Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/8c9f19-a700-4832-be21-b0d5e8be853c/1/5EV2NuWtZuHw-7LBDfKQleY-mS8.mft
File: 5EV2NuWtZuHw-7LBDfKQleY-mS8.mft (raw, json)
Hash identifier: 78aY52qvITpn39PCSI9JMzxcf5xaaShK0oKX0JAdUKw=
Subject key identifier: 1A:91:03:07:D1:B8:AE:A1:CD:CE:6A:D0:05:97:78:ED:0E:3B:CF:06
Authority key identifier: E4:45:76:36:E5:AD:66:E1:F0:FB:B2:C1:0D:F2:90:95:E6:3E:99:2F
Certificate issuer: /CN=e4457636e5ad66e1f0fbb2c10df29095e63e992f
Certificate serial: 019D254C29D262230A3403DA7BB9FFB215EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5EV2NuWtZuHw-7LBDfKQleY-mS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/8c9f19-a700-4832-be21-b0d5e8be853c/1/5EV2NuWtZuHw-7LBDfKQleY-mS8.mft
Manifest number: 120B
Signing time: Wed 25 Mar 2026 14:00:41 +0000
Manifest this update: Wed 25 Mar 2026 14:00:41 +0000
Manifest next update: Thu 26 Mar 2026 14:00:41 +0000
Files and hashes: 1: 5EV2NuWtZuHw-7LBDfKQleY-mS8.crl (hash: 7xH/no+yz3F6KqJajAHdLaXd+eKXcFrebP63wKYv1z4=)
2: xu9m0hgW8GLJqqV5sAEGFCWL3iM.roa (hash: jbb1Ol93Bc4F6xDnWgQv6CKjC8B2J+BLxGOlCtqLSLk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/8c9f19-a700-4832-be21-b0d5e8be853c/1/5EV2NuWtZuHw-7LBDfKQleY-mS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/8c9f19-a700-4832-be21-b0d5e8be853c/1/5EV2NuWtZuHw-7LBDfKQleY-mS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/5EV2NuWtZuHw-7LBDfKQleY-mS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 14:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:4c:29:d2:62:23:0a:34:03:da:7b:b9:ff:b2:15:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4457636e5ad66e1f0fbb2c10df29095e63e992f
Validity
Not Before: Mar 25 14:00:41 2026 GMT
Not After : Mar 26 14:00:41 2026 GMT
Subject: CN=1a910307d1b8aea1cdce6ad0059778ed0e3bcf06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:38:bd:43:1b:13:b4:5c:6a:5a:51:fa:d9:ff:
6e:bb:bc:19:55:35:b4:38:b1:f6:75:74:2a:c0:04:
91:6d:c3:56:96:08:ef:4d:d9:4e:3f:d3:9f:b3:67:
11:21:71:53:57:79:f7:86:66:bb:c5:cc:47:d1:57:
8c:a7:63:0a:21:3e:26:33:55:02:d3:4e:e5:1b:c4:
96:92:45:7f:15:a1:30:cb:ac:26:12:3c:21:01:e1:
e7:a3:15:09:d0:0d:c8:2d:68:aa:32:b5:9b:97:04:
cf:9f:d3:62:6a:64:03:96:1f:80:70:d4:60:94:32:
12:c7:55:94:69:71:aa:b2:91:7b:70:b3:32:e4:fa:
36:77:c5:72:7e:0d:33:20:6b:f8:44:27:99:c8:78:
dd:6e:07:48:75:9f:88:e2:9a:95:94:dc:2b:d3:c3:
fb:4f:b4:ef:97:0c:65:42:0b:bd:5d:ea:b6:c2:84:
4d:a1:93:3c:7e:41:ec:3a:6e:f1:25:97:bb:81:78:
cd:dd:c8:f5:a0:63:ed:16:b6:47:e3:c1:e5:8f:ba:
7b:0c:33:d7:c0:6b:2c:81:3e:86:88:6a:b9:b3:b1:
81:74:ef:be:30:ce:47:16:78:45:37:0c:a3:9c:f9:
d5:ee:34:22:a9:0c:87:82:ed:7f:db:5d:20:33:60:
ca:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:91:03:07:D1:B8:AE:A1:CD:CE:6A:D0:05:97:78:ED:0E:3B:CF:06
X509v3 Authority Key Identifier:
keyid:E4:45:76:36:E5:AD:66:E1:F0:FB:B2:C1:0D:F2:90:95:E6:3E:99:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5EV2NuWtZuHw-7LBDfKQleY-mS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8c9f19-a700-4832-be21-b0d5e8be853c/1/5EV2NuWtZuHw-7LBDfKQleY-mS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8c9f19-a700-4832-be21-b0d5e8be853c/1/5EV2NuWtZuHw-7LBDfKQleY-mS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:62:e3:f6:45:54:cd:3e:71:7f:e6:71:6c:4a:65:4a:a3:4d:
c9:37:b1:dc:6b:75:60:3c:ec:63:b3:a5:ac:b8:79:bb:99:8e:
a3:2e:62:91:d3:83:cf:b1:7f:37:b2:81:c1:d0:b0:08:ac:5f:
e2:3e:f3:26:35:3e:31:1d:40:d0:a1:42:3f:bd:57:37:b6:bd:
b8:ca:31:d3:8b:45:3b:6a:9e:b0:78:3a:5f:9a:c4:49:a8:ac:
93:7d:ae:28:eb:6e:8a:9e:00:f6:e8:89:cd:5c:65:f0:8a:f5:
92:61:6f:2b:a1:ea:2c:48:2d:44:cf:2d:1b:fd:10:88:46:76:
0a:15:bb:0b:b8:e8:08:76:68:db:43:c7:e6:4a:d9:26:70:03:
16:ef:4e:0f:22:73:9a:09:63:bf:ae:64:93:cb:bd:3b:1e:0e:
7a:4c:c8:0c:ba:ea:ab:61:eb:64:b3:6c:a3:b4:a9:08:47:60:
9d:ee:e0:ad:57:ce:09:cc:f1:d5:22:dd:a9:56:8b:a5:43:5f:
b6:7d:f7:38:79:61:40:27:26:19:c9:41:fe:9b:93:68:2d:3b:
fa:86:ef:84:b6:82:4d:26:53:5f:a4:12:9a:1c:8f:a2:2b:13:
1a:86:e8:0e:88:24:81:ce:14:93:d7:0e:f0:56:6a:2b:f3:9b:
c7:0f:97:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:23 2026 by rpki-client