Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/ba1c97-0e56-4840-b613-b361a2c457c4/1/5fmFqUAlRIkU3qoXQiBzBDklE90.mft
File: 5fmFqUAlRIkU3qoXQiBzBDklE90.mft (raw, json)
Hash identifier: D55BGExX6CXSemT1FFFNIPlz6FztMYDAfC540ti68wg=
Subject key identifier: F8:7A:D1:0F:F2:C1:2F:0C:4A:4F:88:D0:99:3A:B1:84:A7:64:28:22
Authority key identifier: E5:F9:85:A9:40:25:44:89:14:DE:AA:17:42:20:73:04:39:25:13:DD
Certificate issuer: /CN=e5f985a94025448914deaa1742207304392513dd
Certificate serial: 019D2A72CDFB5424CF57450B9D39E8455B8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5fmFqUAlRIkU3qoXQiBzBDklE90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/ba1c97-0e56-4840-b613-b361a2c457c4/1/5fmFqUAlRIkU3qoXQiBzBDklE90.mft
Manifest number: 0459
Signing time: Thu 26 Mar 2026 14:00:59 +0000
Manifest this update: Thu 26 Mar 2026 14:00:59 +0000
Manifest next update: Fri 27 Mar 2026 14:00:59 +0000
Files and hashes: 1: 5fmFqUAlRIkU3qoXQiBzBDklE90.crl (hash: mYT7Q1DYZFKckN3ndfUis5dJVjL91yhAmhEuuU8CuLM=)
2: i19szVZhRKN0uM8PI30DBqNVBcc.roa (hash: BxpnJWWpyzAJHpDXAkgY/3s3l/OZgniCap33rZlXUMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/ba1c97-0e56-4840-b613-b361a2c457c4/1/5fmFqUAlRIkU3qoXQiBzBDklE90.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/ba1c97-0e56-4840-b613-b361a2c457c4/1/5fmFqUAlRIkU3qoXQiBzBDklE90.mft
rsync://rpki.ripe.net/repository/DEFAULT/5fmFqUAlRIkU3qoXQiBzBDklE90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:cd:fb:54:24:cf:57:45:0b:9d:39:e8:45:5b:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5f985a94025448914deaa1742207304392513dd
Validity
Not Before: Mar 26 14:00:59 2026 GMT
Not After : Mar 27 14:00:59 2026 GMT
Subject: CN=f87ad10ff2c12f0c4a4f88d0993ab184a7642822
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:bc:89:a8:6a:2f:e3:c4:83:03:0d:f5:09:ac:
1e:9d:d1:99:95:a8:4c:53:a0:b7:95:c1:28:63:24:
99:ce:15:bb:1a:cd:24:1d:3a:99:e1:da:dd:ac:48:
b3:67:c9:ca:e5:4d:57:5a:53:fb:1a:11:13:8e:ae:
ef:de:3a:97:1c:55:44:b4:8b:2c:93:ad:9e:97:d3:
c9:d4:93:7e:12:69:09:04:c7:9b:b3:d5:d6:1e:3c:
fa:1d:8d:33:76:ac:61:22:f9:4e:82:69:9c:22:9d:
b7:65:65:4b:8e:b7:4c:ed:e0:30:9c:5c:a1:cd:a8:
08:bc:ba:bd:f7:f0:1e:2a:58:ae:7c:65:88:7b:df:
5e:74:e5:48:55:b8:0a:7e:52:ce:a8:63:ce:d5:9b:
30:5e:06:a3:0f:68:35:4c:0c:47:bb:92:6f:41:90:
c6:b7:6e:fc:56:a5:e9:59:5a:4b:c1:59:12:13:3c:
a5:da:0b:73:05:df:a4:8a:31:97:5b:7a:ab:c0:63:
3e:06:a0:73:35:a2:37:92:c0:dd:1b:c1:fb:86:85:
d1:7b:8b:e0:30:8a:99:d3:43:30:cb:18:09:88:d0:
fe:74:4e:8f:3e:16:6b:74:30:02:cf:ea:9f:f8:b6:
14:c8:28:06:d7:8e:29:ed:7a:f8:fe:4b:ac:af:89:
ce:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:7A:D1:0F:F2:C1:2F:0C:4A:4F:88:D0:99:3A:B1:84:A7:64:28:22
X509v3 Authority Key Identifier:
keyid:E5:F9:85:A9:40:25:44:89:14:DE:AA:17:42:20:73:04:39:25:13:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5fmFqUAlRIkU3qoXQiBzBDklE90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/ba1c97-0e56-4840-b613-b361a2c457c4/1/5fmFqUAlRIkU3qoXQiBzBDklE90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/ba1c97-0e56-4840-b613-b361a2c457c4/1/5fmFqUAlRIkU3qoXQiBzBDklE90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:e4:d6:ca:0e:9e:98:0b:f0:ad:f8:ec:66:d2:22:a8:99:22:
74:d4:4a:de:96:88:fc:4e:55:00:86:ba:46:9c:08:0c:67:bb:
13:e5:71:27:e7:6b:75:fe:53:a6:9b:a4:e6:48:39:16:f3:0f:
59:1b:33:3b:87:d4:9d:9d:f5:29:47:c6:5d:7f:b3:30:ae:2f:
27:dc:91:11:07:bf:ed:81:fb:aa:51:7c:59:0c:1a:46:ca:99:
87:12:07:91:14:18:74:df:f1:2b:06:ac:d8:5a:c0:e6:89:d2:
cc:84:1d:e5:6b:56:e7:75:a5:0a:65:4c:0d:a3:69:88:d4:4a:
42:b4:36:6b:97:08:4f:97:22:c8:a7:00:81:a2:b3:d2:c5:dd:
8d:24:aa:3b:af:24:25:94:6f:3d:0b:8c:10:98:3d:1d:4b:a4:
b1:6a:6b:fb:7b:80:ef:1a:1f:30:cf:5f:6c:1f:3e:ec:f9:a1:
de:ad:5f:fc:1a:80:0c:51:04:3f:32:cd:e9:a9:a4:1d:22:2f:
7c:fa:4e:6a:dd:ad:1d:13:58:9b:90:79:9a:b7:c9:4c:e5:c7:
47:c0:06:22:de:36:30:c8:db:92:87:5b:96:c2:5a:7e:b1:c5:
fb:35:67:61:6d:dc:cf:2c:90:db:21:c8:42:1f:45:40:df:ab:
4a:ff:65:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:01:19 2026 by rpki-client