Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/5jRhbtvWAVT6Pax36pDb18aKEy0.mft
File: 5jRhbtvWAVT6Pax36pDb18aKEy0.mft (raw, json)
Hash identifier: PqpJ+vBMed+X0Xxk3o1aI2CLq9n8wFDExdRdPbBi06Y=
Subject key identifier: 06:A8:51:28:35:4B:73:6C:0A:07:A7:D4:4B:4B:7B:59:2A:C2:85:8D
Authority key identifier: E6:34:61:6E:DB:D6:01:54:FA:3D:AC:77:EA:90:DB:D7:C6:8A:13:2D
Certificate issuer: /CN=e634616edbd60154fa3dac77ea90dbd7c68a132d
Certificate serial: 019D2A04FE2B51B6702DE24AD63BDE1A8F9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5jRhbtvWAVT6Pax36pDb18aKEy0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/5jRhbtvWAVT6Pax36pDb18aKEy0.mft
Manifest number: 1616
Signing time: Thu 26 Mar 2026 12:01:03 +0000
Manifest this update: Thu 26 Mar 2026 12:01:03 +0000
Manifest next update: Fri 27 Mar 2026 12:01:03 +0000
Files and hashes: 1: 5jRhbtvWAVT6Pax36pDb18aKEy0.crl (hash: d99LvXByJjM+9LCoKH/DGIbWyAamqmeTziwHlp7E37g=)
2: Htdodj1EnLAQWvHL9dfSRXWphBY.roa (hash: 4qm2iqRXbtgb8aQs2u9Qec4WCWSDsvZanKGj3hNNhZs=)
3: qUbS3fckMBwSjTB5lnxF3fZbp3s.roa (hash: KAFzjWDg92Eqz8mPAygaN1C2exNmJZnhRSrRBX3vbQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/5jRhbtvWAVT6Pax36pDb18aKEy0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/5jRhbtvWAVT6Pax36pDb18aKEy0.mft
rsync://rpki.ripe.net/repository/DEFAULT/5jRhbtvWAVT6Pax36pDb18aKEy0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:fe:2b:51:b6:70:2d:e2:4a:d6:3b:de:1a:8f:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e634616edbd60154fa3dac77ea90dbd7c68a132d
Validity
Not Before: Mar 26 12:01:03 2026 GMT
Not After : Mar 27 12:01:03 2026 GMT
Subject: CN=06a85128354b736c0a07a7d44b4b7b592ac2858d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c7:5b:a6:48:7b:62:f0:cd:5d:8d:4c:fa:b5:
39:ec:e0:52:ac:a4:24:ab:41:0d:0e:e5:d3:d7:ac:
b9:1c:01:2d:0d:23:1b:f5:54:7b:ac:01:e6:c6:43:
68:89:e6:a3:ea:da:9a:3c:26:e5:01:31:99:22:b7:
dd:5b:86:85:2f:63:e2:72:48:75:82:24:1e:76:02:
f3:b6:9d:0f:27:8f:a2:ff:10:5d:c5:35:66:83:88:
a8:6b:26:03:49:65:d7:89:bb:5e:90:b9:be:04:98:
ab:20:74:90:60:8a:90:cd:92:65:c2:e6:c2:d0:37:
38:13:fe:73:66:2d:7c:5a:36:83:76:23:b3:5a:36:
a3:8d:5e:c1:27:d9:20:c0:fc:3a:b0:9b:9c:30:d4:
c7:1e:3b:b7:92:b5:5a:bb:fb:ae:88:e3:34:38:25:
d4:db:56:58:6a:a2:86:69:10:e7:04:f3:4b:6a:df:
b4:4c:89:fa:58:5f:62:0d:1f:76:c7:bf:6c:3e:a5:
0b:96:ec:eb:79:71:7b:32:3b:6b:d5:75:52:e0:7f:
8d:fd:f9:6c:37:d0:4b:83:d9:1e:f2:7d:50:e1:41:
27:08:95:c9:aa:0f:08:da:db:55:ad:b8:7e:6d:03:
18:80:3f:a2:27:fe:b7:ae:94:4c:44:d6:57:76:6a:
47:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:A8:51:28:35:4B:73:6C:0A:07:A7:D4:4B:4B:7B:59:2A:C2:85:8D
X509v3 Authority Key Identifier:
keyid:E6:34:61:6E:DB:D6:01:54:FA:3D:AC:77:EA:90:DB:D7:C6:8A:13:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5jRhbtvWAVT6Pax36pDb18aKEy0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/5jRhbtvWAVT6Pax36pDb18aKEy0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/5jRhbtvWAVT6Pax36pDb18aKEy0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:9f:e6:bc:ab:5b:5b:8d:69:98:59:2e:f9:35:16:6e:a1:67:
4e:91:a7:b7:c3:97:4f:4b:63:49:a0:7e:5a:f0:4d:c2:15:67:
77:85:78:46:1d:83:52:16:83:e6:c9:43:89:c7:ae:71:0c:7d:
3a:3b:13:e5:37:79:df:20:2b:c3:35:80:9c:32:40:99:b7:a6:
62:55:72:66:3d:9b:ce:85:b8:40:f6:1f:d3:ea:65:a3:e3:d6:
ba:f5:fb:64:5c:5f:0f:8d:cb:0f:f9:6b:40:34:d6:6e:03:85:
61:02:4c:31:17:30:6d:d2:c3:93:d4:ba:20:06:c6:0d:1d:a7:
eb:6c:97:2c:e9:a6:dd:be:b8:37:95:ea:86:fc:46:17:e4:40:
0d:71:ba:b5:7d:b4:c5:66:54:73:b0:56:e4:48:c9:9e:c5:c7:
01:73:ad:55:d5:05:49:e2:eb:41:81:73:f8:b9:02:fd:25:ef:
60:5f:ed:96:15:a6:47:01:2e:6c:a2:6c:04:3b:94:dc:09:69:
0c:f5:a4:80:ef:21:2f:e5:2d:05:20:82:66:d8:66:21:92:1c:
51:bf:cf:db:52:dc:3c:9b:68:6a:0d:d6:59:be:02:40:96:d8:
76:1b:db:a4:ac:07:1f:ff:42:fe:37:bd:b0:98:e8:65:af:03:
ff:52:f9:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:16:15 2026 by rpki-client