
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/e7b70d-6001-428b-add0-37c210bab7a0/1/5KpTP0dfB59zX-sZRoTBjVrqYy8.mft
File: 5KpTP0dfB59zX-sZRoTBjVrqYy8.mft (raw, json)
Hash identifier: lChrCWsdMk+UCE5z6bHkIQhj8a2eIXstZCRQyND/Pog=
Subject key identifier: C8:41:38:36:8C:BC:5F:A1:1D:88:83:CA:4D:9C:A4:E9:6E:C8:D9:52
Authority key identifier: E4:AA:53:3F:47:5F:07:9F:73:5F:EB:19:46:84:C1:8D:5A:EA:63:2F
Certificate issuer: /CN=e4aa533f475f079f735feb194684c18d5aea632f
Certificate serial: 019D2B4E693005C01E9EEC2373B867B2988C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5KpTP0dfB59zX-sZRoTBjVrqYy8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/e7b70d-6001-428b-add0-37c210bab7a0/1/5KpTP0dfB59zX-sZRoTBjVrqYy8.mft
Manifest number: A1
Signing time: Thu 26 Mar 2026 18:00:52 +0000
Manifest this update: Thu 26 Mar 2026 18:00:52 +0000
Manifest next update: Fri 27 Mar 2026 18:00:52 +0000
Files and hashes: 1: 5KpTP0dfB59zX-sZRoTBjVrqYy8.crl (hash: kOzI1QnWheYL26XyWBe7DmAFD2embiPX3wCsizkdCBc=)
2: a2gamHaBwEzpT1CSDGHEmtwoaQA.roa (hash: Bd+1bTMu0PVOG6jw2K3AGQhoYyVntE65fkDtSywP1hU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/e7b70d-6001-428b-add0-37c210bab7a0/1/5KpTP0dfB59zX-sZRoTBjVrqYy8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/e7b70d-6001-428b-add0-37c210bab7a0/1/5KpTP0dfB59zX-sZRoTBjVrqYy8.mft
rsync://rpki.ripe.net/repository/DEFAULT/5KpTP0dfB59zX-sZRoTBjVrqYy8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:4e:69:30:05:c0:1e:9e:ec:23:73:b8:67:b2:98:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4aa533f475f079f735feb194684c18d5aea632f
Validity
Not Before: Mar 26 18:00:52 2026 GMT
Not After : Mar 27 18:00:52 2026 GMT
Subject: CN=c84138368cbc5fa11d8883ca4d9ca4e96ec8d952
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:21:0c:63:bf:6b:c0:16:6f:a8:9d:03:12:39:
05:4e:3a:c8:a8:2c:72:45:b0:14:ee:66:2f:03:c4:
04:d7:cc:a1:72:e3:11:5a:0e:35:7c:94:1a:1a:50:
16:db:16:da:da:44:4a:9f:66:90:cf:84:41:e3:16:
7f:c4:b0:57:2e:34:91:8b:88:12:3a:b1:a8:d5:a2:
35:39:5d:07:e5:d0:fd:cc:a1:84:48:11:f2:28:56:
3f:92:1c:82:f9:33:dc:76:96:f2:a7:79:ab:d0:5e:
94:28:71:1f:b1:7c:25:d2:70:4a:b5:21:ce:79:f2:
a4:6f:4d:ad:a6:27:24:8c:cf:16:03:71:bc:09:2f:
02:1a:23:5c:e3:c4:68:0e:b2:e4:d5:c8:88:76:4c:
02:fa:78:85:c7:4a:8c:a6:1b:3d:50:63:3e:30:d7:
15:90:eb:b1:98:bc:09:be:76:df:f3:0d:ea:49:c9:
19:40:fd:10:5f:af:9e:1d:93:d5:13:3c:71:e5:3f:
b3:db:c5:43:0d:a7:ee:3d:73:4e:2e:5c:32:81:d9:
10:90:f5:a6:96:0e:0a:e5:79:ba:47:82:78:f0:bd:
69:c7:98:76:c9:5f:bd:e0:a5:8e:04:db:dc:98:42:
09:d7:64:ec:1f:5a:cf:8d:8b:ad:3d:50:b6:20:76:
68:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:41:38:36:8C:BC:5F:A1:1D:88:83:CA:4D:9C:A4:E9:6E:C8:D9:52
X509v3 Authority Key Identifier:
keyid:E4:AA:53:3F:47:5F:07:9F:73:5F:EB:19:46:84:C1:8D:5A:EA:63:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5KpTP0dfB59zX-sZRoTBjVrqYy8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e7b70d-6001-428b-add0-37c210bab7a0/1/5KpTP0dfB59zX-sZRoTBjVrqYy8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e7b70d-6001-428b-add0-37c210bab7a0/1/5KpTP0dfB59zX-sZRoTBjVrqYy8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:7a:51:4e:f1:f1:ae:89:fd:1c:8f:4e:b0:4c:1f:5e:11:f2:
3d:c1:ce:70:1a:ea:1d:81:98:4a:8b:ff:40:cb:4d:c8:0d:24:
ac:48:3e:16:cb:7f:09:d9:8e:c8:a6:99:fd:c1:04:e8:1f:9b:
ca:0d:d2:00:a4:3c:c9:86:75:83:2f:03:03:4d:3a:8c:8e:ea:
d9:40:94:bf:ed:08:13:2a:61:a1:ad:1e:4c:07:3f:75:26:54:
45:a0:b7:e5:d2:76:e5:61:7e:5f:ec:b5:ea:f8:1f:9c:59:90:
1e:72:0f:20:fb:d5:b9:91:c5:78:72:e3:ac:d0:d7:a7:0c:df:
0e:03:1b:64:21:fb:35:b1:eb:91:5d:de:64:de:58:dc:3d:5c:
c6:86:99:fd:bc:d3:ac:d5:24:3d:6d:07:71:df:26:6d:9b:c8:
db:3c:48:ea:05:7c:cc:21:39:c7:4f:97:71:aa:a8:1b:a0:c1:
5e:1f:cd:1e:82:06:ca:85:fe:80:43:9f:b6:cd:12:ba:3c:0b:
da:e0:0f:31:8b:1e:da:22:10:5b:5c:a1:cd:57:64:96:2e:47:
b8:f6:e3:92:27:fb:df:0f:f6:90:8c:ea:86:e7:90:49:a5:1f:
7c:91:07:38:6e:52:46:d9:ae:ad:ad:e9:3d:7b:7e:84:5e:d8:
9f:8f:7f:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:51:44 2026 by rpki-client