Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/57d908-207d-497c-ab18-de7be1e5c776/1/5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.mft
File: 5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.mft (raw, json)
Hash identifier: 0OB1DB28c8KmQKT6+NuUjZRyeW2Ur/DHAn/ZYuQe81Y=
Subject key identifier: 2A:20:6A:46:DB:B1:D2:2D:A6:4F:E0:15:91:09:12:A3:F4:27:2D:94
Authority key identifier: E4:98:4F:8F:36:EB:F9:F8:F5:4C:12:17:4F:46:36:64:D7:B2:3A:EE
Certificate issuer: /CN=e4984f8f36ebf9f8f54c12174f463664d7b23aee
Certificate serial: 019D2AA99E4B8B94286E2264BE11CCFD69FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/57d908-207d-497c-ab18-de7be1e5c776/1/5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.mft
Manifest number: 136C
Signing time: Thu 26 Mar 2026 15:00:52 +0000
Manifest this update: Thu 26 Mar 2026 15:00:52 +0000
Manifest next update: Fri 27 Mar 2026 15:00:52 +0000
Files and hashes: 1: 5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.crl (hash: zaEm9LtMXhL0iNexrLHKg3ifn556S8otaneSfYyX/QY=)
2: hTC91o4ZtMO-04ZIsmw_aK8gJeA.roa (hash: War1ZIX95W/VPK4FUZA8Xa/ZSNStMaoIUos///YIBIQ=)
3: rR6bC3nGRb0R25RzXiMQeGJ-1sc.roa (hash: 0alGeHDZjg/Rc5/CXBTY3qIbzWIm6w6jf9n9/91FunA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/57d908-207d-497c-ab18-de7be1e5c776/1/5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/57d908-207d-497c-ab18-de7be1e5c776/1/5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.mft
rsync://rpki.ripe.net/repository/DEFAULT/5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 15:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:a9:9e:4b:8b:94:28:6e:22:64:be:11:cc:fd:69:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4984f8f36ebf9f8f54c12174f463664d7b23aee
Validity
Not Before: Mar 26 15:00:52 2026 GMT
Not After : Mar 27 15:00:52 2026 GMT
Subject: CN=2a206a46dbb1d22da64fe015910912a3f4272d94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:81:15:75:d4:b4:b5:73:f1:25:a4:37:24:ac:
69:08:a0:1e:69:29:81:ea:82:e5:25:a7:25:18:a8:
80:66:06:1c:ce:11:cb:c3:00:55:8c:af:cf:17:ee:
92:bb:69:a6:33:7e:7c:7f:d1:08:38:85:34:81:47:
35:7e:51:54:c4:a7:6d:ed:a9:77:c6:0b:f8:c9:8f:
d9:a7:cc:2e:94:7f:c6:db:52:6e:30:a3:37:fd:06:
7a:be:68:b2:87:19:da:af:bb:42:37:67:66:65:2b:
19:92:2e:7d:1f:73:ad:8a:c8:65:92:cd:b9:df:7d:
62:e6:6c:e5:ff:29:38:90:38:a4:ef:6e:65:d5:13:
47:b4:80:9d:82:7c:d8:ab:82:35:a0:f3:c3:9a:02:
8f:58:1f:0a:02:f6:e5:fe:48:6d:93:67:43:e6:98:
a0:2f:47:0b:35:f0:23:7f:26:2a:c9:e2:78:5d:d7:
62:b5:db:8b:88:93:ae:68:a0:08:f5:b3:3b:d3:85:
73:a7:99:75:66:92:46:93:92:e4:28:88:27:26:cc:
70:fd:02:89:7e:20:28:29:e2:bb:ad:7e:de:7c:70:
df:1b:85:ed:01:42:cd:79:c7:56:86:72:bb:b1:1a:
77:4e:67:33:91:e7:d9:42:4d:22:06:78:69:4c:c4:
53:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:20:6A:46:DB:B1:D2:2D:A6:4F:E0:15:91:09:12:A3:F4:27:2D:94
X509v3 Authority Key Identifier:
keyid:E4:98:4F:8F:36:EB:F9:F8:F5:4C:12:17:4F:46:36:64:D7:B2:3A:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/57d908-207d-497c-ab18-de7be1e5c776/1/5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/57d908-207d-497c-ab18-de7be1e5c776/1/5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:35:47:1b:2e:a8:24:ad:ae:e1:24:12:dc:e8:26:05:e8:ca:
d3:a3:68:af:9f:8b:24:e9:68:9a:36:bf:57:c3:97:da:64:38:
27:f6:8f:06:f7:70:d8:49:91:41:68:66:ca:46:21:d6:fb:1d:
68:ad:54:f9:eb:90:d4:05:ab:5c:f9:92:da:43:5a:4b:38:5c:
5c:0d:a9:aa:04:5d:99:36:7e:10:33:85:f0:b1:cd:a3:25:26:
9d:a4:5c:dc:48:b8:44:13:d4:26:b3:9c:12:64:49:21:9f:c1:
01:f1:28:35:81:44:d3:30:9b:c7:9a:3e:ad:15:8d:a3:ea:35:
d8:5a:23:a4:84:9f:d1:3e:e1:a2:b1:8e:9a:52:e4:ea:91:f4:
db:ee:1e:38:28:57:85:ff:77:3e:8b:4c:a4:00:d9:24:6e:6e:
7c:92:1d:2c:52:30:01:05:04:cb:5c:83:bb:f6:d9:29:6d:20:
e4:09:70:44:77:14:89:f8:63:92:f3:f4:bc:d2:4d:db:1d:c4:
8e:38:7e:72:b8:d0:82:d8:1e:42:05:5a:3f:93:f4:ef:be:b3:
da:98:69:e5:f4:91:c7:16:9e:51:d6:a7:83:a3:c2:1d:63:9d:
08:be:bf:2e:67:f9:b2:95:02:d1:17:e6:73:35:cc:85:52:ba:
6b:35:f8:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:46:17 2026 by rpki-client