Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/476383-f6da-4e0e-8e12-d2dcf05d3376/1/5wb8lykDS_sEZN1MmF8UuiEOgeM.mft
File: 5wb8lykDS_sEZN1MmF8UuiEOgeM.mft (raw, json)
Hash identifier: J2QXO0BZB3Kfwr2T+BbaHYB61SlbBnSxjmcMTx0FjRM=
Subject key identifier: 06:CE:0A:8B:0E:29:8A:CE:F0:D1:58:42:C0:C3:DF:D0:4B:ED:6E:2E
Authority key identifier: E7:06:FC:97:29:03:4B:FB:04:64:DD:4C:98:5F:14:BA:21:0E:81:E3
Certificate issuer: /CN=e706fc9729034bfb0464dd4c985f14ba210e81e3
Certificate serial: 019D2960B3CFBCAA0B9402F403D88D5E08E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5wb8lykDS_sEZN1MmF8UuiEOgeM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/476383-f6da-4e0e-8e12-d2dcf05d3376/1/5wb8lykDS_sEZN1MmF8UuiEOgeM.mft
Manifest number: 1645
Signing time: Thu 26 Mar 2026 09:01:36 +0000
Manifest this update: Thu 26 Mar 2026 09:01:36 +0000
Manifest next update: Fri 27 Mar 2026 09:01:36 +0000
Files and hashes: 1: 5wb8lykDS_sEZN1MmF8UuiEOgeM.crl (hash: 2phCnyfudhlQ5RGcP40AI+vD7Tr84+mTaQW/sEH4rqg=)
2: GzLunkiuJrZT29GjfYzrNoKzi0o.roa (hash: z0qcndllBOvCrIDRa+Y5b8LPZSiodfnEHp+s+Xs1Z38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/476383-f6da-4e0e-8e12-d2dcf05d3376/1/5wb8lykDS_sEZN1MmF8UuiEOgeM.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/476383-f6da-4e0e-8e12-d2dcf05d3376/1/5wb8lykDS_sEZN1MmF8UuiEOgeM.mft
rsync://rpki.ripe.net/repository/DEFAULT/5wb8lykDS_sEZN1MmF8UuiEOgeM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:b3:cf:bc:aa:0b:94:02:f4:03:d8:8d:5e:08:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e706fc9729034bfb0464dd4c985f14ba210e81e3
Validity
Not Before: Mar 26 09:01:36 2026 GMT
Not After : Mar 27 09:01:36 2026 GMT
Subject: CN=06ce0a8b0e298acef0d15842c0c3dfd04bed6e2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0b:e0:8d:c4:28:94:8a:dc:8f:19:07:ad:d4:
11:e4:ff:aa:8b:ec:74:24:b9:f0:48:73:a2:c4:7f:
b6:05:01:75:c6:c2:6a:19:63:b7:e8:51:ae:0d:06:
b2:2b:ce:55:ef:7c:17:14:3e:07:b8:16:b3:9d:7d:
9c:48:3b:48:30:2e:ac:e3:b3:4e:26:41:ae:df:e3:
c4:42:5b:66:d9:ca:bb:4b:c3:06:f5:05:96:96:79:
ce:8b:36:a7:bd:68:42:b3:c0:ba:c0:5b:2a:63:4a:
e9:1c:40:db:d8:25:4b:68:5b:23:c6:92:fc:72:5e:
b3:7a:25:e7:d1:71:5b:71:82:0f:f0:c1:89:1f:e0:
a3:64:c5:f9:74:23:b9:8f:ea:32:d1:ec:62:55:02:
41:db:bf:b2:b6:9f:d8:6d:5c:3d:42:84:e3:75:37:
a4:f0:16:d1:33:99:6f:6e:b3:82:3e:83:5b:e9:35:
b6:76:c9:dd:ed:48:99:92:cb:92:fa:98:ba:b6:a3:
77:96:3d:89:3d:18:d0:91:cd:f9:eb:9d:b6:b9:03:
44:85:5e:0d:22:76:f1:67:e1:51:e8:b4:33:cd:2e:
a9:7d:8d:ac:c1:e4:35:a5:b6:13:6d:01:88:b5:27:
f6:be:68:bc:25:a7:ca:cb:b5:ec:ff:ae:1f:03:1c:
fc:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:CE:0A:8B:0E:29:8A:CE:F0:D1:58:42:C0:C3:DF:D0:4B:ED:6E:2E
X509v3 Authority Key Identifier:
keyid:E7:06:FC:97:29:03:4B:FB:04:64:DD:4C:98:5F:14:BA:21:0E:81:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5wb8lykDS_sEZN1MmF8UuiEOgeM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/476383-f6da-4e0e-8e12-d2dcf05d3376/1/5wb8lykDS_sEZN1MmF8UuiEOgeM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/476383-f6da-4e0e-8e12-d2dcf05d3376/1/5wb8lykDS_sEZN1MmF8UuiEOgeM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:ff:9d:8c:51:4d:6f:c7:51:86:c5:3a:06:34:25:c2:e9:f1:
8b:c4:1e:4a:a1:1c:47:7c:c2:2a:b9:f1:62:6a:e2:a9:25:41:
fe:2f:91:f2:de:b0:a8:1f:21:99:16:0e:96:e3:22:c6:34:01:
2d:51:ef:81:6b:64:0a:6e:dc:c3:75:cf:ae:8f:fd:59:d1:fb:
6b:55:35:61:21:09:78:53:0d:c2:2d:92:ab:63:0e:1b:af:c6:
d7:34:be:37:33:19:dc:5f:99:a9:30:74:e1:25:b4:e3:3b:41:
93:65:16:3d:a7:f8:f4:9e:f6:80:a3:df:27:a8:6f:7f:10:bb:
ad:ac:ba:57:e7:62:15:59:d8:05:2a:ad:a0:1b:25:b4:2a:97:
cb:78:f4:e0:e6:1e:17:0a:f0:d3:dd:68:fc:c9:ab:a7:99:49:
ab:00:d3:62:5a:9a:e1:dc:b8:d5:72:9d:46:a4:69:66:51:96:
c5:05:43:a6:82:41:2d:42:a5:1b:7a:e4:2e:ef:c2:1c:4f:eb:
f4:cd:d6:d4:56:83:eb:10:6f:9b:d7:ac:fc:ce:7c:12:1a:65:
2d:f6:86:45:6a:ce:7a:3f:87:42:2a:a5:f2:5b:44:16:c3:a7:
16:6e:2a:4f:21:c0:35:ff:d9:94:92:49:4f:23:27:18:ca:6d:
82:22:76:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:52:03 2026 by rpki-client