Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/0cf7b9-938f-4c17-8ec7-d18d1ea568f5/1/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.mft
File: 5CAqP8Go6Fyd_S1l0xmoDdH7kX0.mft (raw, json)
Hash identifier: YJiOAl/panCnNnfGONTK/gJ8X8Wi/gxbfp00BHspsLs=
Subject key identifier: F4:F9:47:EF:2B:67:CA:4C:1F:24:30:CC:BC:AA:1F:2C:DE:EE:D5:0F
Authority key identifier: E4:20:2A:3F:C1:A8:E8:5C:9D:FD:2D:65:D3:19:A8:0D:D1:FB:91:7D
Certificate issuer: /CN=e4202a3fc1a8e85c9dfd2d65d319a80dd1fb917d
Certificate serial: 019D27A88C656F7D680C70FB241BC4D11E94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/0cf7b9-938f-4c17-8ec7-d18d1ea568f5/1/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.mft
Manifest number: 13E3
Signing time: Thu 26 Mar 2026 01:00:50 +0000
Manifest this update: Thu 26 Mar 2026 01:00:50 +0000
Manifest next update: Fri 27 Mar 2026 01:00:50 +0000
Files and hashes: 1: 5CAqP8Go6Fyd_S1l0xmoDdH7kX0.crl (hash: CJpxsqym0/6mYcePXjwWWnlNhufzu2M/mCamPXQC8X0=)
2: bqf5qipql10pKq2IW1cVBIAiNT0.roa (hash: +2BT4dwhMNJVzlVWSCe67UeT7mC6TzS9Mo4QbFrZxHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/0cf7b9-938f-4c17-8ec7-d18d1ea568f5/1/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/0cf7b9-938f-4c17-8ec7-d18d1ea568f5/1/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:8c:65:6f:7d:68:0c:70:fb:24:1b:c4:d1:1e:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4202a3fc1a8e85c9dfd2d65d319a80dd1fb917d
Validity
Not Before: Mar 26 01:00:50 2026 GMT
Not After : Mar 27 01:00:50 2026 GMT
Subject: CN=f4f947ef2b67ca4c1f2430ccbcaa1f2cdeeed50f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e2:5e:51:56:75:92:0c:85:5c:87:72:f0:33:
6b:9a:dd:7e:26:b0:2a:83:a0:c7:d7:82:e7:1b:ec:
c0:98:dd:86:ea:01:ed:93:d1:25:62:c9:46:08:77:
f1:8f:d1:9d:a8:67:fc:d6:54:24:0a:c5:af:d6:1e:
1e:40:42:a1:83:3a:c4:c6:18:a6:42:5c:18:7d:41:
72:fd:07:bc:68:1b:ab:66:3b:82:0d:34:fd:cb:80:
3d:43:44:0a:6e:d5:1c:cf:4e:8e:bb:6d:44:06:d6:
5f:2e:f2:01:35:f0:0e:99:75:8a:4c:83:29:89:3c:
5b:0b:55:69:91:ef:93:9c:f4:29:35:b6:57:63:08:
0e:fa:41:b2:64:9f:9b:5b:aa:06:46:7c:9e:a3:21:
43:0f:81:72:63:05:3a:84:13:29:11:6d:12:60:34:
8c:29:f1:36:2d:30:71:1a:86:8a:06:a2:22:47:7d:
22:80:c4:9b:ad:d7:c3:4d:8a:9d:31:e6:58:07:1d:
c5:14:ce:d4:de:0f:8a:e6:9e:8c:b8:81:37:63:0d:
02:57:e6:50:f6:58:dc:c3:73:bf:8a:45:98:e4:7a:
8a:49:ee:e8:f3:be:8d:88:4b:15:22:22:b0:bc:15:
1d:33:7f:14:87:b1:a0:57:a6:e6:4e:35:6d:1e:85:
c1:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:F9:47:EF:2B:67:CA:4C:1F:24:30:CC:BC:AA:1F:2C:DE:EE:D5:0F
X509v3 Authority Key Identifier:
keyid:E4:20:2A:3F:C1:A8:E8:5C:9D:FD:2D:65:D3:19:A8:0D:D1:FB:91:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/0cf7b9-938f-4c17-8ec7-d18d1ea568f5/1/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/0cf7b9-938f-4c17-8ec7-d18d1ea568f5/1/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:b4:f6:87:a8:43:04:0b:9d:eb:ac:53:f9:21:c0:40:fc:78:
18:8a:2c:00:c0:dc:28:ba:c8:ac:ff:37:e8:10:34:9e:4d:b3:
83:f9:a1:f2:bf:e9:46:67:9b:40:52:38:6f:d0:40:54:74:5e:
45:90:41:67:88:b3:be:0b:cb:44:b2:9c:8c:94:be:c3:75:6b:
7f:b8:2e:19:15:76:e7:ec:02:d2:18:d6:a4:4f:fc:e0:6a:79:
17:21:a5:7d:bc:94:95:ad:a8:15:9e:3f:3d:bd:60:1b:f7:16:
d5:b8:35:d9:0e:33:ff:14:ab:9d:96:6c:60:ee:2b:9a:d0:d2:
0f:b6:b8:c0:cc:81:60:f8:f4:c8:85:af:83:9f:d1:0b:7e:ca:
19:18:af:26:61:3e:ad:62:ea:f7:a6:cb:c9:f1:f4:25:39:e7:
7f:b6:41:04:1b:e8:3f:ad:59:52:a5:77:17:54:d1:df:a0:2e:
b7:3c:c0:bb:60:71:fb:de:f1:8a:6e:75:58:16:94:b8:e0:a3:
f6:4b:2c:31:40:37:f2:fa:f8:ba:72:f2:c0:04:34:c3:b1:38:
a1:4e:cd:bc:4b:88:81:cb:08:c7:e8:05:ea:df:66:e4:4e:3b:
ef:8c:f4:64:85:23:49:9a:bc:c8:89:89:46:60:8e:de:00:fe:
2b:3e:79:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:16:52 2026 by rpki-client