Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/5jRhbtvWAVT6Pax36pDb18aKEy0.mft
File: 5jRhbtvWAVT6Pax36pDb18aKEy0.mft (raw, json)
Hash identifier: hz8XjBV6mCtNFXBR/uJ7B9ld+a5lahV1gVwQQq0qmv0=
Subject key identifier: DC:A6:A2:86:DC:4B:A9:D5:A1:D0:44:E8:4E:59:5E:D2:97:45:34:D5
Authority key identifier: E6:34:61:6E:DB:D6:01:54:FA:3D:AC:77:EA:90:DB:D7:C6:8A:13:2D
Certificate issuer: /CN=e634616edbd60154fa3dac77ea90dbd7c68a132d
Certificate serial: 019D28165EF08CE97DE61B4FF504BE418D52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5jRhbtvWAVT6Pax36pDb18aKEy0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/5jRhbtvWAVT6Pax36pDb18aKEy0.mft
Manifest number: 1615
Signing time: Thu 26 Mar 2026 03:00:47 +0000
Manifest this update: Thu 26 Mar 2026 03:00:47 +0000
Manifest next update: Fri 27 Mar 2026 03:00:47 +0000
Files and hashes: 1: 5jRhbtvWAVT6Pax36pDb18aKEy0.crl (hash: PWkgMla9m1dmswZABLR5PFNC3nK2MDgk73KUTieteJQ=)
2: Htdodj1EnLAQWvHL9dfSRXWphBY.roa (hash: 4qm2iqRXbtgb8aQs2u9Qec4WCWSDsvZanKGj3hNNhZs=)
3: qUbS3fckMBwSjTB5lnxF3fZbp3s.roa (hash: KAFzjWDg92Eqz8mPAygaN1C2exNmJZnhRSrRBX3vbQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/5jRhbtvWAVT6Pax36pDb18aKEy0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/5jRhbtvWAVT6Pax36pDb18aKEy0.mft
rsync://rpki.ripe.net/repository/DEFAULT/5jRhbtvWAVT6Pax36pDb18aKEy0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 03:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:5e:f0:8c:e9:7d:e6:1b:4f:f5:04:be:41:8d:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e634616edbd60154fa3dac77ea90dbd7c68a132d
Validity
Not Before: Mar 26 03:00:47 2026 GMT
Not After : Mar 27 03:00:47 2026 GMT
Subject: CN=dca6a286dc4ba9d5a1d044e84e595ed2974534d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c2:2d:4b:0e:82:1f:cc:4f:92:2c:2a:1d:8e:
6b:d2:ea:12:82:e7:70:6a:ad:7a:84:0a:d7:9e:6e:
0c:d5:6c:19:0f:fc:00:61:15:3a:18:a1:0c:7d:aa:
7d:61:5d:c4:3d:68:2c:bf:43:de:b8:45:17:5a:26:
4b:7d:45:a7:a1:a6:83:e4:d1:78:06:74:d9:3f:a4:
d5:f8:2f:a1:95:75:92:8f:51:6a:ca:53:74:25:87:
ed:ee:d5:ac:12:4d:0d:2e:64:b8:f2:91:3a:ba:8d:
da:11:f3:50:20:13:e3:f4:af:c5:44:dd:a4:dc:e2:
60:1b:11:2c:62:75:b8:00:7a:1d:39:73:de:37:86:
ac:58:5e:75:7f:fa:7c:bd:ea:b2:54:4c:00:99:45:
6d:d7:6c:56:2d:41:1a:b1:ab:e8:f3:10:07:e5:c3:
03:74:cc:96:09:67:c6:fb:c0:66:8d:8b:b7:4c:a6:
b1:7a:5e:d4:18:f8:dc:fa:a0:37:11:bb:7e:78:b5:
fd:89:54:eb:74:17:a5:23:ff:d6:01:84:45:16:82:
27:ec:8f:21:9f:be:99:74:38:ca:79:6e:3f:79:32:
6f:50:e1:45:72:2b:77:a2:03:fc:1a:f2:e5:64:44:
9e:4a:e6:c0:01:e5:59:3b:cd:d8:7b:91:97:5e:c3:
82:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:A6:A2:86:DC:4B:A9:D5:A1:D0:44:E8:4E:59:5E:D2:97:45:34:D5
X509v3 Authority Key Identifier:
keyid:E6:34:61:6E:DB:D6:01:54:FA:3D:AC:77:EA:90:DB:D7:C6:8A:13:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5jRhbtvWAVT6Pax36pDb18aKEy0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/5jRhbtvWAVT6Pax36pDb18aKEy0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/5jRhbtvWAVT6Pax36pDb18aKEy0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:3f:0b:43:03:41:fc:e7:52:05:c0:e8:24:1a:35:e6:f6:86:
72:b1:3a:b6:d3:68:a5:e9:99:7b:ae:b3:cd:04:ec:33:09:2f:
5a:dc:13:36:2e:ec:a8:32:29:c6:b5:79:32:be:20:3f:04:f1:
a7:ff:83:b7:ad:43:01:01:36:c4:b5:3c:60:47:3e:73:51:34:
c7:f3:ee:c1:da:f5:e5:09:5c:cc:0f:ef:90:9d:b3:99:7a:24:
9e:82:86:24:b2:0f:91:7b:0e:14:98:f3:10:dd:cb:86:8b:75:
ea:aa:6f:c5:66:6f:e6:89:f4:16:07:ec:b7:46:2f:a0:8d:b0:
33:cd:3a:da:b2:74:c3:25:13:76:69:87:c9:6c:a0:81:32:82:
0c:10:e3:e3:da:ea:bd:fb:2b:44:3d:dc:76:ef:07:d4:53:ec:
58:2e:cf:ed:f6:31:35:9f:25:55:78:2d:f3:8f:06:57:ca:64:
31:33:d5:67:64:c6:1f:aa:5f:a1:cb:8c:56:e3:38:3d:46:19:
84:ff:83:b6:7f:1f:21:93:a5:7d:36:77:e8:3e:ee:ae:e5:78:
92:8e:cd:b3:1b:73:50:1c:30:ae:41:59:72:d1:94:a1:d4:be:
f6:1d:04:bb:9a:a8:56:0c:be:94:40:21:7a:47:c5:1c:0d:b9:
ff:b9:35:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:12:14 2026 by rpki-client