Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/55b9d7-f703-45fe-8b63-10534c67bbb8/1/5d4N5z5zh0u8ZnOIBdNzyrgzt6U.mft
File: 5d4N5z5zh0u8ZnOIBdNzyrgzt6U.mft (raw, json)
Hash identifier: i78aOub65QauAmgQ5aEWN7gbSFMLhzjBR6WtEJra1xk=
Subject key identifier: 19:48:FF:BE:92:DC:E1:36:0E:88:4C:2E:16:28:83:77:8D:1B:54:CB
Authority key identifier: E5:DE:0D:E7:3E:73:87:4B:BC:66:73:88:05:D3:73:CA:B8:33:B7:A5
Certificate issuer: /CN=e5de0de73e73874bbc66738805d373cab833b7a5
Certificate serial: 019D2AA975E837EB96BB59EF718D6683EBC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5d4N5z5zh0u8ZnOIBdNzyrgzt6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/55b9d7-f703-45fe-8b63-10534c67bbb8/1/5d4N5z5zh0u8ZnOIBdNzyrgzt6U.mft
Manifest number: 1841
Signing time: Thu 26 Mar 2026 15:00:41 +0000
Manifest this update: Thu 26 Mar 2026 15:00:41 +0000
Manifest next update: Fri 27 Mar 2026 15:00:41 +0000
Files and hashes: 1: 5d4N5z5zh0u8ZnOIBdNzyrgzt6U.crl (hash: kpLyko9rFPn0PYXDdryxmNQGRg9+Ak3sT9GFoy0C4KY=)
2: mt8BxRlzzPaaJ7YP89nmlvEShOY.roa (hash: 5h7uCM+sM17krF3KDYCTkEInjz6mxypULE5ia4pGUZA=)
3: zh2lJfC9-wfMTO9Kozt8KhhvQ6k.roa (hash: rv7yBHp8N5Gh/amJUvtJbCTehW8L+CBJUllqP/PiPaA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/55b9d7-f703-45fe-8b63-10534c67bbb8/1/5d4N5z5zh0u8ZnOIBdNzyrgzt6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/55b9d7-f703-45fe-8b63-10534c67bbb8/1/5d4N5z5zh0u8ZnOIBdNzyrgzt6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/5d4N5z5zh0u8ZnOIBdNzyrgzt6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 15:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:a9:75:e8:37:eb:96:bb:59:ef:71:8d:66:83:eb:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5de0de73e73874bbc66738805d373cab833b7a5
Validity
Not Before: Mar 26 15:00:41 2026 GMT
Not After : Mar 27 15:00:41 2026 GMT
Subject: CN=1948ffbe92dce1360e884c2e162883778d1b54cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4e:21:68:32:e2:60:9e:e7:a9:26:56:b1:27:
79:fa:59:73:c8:e2:2c:4e:20:53:39:67:9d:14:d5:
6e:fd:41:3c:61:ed:a4:3a:40:f9:cd:d8:e5:4a:aa:
87:b2:da:b6:d8:4a:d5:2d:aa:47:7a:60:c8:ea:51:
b2:91:26:ce:3c:ab:57:f1:7b:0e:35:62:91:53:08:
49:7e:c5:62:0f:5b:7f:e0:6a:a4:dd:8f:80:5c:d6:
00:be:3a:32:fa:6a:2d:c9:c4:0c:5b:00:94:a1:5a:
a1:4e:bb:b8:19:de:c2:cf:27:7c:d0:70:a7:57:d3:
c7:fc:51:67:fe:74:89:7e:fc:14:c0:e0:8d:42:37:
bd:b8:ef:21:64:93:14:58:82:cc:b3:18:76:5b:74:
a9:7f:13:f9:94:95:7a:25:9e:10:7c:50:6f:70:80:
ee:75:b7:f0:ff:25:c0:33:51:70:86:7f:a5:1a:05:
95:ac:f1:d1:2c:ce:68:8d:d6:ae:65:3a:7c:4a:8a:
f9:9b:56:0c:04:8e:ec:a6:0e:ca:f6:e6:8e:b4:de:
10:ab:e8:78:d0:b1:39:56:37:fb:9a:33:06:73:36:
0a:98:50:6f:fd:85:2f:07:66:03:cc:49:6a:6a:4d:
ae:66:8a:88:19:08:c6:48:84:50:fc:f5:5f:b5:5f:
1f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:48:FF:BE:92:DC:E1:36:0E:88:4C:2E:16:28:83:77:8D:1B:54:CB
X509v3 Authority Key Identifier:
keyid:E5:DE:0D:E7:3E:73:87:4B:BC:66:73:88:05:D3:73:CA:B8:33:B7:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d4N5z5zh0u8ZnOIBdNzyrgzt6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/55b9d7-f703-45fe-8b63-10534c67bbb8/1/5d4N5z5zh0u8ZnOIBdNzyrgzt6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/55b9d7-f703-45fe-8b63-10534c67bbb8/1/5d4N5z5zh0u8ZnOIBdNzyrgzt6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:10:b2:d1:fc:df:78:ce:8f:03:af:2c:ba:5a:12:3a:fa:08:
ce:5f:f2:87:b9:83:aa:92:b8:2c:2a:bb:e2:93:03:0c:d7:f3:
5a:96:77:ff:30:c1:11:5e:fa:ab:0a:ba:20:cd:97:82:57:54:
b3:2a:ca:bf:28:fc:f9:d8:1c:ad:7d:4d:15:67:1a:f3:03:be:
fe:fe:0f:01:3b:b5:5e:c3:5f:5e:80:31:a0:a4:47:52:42:c1:
8e:55:d7:de:83:23:a2:5d:ba:0a:0d:43:44:80:71:73:c0:60:
d6:df:20:3a:72:f2:60:d3:a5:c6:1a:db:f2:43:01:8d:02:67:
98:50:c8:ae:27:34:87:4c:68:20:88:d0:1b:14:6f:3d:c1:62:
e8:b7:36:80:0c:20:26:18:a0:31:39:03:72:64:81:cf:69:70:
0b:c2:d2:74:1b:3e:9a:43:a1:10:36:41:4e:39:05:bc:5b:87:
c3:83:a3:8a:f3:fc:c7:9f:1e:a5:56:4a:9a:8a:99:1b:d3:7a:
bd:a0:97:28:c6:81:34:d2:86:22:2c:8d:6c:7c:1f:ae:b3:05:
c4:2e:99:f7:79:6e:86:a8:bd:1f:85:55:fd:2d:4b:e1:76:ec:
3e:2e:aa:9f:b5:25:45:94:66:0c:df:4f:ca:14:12:85:be:44:
11:28:a5:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:39:46 2026 by rpki-client