Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/42a193-b30b-403f-befe-3245450d3742/1/5SrPy9efIyxdcqVQvExm8REHoOI.mft
File: 5SrPy9efIyxdcqVQvExm8REHoOI.mft (raw, json)
Hash identifier: 57Ditx+yODpy/fD8c6oBqHbT2F8ayymVRXUTSVuJ+u0=
Subject key identifier: F7:5E:DB:78:69:83:AD:E4:A3:33:7B:13:2C:DF:C4:41:76:F5:6F:05
Authority key identifier: E5:2A:CF:CB:D7:9F:23:2C:5D:72:A5:50:BC:4C:66:F1:11:07:A0:E2
Certificate issuer: /CN=e52acfcbd79f232c5d72a550bc4c66f11107a0e2
Certificate serial: 019D27A8A744ABF6B69A91E0C78EB2BA534F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5SrPy9efIyxdcqVQvExm8REHoOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/42a193-b30b-403f-befe-3245450d3742/1/5SrPy9efIyxdcqVQvExm8REHoOI.mft
Manifest number: 05A4
Signing time: Thu 26 Mar 2026 01:00:57 +0000
Manifest this update: Thu 26 Mar 2026 01:00:57 +0000
Manifest next update: Fri 27 Mar 2026 01:00:57 +0000
Files and hashes: 1: 5SrPy9efIyxdcqVQvExm8REHoOI.crl (hash: k20oI+RuW/QDz2nOrlEqY/u2sz2KcP7iwSWI7KcQ1+A=)
2: 7nDTBpJtA6TLPMoPs4MSzkiJ0QU.roa (hash: PkhpqveqXdmcBclNcQ/UeHObmG1C5glRWKTIYCRgTRk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/42a193-b30b-403f-befe-3245450d3742/1/5SrPy9efIyxdcqVQvExm8REHoOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/42a193-b30b-403f-befe-3245450d3742/1/5SrPy9efIyxdcqVQvExm8REHoOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5SrPy9efIyxdcqVQvExm8REHoOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:a7:44:ab:f6:b6:9a:91:e0:c7:8e:b2:ba:53:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e52acfcbd79f232c5d72a550bc4c66f11107a0e2
Validity
Not Before: Mar 26 01:00:57 2026 GMT
Not After : Mar 27 01:00:57 2026 GMT
Subject: CN=f75edb786983ade4a3337b132cdfc44176f56f05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e0:3f:75:9b:9e:54:43:46:16:94:1a:dc:dc:
f6:df:7b:10:ff:8a:ec:16:9f:53:d3:a3:cc:0d:1c:
5e:ac:80:50:f2:2a:6a:d9:55:c6:3a:7f:0a:81:91:
3e:a5:e7:68:89:b4:7e:68:fe:65:f8:7e:be:f7:db:
0a:c4:88:12:08:b9:48:06:64:b0:00:63:60:94:ce:
86:a0:87:d5:5a:f2:2b:85:de:60:42:6a:ac:c4:21:
af:11:3e:b5:71:6e:fb:e6:cc:15:82:24:70:70:76:
a4:67:11:96:83:5d:f5:34:18:59:87:c3:92:0e:10:
eb:2b:3f:8a:47:d8:c1:0d:59:9f:43:13:c7:8e:db:
75:da:2b:60:a5:4f:1b:2e:0e:93:0b:83:ff:24:a4:
69:b8:3f:96:ec:ce:37:cb:68:11:73:1f:f7:07:60:
76:75:63:a5:71:41:5a:0e:c1:c0:59:64:2f:37:80:
4d:81:17:38:13:45:b3:1c:83:5c:0f:9b:c5:b3:f3:
b0:83:e2:e4:d3:85:a0:db:c2:8f:be:1b:7e:52:23:
86:87:80:3a:32:9c:6f:54:9e:e0:39:c6:b9:78:a8:
d0:07:b8:bc:b2:c2:d7:d6:e3:cb:61:ff:47:26:c7:
59:23:41:a9:d1:a4:58:14:9f:9e:e2:15:30:7a:aa:
86:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:5E:DB:78:69:83:AD:E4:A3:33:7B:13:2C:DF:C4:41:76:F5:6F:05
X509v3 Authority Key Identifier:
keyid:E5:2A:CF:CB:D7:9F:23:2C:5D:72:A5:50:BC:4C:66:F1:11:07:A0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5SrPy9efIyxdcqVQvExm8REHoOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/42a193-b30b-403f-befe-3245450d3742/1/5SrPy9efIyxdcqVQvExm8REHoOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/42a193-b30b-403f-befe-3245450d3742/1/5SrPy9efIyxdcqVQvExm8REHoOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:ba:03:ce:e1:e3:db:41:43:9a:8a:2a:02:08:c8:e2:17:97:
2b:02:ed:65:9e:d4:ce:64:5e:8a:46:3a:4e:ec:4a:35:ac:82:
42:6f:08:fb:85:0d:bb:e6:c4:53:dc:77:70:27:cc:c6:25:89:
37:3d:24:78:2f:30:c7:86:49:bd:2c:15:a8:69:ea:cd:eb:59:
a2:b4:52:ce:6d:d6:e1:4f:ef:bc:6b:04:44:31:51:81:e8:49:
80:90:5f:da:86:6c:9f:04:9b:d7:5a:55:bc:2b:84:fd:91:5c:
b6:c0:51:a3:bd:11:a6:3e:39:6c:ab:c1:79:dc:a9:46:04:71:
aa:44:1b:73:4e:24:c9:6e:a9:ce:fe:bc:17:b1:22:d9:7a:ae:
c5:ec:18:4b:ae:18:9e:98:40:c4:1f:ba:5b:da:68:89:4f:37:
a9:ce:e5:bf:9b:97:d9:96:70:21:ca:65:63:90:38:6e:67:df:
46:74:2f:d8:49:33:0f:2b:ea:f0:47:2e:b3:02:06:4a:4b:0d:
a8:8d:6f:bf:49:e5:df:e0:fd:28:5f:a1:d5:2a:4d:3a:3d:d3:
0b:14:e6:5b:56:44:a1:f3:0b:38:08:2b:36:4e:4e:ff:91:d7:
83:95:e9:53:54:9c:7a:68:7b:ca:d0:29:c6:b6:8d:84:00:61:
5c:06:73:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:48:46 2026 by rpki-client