Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.mft
File: 5b86csrW9LPcMFtMvjEIcFHZg_Y.mft (raw, json)
Hash identifier: NOoxUCrl8GYWqS7C3rgMHG9WY2pGE9suViqsTVEyd0U=
Subject key identifier: C4:C8:57:2A:71:CE:0C:52:69:E8:75:17:2C:C7:DC:1C:72:AF:82:77
Authority key identifier: E5:BF:3A:72:CA:D6:F4:B3:DC:30:5B:4C:BE:31:08:70:51:D9:83:F6
Certificate issuer: /CN=e5bf3a72cad6f4b3dc305b4cbe31087051d983f6
Certificate serial: 019D284DEA7C61F9E5846E325179408DBC7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5b86csrW9LPcMFtMvjEIcFHZg_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.mft
Manifest number: 118A
Signing time: Thu 26 Mar 2026 04:01:27 +0000
Manifest this update: Thu 26 Mar 2026 04:01:27 +0000
Manifest next update: Fri 27 Mar 2026 04:01:27 +0000
Files and hashes: 1: 10snHBnMf0Kuhe7miu2KWZf7QKU.roa (hash: cMY4zBuFGSixWKDTcCmGLnVnrvMgI5u/opvWitB7358=)
2: 2pf-zTxW5BjaAWCTFG2DLvsJI6Y.roa (hash: 00cQ7niNdYupTzs8uevKOCewXa1tnY8zfKm3DEiLyz0=)
3: 4u_bkbKJNZM1KdwioLGPBiO50Ls.roa (hash: SjbryZU9niHHVvzZ1rzi0/PNl7uGm6ThQXUhvtkEr+g=)
4: 5b86csrW9LPcMFtMvjEIcFHZg_Y.crl (hash: 5UX+DmGXNZ6c9slHzZKl+U+pesQX/IQ9oL9eJ2wnUHs=)
5: 84fcfSOjnphSDe7dtZLQTGLV-OA.roa (hash: BdXfRqL149FaK3puBgQg9gvPoKtCvZPATYjPW+Iahhc=)
6: CZHwjRKRoezncj5wC2tcP7BId0k.roa (hash: NtnGWR67eyLICzLT2JOCuoqA4A2EyKFmQWPiA8KDgfI=)
7: I5Ro8QNM5FUk2LngF_2Kul4LuDI.roa (hash: 8512clIrIw3oxakt+AB8Wo3TQyURs+7mVgdMvgrfnqI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/5b86csrW9LPcMFtMvjEIcFHZg_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:ea:7c:61:f9:e5:84:6e:32:51:79:40:8d:bc:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5bf3a72cad6f4b3dc305b4cbe31087051d983f6
Validity
Not Before: Mar 26 04:01:27 2026 GMT
Not After : Mar 27 04:01:27 2026 GMT
Subject: CN=c4c8572a71ce0c5269e875172cc7dc1c72af8277
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2f:2f:02:c6:0e:87:a4:b9:a6:f2:7b:fb:11:
4d:0d:7e:ec:b0:52:86:b6:b5:52:bc:36:24:4c:70:
d6:90:78:5b:30:2f:2f:cd:f0:de:c3:86:b5:fc:ed:
b0:8d:b4:7a:ff:9c:fa:39:3d:1a:8e:49:19:57:49:
a2:84:50:f8:ee:83:ca:d3:a6:30:29:83:4e:c1:0b:
f8:16:95:86:97:11:de:bb:15:2c:ef:d5:8d:4e:2c:
77:a8:67:66:26:8c:25:51:8a:85:0b:93:10:1a:fb:
c7:95:2f:73:90:3a:53:a0:0c:ac:6f:30:bb:88:c4:
7f:97:fc:2c:56:c3:d1:d3:6a:57:6d:98:8e:52:46:
51:f4:c5:36:93:94:41:bf:39:db:61:53:a0:73:f7:
1c:50:e1:49:1e:56:64:80:7c:c5:be:d1:1c:dc:d0:
b9:72:e8:00:73:7b:30:49:e8:27:bd:dc:d9:da:69:
46:81:22:68:78:59:8a:e4:0c:13:71:3f:b9:5e:29:
36:69:4f:3e:d9:16:8d:38:34:f2:59:b1:ca:77:bb:
4e:ea:46:fd:e2:20:07:2e:03:b4:61:ea:bc:e7:59:
74:03:4e:ca:95:d2:28:59:d0:17:fe:76:64:ec:57:
1a:c8:ed:ca:1d:c9:51:33:d0:82:b1:2f:9b:89:c7:
11:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:C8:57:2A:71:CE:0C:52:69:E8:75:17:2C:C7:DC:1C:72:AF:82:77
X509v3 Authority Key Identifier:
keyid:E5:BF:3A:72:CA:D6:F4:B3:DC:30:5B:4C:BE:31:08:70:51:D9:83:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b86csrW9LPcMFtMvjEIcFHZg_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:98:7c:c8:59:f7:23:13:12:ca:dc:ad:3c:39:16:df:a8:2b:
8c:35:cc:06:35:7e:71:3f:32:58:72:aa:e9:7a:8c:fb:dd:98:
4f:4e:ea:3b:36:67:ad:7e:04:84:4b:f5:a7:2b:10:38:bf:8d:
f1:53:20:a2:a3:3e:31:76:f5:a9:c9:c3:73:ca:73:2b:4a:0b:
c1:f1:f1:5f:08:16:7b:91:24:d7:11:f4:85:5f:f1:3b:83:61:
ae:3a:9d:49:e0:31:0b:99:77:73:cf:ee:e3:64:82:a7:20:03:
e3:50:7f:e1:1f:43:dd:02:f4:9d:d3:dc:63:df:aa:13:bc:d2:
9c:45:cf:51:84:68:70:30:ea:c9:4a:de:04:5a:a9:70:2c:95:
ad:f1:0f:2c:bb:30:bd:49:82:31:97:57:4d:69:ba:75:ad:ee:
b7:be:49:fd:61:98:27:6e:d8:0a:06:be:6f:c6:be:04:66:91:
8a:c8:ea:82:29:a8:cc:f6:a0:05:90:5e:f5:e0:a8:76:89:7c:
ee:0f:ff:33:45:92:af:fc:13:f1:a4:a8:95:a8:9d:60:a0:eb:
bc:12:8a:20:79:d7:46:18:ad:56:44:c2:93:0d:a0:f6:5b:e2:
63:e4:02:82:a2:94:c1:9d:9a:4a:dd:12:a2:e1:7a:8a:b9:99:
8d:da:35:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:37:13 2026 by rpki-client