Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/476383-f6da-4e0e-8e12-d2dcf05d3376/1/5wb8lykDS_sEZN1MmF8UuiEOgeM.mft
File: 5wb8lykDS_sEZN1MmF8UuiEOgeM.mft (raw, json)
Hash identifier: zOUCNB4QfJa/gBOWcFkew88sXH0tjU6KY+jVgTT6QsA=
Subject key identifier: 20:97:D3:64:A3:B5:4A:7E:46:6E:D3:85:7E:97:D6:4F:41:FF:D8:0D
Authority key identifier: E7:06:FC:97:29:03:4B:FB:04:64:DD:4C:98:5F:14:BA:21:0E:81:E3
Certificate issuer: /CN=e706fc9729034bfb0464dd4c985f14ba210e81e3
Certificate serial: 019D2B4EBC9B86CE6B38917DDEE2C81C39E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5wb8lykDS_sEZN1MmF8UuiEOgeM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/476383-f6da-4e0e-8e12-d2dcf05d3376/1/5wb8lykDS_sEZN1MmF8UuiEOgeM.mft
Manifest number: 1646
Signing time: Thu 26 Mar 2026 18:01:13 +0000
Manifest this update: Thu 26 Mar 2026 18:01:13 +0000
Manifest next update: Fri 27 Mar 2026 18:01:13 +0000
Files and hashes: 1: 5wb8lykDS_sEZN1MmF8UuiEOgeM.crl (hash: P8XcvJthoMvvW9CEbRaCLvBPB5PsTfmwhONcPhL35xs=)
2: GzLunkiuJrZT29GjfYzrNoKzi0o.roa (hash: z0qcndllBOvCrIDRa+Y5b8LPZSiodfnEHp+s+Xs1Z38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/476383-f6da-4e0e-8e12-d2dcf05d3376/1/5wb8lykDS_sEZN1MmF8UuiEOgeM.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/476383-f6da-4e0e-8e12-d2dcf05d3376/1/5wb8lykDS_sEZN1MmF8UuiEOgeM.mft
rsync://rpki.ripe.net/repository/DEFAULT/5wb8lykDS_sEZN1MmF8UuiEOgeM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:4e:bc:9b:86:ce:6b:38:91:7d:de:e2:c8:1c:39:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e706fc9729034bfb0464dd4c985f14ba210e81e3
Validity
Not Before: Mar 26 18:01:13 2026 GMT
Not After : Mar 27 18:01:13 2026 GMT
Subject: CN=2097d364a3b54a7e466ed3857e97d64f41ffd80d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:51:b9:98:27:66:f1:07:c5:cc:15:0f:f3:40:
43:1c:75:6f:50:6a:21:69:d5:e3:bc:76:d1:a8:88:
7b:01:00:a9:a6:e5:71:d6:ee:f6:c7:82:dd:b2:f8:
6e:69:04:2f:3e:27:d6:aa:22:bc:39:36:01:59:ba:
3c:b3:58:23:2e:d1:72:41:93:25:b4:39:7b:25:83:
3e:f6:9b:d9:84:29:72:5e:59:0c:a5:11:31:be:a8:
86:f8:6e:21:d3:db:bf:6d:1b:9a:c7:f6:8b:31:f0:
c6:9a:4e:cf:d4:e9:8e:55:72:32:e1:29:c2:a5:2f:
ba:27:b1:64:07:ca:cc:c7:96:d8:ee:08:ce:a9:a9:
91:0a:da:5a:f7:5e:aa:af:a2:fc:8f:09:d5:18:e4:
fe:51:a7:48:f3:2d:3a:51:67:91:64:21:ad:e7:3c:
4c:4c:17:09:c4:b6:af:6f:67:5b:38:88:79:d3:45:
8d:9a:69:e5:3f:1f:a1:1c:4d:31:90:29:52:78:a8:
ed:b9:55:51:7c:99:58:0c:b3:83:46:eb:03:b8:9e:
24:53:6d:e4:91:36:a2:0d:64:6f:40:bf:01:a6:b3:
5f:60:11:a5:3d:7f:cd:6d:85:5f:82:f0:ef:4a:2b:
9f:67:a8:ba:c3:b8:a7:1b:e5:c5:fe:f2:30:5d:5c:
55:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:97:D3:64:A3:B5:4A:7E:46:6E:D3:85:7E:97:D6:4F:41:FF:D8:0D
X509v3 Authority Key Identifier:
keyid:E7:06:FC:97:29:03:4B:FB:04:64:DD:4C:98:5F:14:BA:21:0E:81:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5wb8lykDS_sEZN1MmF8UuiEOgeM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/476383-f6da-4e0e-8e12-d2dcf05d3376/1/5wb8lykDS_sEZN1MmF8UuiEOgeM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/476383-f6da-4e0e-8e12-d2dcf05d3376/1/5wb8lykDS_sEZN1MmF8UuiEOgeM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:f8:83:d2:aa:8e:01:8e:0f:7d:ed:77:a7:f9:81:26:42:76:
fa:07:82:c0:28:1c:c0:59:a2:16:77:3f:24:64:7f:2a:9f:d0:
ab:74:33:45:c5:78:01:01:5f:4e:25:37:7d:f7:b6:af:63:34:
3a:19:9e:97:90:ac:6e:60:96:7d:9a:18:75:5a:04:e6:b9:63:
d9:45:cc:16:3e:44:7b:27:3b:fc:76:20:86:9a:d6:8d:e5:b8:
46:9a:02:59:04:1c:29:d8:95:22:df:5e:02:21:38:18:cb:36:
5c:28:d0:eb:6b:30:0a:19:e9:75:2a:18:90:46:55:78:fd:29:
a6:37:00:3b:17:9d:83:c6:c1:87:8d:af:7a:17:d5:be:fd:b9:
5d:5a:40:ef:32:a3:c5:0d:45:c8:a1:6b:d7:ca:2a:10:d6:41:
58:3e:c0:a9:b6:2b:1f:74:be:03:47:33:ed:5b:a6:1c:83:49:
f7:e5:9f:b6:42:03:5a:f8:15:e6:a5:1c:bb:b7:84:07:b4:91:
fa:1d:db:7b:3f:c8:be:9d:16:24:b5:cf:8e:0d:20:02:7f:c4:
40:ed:1c:ac:c2:17:6a:4a:0a:19:1b:54:0d:6c:ab:20:65:be:
d2:42:10:72:b5:12:00:fc:f1:7c:f1:ec:2f:a2:56:d0:a6:de:
bc:0c:4d:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:05:12 2026 by rpki-client