Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/5UTiZtTrnMfe0pLBKwaxynvOp3g.mft
File: 5UTiZtTrnMfe0pLBKwaxynvOp3g.mft (raw, json)
Hash identifier: X6xLunMuVtYy6CF8PMhLvtMLpI+VqG4PuoBoeytN8qo=
Subject key identifier: 3E:0A:C0:DF:8E:85:2C:5A:16:CC:08:EF:F0:30:FF:54:54:7F:AE:E8
Authority key identifier: E5:44:E2:66:D4:EB:9C:C7:DE:D2:92:C1:2B:06:B1:CA:7B:CE:A7:78
Certificate issuer: /CN=e544e266d4eb9cc7ded292c12b06b1ca7bcea778
Certificate serial: 019D273B0EDF38E4F753D1D96375E33EFCA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5UTiZtTrnMfe0pLBKwaxynvOp3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/5UTiZtTrnMfe0pLBKwaxynvOp3g.mft
Manifest number: 1889
Signing time: Wed 25 Mar 2026 23:01:14 +0000
Manifest this update: Wed 25 Mar 2026 23:01:14 +0000
Manifest next update: Thu 26 Mar 2026 23:01:14 +0000
Files and hashes: 1: 5UTiZtTrnMfe0pLBKwaxynvOp3g.crl (hash: 8B1b+CeAkL3zgvG4aJsQeXmRBcrM61QcMRDb57Aoqw8=)
2: q6jiQ8kIIOAVEl2Xp2qX5_pMoSI.roa (hash: nTyqp5QiWNzkKcVcQsp2jGxyBaOXuQpq1p5YA426WVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/5UTiZtTrnMfe0pLBKwaxynvOp3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/5UTiZtTrnMfe0pLBKwaxynvOp3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/5UTiZtTrnMfe0pLBKwaxynvOp3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3b:0e:df:38:e4:f7:53:d1:d9:63:75:e3:3e:fc:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e544e266d4eb9cc7ded292c12b06b1ca7bcea778
Validity
Not Before: Mar 25 23:01:14 2026 GMT
Not After : Mar 26 23:01:14 2026 GMT
Subject: CN=3e0ac0df8e852c5a16cc08eff030ff54547faee8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:90:92:58:b7:ef:d0:4b:0d:06:6c:86:31:ff:
0f:03:9c:85:86:dc:a4:8d:e2:a5:09:28:30:79:c1:
c0:59:96:d9:76:96:b2:d2:0b:99:b7:e4:98:c3:8a:
42:d8:82:d0:8d:57:6c:9c:52:55:27:32:2f:45:4a:
c6:45:9a:e8:8c:22:0b:b7:80:9f:da:91:31:5b:74:
84:fc:ee:e4:55:d1:b5:68:8a:ba:73:35:42:8e:f8:
02:41:c6:e2:01:23:8c:05:db:6c:24:18:77:57:ce:
ea:2d:44:24:67:6e:f9:37:13:55:75:72:3e:0c:9c:
a9:b3:2c:ed:aa:d0:96:db:81:b1:30:1c:95:34:cd:
70:f7:2a:a9:4e:f2:21:07:43:a4:aa:1c:10:b3:51:
ee:b6:46:6f:73:c6:da:62:d7:4e:2f:72:38:40:fd:
74:6f:7b:f8:2a:f7:8a:e2:92:29:8b:d3:f7:7e:59:
7e:b5:e6:13:f1:ba:b7:8e:f8:d0:3f:86:d7:db:66:
cb:eb:b8:ad:6f:f7:07:ca:17:a3:cb:5c:94:99:dc:
b1:40:e9:73:22:3a:07:24:a9:65:88:d9:01:fe:74:
c7:47:5f:b9:fd:a9:5d:be:be:fb:f0:d1:4e:64:6c:
07:ce:8e:46:6e:4d:9f:d1:53:d2:a2:98:0d:65:08:
45:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:0A:C0:DF:8E:85:2C:5A:16:CC:08:EF:F0:30:FF:54:54:7F:AE:E8
X509v3 Authority Key Identifier:
keyid:E5:44:E2:66:D4:EB:9C:C7:DE:D2:92:C1:2B:06:B1:CA:7B:CE:A7:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5UTiZtTrnMfe0pLBKwaxynvOp3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/5UTiZtTrnMfe0pLBKwaxynvOp3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/5UTiZtTrnMfe0pLBKwaxynvOp3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:98:e0:34:7b:cf:90:1f:24:2f:70:f1:9c:69:f8:5a:bf:e3:
64:59:e5:77:d5:4a:8f:99:70:39:d4:49:bb:e3:8c:f7:fc:4b:
c3:f1:9a:b4:b3:39:be:ca:49:0c:27:b5:b8:bc:89:6c:c2:0e:
f1:55:49:2d:df:87:73:a8:d5:30:76:75:4c:c9:c4:a1:8c:2c:
7f:90:53:89:80:29:a2:25:6f:8d:77:48:14:15:48:59:6e:ef:
1f:27:71:0a:85:e1:eb:1b:a4:cb:17:7a:78:bd:1b:44:0b:03:
e3:aa:18:22:41:3c:db:54:94:0c:80:ed:8e:61:0c:e9:b7:39:
ed:90:12:b2:77:12:6d:41:3e:40:4d:12:90:69:6f:fe:6d:29:
a3:7e:90:54:17:64:52:67:d3:0b:1f:a4:b4:51:cf:25:f0:08:
90:b8:b8:a5:ea:65:fa:20:52:4f:c8:ec:c3:a7:42:e8:89:2f:
0e:f6:bc:31:59:40:89:3d:ec:f7:d6:8d:7f:81:77:a6:c4:2d:
11:d3:f4:e6:ce:41:d6:32:c1:de:2a:22:28:05:2f:51:14:7c:
55:7d:c5:f0:7a:15:7e:dc:92:8d:a1:6c:aa:f4:92:1e:c7:c7:
ea:74:dc:d7:7b:cd:c7:a8:22:3c:92:b1:f5:87:d4:bf:52:54:
46:a3:e4:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:23:20 2026 by rpki-client