Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/b78cc4-4d7e-4d25-9a43-9b367ab2ccd3/1/5F5MjDqIUCbfjNYzeXjn-qkaRGo.mft
File: 5F5MjDqIUCbfjNYzeXjn-qkaRGo.mft (raw, json)
Hash identifier: gCHpkVqnGQJvkwOprfRqlf0rGWJU/RudIYcgTKiQ8pk=
Subject key identifier: 22:96:F7:A4:A8:54:39:C3:5E:BE:68:03:21:FE:BF:DB:E1:63:0C:94
Authority key identifier: E4:5E:4C:8C:3A:88:50:26:DF:8C:D6:33:79:78:E7:FA:A9:1A:44:6A
Certificate issuer: /CN=e45e4c8c3a885026df8cd6337978e7faa91a446a
Certificate serial: 019D29974248AB417550E5A3B89EA0415468
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5F5MjDqIUCbfjNYzeXjn-qkaRGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/b78cc4-4d7e-4d25-9a43-9b367ab2ccd3/1/5F5MjDqIUCbfjNYzeXjn-qkaRGo.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 10:01:11 +0000
Manifest this update: Thu 26 Mar 2026 10:01:11 +0000
Manifest next update: Fri 27 Mar 2026 10:01:11 +0000
Files and hashes: 1: 5F5MjDqIUCbfjNYzeXjn-qkaRGo.crl (hash: AVcE+mfNCB6U6qD81gsyKY/cycAYnYikJZ9c4rejBJc=)
2: ko2j8hnKnRa6XfeSySN88cJHiqc.roa (hash: MyMKVgwxSjCpWrh/r1qz4ah1FabN79izJ21lx/qGswk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/b78cc4-4d7e-4d25-9a43-9b367ab2ccd3/1/5F5MjDqIUCbfjNYzeXjn-qkaRGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/b78cc4-4d7e-4d25-9a43-9b367ab2ccd3/1/5F5MjDqIUCbfjNYzeXjn-qkaRGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5F5MjDqIUCbfjNYzeXjn-qkaRGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:42:48:ab:41:75:50:e5:a3:b8:9e:a0:41:54:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e45e4c8c3a885026df8cd6337978e7faa91a446a
Validity
Not Before: Mar 26 10:01:11 2026 GMT
Not After : Mar 27 10:01:11 2026 GMT
Subject: CN=2296f7a4a85439c35ebe680321febfdbe1630c94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c3:5e:49:72:5f:8c:07:b4:62:81:77:44:62:
73:fc:24:08:36:47:43:d8:6f:4b:f7:a1:55:4b:2b:
b8:24:4a:b8:c9:fc:cd:f4:fb:ca:16:d9:93:e0:24:
2e:9f:6a:03:98:a1:e5:f6:fe:c6:7f:b7:d9:b0:87:
53:5a:24:49:a7:f2:28:a7:2f:83:80:e4:e4:86:22:
71:e6:93:d4:57:87:68:ea:0d:34:ae:33:47:da:3f:
6b:76:4c:b8:1c:6f:8b:38:14:6f:ca:1c:71:1c:c6:
b6:fe:52:6e:ba:e0:47:69:b3:9e:d8:35:ea:70:33:
78:c5:f2:72:4f:af:11:9b:bc:e4:0b:81:22:d3:85:
31:86:c7:48:f6:e6:ca:12:b9:e8:bc:07:86:b2:13:
ed:ec:6d:39:62:27:11:cd:d3:a0:75:34:6c:4a:52:
71:c9:ed:3a:96:30:b2:f9:75:54:78:0f:c3:92:f0:
f3:52:9b:94:3c:3c:86:7c:b8:f5:bc:10:ec:ac:19:
62:e1:61:4c:67:4c:9f:de:33:6e:96:39:15:5a:45:
66:03:ce:62:e3:1c:75:1f:21:ba:23:cf:06:57:0d:
45:ca:3b:c7:f4:71:2d:5e:22:06:10:83:43:16:88:
72:9f:5b:58:23:d8:5e:e3:27:d0:e0:a5:df:f4:35:
2e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:96:F7:A4:A8:54:39:C3:5E:BE:68:03:21:FE:BF:DB:E1:63:0C:94
X509v3 Authority Key Identifier:
keyid:E4:5E:4C:8C:3A:88:50:26:DF:8C:D6:33:79:78:E7:FA:A9:1A:44:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5F5MjDqIUCbfjNYzeXjn-qkaRGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/b78cc4-4d7e-4d25-9a43-9b367ab2ccd3/1/5F5MjDqIUCbfjNYzeXjn-qkaRGo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/b78cc4-4d7e-4d25-9a43-9b367ab2ccd3/1/5F5MjDqIUCbfjNYzeXjn-qkaRGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:6f:c3:fe:af:fa:78:65:da:f1:15:6a:36:e9:5c:f6:b6:c7:
e3:5f:b3:d5:99:bf:02:57:a6:7b:c8:01:64:8c:6a:93:50:cb:
cd:50:13:9f:48:cd:97:20:8e:9a:04:83:d5:a6:3c:6a:25:dc:
63:6d:c3:bd:22:e5:b3:fb:eb:c7:b7:95:26:ee:c4:83:3c:62:
5d:ce:77:f0:73:b3:da:ff:b1:73:51:5b:c0:44:52:06:2e:99:
f2:83:60:90:30:d0:34:e1:cd:28:da:f2:97:57:84:e0:20:5e:
a2:b2:bc:02:7d:e3:97:d0:32:1f:ed:58:e7:39:b1:0e:e1:96:
75:dc:2b:4b:95:b4:28:4d:d0:46:bb:03:d1:04:d7:e8:d8:f1:
17:9b:3f:bf:96:0d:b2:98:ad:f9:df:c2:5a:e9:30:08:ed:a9:
41:ec:95:ff:41:b2:d4:af:df:26:52:c8:46:2f:f3:8e:a7:27:
12:0a:0c:9a:d0:c4:b9:79:37:91:04:9e:b3:6c:23:a2:6b:76:
4e:9b:8e:d0:41:0b:50:7a:18:8d:c5:77:68:06:4b:a4:15:66:
31:7b:73:af:67:f1:3b:eb:91:cc:21:bd:06:0f:1a:ec:f0:5e:
5a:e0:86:19:a8:c2:db:e5:53:53:ce:6e:ae:3a:c0:8b:18:64:
29:81:0d:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:25:32 2026 by rpki-client