Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/60aed1-6f74-43a9-976f-7ed5e31ae44f/1/5H48mpUfGxWBE6t8PfGd_DNtnu8.mft
File: 5H48mpUfGxWBE6t8PfGd_DNtnu8.mft (raw, json)
Hash identifier: PEWXoBwo5ajsNmH87KGp3JWIdUKCo/7urQIZJXVMQlM=
Subject key identifier: 8E:90:09:35:99:AC:97:C1:4E:1B:A0:AD:0F:63:D8:69:98:25:4D:DB
Authority key identifier: E4:7E:3C:9A:95:1F:1B:15:81:13:AB:7C:3D:F1:9D:FC:33:6D:9E:EF
Certificate issuer: /CN=e47e3c9a951f1b158113ab7c3df19dfc336d9eef
Certificate serial: 019D2771FDD565D4759440931235D7B22CA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5H48mpUfGxWBE6t8PfGd_DNtnu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/60aed1-6f74-43a9-976f-7ed5e31ae44f/1/5H48mpUfGxWBE6t8PfGd_DNtnu8.mft
Manifest number: 0386
Signing time: Thu 26 Mar 2026 00:01:14 +0000
Manifest this update: Thu 26 Mar 2026 00:01:14 +0000
Manifest next update: Fri 27 Mar 2026 00:01:14 +0000
Files and hashes: 1: 5H48mpUfGxWBE6t8PfGd_DNtnu8.crl (hash: nnpqLvQqR4LarvVJJQfcdNbTHmc4WOR3iylDFW49R4w=)
2: Oc9HRrXCcjMhVI-oJuxtYW0MPF8.roa (hash: lFaS4PWNt6dClxtVqJKrrjUbZ/RkYzsaigOX31gfWdI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/60aed1-6f74-43a9-976f-7ed5e31ae44f/1/5H48mpUfGxWBE6t8PfGd_DNtnu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/60aed1-6f74-43a9-976f-7ed5e31ae44f/1/5H48mpUfGxWBE6t8PfGd_DNtnu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/5H48mpUfGxWBE6t8PfGd_DNtnu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:fd:d5:65:d4:75:94:40:93:12:35:d7:b2:2c:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e47e3c9a951f1b158113ab7c3df19dfc336d9eef
Validity
Not Before: Mar 26 00:01:14 2026 GMT
Not After : Mar 27 00:01:14 2026 GMT
Subject: CN=8e90093599ac97c14e1ba0ad0f63d86998254ddb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c3:6d:45:9c:4c:6b:b7:fe:08:1a:9f:19:ec:
4c:c1:66:47:68:68:bc:bc:e6:9e:c9:a0:06:04:fd:
c2:35:89:6f:cc:08:2c:2a:4b:94:f9:39:03:46:5d:
52:8c:c7:db:a3:bb:2c:76:e6:0e:0e:88:e2:5f:e9:
a6:bc:24:c1:e3:5b:52:00:41:74:de:a6:f6:e5:e0:
26:5d:e9:92:d3:ee:a9:e4:a8:b3:f7:1f:7e:e5:4d:
28:4e:06:ed:bb:92:1c:dc:53:7a:46:b5:27:f2:46:
1b:d6:d7:d3:12:f2:cf:6f:b7:b1:69:f3:c9:4d:98:
53:fd:af:f1:12:46:6a:3c:8e:78:01:17:4e:5c:8d:
da:c5:95:c8:a1:46:9b:db:11:67:31:21:e9:ed:f5:
a6:7e:de:46:60:bb:3e:4a:5b:f9:66:37:7f:bf:d0:
24:1e:78:ea:8d:36:ba:4d:b4:a3:f2:1e:a5:c8:76:
c7:61:0d:d8:ef:31:95:58:6c:d7:24:5d:57:9b:c1:
de:d4:ad:35:b3:9c:c3:50:ed:2b:ae:de:35:d8:21:
1a:36:5a:7a:a7:5f:03:fc:36:27:60:40:08:b4:35:
be:a8:a4:1f:bb:5d:1c:be:6c:05:a5:68:91:63:65:
9f:49:7b:fe:d5:1d:72:69:9b:33:67:f1:9b:10:23:
cf:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:90:09:35:99:AC:97:C1:4E:1B:A0:AD:0F:63:D8:69:98:25:4D:DB
X509v3 Authority Key Identifier:
keyid:E4:7E:3C:9A:95:1F:1B:15:81:13:AB:7C:3D:F1:9D:FC:33:6D:9E:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5H48mpUfGxWBE6t8PfGd_DNtnu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/60aed1-6f74-43a9-976f-7ed5e31ae44f/1/5H48mpUfGxWBE6t8PfGd_DNtnu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/60aed1-6f74-43a9-976f-7ed5e31ae44f/1/5H48mpUfGxWBE6t8PfGd_DNtnu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:87:08:a0:72:00:17:0f:80:ae:44:b1:0e:99:1b:d4:bb:81:
74:4d:73:a9:39:82:a2:5f:75:c0:7d:bf:df:03:d6:fd:d7:23:
78:5a:e9:91:c7:ca:e4:e9:82:07:8a:1a:66:2d:1a:80:fb:e6:
19:1d:e5:37:dc:d9:a9:10:c2:91:dc:87:f7:0d:78:af:5a:db:
5f:fb:ec:2f:62:ef:1d:6e:39:ce:9d:b0:b0:25:e8:8a:61:42:
3e:54:a3:a2:e4:25:a8:f7:7c:18:9b:c9:3c:3b:02:d4:22:97:
97:d0:ea:50:92:da:74:f8:79:1d:cf:36:ea:d1:61:86:62:b6:
fd:f1:80:03:31:c9:63:6c:2d:70:b5:d9:e7:c4:ad:49:80:23:
55:d6:9c:61:36:df:25:22:ce:26:b1:c2:df:73:fb:5f:24:5a:
ef:10:2e:e8:34:ea:c4:5e:fd:ca:c4:8e:ff:98:c1:f6:7e:82:
5a:96:e5:ae:4a:e3:f5:b8:e1:d9:49:a2:7f:45:92:ff:5e:71:
7f:8b:c2:ad:1c:07:fe:0a:a9:cd:a1:58:d5:fa:87:ba:d7:ab:
bd:fd:a3:a3:0d:58:48:1e:f9:3d:9b:c2:81:b9:5f:a0:9f:f4:
13:5d:6c:37:60:25:d4:f4:ce:eb:52:24:81:54:61:a0:69:90:
04:de:c6:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:56:34 2026 by rpki-client