Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/5LEwYQHMnsn86YUoDB2w83wTWjo.mft
File: 5LEwYQHMnsn86YUoDB2w83wTWjo.mft (raw, json)
Hash identifier: p+EedjoZwcEP/46fOJVl0RpVqqTlkk9yl4s+niK5K8k=
Subject key identifier: 2C:5A:DA:6A:B1:F1:19:1A:B7:6C:43:2F:8E:0F:D4:17:F8:88:E1:94
Authority key identifier: E4:B1:30:61:01:CC:9E:C9:FC:E9:85:28:0C:1D:B0:F3:7C:13:5A:3A
Certificate issuer: /CN=e4b1306101cc9ec9fce985280c1db0f37c135a3a
Certificate serial: 019D2A049C0960D3097D8C7147595CBDBB58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5LEwYQHMnsn86YUoDB2w83wTWjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/5LEwYQHMnsn86YUoDB2w83wTWjo.mft
Manifest number: 13CA
Signing time: Thu 26 Mar 2026 12:00:38 +0000
Manifest this update: Thu 26 Mar 2026 12:00:38 +0000
Manifest next update: Fri 27 Mar 2026 12:00:38 +0000
Files and hashes: 1: 5LEwYQHMnsn86YUoDB2w83wTWjo.crl (hash: JKQWummwVvyARb92Gp5FdaV0yUKbrfN0Eit0AGH1uuk=)
2: 8JfslYvm4v2DCkR1-kzWFB_UtnE.roa (hash: h87YXxxAOMgfpmrehAUMRdu+AwUhFPQd8qPAjnOPFQU=)
3: BQRT8MPKIPPADJStIFOXOoMHZS0.roa (hash: wXB7gl0TFstv2Pg/iuzGAlhhO65kpfWM+7GC5YZkRE8=)
4: zO6oWxgMXvv1E7No-VDUZLT2hYA.roa (hash: a+qLzMk3gjifCi7ls2zl3kNVE9LPAd8t8Cx6dxnL76U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/5LEwYQHMnsn86YUoDB2w83wTWjo.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/5LEwYQHMnsn86YUoDB2w83wTWjo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5LEwYQHMnsn86YUoDB2w83wTWjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 12:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:9c:09:60:d3:09:7d:8c:71:47:59:5c:bd:bb:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4b1306101cc9ec9fce985280c1db0f37c135a3a
Validity
Not Before: Mar 26 12:00:38 2026 GMT
Not After : Mar 27 12:00:38 2026 GMT
Subject: CN=2c5ada6ab1f1191ab76c432f8e0fd417f888e194
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:29:39:9f:71:c1:57:f7:b1:31:bd:a6:b3:13:
85:40:f7:cd:f6:cb:30:83:bd:b8:44:be:c6:23:5b:
e2:b9:9b:dc:58:1d:6d:65:80:94:9c:48:96:6b:e4:
4e:dd:a4:86:6a:b2:8a:ea:31:d2:c3:1c:88:7e:4b:
a9:9f:68:b6:74:44:a2:89:20:a5:c1:b3:d1:29:88:
20:c7:61:26:28:13:92:0f:7c:f2:be:39:dc:a0:1b:
e8:be:17:ed:8a:f4:b2:ee:88:03:55:61:59:6a:ff:
60:73:8c:8f:53:b0:9c:c9:db:46:48:83:d3:58:1d:
66:13:1c:fb:68:e1:0d:e6:73:94:39:06:f7:24:82:
5e:bd:5f:6d:62:6c:1a:5e:e9:d3:eb:58:c3:b7:df:
bb:5b:94:84:a6:02:ea:6e:d0:9c:1d:b2:bd:ae:cc:
39:51:bc:68:d5:9c:b7:bc:78:30:01:f8:b9:a4:33:
bf:85:52:67:67:df:64:a1:34:1e:c6:48:0f:ec:f1:
47:e7:4c:9d:59:60:1d:09:03:93:a9:cd:9c:0c:44:
30:d1:33:47:4e:46:63:1e:ab:82:e1:f5:2c:68:b7:
26:58:aa:e8:be:cd:3c:5e:97:bf:ab:d0:7a:ca:7c:
11:da:a5:04:c5:7c:b4:df:cc:cd:d9:29:5a:c1:b6:
8a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:5A:DA:6A:B1:F1:19:1A:B7:6C:43:2F:8E:0F:D4:17:F8:88:E1:94
X509v3 Authority Key Identifier:
keyid:E4:B1:30:61:01:CC:9E:C9:FC:E9:85:28:0C:1D:B0:F3:7C:13:5A:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5LEwYQHMnsn86YUoDB2w83wTWjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/5LEwYQHMnsn86YUoDB2w83wTWjo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/5LEwYQHMnsn86YUoDB2w83wTWjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:34:df:61:e4:4b:df:2c:f9:85:a3:8c:40:b8:b7:75:41:6e:
82:73:f6:af:b3:1c:22:e4:55:17:ec:6e:e3:1f:f5:bf:f3:05:
7e:fd:a3:35:2f:e9:c2:2e:f5:62:66:a7:86:09:6f:fc:de:df:
1b:9a:4b:7a:f5:71:03:09:89:db:12:ad:83:be:af:e2:cc:7e:
40:91:70:3a:51:b1:ff:a7:73:69:f2:49:6d:e9:05:f5:31:cc:
8f:de:a4:2f:06:f0:8a:62:f6:74:37:9d:54:66:dc:c5:a1:2c:
ad:27:80:cb:dd:52:47:a6:5b:31:4e:51:1b:60:1b:86:f9:0c:
48:94:6f:47:9c:c9:53:ee:f6:5c:14:83:b1:5d:df:2e:80:36:
77:8f:52:e2:30:46:1e:fa:9e:d7:96:a6:2e:88:d7:45:49:09:
25:59:d5:0a:39:95:7f:69:aa:1d:85:a3:e5:bc:3e:54:4e:c4:
b4:2d:1c:72:45:f8:60:53:53:78:1c:49:1d:02:5c:68:ff:a2:
98:3b:40:c5:48:2d:a1:24:91:c7:b4:64:a5:d0:f7:43:c0:e4:
8e:fb:70:d6:29:23:43:cb:26:02:8f:34:b0:94:a5:6d:f7:5d:
d1:c1:c1:61:b1:6d:42:0f:e8:fa:cd:6d:78:88:34:b3:da:cd:
d5:c9:01:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:15:10 2026 by rpki-client