Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/897092-0750-4d96-b32f-5f205236de1f/1/5NJxw_qQOlkP31SJlEnmmPLpxjI.mft
File: 5NJxw_qQOlkP31SJlEnmmPLpxjI.mft (raw, json)
Hash identifier: 1FFn7hKQv6Zda3IyI8mFDaPUi0SIyKfUQzqrEPxo7Yg=
Subject key identifier: C4:04:4A:70:CD:CC:F2:04:54:27:8F:6B:1F:10:9B:E9:60:FF:43:41
Authority key identifier: E4:D2:71:C3:FA:90:3A:59:0F:DF:54:89:94:49:E6:98:F2:E9:C6:32
Certificate issuer: /CN=e4d271c3fa903a590fdf54899449e698f2e9c632
Certificate serial: 019D27DFCDC01FEC89AD6DE05E75BBD1BAB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5NJxw_qQOlkP31SJlEnmmPLpxjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/897092-0750-4d96-b32f-5f205236de1f/1/5NJxw_qQOlkP31SJlEnmmPLpxjI.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 02:01:11 +0000
Manifest this update: Thu 26 Mar 2026 02:01:11 +0000
Manifest next update: Fri 27 Mar 2026 02:01:11 +0000
Files and hashes: 1: 5NJxw_qQOlkP31SJlEnmmPLpxjI.crl (hash: RM8JrsgN0/LHHifd/ihwXfFOll86DFaWKHR0FJp5roY=)
2: 9ODgGDzFJ29sZbO5Y0-xsyNjK4c.roa (hash: OkUtbla+KQC+6tAPqsg9uxnsiQTpUI77ifjU89ybPE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/897092-0750-4d96-b32f-5f205236de1f/1/5NJxw_qQOlkP31SJlEnmmPLpxjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/897092-0750-4d96-b32f-5f205236de1f/1/5NJxw_qQOlkP31SJlEnmmPLpxjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5NJxw_qQOlkP31SJlEnmmPLpxjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:cd:c0:1f:ec:89:ad:6d:e0:5e:75:bb:d1:ba:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4d271c3fa903a590fdf54899449e698f2e9c632
Validity
Not Before: Mar 26 02:01:11 2026 GMT
Not After : Mar 27 02:01:11 2026 GMT
Subject: CN=c4044a70cdccf20454278f6b1f109be960ff4341
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f8:6a:42:ff:01:bf:bc:cf:66:ec:7a:63:cb:
27:cd:cf:46:f8:9d:5d:b1:52:86:0d:cb:7c:89:28:
46:ce:9f:ff:b8:19:12:60:77:80:27:9f:d5:ec:b8:
69:e5:0d:75:28:5e:44:dd:7d:eb:9d:26:20:7f:12:
78:f6:ae:09:25:c6:25:18:e0:9e:e0:85:be:89:1f:
68:79:3b:53:4d:ce:71:c7:7c:b1:d4:3a:e2:48:76:
a4:43:ab:e7:20:69:1f:5f:6f:1f:c6:9b:08:11:d7:
64:5a:a5:f0:26:e5:c0:33:4c:e5:6e:6c:10:e0:72:
d3:25:ec:9d:c2:81:87:7b:c7:aa:64:c5:03:35:fa:
dd:9a:db:4e:5e:f9:01:39:a8:30:e5:35:e5:84:21:
93:ed:19:b9:14:92:dd:d1:3b:61:a5:c1:d8:2a:75:
24:c3:1a:d3:50:8d:72:38:77:ce:72:d0:b7:7e:5d:
12:05:4e:4d:e3:9c:9e:09:7e:05:1a:c5:de:6f:bb:
d7:b5:34:af:f2:fe:b1:b7:cb:78:dd:05:0b:7d:ff:
3d:0e:08:0c:de:7d:9e:70:4b:ca:c6:13:a6:f2:d2:
6f:22:44:8e:ca:9e:1b:e9:b1:8a:ad:82:78:c5:1d:
f8:26:46:81:0b:a0:d3:40:3a:99:76:f7:67:44:69:
77:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:04:4A:70:CD:CC:F2:04:54:27:8F:6B:1F:10:9B:E9:60:FF:43:41
X509v3 Authority Key Identifier:
