Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/9f54b5-a39a-4e60-8b1c-d1e460518483/1/5TmMlveEeBsu3CA8dRxOh5h4X6E.mft
File: 5TmMlveEeBsu3CA8dRxOh5h4X6E.mft (raw, json)
Hash identifier: VIGh7J9OIBkYg2NfSgTr47l/E66DgKPU4AAFtPOVPII=
Subject key identifier: 56:21:F7:59:BA:66:73:2C:A4:BB:33:61:7E:1E:3A:B7:01:B0:C4:8C
Authority key identifier: E5:39:8C:96:F7:84:78:1B:2E:DC:20:3C:75:1C:4E:87:98:78:5F:A1
Certificate issuer: /CN=e5398c96f784781b2edc203c751c4e8798785fa1
Certificate serial: 019D29977C7F5F99F3DF88D5842F00215A86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5TmMlveEeBsu3CA8dRxOh5h4X6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/9f54b5-a39a-4e60-8b1c-d1e460518483/1/5TmMlveEeBsu3CA8dRxOh5h4X6E.mft
Manifest number: 04A9
Signing time: Thu 26 Mar 2026 10:01:26 +0000
Manifest this update: Thu 26 Mar 2026 10:01:26 +0000
Manifest next update: Fri 27 Mar 2026 10:01:26 +0000
Files and hashes: 1: 5TmMlveEeBsu3CA8dRxOh5h4X6E.crl (hash: iMMJ0jDPBZrTD/pCUIAH1R4EXBIBwMcSBhMix7keaG0=)
2: TlB35RpoAYh9JfFwZIdprGXzgU8.roa (hash: XzBThBrqkP0celJU8AjVVtRAPROC88dRjyzplXxnsx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/9f54b5-a39a-4e60-8b1c-d1e460518483/1/5TmMlveEeBsu3CA8dRxOh5h4X6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/9f54b5-a39a-4e60-8b1c-d1e460518483/1/5TmMlveEeBsu3CA8dRxOh5h4X6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/5TmMlveEeBsu3CA8dRxOh5h4X6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:7c:7f:5f:99:f3:df:88:d5:84:2f:00:21:5a:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5398c96f784781b2edc203c751c4e8798785fa1
Validity
Not Before: Mar 26 10:01:26 2026 GMT
Not After : Mar 27 10:01:26 2026 GMT
Subject: CN=5621f759ba66732ca4bb33617e1e3ab701b0c48c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:dc:f6:30:80:56:74:c9:54:8e:ed:94:01:82:
2a:4c:53:71:c9:e1:8b:12:24:32:8d:26:30:bb:d0:
b2:19:7f:e9:59:1f:fb:4e:1d:97:7c:da:25:35:ed:
1f:43:34:d5:a1:ad:9c:d2:42:6a:38:06:09:7d:0b:
26:e8:06:29:c6:e4:e4:88:15:8a:5d:b4:21:8a:94:
dc:0f:71:f4:fa:86:da:56:ce:a4:80:5a:55:cb:fd:
80:23:7e:99:7a:e5:fc:a0:fa:b5:0b:b1:d3:a1:27:
8b:8e:23:53:53:de:0e:3f:82:38:fc:5f:02:87:8e:
31:06:89:88:65:83:90:93:33:be:cc:ab:d9:74:9c:
7c:37:ff:06:c1:d7:01:49:0c:ba:8e:bf:2f:70:2a:
c2:39:4c:77:f1:82:37:04:5d:4a:e8:33:77:1f:18:
51:fc:1d:25:7f:8d:16:de:06:73:f5:2d:64:47:f6:
3a:ab:f5:44:21:af:4e:83:05:73:6a:5a:b3:21:48:
eb:90:cf:0f:5d:6e:d5:8c:ae:93:c7:97:9c:15:10:
c0:73:9c:cd:eb:b6:8f:99:86:ce:a7:7f:ad:23:c4:
fe:6d:3b:c0:c3:ac:8c:26:6c:b3:80:41:db:77:d6:
48:6f:4c:5b:92:30:23:f4:69:51:aa:c9:87:da:6e:
ff:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:21:F7:59:BA:66:73:2C:A4:BB:33:61:7E:1E:3A:B7:01:B0:C4:8C
X509v3 Authority Key Identifier:
keyid:E5:39:8C:96:F7:84:78:1B:2E:DC:20:3C:75:1C:4E:87:98:78:5F:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5TmMlveEeBsu3CA8dRxOh5h4X6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/9f54b5-a39a-4e60-8b1c-d1e460518483/1/5TmMlveEeBsu3CA8dRxOh5h4X6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/9f54b5-a39a-4e60-8b1c-d1e460518483/1/5TmMlveEeBsu3CA8dRxOh5h4X6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:02:98:b5:25:7d:9e:bc:3f:a6:78:4b:a7:7a:13:99:ea:09:
ac:84:0a:c2:aa:11:ae:84:37:20:f0:13:41:b9:a4:2c:0c:ee:
76:ef:2e:00:3b:14:e0:cc:a4:57:03:9c:42:60:68:ff:4d:0d:
b5:f5:96:dc:82:10:e8:26:f3:2f:55:3e:bc:54:68:7d:de:dc:
87:52:a6:62:23:e0:e1:d3:5e:54:fa:bd:15:6e:fe:ab:a8:cf:
a4:f7:cf:7b:f6:07:d0:4f:b5:5c:72:fb:a6:e6:d6:cc:11:9d:
15:59:b5:aa:ab:a4:12:e1:12:fe:e6:50:5a:ee:50:68:05:77:
a0:74:a1:f6:d1:b4:b2:62:bb:73:a6:b5:0f:34:72:00:c2:a5:
90:dd:55:bb:aa:9f:8b:cd:11:87:47:cc:09:0a:a7:6c:2b:89:
0c:9c:e6:ee:84:95:76:5d:5a:38:83:60:af:a2:9b:36:2f:e7:
26:c7:38:a7:7e:48:cf:77:94:1b:47:0b:2e:f6:ce:12:eb:c3:
19:05:68:ab:2d:e7:b1:b8:14:9a:50:5f:98:67:e6:62:6a:7e:
39:c2:73:ac:80:35:a1:f4:6c:c6:94:a3:4b:59:31:4b:e1:41:
3b:c3:20:00:cf:4d:19:4a:9c:c2:e1:b2:22:e7:2e:39:f4:b5:
21:b7:a4:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:51:26 2026 by rpki-client