Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/060cea-e920-40de-90da-8d49ebcae9b3/1/5gSc-H3Y8f1MgCS1psnqlPF7b70.mft
File: 5gSc-H3Y8f1MgCS1psnqlPF7b70.mft (raw, json)
Hash identifier: DZUxwazuYww1Txz4MWz3er8HtJMYI/HSACi0Ekeeax8=
Subject key identifier: D1:0F:1B:87:6F:0D:84:F4:98:54:07:93:F1:E8:5D:3D:D7:49:1A:4A
Authority key identifier: E6:04:9C:F8:7D:D8:F1:FD:4C:80:24:B5:A6:C9:EA:94:F1:7B:6F:BD
Certificate issuer: /CN=e6049cf87dd8f1fd4c8024b5a6c9ea94f17b6fbd
Certificate serial: 019D32D07E319287AB00AC483BA74304F818
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5gSc-H3Y8f1MgCS1psnqlPF7b70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/060cea-e920-40de-90da-8d49ebcae9b3/1/5gSc-H3Y8f1MgCS1psnqlPF7b70.mft
Manifest number: 1820
Signing time: Sat 28 Mar 2026 05:00:17 +0000
Manifest this update: Sat 28 Mar 2026 05:00:17 +0000
Manifest next update: Sun 29 Mar 2026 05:00:17 +0000
Files and hashes: 1: 5gSc-H3Y8f1MgCS1psnqlPF7b70.crl (hash: Dy9cgLuGbgpqrG7Ah7ybNQAoa+IitFN175POmeKpZac=)
2: t2FHnnEHf_6TSghs3_z2wcfp-bA.roa (hash: 91+RIg0AqSl330cDSTT6P3HSGmorFbL8LnE7d4GsH5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/060cea-e920-40de-90da-8d49ebcae9b3/1/5gSc-H3Y8f1MgCS1psnqlPF7b70.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/060cea-e920-40de-90da-8d49ebcae9b3/1/5gSc-H3Y8f1MgCS1psnqlPF7b70.mft
rsync://rpki.ripe.net/repository/DEFAULT/5gSc-H3Y8f1MgCS1psnqlPF7b70.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:d0:7e:31:92:87:ab:00:ac:48:3b:a7:43:04:f8:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6049cf87dd8f1fd4c8024b5a6c9ea94f17b6fbd
Validity
Not Before: Mar 28 05:00:17 2026 GMT
Not After : Mar 29 05:00:17 2026 GMT
Subject: CN=d10f1b876f0d84f498540793f1e85d3dd7491a4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9e:f3:a6:a7:2b:0e:80:73:f0:70:37:c0:18:
29:eb:3b:88:6c:18:b4:23:86:40:cf:23:de:ca:98:
cd:fb:2e:50:44:6f:c3:51:4b:64:d4:5f:67:2a:f9:
0d:81:1d:05:0b:b7:c2:c9:c3:0b:e3:61:f6:6f:78:
de:8b:91:75:5e:b7:31:e5:29:1c:b3:2b:a5:91:11:
f2:11:ea:55:dc:4e:9f:31:d2:20:7a:60:e0:6b:e7:
44:0e:11:39:f4:f8:9e:04:91:c4:7d:fe:2b:94:cf:
5e:9e:b7:14:a5:8f:12:51:18:00:5f:37:af:85:13:
c0:e9:89:cd:74:9b:f6:52:d7:c0:be:df:88:ec:de:
e3:e5:37:25:d7:3d:a9:a1:38:a3:56:ae:6f:db:57:
60:e3:44:ab:8f:c1:9f:20:ed:20:c7:0f:96:95:fb:
27:3a:e6:e2:10:cc:30:ab:03:f8:47:01:6e:f5:37:
42:cf:43:e5:c4:97:02:8c:09:44:ba:54:04:39:76:
d9:cb:2e:b0:b1:a4:13:43:18:9e:b0:89:30:c0:69:
64:c5:2f:a3:e5:bd:68:70:6d:eb:e4:39:13:0b:18:
c2:a3:e3:0b:ce:66:a1:3a:d3:43:03:d2:6e:ae:a4:
ea:3a:49:cb:a7:db:7a:d1:e6:d8:c3:0a:11:49:49:
4a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:0F:1B:87:6F:0D:84:F4:98:54:07:93:F1:E8:5D:3D:D7:49:1A:4A
X509v3 Authority Key Identifier:
keyid:E6:04:9C:F8:7D:D8:F1:FD:4C:80:24:B5:A6:C9:EA:94:F1:7B:6F:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5gSc-H3Y8f1MgCS1psnqlPF7b70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/060cea-e920-40de-90da-8d49ebcae9b3/1/5gSc-H3Y8f1MgCS1psnqlPF7b70.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/060cea-e920-40de-90da-8d49ebcae9b3/1/5gSc-H3Y8f1MgCS1psnqlPF7b70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:4c:9b:2a:8d:3e:b0:e7:df:03:f4:2f:46:4f:7f:3a:c4:3f:
3e:af:1d:36:c3:3e:9f:67:24:7f:e8:38:e7:e6:df:07:80:1e:
3e:3a:85:22:2e:4b:c4:48:c2:cb:eb:15:28:85:c6:f4:cc:ec:
f7:b3:01:aa:8a:aa:27:06:14:a5:88:db:9a:b6:53:19:d6:6d:
d6:b8:c5:fe:26:8f:66:39:bd:a3:63:15:b9:2c:78:ef:5f:d1:
a2:36:32:8b:e2:0b:e9:3c:86:47:22:81:cb:46:c8:dd:b0:d0:
b6:f3:85:47:4b:44:ad:6c:8d:bc:50:32:41:96:cd:ae:fc:d3:
b0:b8:25:54:c4:9d:2c:37:a8:92:61:b1:e5:19:a0:c5:cf:7b:
82:6a:02:24:fe:06:3f:76:57:c4:cb:7c:aa:c9:52:70:a6:4f:
92:77:d8:5b:ab:77:6f:c1:af:36:e6:4a:e5:16:9f:41:46:73:
03:77:5c:f6:75:6b:5b:45:46:35:ad:5f:0b:d5:e3:09:ce:5b:
87:49:91:86:8d:ac:6a:ac:c7:9e:4a:2c:df:2c:fd:cc:95:4f:
45:b9:3f:72:1c:3c:13:24:e2:05:30:ac:16:12:6c:10:29:e7:
4a:d6:09:54:36:11:e2:d8:e4:db:d7:bf:ec:78:62:ac:7a:d2:
2d:ed:bd:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:24:00 2026 by rpki-client