Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/e08318-2975-417a-b863-85ea63c24474/1/h5kgiOdlXLE0AgypWw5X1Oba9A8.mft
File: h5kgiOdlXLE0AgypWw5X1Oba9A8.mft (raw, json)
Hash identifier: bTREe9TaGgFQzvgTxRtEzJ3uFCxPDbg2RtD0aiF5cvE=
Subject key identifier: 07:50:5D:C7:F1:45:7B:EE:37:BE:A2:7D:C3:AF:93:B0:C4:53:68:9A
Authority key identifier: 87:99:20:88:E7:65:5C:B1:34:02:0C:A9:5B:0E:57:D4:E6:DA:F4:0F
Certificate issuer: /CN=87992088e7655cb134020ca95b0e57d4e6daf40f
Certificate serial: 019D29CE905D3F3AF39BD1A08665DEAF0168
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h5kgiOdlXLE0AgypWw5X1Oba9A8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/e08318-2975-417a-b863-85ea63c24474/1/h5kgiOdlXLE0AgypWw5X1Oba9A8.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 11:01:36 +0000
Manifest this update: Thu 26 Mar 2026 11:01:36 +0000
Manifest next update: Fri 27 Mar 2026 11:01:36 +0000
Files and hashes: 1: h5kgiOdlXLE0AgypWw5X1Oba9A8.crl (hash: ghREV1FqJ1l8QMWW25AqnYjfHm265k0EZzS8NBMJTb0=)
2: uOT6tJlrkH7uNore0SwrHv6B2q8.roa (hash: sj7kmuH/7FdqL+TtQaRY1OsxURdzt9SlOSUYNlEq6iI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/e08318-2975-417a-b863-85ea63c24474/1/h5kgiOdlXLE0AgypWw5X1Oba9A8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/e08318-2975-417a-b863-85ea63c24474/1/h5kgiOdlXLE0AgypWw5X1Oba9A8.mft
rsync://rpki.ripe.net/repository/DEFAULT/h5kgiOdlXLE0AgypWw5X1Oba9A8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:90:5d:3f:3a:f3:9b:d1:a0:86:65:de:af:01:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87992088e7655cb134020ca95b0e57d4e6daf40f
Validity
Not Before: Mar 26 11:01:36 2026 GMT
Not After : Mar 27 11:01:36 2026 GMT
Subject: CN=07505dc7f1457bee37bea27dc3af93b0c453689a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:9b:1e:78:f5:cb:33:74:f9:ab:bb:de:c5:2f:
f5:97:21:7b:b5:ff:55:4c:36:39:19:43:6f:22:f0:
ec:9e:13:17:6d:36:c8:ab:39:fe:29:7f:db:f1:12:
84:f3:3e:ff:23:db:17:29:dc:e1:fc:af:89:c4:d9:
c0:11:1a:82:4e:16:3f:03:52:df:50:5f:de:b3:c9:
be:de:a1:62:ca:6f:17:12:8d:a5:c9:24:53:f9:b2:
f2:6d:b4:7e:9d:c5:71:02:e4:c2:85:db:0b:76:32:
b7:7a:21:3d:ee:f3:eb:5a:ae:85:ce:3f:32:5e:7a:
73:b4:2e:84:65:1b:03:96:b8:77:8f:6d:2e:4f:3f:
cd:75:f3:84:e4:b5:e1:e5:5c:66:28:87:ef:ef:bd:
5c:a5:f9:8c:a0:a2:26:58:67:ba:c7:42:91:47:53:
c6:6f:1c:95:9e:57:77:09:7e:0a:02:b5:b2:23:74:
48:14:3b:c5:b6:27:8a:06:04:27:e1:8f:05:8c:b7:
87:a6:3e:1a:54:b9:fd:df:ee:d5:27:ea:2c:4f:d4:
5f:bf:97:1c:e9:de:d2:71:3e:db:97:af:33:f8:5a:
f4:07:b0:1c:d0:39:2c:4c:0d:c7:ce:e2:d1:aa:e1:
ac:85:25:65:19:35:aa:0f:2c:26:58:fc:b7:02:3e:
31:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:50:5D:C7:F1:45:7B:EE:37:BE:A2:7D:C3:AF:93:B0:C4:53:68:9A
X509v3 Authority Key Identifier:
keyid:87:99:20:88:E7:65:5C:B1:34:02:0C:A9:5B:0E:57:D4:E6:DA:F4:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h5kgiOdlXLE0AgypWw5X1Oba9A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e08318-2975-417a-b863-85ea63c24474/1/h5kgiOdlXLE0AgypWw5X1Oba9A8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e08318-2975-417a-b863-85ea63c24474/1/h5kgiOdlXLE0AgypWw5X1Oba9A8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:54:ba:b9:c0:5e:8d:8f:10:a7:62:33:e8:36:6c:80:7d:d4:
ec:0c:8e:c5:50:ce:ef:c9:5d:6b:5b:75:87:70:ba:19:65:e3:
ff:93:cb:63:d7:30:65:57:79:d7:40:50:75:d0:83:90:7b:ad:
f8:b4:b5:e8:46:78:91:19:7b:c1:de:5c:4a:2a:f3:5d:95:21:
61:02:d8:f7:9d:3b:2c:10:7b:6d:fd:e5:a4:2e:b3:ab:cb:fe:
24:80:3f:2a:7e:50:de:21:ad:35:7f:90:69:5f:25:7f:fe:1b:
9e:77:de:8c:8d:07:7b:c1:b2:83:45:5d:62:fc:d8:b7:a3:b3:
08:a8:dc:b3:a7:fb:44:bd:fa:f8:92:52:fd:5a:d9:ff:5d:0c:
ba:50:13:3b:9f:fc:d2:ea:f3:40:35:41:c3:47:cd:d5:3f:cb:
64:22:b4:34:41:65:51:b2:fb:d2:67:5b:b0:60:86:3f:60:9c:
85:92:55:d5:85:b2:bd:1c:45:73:4b:aa:6b:86:49:ae:d6:cd:
39:55:77:a4:07:6a:08:ad:f2:3b:bd:aa:78:a2:db:9c:a2:86:
0a:2a:21:7e:90:1e:ad:70:ac:ff:56:93:02:ab:3c:35:61:32:
5b:b8:19:58:d9:23:96:fb:86:74:0d:88:10:9e:c4:05:27:59:
32:d0:8e:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:09:23 2026 by rpki-client