Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/b40d25-f444-4f60-b162-d1502f7cf234/1/5oClYQES3yA5h_MvDl4VrTXnENI.mft
File: 5oClYQES3yA5h_MvDl4VrTXnENI.mft (raw, json)
Hash identifier: fubvYSWKFDpD3fKqFFpri1u5I0oewftyFWqEE2fVJTk=
Subject key identifier: 28:3F:78:94:60:14:0C:03:2C:83:69:3F:74:3E:5B:FB:03:11:66:5F
Authority key identifier: E6:80:A5:61:01:12:DF:20:39:87:F3:2F:0E:5E:15:AD:35:E7:10:D2
Certificate issuer: /CN=e680a5610112df203987f32f0e5e15ad35e710d2
Certificate serial: 019D2A044B2A35E240C32C4F3E137CE88402
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5oClYQES3yA5h_MvDl4VrTXnENI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/b40d25-f444-4f60-b162-d1502f7cf234/1/5oClYQES3yA5h_MvDl4VrTXnENI.mft
Manifest number: 0862
Signing time: Thu 26 Mar 2026 12:00:17 +0000
Manifest this update: Thu 26 Mar 2026 12:00:17 +0000
Manifest next update: Fri 27 Mar 2026 12:00:17 +0000
Files and hashes: 1: 5oClYQES3yA5h_MvDl4VrTXnENI.crl (hash: 0Cz31LE+dwe/J8UQaw5XWKaxevO8rbifLbwMw+nif5o=)
2: HALUJ8HMBpoHzskaJCYqZgHex5U.roa (hash: cOZhNR9S9Fv/MNqYDNuqDaMlzhNl0rBxxMK0bBBrUJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/b40d25-f444-4f60-b162-d1502f7cf234/1/5oClYQES3yA5h_MvDl4VrTXnENI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/b40d25-f444-4f60-b162-d1502f7cf234/1/5oClYQES3yA5h_MvDl4VrTXnENI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5oClYQES3yA5h_MvDl4VrTXnENI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:4b:2a:35:e2:40:c3:2c:4f:3e:13:7c:e8:84:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e680a5610112df203987f32f0e5e15ad35e710d2
Validity
Not Before: Mar 26 12:00:17 2026 GMT
Not After : Mar 27 12:00:17 2026 GMT
Subject: CN=283f789460140c032c83693f743e5bfb0311665f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5f:82:a2:af:2e:96:1e:00:b8:67:e5:d0:9b:
40:6a:cc:46:23:b3:d7:f5:01:5c:e4:47:69:d8:0a:
9e:af:5d:8c:21:d7:0d:88:5d:ab:1c:b8:04:61:cd:
bb:75:2e:51:6d:44:9e:74:2f:a0:18:27:15:61:17:
d4:17:28:be:f0:97:da:1b:29:1f:63:78:a6:3e:d0:
c5:b4:c3:6c:28:ac:5e:7d:7d:c8:f6:f8:39:a7:2b:
b1:bb:ee:6c:9c:01:7b:2c:7f:39:9f:65:48:c6:64:
34:a9:05:37:93:97:bc:03:df:2b:a1:62:49:8d:46:
a3:43:f0:f6:0f:a2:ab:ce:70:70:99:98:23:64:d6:
76:52:ce:92:f7:7e:aa:12:a1:c7:b8:fa:84:25:42:
0c:c1:7e:38:d1:23:86:75:fc:c6:df:01:a5:66:57:
b1:6a:e0:b2:8f:1a:bc:3b:7a:49:37:66:c4:0c:ff:
44:50:0f:d6:12:b2:69:60:24:d8:a4:bc:81:b6:31:
ac:e6:13:a9:67:62:e6:14:0a:11:12:21:30:a0:49:
17:69:0f:fe:6c:35:6e:82:29:54:b0:f5:fd:d6:6b:
b2:c1:1f:91:62:cf:b7:66:39:e4:db:d9:8c:4d:bd:
2e:6b:d8:0b:e1:43:2c:62:55:ce:bb:c2:06:0b:55:
37:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:3F:78:94:60:14:0C:03:2C:83:69:3F:74:3E:5B:FB:03:11:66:5F
X509v3 Authority Key Identifier:
keyid:E6:80:A5:61:01:12:DF:20:39:87:F3:2F:0E:5E:15:AD:35:E7:10:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5oClYQES3yA5h_MvDl4VrTXnENI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b40d25-f444-4f60-b162-d1502f7cf234/1/5oClYQES3yA5h_MvDl4VrTXnENI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b40d25-f444-4f60-b162-d1502f7cf234/1/5oClYQES3yA5h_MvDl4VrTXnENI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:5e:d5:96:5a:e3:e2:15:a6:f1:34:fa:e8:7b:56:b2:25:61:
85:d0:85:5d:06:2f:46:f0:ec:42:58:7b:57:0a:e8:cd:33:ab:
43:6a:2d:fb:e3:25:1c:53:12:4c:c4:8a:9b:e9:bc:7c:77:38:
10:5c:f8:84:d2:99:59:af:51:4b:8d:e9:a1:5a:71:db:df:58:
82:31:e6:93:e5:a4:1a:ab:ab:c4:84:87:2a:cf:96:55:a9:c3:
97:f4:14:b3:df:aa:d2:de:10:23:a8:66:d1:b0:6b:b0:24:2f:
42:8b:fd:b5:c1:03:6f:b7:86:5e:57:f2:71:9c:11:45:35:f8:
79:8c:7b:d5:9c:1c:38:d1:fb:bc:1f:67:65:e5:65:c7:7b:87:
e2:83:55:1e:52:62:67:f3:33:75:03:14:30:e6:49:86:dc:0e:
a8:87:c5:86:11:4d:c1:24:f0:e4:33:9e:14:f5:68:91:29:93:
d1:8f:82:39:c9:13:3e:32:37:20:9d:d4:27:57:9d:bd:ca:1d:
e0:1b:a9:b6:cd:3e:f3:28:00:e2:fc:4f:e3:d5:95:75:ec:f1:
ae:1a:a3:c6:b9:8a:98:c2:4a:39:4d:94:6c:1c:cc:18:a0:d7:
2d:83:79:ea:9c:96:5d:59:4f:45:be:ae:d4:49:11:9d:a2:6d:
4f:fc:91:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:42:17 2026 by rpki-client