Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/5c949fM57nd9p0khCpbs7Za38uc.mft
File: 5c949fM57nd9p0khCpbs7Za38uc.mft (raw, json)
Hash identifier: zqAcsJlEXhS+VUQvHtZ+vJ/eLWVRxhQig8avu1x9Hzk=
Subject key identifier: 4D:C5:EE:12:54:AF:5F:8A:EE:C1:EC:2E:0B:47:28:B7:5C:84:E8:42
Authority key identifier: E5:CF:78:F5:F3:39:EE:77:7D:A7:49:21:0A:96:EC:ED:96:B7:F2:E7
Certificate issuer: /CN=e5cf78f5f339ee777da749210a96eced96b7f2e7
Certificate serial: 019D27DF52566DF0F3B07CF6EC1B6688C68A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5c949fM57nd9p0khCpbs7Za38uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/5c949fM57nd9p0khCpbs7Za38uc.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 02:00:40 +0000
Manifest this update: Thu 26 Mar 2026 02:00:40 +0000
Manifest next update: Fri 27 Mar 2026 02:00:40 +0000
Files and hashes: 1: 3MgBeBik8U9z4rsKZn1-j_MeR28.roa (hash: Gwe+UNs1EWrBxp855Kdh43FiD7zP/RqH6MQJ/cKKklc=)
2: 5c949fM57nd9p0khCpbs7Za38uc.crl (hash: bTsCoRaBzo2AjwWfRssOKJCpkZFiBbQNDywIl3/IFPg=)
3: Xyw_X4GzbwozPV7bmdhreFXRSgQ.roa (hash: bf34zgz/96MaGcKXCeZJRm7nCxKcToEP6ozueo2hqgk=)
4: w0ihDXGfTZCgkEenDCg532cQiaA.roa (hash: FD0rcoCr63ClMKaKqYqlIdIfUuQ7pv+xZCDIgLRthGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/5c949fM57nd9p0khCpbs7Za38uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/5c949fM57nd9p0khCpbs7Za38uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/5c949fM57nd9p0khCpbs7Za38uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:52:56:6d:f0:f3:b0:7c:f6:ec:1b:66:88:c6:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5cf78f5f339ee777da749210a96eced96b7f2e7
Validity
Not Before: Mar 26 02:00:40 2026 GMT
Not After : Mar 27 02:00:40 2026 GMT
Subject: CN=4dc5ee1254af5f8aeec1ec2e0b4728b75c84e842
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b3:81:18:f8:2b:6a:5d:5e:45:01:db:8a:96:
1c:05:90:52:77:9f:72:0f:7f:65:e0:f2:84:cb:e6:
9c:16:de:48:a7:f5:bc:64:41:24:71:3f:ca:75:ab:
1d:65:ac:c3:39:95:4f:40:d8:c0:9f:94:86:94:47:
92:9a:9b:7e:3f:35:b2:dc:df:de:88:06:5d:bb:31:
c5:d8:9c:4c:84:b0:fb:af:50:e8:c2:23:de:84:bc:
cc:b3:b4:e3:4a:11:35:bd:cb:e3:b8:2b:c9:17:94:
03:35:08:23:e0:f9:79:1f:82:a8:db:2f:b1:95:51:
24:32:82:af:61:a8:a0:d7:b7:50:07:f4:90:f2:d4:
a0:17:fc:42:c2:cf:b2:3b:31:f4:71:d0:4c:bb:7f:
04:d3:ba:65:7f:9d:7b:18:a3:dd:2b:0c:e0:b8:ea:
a7:b3:8f:9e:f0:ca:d6:19:9d:08:55:20:4e:b8:d8:
ab:c8:d2:85:30:91:04:0a:6b:25:23:79:40:16:90:
fe:17:41:23:cb:b4:7b:47:ac:9f:e8:b7:88:2c:b9:
ba:de:8c:8b:81:57:8f:33:c4:5e:de:12:2d:c2:e2:
86:ed:46:02:1d:f9:9c:95:7d:e6:2a:f5:de:75:7b:
3c:1c:c4:aa:bc:14:22:9d:84:60:8c:5e:6b:56:c6:
e2:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:C5:EE:12:54:AF:5F:8A:EE:C1:EC:2E:0B:47:28:B7:5C:84:E8:42
X509v3 Authority Key Identifier:
keyid:E5:CF:78:F5:F3:39:EE:77:7D:A7:49:21:0A:96:EC:ED:96:B7:F2:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c949fM57nd9p0khCpbs7Za38uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/5c949fM57nd9p0khCpbs7Za38uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/5c949fM57nd9p0khCpbs7Za38uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:98:2a:78:95:99:89:da:22:3e:24:6c:61:ef:e2:ca:69:39:
46:de:fa:70:b4:eb:12:4f:0c:b5:5a:66:1c:40:05:a7:c4:bd:
0e:52:5d:12:94:bb:64:f6:6e:25:fd:1f:71:68:a3:a4:59:3b:
ff:85:69:a8:a8:cf:74:bd:a6:d2:5c:5d:ac:04:8b:75:f3:62:
92:07:86:15:e8:e7:a3:2e:81:17:c7:85:6f:dc:71:0b:14:fe:
91:63:00:7a:39:af:a0:57:53:4e:9b:de:e0:8c:c2:b3:c8:7a:
75:b1:f6:45:d4:d8:51:98:94:ef:9c:4f:97:71:73:b8:9e:63:
06:d6:d1:c6:88:d4:89:54:d5:d9:fe:38:34:1e:d8:89:5e:e1:
c9:81:ea:a7:89:33:3d:f6:d1:a4:57:56:71:17:93:5a:68:1a:
10:47:2c:d9:00:b9:5d:64:a9:1a:1c:a0:2e:b9:47:95:d7:ec:
db:c4:49:3a:dc:24:2f:ae:c6:60:c4:fc:2d:7c:70:8c:01:cf:
79:91:7d:ad:1f:1e:78:e4:9e:48:03:0d:7e:3f:3c:50:af:fe:
8c:9b:06:cd:6d:64:8c:a7:0a:9a:d1:05:ff:1f:6e:b9:ec:cd:
ee:93:3f:01:7f:d1:4f:47:c8:13:63:c3:ae:f8:16:99:ce:fc:
5a:d4:e7:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:17:05 2026 by rpki-client