Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/784838-0e3b-46ba-8595-d8f6ab83b533/1/5bHedEPq8YzrBoiNfvk6VjWkrh4.mft
File: 5bHedEPq8YzrBoiNfvk6VjWkrh4.mft (raw, json)
Hash identifier: xXaxV1jsIkcjTEwsNORBku/1b75j14Eh5eBR2r8ri3I=
Subject key identifier: A7:76:A9:E0:CA:B3:0D:DF:A2:44:ED:CC:68:E6:39:85:DC:93:09:3D
Authority key identifier: E5:B1:DE:74:43:EA:F1:8C:EB:06:88:8D:7E:F9:3A:56:35:A4:AE:1E
Certificate issuer: /CN=e5b1de7443eaf18ceb06888d7ef93a5635a4ae1e
Certificate serial: 019D29CDE684B4684E440DE84FE0190EBC9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5bHedEPq8YzrBoiNfvk6VjWkrh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/784838-0e3b-46ba-8595-d8f6ab83b533/1/5bHedEPq8YzrBoiNfvk6VjWkrh4.mft
Manifest number: 0F47
Signing time: Thu 26 Mar 2026 11:00:52 +0000
Manifest this update: Thu 26 Mar 2026 11:00:52 +0000
Manifest next update: Fri 27 Mar 2026 11:00:52 +0000
Files and hashes: 1: 1s9edady0IlLFTjAVGX74BTlTOU.roa (hash: UbGcCZaiXwxi+mV6BY8TzVOmDvRo6W4bzSToeQyBxU8=)
2: 5bHedEPq8YzrBoiNfvk6VjWkrh4.crl (hash: 8uiK8QRc5M1ujBdR4e5YpOBbmKD4XooYLQOsyu7T6bE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/784838-0e3b-46ba-8595-d8f6ab83b533/1/5bHedEPq8YzrBoiNfvk6VjWkrh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/784838-0e3b-46ba-8595-d8f6ab83b533/1/5bHedEPq8YzrBoiNfvk6VjWkrh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/5bHedEPq8YzrBoiNfvk6VjWkrh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:cd:e6:84:b4:68:4e:44:0d:e8:4f:e0:19:0e:bc:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5b1de7443eaf18ceb06888d7ef93a5635a4ae1e
Validity
Not Before: Mar 26 11:00:52 2026 GMT
Not After : Mar 27 11:00:52 2026 GMT
Subject: CN=a776a9e0cab30ddfa244edcc68e63985dc93093d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:1b:2a:44:77:fd:25:92:fb:e5:0f:30:80:d2:
85:7d:ad:7d:4c:7c:30:f9:ac:7f:47:80:a7:55:2e:
ce:15:bc:5f:12:5d:39:a5:dd:a7:86:1b:ef:1f:08:
b8:f6:21:90:dd:31:e6:cd:50:f1:14:ec:c7:c4:d1:
5a:64:f7:aa:02:bf:83:65:a9:e6:15:83:2e:cb:a7:
fc:3e:a3:14:ab:3f:2d:ca:cd:6a:68:67:70:05:12:
21:5a:66:58:30:0a:7f:48:b5:85:40:f0:e9:73:da:
ab:8a:3d:2a:58:85:37:45:bf:9a:ce:b2:a6:0b:8b:
d4:29:fa:42:52:aa:1c:02:e9:d1:bc:96:60:50:16:
33:06:f1:de:35:a0:a4:6e:f6:20:09:c6:51:14:a0:
84:ea:fa:56:49:ba:16:07:56:76:87:10:bf:e8:c7:
67:e2:f1:23:dc:c2:9c:e0:67:da:16:20:b0:1a:13:
f8:e8:b3:58:24:23:ec:34:cb:59:79:68:45:b3:bd:
08:41:7d:a9:e8:47:e4:d0:14:eb:05:72:0f:d4:4b:
08:66:33:a5:e0:46:03:6f:3a:02:0e:19:fa:bf:b6:
b2:cf:0d:46:23:4c:e3:bb:57:87:d1:9a:48:be:34:
18:ca:29:02:e0:2b:c4:6c:41:bb:03:f0:aa:15:9e:
54:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:76:A9:E0:CA:B3:0D:DF:A2:44:ED:CC:68:E6:39:85:DC:93:09:3D
X509v3 Authority Key Identifier:
keyid:E5:B1:DE:74:43:EA:F1:8C:EB:06:88:8D:7E:F9:3A:56:35:A4:AE:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5bHedEPq8YzrBoiNfvk6VjWkrh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/784838-0e3b-46ba-8595-d8f6ab83b533/1/5bHedEPq8YzrBoiNfvk6VjWkrh4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/784838-0e3b-46ba-8595-d8f6ab83b533/1/5bHedEPq8YzrBoiNfvk6VjWkrh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:9e:79:b5:f8:1b:24:ab:e1:73:3d:f3:85:e7:02:fa:f6:a8:
56:4f:a7:0d:f6:3e:fa:a6:5f:77:99:4c:f6:81:e0:31:4e:d0:
64:0e:43:64:bf:19:89:61:93:dc:4c:91:ee:25:b6:48:c6:f6:
fb:74:52:3a:01:81:54:72:5d:3f:70:f1:be:02:cc:b9:95:d3:
2a:32:ac:b4:e9:d7:c2:7a:a1:14:26:eb:29:83:2e:b5:a4:ff:
99:07:fb:a1:bc:26:18:f1:1a:09:2e:09:4b:f4:ff:61:94:3c:
4a:b3:ac:37:24:23:0a:8e:d4:aa:2d:81:34:42:0f:37:ae:e2:
5f:50:b2:21:71:01:c1:14:97:4b:47:89:fa:a8:37:02:7e:4c:
69:62:65:b7:3e:b7:20:a5:ff:cd:18:a1:a6:f4:25:cf:53:65:
d8:80:95:7b:4a:54:c4:2a:8b:70:49:41:49:a5:04:d6:6e:bc:
33:df:b7:c5:bd:fe:5d:a0:cc:c1:75:55:0b:a4:19:6f:f6:1a:
22:a1:14:b2:09:7e:82:ba:c4:bd:1b:bb:fc:36:14:1b:2f:49:
73:eb:5f:d1:0b:44:5d:49:7d:ea:57:2c:2d:2e:ee:5e:78:71:
35:67:a5:64:89:04:a3:fb:c8:de:c3:36:ef:9c:49:c8:c7:f6:
e7:ae:e5:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:25:29 2026 by rpki-client