Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/5xhRIOejuWK5_-Sr7RbQqjoyBRg.mft
File: 5xhRIOejuWK5_-Sr7RbQqjoyBRg.mft (raw, json)
Hash identifier: cyK9HMCdhT09TR0tNrR0nAmSSo1jmKOZ0hX6Uh6/kUs=
Subject key identifier: CE:16:94:69:A1:38:A9:D8:D9:3A:91:F6:1C:1E:4A:24:66:9F:CC:50
Authority key identifier: E7:18:51:20:E7:A3:B9:62:B9:FF:E4:AB:ED:16:D0:AA:3A:32:05:18
Certificate issuer: /CN=e7185120e7a3b962b9ffe4abed16d0aa3a320518
Certificate serial: 019D29610610B7229BF3F49456328F301BB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5xhRIOejuWK5_-Sr7RbQqjoyBRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/5xhRIOejuWK5_-Sr7RbQqjoyBRg.mft
Manifest number: 125B
Signing time: Thu 26 Mar 2026 09:01:57 +0000
Manifest this update: Thu 26 Mar 2026 09:01:57 +0000
Manifest next update: Fri 27 Mar 2026 09:01:57 +0000
Files and hashes: 1: 5xhRIOejuWK5_-Sr7RbQqjoyBRg.crl (hash: w5N+0BmhPq6qOSaORN8gPPXnHCxTTL3dxEH4KFAMjWk=)
2: yKWW9KUUcuSOBUZmFNhXRUNBXdk.roa (hash: BmUfImdK1cFMPb6WqiazHO8FeAIX1xO92EWzQ8s2qXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/5xhRIOejuWK5_-Sr7RbQqjoyBRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/5xhRIOejuWK5_-Sr7RbQqjoyBRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/5xhRIOejuWK5_-Sr7RbQqjoyBRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:06:10:b7:22:9b:f3:f4:94:56:32:8f:30:1b:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7185120e7a3b962b9ffe4abed16d0aa3a320518
Validity
Not Before: Mar 26 09:01:57 2026 GMT
Not After : Mar 27 09:01:57 2026 GMT
Subject: CN=ce169469a138a9d8d93a91f61c1e4a24669fcc50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:98:ac:db:03:94:48:c6:8a:f1:01:8a:ab:c5:
89:0e:38:95:09:29:2b:0d:9f:5c:5c:f8:c6:a6:5e:
1e:67:84:ad:76:fb:0a:dd:45:bb:3e:3b:ab:87:a2:
c2:1d:ee:73:24:6b:8c:1e:b8:d3:68:2b:0f:dd:8e:
dd:05:fd:30:63:c5:8a:e3:af:73:53:e2:48:3c:5d:
b7:c0:3b:c4:87:a3:86:42:f2:fc:3c:88:15:95:86:
51:a3:aa:11:9d:a2:6e:29:60:be:ab:51:e6:f9:17:
1b:92:15:39:c9:a5:6d:48:98:7b:e9:61:bd:83:1a:
d5:c3:98:2c:7e:e4:e6:0e:18:81:9a:ad:a2:b4:66:
bd:20:f0:f7:88:96:b3:dc:58:11:cc:f2:35:85:ad:
da:38:44:dd:51:83:83:8d:49:51:b0:f4:65:ba:2f:
6c:84:48:59:4a:b0:c2:a0:db:ad:ea:75:c3:c1:07:
2d:3f:38:d9:ac:31:50:de:db:25:ec:63:1d:5a:c8:
bb:06:64:7e:9f:cc:70:3f:73:66:af:87:40:45:2d:
d2:33:13:b1:d2:26:4b:13:b0:5c:af:ca:10:c0:bd:
7b:83:92:4a:e8:7f:0f:cf:ed:8b:c8:41:e6:ae:e5:
c3:10:17:f3:97:2d:54:55:19:f0:52:87:60:bd:83:
02:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:16:94:69:A1:38:A9:D8:D9:3A:91:F6:1C:1E:4A:24:66:9F:CC:50
X509v3 Authority Key Identifier:
keyid:E7:18:51:20:E7:A3:B9:62:B9:FF:E4:AB:ED:16:D0:AA:3A:32:05:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5xhRIOejuWK5_-Sr7RbQqjoyBRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/5xhRIOejuWK5_-Sr7RbQqjoyBRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/5xhRIOejuWK5_-Sr7RbQqjoyBRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:ab:c9:9d:76:36:06:9c:0e:c2:28:c9:ba:8c:6e:a3:22:56:
5d:61:b4:b7:56:51:12:93:40:6c:63:04:5c:a9:e1:26:1c:34:
65:5a:56:43:3c:b0:4a:7d:99:3f:1c:0e:b5:18:82:b2:5b:48:
91:5c:d1:ff:20:31:ef:8c:48:c7:3a:a6:7a:16:ac:98:b8:16:
da:54:e5:48:c0:e0:02:d5:ac:16:5f:31:20:be:d6:dc:3f:2c:
32:fb:11:14:82:ec:28:71:75:a7:b3:23:23:e9:6c:97:27:81:
aa:ed:9a:e5:38:cd:6a:c2:b7:4a:5d:0a:43:eb:c6:9e:18:40:
63:03:0a:ae:92:7d:b8:f5:cb:b6:10:34:09:44:20:81:54:0f:
32:65:f3:9d:95:79:7e:ca:90:28:14:b8:aa:b9:05:f5:b9:ae:
6a:6e:80:a2:c3:8c:5e:ac:02:82:80:a5:0b:f6:ac:48:0a:60:
f6:b2:89:ab:dd:62:a3:a6:a1:3e:0c:11:0c:b9:33:b4:58:b4:
6c:3f:06:63:46:1f:40:80:46:cf:e1:8f:ae:56:97:5c:23:39:
ed:ac:30:0d:b0:bd:7b:11:76:2f:d9:ef:99:31:51:c3:dc:c5:
6d:8c:3e:c3:b1:c1:31:ce:7d:16:f3:06:38:05:3e:f8:45:37:
39:b2:69:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:57:55 2026 by rpki-client