Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/aed261-93bc-4b0f-95f9-0c3eb1a0dd80/1/5ADgGnlalXLPsazYWWya0zxhJlk.mft
File: 5ADgGnlalXLPsazYWWya0zxhJlk.mft (raw, json)
Hash identifier: Uo9g69daUiK2VQ1GpWfaBS5OrdZbkbUyBM8M5PQ2sqQ=
Subject key identifier: B8:DD:C8:DE:C5:CD:CC:68:C4:C2:0E:68:D3:15:4F:AF:25:84:A8:FE
Authority key identifier: E4:00:E0:1A:79:5A:95:72:CF:B1:AC:D8:59:6C:9A:D3:3C:61:26:59
Certificate issuer: /CN=e400e01a795a9572cfb1acd8596c9ad33c612659
Certificate serial: 019D26283C305EBD593CEE69A51C22E26D99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5ADgGnlalXLPsazYWWya0zxhJlk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/aed261-93bc-4b0f-95f9-0c3eb1a0dd80/1/5ADgGnlalXLPsazYWWya0zxhJlk.mft
Manifest number: 0219
Signing time: Wed 25 Mar 2026 18:01:04 +0000
Manifest this update: Wed 25 Mar 2026 18:01:04 +0000
Manifest next update: Thu 26 Mar 2026 18:01:04 +0000
Files and hashes: 1: 5ADgGnlalXLPsazYWWya0zxhJlk.crl (hash: 508s66x2wJ5d8S+oLZaxTal2EvbP/6dhlG3UQZ8vzWo=)
2: NUAjVMxo6Ucd4xsIT8RtOeLkos4.roa (hash: RLlBvyKQk7ZpNWvbBgNGnwpHL3NkcCrqlw1bbIkW97k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/aed261-93bc-4b0f-95f9-0c3eb1a0dd80/1/5ADgGnlalXLPsazYWWya0zxhJlk.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/aed261-93bc-4b0f-95f9-0c3eb1a0dd80/1/5ADgGnlalXLPsazYWWya0zxhJlk.mft
rsync://rpki.ripe.net/repository/DEFAULT/5ADgGnlalXLPsazYWWya0zxhJlk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:3c:30:5e:bd:59:3c:ee:69:a5:1c:22:e2:6d:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e400e01a795a9572cfb1acd8596c9ad33c612659
Validity
Not Before: Mar 25 18:01:04 2026 GMT
Not After : Mar 26 18:01:04 2026 GMT
Subject: CN=b8ddc8dec5cdcc68c4c20e68d3154faf2584a8fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:97:cc:c3:e5:f1:3e:54:54:1e:79:0d:f4:00:
e0:e3:fb:58:ca:44:0e:af:af:be:2e:73:3d:4b:5a:
5d:1b:6a:64:83:b7:1f:94:c8:03:32:6c:9c:5a:7d:
c2:d7:0b:68:df:79:cc:f7:5f:7e:82:5c:c2:3a:63:
44:0a:72:62:6e:68:97:83:33:1b:48:ec:c8:a1:96:
fd:99:1f:d5:8f:f1:1b:47:77:50:c9:19:a9:87:de:
19:00:bf:df:1a:04:ee:d5:ba:3e:49:36:f2:84:a6:
69:93:42:92:20:8a:fa:6f:70:fd:08:af:a2:be:62:
be:0f:00:08:a1:c5:86:ed:6f:6d:42:72:41:56:f3:
5b:65:44:dd:33:67:35:23:c2:fd:e9:6a:8c:94:c1:
92:c4:87:17:03:32:4f:45:5f:ec:71:14:9b:79:da:
78:f4:13:0c:7a:e5:a3:fd:4d:e9:7e:90:4d:3d:1e:
4e:1f:b7:7e:e5:ac:68:6d:72:07:3c:8a:26:92:a7:
f0:69:b8:84:fb:c5:dc:49:d1:76:f9:3e:17:2a:24:
2b:8f:48:df:44:d2:84:c3:b6:28:aa:8d:f4:55:37:
89:94:63:ea:ab:2d:98:96:d9:b6:55:3e:61:71:ed:
b3:b8:7b:73:87:be:b6:eb:09:87:87:b5:6f:a8:65:
4e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:DD:C8:DE:C5:CD:CC:68:C4:C2:0E:68:D3:15:4F:AF:25:84:A8:FE
X509v3 Authority Key Identifier:
keyid:E4:00:E0:1A:79:5A:95:72:CF:B1:AC:D8:59:6C:9A:D3:3C:61:26:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5ADgGnlalXLPsazYWWya0zxhJlk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/aed261-93bc-4b0f-95f9-0c3eb1a0dd80/1/5ADgGnlalXLPsazYWWya0zxhJlk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/aed261-93bc-4b0f-95f9-0c3eb1a0dd80/1/5ADgGnlalXLPsazYWWya0zxhJlk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:3c:d2:c6:8c:b2:ee:49:f0:84:9f:e5:c9:0b:a6:8b:4d:e2:
6c:a2:71:82:1c:5e:14:32:47:94:3f:0f:ba:d3:f6:25:1f:98:
1f:07:11:7a:fb:98:9a:81:b8:5f:51:eb:72:5c:2a:d1:6d:4d:
48:5f:c8:65:e5:86:93:09:45:6a:cb:dd:df:71:e5:87:bd:e4:
b9:c1:14:1b:38:91:0b:25:19:60:29:d3:1d:9f:b6:e6:8a:d1:
f5:d2:05:56:19:18:c2:ee:db:d0:14:a0:02:4a:84:9e:49:35:
4d:cf:16:d9:41:44:73:c8:ca:02:bc:88:86:95:05:24:7c:a5:
56:79:e2:cc:21:bc:4a:be:19:5b:54:f1:83:d4:3c:be:6d:4d:
cb:9f:40:d8:23:5c:a6:a0:21:0c:0d:3b:c6:42:94:14:a1:87:
7d:03:3c:48:2c:aa:84:9c:06:1e:5b:88:06:01:fc:24:45:1c:
81:bc:e5:84:78:c3:79:bb:af:e1:d7:49:a6:ff:fd:2b:55:ec:
9b:51:28:04:59:7d:fa:e6:e5:53:78:29:65:40:3c:64:05:82:
9b:1f:af:f1:e4:69:93:1b:2b:44:6c:05:90:59:4e:21:f0:65:
6a:84:16:7d:d5:a6:da:91:8d:31:90:c6:87:60:96:f4:58:32:
ee:f6:ff:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:59:39 2026 by rpki-client