Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/5saSR1gKSIv0YbhL97iyrBN01cU.mft
File: 5saSR1gKSIv0YbhL97iyrBN01cU.mft (raw, json)
Hash identifier: aqrm1/+6XnkBJ1AkKUNS05m4ACR5mlbODPPvi4xkeYw=
Subject key identifier: AB:68:96:92:C5:A9:CD:F9:F7:AF:E4:5B:EE:47:19:D9:93:0F:7E:1D
Authority key identifier: E6:C6:92:47:58:0A:48:8B:F4:61:B8:4B:F7:B8:B2:AC:13:74:D5:C5
Certificate issuer: /CN=e6c69247580a488bf461b84bf7b8b2ac1374d5c5
Certificate serial: 019D2997094B8D2D908B6F3B2B3DAFD0924B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5saSR1gKSIv0YbhL97iyrBN01cU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/5saSR1gKSIv0YbhL97iyrBN01cU.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 10:00:57 +0000
Manifest this update: Thu 26 Mar 2026 10:00:57 +0000
Manifest next update: Fri 27 Mar 2026 10:00:57 +0000
Files and hashes: 1: 5saSR1gKSIv0YbhL97iyrBN01cU.crl (hash: cXk7eH3ZvaXmA8bYW/D9M7ro8mTn66fVhYhEOva7dFQ=)
2: LmhXkywW8SZtjadhpE8Fh2dmVFk.roa (hash: 3kUhpGVlIpwz8/d0v3uW1Scy1KDzUlA94dFDDoXX/D0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/5saSR1gKSIv0YbhL97iyrBN01cU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/5saSR1gKSIv0YbhL97iyrBN01cU.mft
rsync://rpki.ripe.net/repository/DEFAULT/5saSR1gKSIv0YbhL97iyrBN01cU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:09:4b:8d:2d:90:8b:6f:3b:2b:3d:af:d0:92:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6c69247580a488bf461b84bf7b8b2ac1374d5c5
Validity
Not Before: Mar 26 10:00:57 2026 GMT
Not After : Mar 27 10:00:57 2026 GMT
Subject: CN=ab689692c5a9cdf9f7afe45bee4719d9930f7e1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:44:e1:00:6a:13:fb:f1:57:fe:06:92:98:c8:
97:7e:fd:71:c9:16:e6:9a:ec:8e:b4:0e:27:07:4a:
16:54:6f:3c:d5:ba:97:87:7a:d9:4a:62:f4:05:d9:
e2:87:fd:c8:29:15:da:c9:e0:91:23:a0:ab:24:28:
72:fa:79:ae:d4:85:17:5f:bf:1f:2c:4e:c2:59:5f:
c2:fd:6b:86:d0:58:03:30:31:76:06:42:10:d8:eb:
5a:e1:32:f7:44:26:44:e1:0b:6e:c2:5f:62:0e:76:
34:af:c8:27:f1:d2:19:23:c4:17:2f:59:49:0f:26:
74:43:fd:24:72:75:91:fe:c7:43:39:e1:af:bb:b1:
d7:66:4d:a6:ec:3e:89:4d:ee:ac:f6:af:90:ab:d2:
19:85:45:d3:93:01:d3:28:4f:ca:d0:32:1e:92:d2:
b2:12:58:81:40:be:fa:06:b8:37:ce:9e:d8:92:59:
b1:4e:62:ef:b7:7c:30:20:7a:1c:bc:59:ff:5d:5a:
30:17:89:d7:8f:62:dc:22:4d:4c:f7:af:6d:a7:70:
6e:3a:c0:69:b5:da:73:30:13:89:f1:c5:b5:31:80:
24:f6:ef:79:e6:69:60:c1:aa:eb:56:ca:e5:0e:87:
1b:39:08:5d:56:f3:1b:e1:e7:54:a7:a6:71:3f:2b:
cf:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:68:96:92:C5:A9:CD:F9:F7:AF:E4:5B:EE:47:19:D9:93:0F:7E:1D
X509v3 Authority Key Identifier:
keyid:E6:C6:92:47:58:0A:48:8B:F4:61:B8:4B:F7:B8:B2:AC:13:74:D5:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5saSR1gKSIv0YbhL97iyrBN01cU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/5saSR1gKSIv0YbhL97iyrBN01cU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/5saSR1gKSIv0YbhL97iyrBN01cU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:11:12:b5:0d:08:7a:b5:66:91:d5:dc:09:d3:f0:4a:93:44:
d4:da:e8:ef:ae:8e:d7:9d:df:be:76:bf:4a:98:f7:db:c4:9c:
a8:ed:15:b5:5b:14:fe:0a:23:9a:80:c5:92:3c:be:9b:ff:4b:
03:43:9e:96:90:19:75:04:84:0e:2c:72:a3:ff:34:ea:29:f9:
59:80:e1:e7:40:7b:d0:36:49:51:46:77:7c:c1:74:4c:0e:a8:
8d:45:31:06:ca:cf:4d:bf:d8:c3:a6:80:f7:e5:ec:c0:93:1b:
71:e7:62:8a:9f:82:d1:c7:a9:cb:98:13:43:a6:cb:a7:0a:21:
d2:4e:44:ff:36:30:ce:01:c4:cb:3b:8d:01:4f:45:69:72:36:
b9:f6:b2:fb:1a:cd:a2:d0:91:57:1c:21:fa:c3:f6:d6:c5:26:
95:32:e2:9b:1e:05:7a:ab:a5:1a:5a:ff:0b:61:9c:5d:02:8a:
7b:13:c9:69:9c:24:1a:69:97:c4:c7:00:3a:37:8f:58:5c:39:
35:f3:1f:e7:0f:3d:8c:0d:d7:4c:9e:7a:70:5f:3e:ed:0a:81:
6b:76:19:24:98:da:8d:0a:c9:dd:72:79:eb:18:ae:32:df:93:
3a:d2:e7:6d:ec:cf:54:4c:ac:f2:67:79:f7:bb:ee:23:c8:83:
67:a7:33:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:49:32 2026 by rpki-client