Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.mft
File: 5NsDAf4kYcbeP3GNhHy13HwAstI.mft (raw, json)
Hash identifier: z5a34jh/O0WKX1cc3XrBLsA89UozQNqCljbwc/EhOAQ=
Subject key identifier: CA:0E:CA:44:DF:93:E0:F4:DE:D2:9A:27:A2:D1:66:66:34:49:5F:85
Authority key identifier: E4:DB:03:01:FE:24:61:C6:DE:3F:71:8D:84:7C:B5:DC:7C:00:B2:D2
Certificate issuer: /CN=e4db0301fe2461c6de3f718d847cb5dc7c00b2d2
Certificate serial: 019D299726C736ABF05EF6A664EC934371FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5NsDAf4kYcbeP3GNhHy13HwAstI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.mft
Manifest number: 146E
Signing time: Thu 26 Mar 2026 10:01:04 +0000
Manifest this update: Thu 26 Mar 2026 10:01:04 +0000
Manifest next update: Fri 27 Mar 2026 10:01:04 +0000
Files and hashes: 1: 2_kKsluZPpTjZPOr9nXKxoDbv6o.roa (hash: oJRwhRHFVN4UC8uIJgD85cpNy3gmR91KVrX4wcGTHWc=)
2: 5NsDAf4kYcbeP3GNhHy13HwAstI.crl (hash: b4YqrAhy3pXMG+j8JjDgyTkCD5jx35A79yhUpozVfrI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5NsDAf4kYcbeP3GNhHy13HwAstI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:26:c7:36:ab:f0:5e:f6:a6:64:ec:93:43:71:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4db0301fe2461c6de3f718d847cb5dc7c00b2d2
Validity
Not Before: Mar 26 10:01:04 2026 GMT
Not After : Mar 27 10:01:04 2026 GMT
Subject: CN=ca0eca44df93e0f4ded29a27a2d1666634495f85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:33:8c:b2:63:e0:da:a2:6a:a5:6a:f8:13:08:
e8:13:49:12:73:b3:60:fe:60:c4:1e:aa:45:bd:3f:
10:9e:fd:65:2f:b0:48:22:3f:07:ac:d6:6e:ba:75:
c9:91:a0:42:6b:20:76:5b:90:62:ef:3a:d4:27:8e:
69:71:d9:91:f6:50:d6:a4:77:52:36:f0:59:3e:d0:
44:5a:1b:b6:42:ee:17:f1:ce:c7:a1:aa:77:97:37:
41:d9:08:1a:b7:02:7c:b9:c6:ca:d4:b5:6a:c2:19:
09:e6:9e:1f:bc:28:3d:7e:2b:32:c3:ca:b6:2b:f3:
b7:43:72:41:85:14:da:29:76:f2:40:fc:5e:b2:89:
fa:b7:9f:5d:af:27:41:9c:1a:af:cc:5b:81:9b:13:
85:61:8f:25:de:de:fc:bc:3a:ec:cc:cd:82:dc:e2:
4a:be:61:a5:5a:d4:70:bd:c5:10:5d:6e:00:45:df:
1c:5b:83:75:c9:3e:bd:55:e5:04:bc:87:79:21:f7:
38:4f:46:7c:41:1b:b5:d5:f0:85:3e:81:4a:cc:c7:
f7:51:cb:ae:66:c3:e3:b7:e8:e4:e0:65:85:b3:ff:
0d:e6:de:80:50:7d:cb:f4:a2:8f:eb:48:3c:25:11:
4c:57:24:dc:47:9c:30:df:a2:7f:70:da:3f:7b:34:
77:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:0E:CA:44:DF:93:E0:F4:DE:D2:9A:27:A2:D1:66:66:34:49:5F:85
X509v3 Authority Key Identifier:
keyid:E4:DB:03:01:FE:24:61:C6:DE:3F:71:8D:84:7C:B5:DC:7C:00:B2:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5NsDAf4kYcbeP3GNhHy13HwAstI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:bf:f8:ac:9e:6f:9a:41:83:35:a5:cc:fa:aa:70:bc:ce:dc:
62:4b:1a:20:a5:5b:35:56:43:66:ad:a1:24:e1:f2:59:f0:a6:
39:27:d8:0f:21:59:18:fe:c4:16:d5:22:d6:6a:31:c4:3a:9f:
28:32:24:3d:2c:b5:7e:86:9f:c8:28:a5:bc:d5:7e:5e:51:9a:
1b:dc:86:a1:cf:7d:e4:4d:83:9d:fc:04:f1:49:30:81:f9:8c:
df:80:a6:da:53:7b:a4:c9:55:0e:af:be:4c:11:30:ef:95:4b:
b3:23:3b:a9:c5:05:63:f2:db:19:c2:53:5e:1e:21:07:2a:fa:
e9:44:04:a0:83:e6:09:d7:b8:20:46:79:8f:fd:dc:40:93:bc:
e9:30:9f:02:04:d9:5a:f5:cc:6c:c3:ed:5a:a2:1d:a4:d2:79:
73:ea:f8:82:34:e5:81:f3:19:3a:4d:ef:8a:c5:83:1f:c6:e3:
9c:d0:a3:7c:ff:a7:12:7e:f4:60:a9:e2:59:2c:d9:9f:6c:fe:
9e:92:bb:9a:32:39:66:12:c9:da:9f:2d:94:e0:dc:c0:0b:7e:
38:87:ba:ad:a0:f6:21:c5:84:65:b1:5e:2a:62:c9:4b:e5:5b:
6d:5d:37:2b:98:56:81:77:d6:e9:4b:51:86:ad:8a:77:f1:f9:
73:47:b4:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:50:35 2026 by rpki-client