Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.mft
File: 5kaCrbAjjMdy0cW0mGx6M5hjZKA.mft (raw, json)
Hash identifier: BLf0Y95IyGkQvygdW/SKubktM0HXUlSverEMhpqJRt8=
Subject key identifier: 82:09:95:A1:D8:58:69:E7:46:C1:B6:75:1D:D1:74:88:80:8E:F9:D2
Authority key identifier: E6:46:82:AD:B0:23:8C:C7:72:D1:C5:B4:98:6C:7A:33:98:63:64:A0
Certificate issuer: /CN=e64682adb0238cc772d1c5b4986c7a33986364a0
Certificate serial: 019D25F1B46ECD18887AC6C2F7C319E1B3F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5kaCrbAjjMdy0cW0mGx6M5hjZKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 17:01:30 +0000
Manifest this update: Wed 25 Mar 2026 17:01:30 +0000
Manifest next update: Thu 26 Mar 2026 17:01:30 +0000
Files and hashes: 1: 5kaCrbAjjMdy0cW0mGx6M5hjZKA.crl (hash: Vsi/+O7Wr+UfRp75CdhecCMeR8FFtNkm58amYoO5Z6s=)
2: e2x_8PpcIHOJJPXsPBjrkhlkVvo.roa (hash: QXzcET22GY2j2zVB7MrhPNOcYIzpk5pDfm9vuuXWqYk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5kaCrbAjjMdy0cW0mGx6M5hjZKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:b4:6e:cd:18:88:7a:c6:c2:f7:c3:19:e1:b3:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e64682adb0238cc772d1c5b4986c7a33986364a0
Validity
Not Before: Mar 25 17:01:30 2026 GMT
Not After : Mar 26 17:01:30 2026 GMT
Subject: CN=820995a1d85869e746c1b6751dd17488808ef9d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:9e:bf:a5:f0:ad:8c:fc:3c:e1:7a:dd:cf:c0:
33:a3:ef:36:03:b9:20:70:9e:1d:cc:1b:e5:43:21:
a7:07:a1:60:0d:5d:c6:4f:dd:34:7f:1a:82:8a:c8:
05:68:7f:56:1c:25:ee:38:1a:83:96:78:8c:13:64:
86:49:00:e2:3b:3e:6a:95:26:e1:7a:ab:84:d9:84:
7b:36:87:75:63:28:5a:d1:e7:2a:8d:5f:97:87:fb:
21:b1:06:3c:87:6d:1c:17:fc:73:82:15:61:88:b0:
27:28:05:4b:55:8e:4d:bb:ab:1a:a6:33:87:84:28:
f0:62:5e:17:1f:88:e7:78:d4:cd:36:04:51:f0:de:
e8:75:ab:5c:07:fe:8e:2c:14:1a:7f:c8:28:3d:8b:
82:55:e8:43:eb:00:c2:31:ee:c8:70:42:6f:57:c9:
54:f2:00:45:7d:02:20:77:c9:0e:aa:86:be:f2:f7:
3e:60:28:d9:3f:a0:9a:77:cb:c2:7b:2e:e0:1d:3f:
37:b1:eb:6f:5f:7e:39:1f:86:b6:5a:80:e0:81:d2:
78:b0:f5:0e:db:69:1a:d6:3f:6a:b2:77:66:e5:1f:
3a:dd:3e:fd:a6:33:67:a5:0e:e3:62:7f:bb:c5:13:
cd:bd:6d:4f:88:72:e2:5f:68:90:c5:0e:c0:f6:c1:
50:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:09:95:A1:D8:58:69:E7:46:C1:B6:75:1D:D1:74:88:80:8E:F9:D2
X509v3 Authority Key Identifier:
keyid:E6:46:82:AD:B0:23:8C:C7:72:D1:C5:B4:98:6C:7A:33:98:63:64:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5kaCrbAjjMdy0cW0mGx6M5hjZKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:59:12:b2:62:63:7f:c7:59:d1:a6:6e:f7:7f:62:5b:2b:17:
57:b1:b8:52:c8:f3:1d:06:05:72:21:ee:a8:2b:44:ad:0b:14:
46:a8:cd:5c:74:a0:22:f4:8e:13:06:4f:40:cc:55:e0:2b:21:
33:f7:7d:92:cd:e5:b8:ea:36:38:cd:53:c0:e0:32:42:b9:6a:
11:0f:6b:ad:39:2f:a8:4b:7b:84:d0:19:53:e8:26:2c:1c:e2:
ca:bd:44:8f:28:d6:e9:59:da:ec:38:cc:b1:32:b9:55:61:f6:
30:a2:2b:a0:b9:32:2b:56:03:29:21:2f:88:8e:cd:b1:51:47:
31:8b:2b:10:76:d3:be:41:25:06:36:64:e8:16:0c:99:47:e5:
81:73:f0:c6:71:4d:bc:3f:c3:8a:89:4d:d4:9b:6a:09:06:1f:
b8:09:b2:d2:05:c4:f5:6f:63:6c:39:9f:9b:46:a9:25:ef:2f:
77:8d:f0:4e:cc:16:7d:83:4c:48:cd:03:e4:84:46:8f:f6:d3:
7b:07:c5:8e:e9:a7:73:c1:c1:00:f1:ef:a9:e7:d6:0b:15:26:
ae:a6:49:bf:aa:97:a6:d9:8c:79:01:91:7d:6e:8f:32:02:8b:
3d:49:bf:39:2b:7d:1b:dd:db:b2:65:2a:d2:3d:cc:24:3d:50:
00:bb:a8:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:26 2026 by rpki-client