itn3f7OY1fPJc8sodhdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:11:d3:c9:cf:a4:bf:2f:15:87:f7:e9:6b:01:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e680478faec8b67ddfece6357cf25cf2ca1d85d0
Validity
Not Before: Mar 26 00:01:20 2026 GMT
Not After : Mar 27 00:01:20 2026 GMT
Subject: CN=d8fba887e63d16b0d488a2f25dd360c101c7d5d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9e:b4:26:62:44:14:36:c4:4a:09:4f:f1:ba:
13:91:10:4f:c4:07:84:2e:4b:77:b1:e8:bb:cf:41:
9c:57:06:43:7c:6c:c7:09:2d:c7:2f:f8:24:d4:6c:
d6:27:4f:f9:57:51:4a:80:60:27:42:e8:f4:5c:43:
7f:ac:a9:b6:a8:c5:96:fe:82:18:f6:66:42:59:81:
82:2e:50:4d:63:db:b4:e6:6a:7d:21:10:da:54:7a:
9f:51:ae:20:a9:13:f1:0c:11:c8:a0:1c:2e:8b:d6:
c5:33:8f:c2:78:f1:21:51:03:4b:b9:da:a1:89:78:
7e:f0:b5:6d:7b:e2:e6:e6:7c:f0:e4:88:c6:e9:a5:
a5:b4:35:3b:26:3d:29:b9:25:bc:1a:d3:6b:f4:92:
34:cd:c9:1d:68:e5:2d:3e:f5:fb:37:31:ba:61:f0:
4a:84:11:0d:e6:50:4d:a6:81:5b:f9:47:13:36:cf:
12:bb:8c:e5:64:0e:16:dc:c4:9e:83:88:23:50:0a:
95:e0:88:47:55:15:05:df:35:a6:63:3a:66:6d:3d:
82:f2:cd:ca:24:a2:7e:47:d8:3a:55:f9:3f:77:26:
fd:de:3f:8d:e2:54:5f:66:f8:0d:5f:5a:b8:c2:de:
33:20:09:24:8a:b1:d2:e8:fa:47:ac:04:aa:04:f0:
6e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:FB:A8:87:E6:3D:16:B0:D4:88:A2:F2:5D:D3:60:C1:01:C7:D5:D2
X509v3 Authority Key Identifier:
keyid:E6:80:47:8F:AE:C8:B6:7D:DF:EC:E6:35:7C:F2:5C:F2:CA:1D:85:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5oBHj67Itn3f7OY1fPJc8sodhdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/5oBHj67Itn3f7OY1fPJc8sodhdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/5oBHj67Itn3f7OY1fPJc8sodhdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:d8:a2:32:0b:30:2e:94:fb:61:d7:e6:dd:64:bb:c7:02:99:
d0:1a:bf:53:a8:68:0d:55:fa:88:be:11:b5:89:00:2d:33:d1:
28:02:b5:02:c0:99:4a:bd:0e:ca:6d:9e:3a:ca:a2:40:8f:29:
1f:87:78:ff:2c:6f:ad:8e:b6:2a:35:42:dd:be:5b:9c:98:5a:
3c:c5:1c:1b:f7:ac:25:23:98:92:96:84:f5:86:e7:ff:c9:fc:
2b:e2:45:f9:e6:23:36:1b:1a:6e:78:43:01:db:a3:ee:75:34:
33:1b:b9:04:37:3f:97:e0:13:53:fd:0a:88:e1:41:71:12:6c:
20:9c:45:77:43:e1:3e:6a:64:62:dc:40:7d:96:ea:8a:e5:9a:
a8:21:00:ff:04:26:6d:8f:cb:37:28:32:02:f6:78:73:bb:d1:
31:20:f4:d1:53:1c:59:45:d9:d1:e3:99:27:04:ac:4b:c4:d4:
f0:a3:38:32:2d:69:40:92:bb:54:f8:7b:fd:d9:bd:c3:78:f9:
d7:4f:46:ce:66:37:56:3f:91:2f:25:e7:67:18:d6:8b:a6:17:
f0:90:62:b1:2f:05:8c:99:66:7b:b5:60:d3:b9:69:9e:2d:df:
da:7e:d0:00:80:b9:24:f5:0e:79:4d:2e:0e:e5:1b:ce:00:ad:
8f:7a:b5:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:55:03 2026 by rpki-client