keyid:E4:D2:71:C3:FA:90:3A:59:0F:DF:54:89:94:49:E6:98:F2:E9:C6:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5NJxw_qQOlkP31SJlEnmmPLpxjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/897092-0750-4d96-b32f-5f205236de1f/1/5NJxw_qQOlkP31SJlEnmmPLpxjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/897092-0750-4d96-b32f-5f205236de1f/1/5NJxw_qQOlkP31SJlEnmmPLpxjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:6d:5c:48:62:96:78:4d:0b:bd:14:04:2c:a4:48:f1:45:88:
a5:bd:65:da:4c:ed:53:c4:85:6a:86:89:5b:3e:f3:93:20:f4:
4a:51:95:71:3f:b8:79:66:b7:5e:e4:54:41:6f:38:01:ca:a4:
49:78:5c:bd:06:02:65:69:04:52:4f:d4:61:ad:94:bf:c6:75:
88:87:0c:f1:fa:57:06:df:18:3f:f1:93:37:05:84:33:ad:7b:
f5:4a:76:32:14:7e:e5:44:68:97:89:f7:29:d6:88:ba:78:12:
93:d2:3e:0e:be:af:aa:8e:6d:a4:92:a8:81:2a:50:1a:57:f6:
72:e8:7b:16:13:5a:71:55:6d:0d:79:05:a3:f3:f4:1d:a5:0b:
04:17:b1:db:3b:ea:9c:20:82:c3:04:5a:a4:a1:b9:f7:78:b4:
b1:50:37:8f:72:13:0a:0f:fc:52:79:d0:5f:9a:2e:1c:a8:e3:
9c:35:96:14:01:07:04:c2:77:46:c6:19:a9:23:8a:fc:b2:81:
12:12:e0:91:7f:96:fc:ca:0f:01:3e:38:aa:7d:1a:22:6e:02:
10:22:bc:66:ba:21:a4:3d:dc:94:28:d9:66:fc:59:67:c4:a2:
ca:38:74:41:f2:3e:af:59:93:a1:fd:70:64:cc:d2:b2:c1:d1:
46:5b:1b:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0n383AH+yJrW3gXnW70bq1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0ZDI3MWMzZmE5MDNhNTkwZmRmNTQ4OTk0NDllNjk4ZjJl
OWM2MzIwHhcNMjYwMzI2MDIwMTExWhcNMjYwMzI3MDIwMTExWjAzMTEwLwYDVQQD
EyhjNDA0NGE3MGNkY2NmMjA0NTQyNzhmNmIxZjEwOWJlOTYwZmY0MzQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPhqQv8Bv7zPZux6Y8snzc9G+J1d
sVKGDct8iShGzp//uBkSYHeAJ5/V7Lhp5Q11KF5E3X3rnSYgfxJ49q4JJcYlGOCe
4IW+iR9oeTtTTc5xx3yx1DriSHakQ6vnIGkfX28fxpsIEddkWqXwJuXAM0zlbmwQ
4HLTJeydwoGHe8eqZMUDNfrdmttOXvkBOagw5TXlhCGT7Rm5FJLd0TthpcHYKnUk
wxrTUI1yOHfOctC3fl0SBU5N45yeCX4FGsXeb7vXtTSv8v6xt8t43QULff89DggM
3n2ecEvKxhOm8tJvIkSOyp4b6bGKrYJ4xR34JkaBC6DTQDqZdvdnRGl3gQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMQESnDNzPIEVCePax8Qm+lg/0NBMB8GA1UdIwQY
MBaAFOTSccP6kDpZD99UiZRJ5pjy6cYyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNU5KeHdfcVFPbGtQMzFTSmxFbm1tUExweGpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC84OTcwOTItMDc1MC00ZDk2LWIzMmYt
NWYyMDUyMzZkZTFmLzEvNU5KeHdfcVFPbGtQMzFTSmxFbm1tUExweGpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC84OTcwOTItMDc1MC00ZDk2LWIzMmYtNWYyMDUyMzZkZTFm
LzEvNU5KeHdfcVFPbGtQMzFTSmxFbm1tUExweGpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm21cSGKW
eE0LvRQELKRI8UWIpb1l2kztU8SFaoaJWz7zkyD0SlGVcT+4eWa3XuRUQW84Acqk
SXhcvQYCZWkEUk/UYa2Uv8Z1iIcM8fpXBt8YP/GTNwWEM6179Up2MhR+5URol4n3
KdaIungSk9I+Dr6vqo5tpJKogSpQGlf2cuh7FhNacVVtDXkFo/P0HaULBBex2zvq
nCCCwwRapKG593i0sVA3j3ITCg/8UnnQX5ouHKjjnDWWFAEHBMJ3RsYZqSOK/LKB
EhLgkX+W/MoPAT44qn0aIm4CECK8ZrohpD3clCjZZvxZZ8Siyjh0QfI+r1mTof1w
ZMzSssHRRlsbPw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:15:44 2026 by rpki-client