Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/18b5bb-8e41-4e88-bdbe-341c63614280/1/5GZIM5avs3fl43nRYVveD9TZ7Uc.mft
File: 5GZIM5avs3fl43nRYVveD9TZ7Uc.mft (raw, json)
Hash identifier: URrzznjDH7pg1J0ZnVpoQyMQ2Tf2NgPoJmdFGh0iIao=
Subject key identifier: 41:34:18:11:57:D1:6D:97:56:94:24:2A:1C:B7:F4:FC:33:AB:F5:0E
Authority key identifier: E4:66:48:33:96:AF:B3:77:E5:E3:79:D1:61:5B:DE:0F:D4:D9:ED:47
Certificate issuer: /CN=e466483396afb377e5e379d1615bde0fd4d9ed47
Certificate serial: 019D284DD2CD1B2CD025DE3492B5FC4A91D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5GZIM5avs3fl43nRYVveD9TZ7Uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/18b5bb-8e41-4e88-bdbe-341c63614280/1/5GZIM5avs3fl43nRYVveD9TZ7Uc.mft
Manifest number: 0F7F
Signing time: Thu 26 Mar 2026 04:01:21 +0000
Manifest this update: Thu 26 Mar 2026 04:01:21 +0000
Manifest next update: Fri 27 Mar 2026 04:01:21 +0000
Files and hashes: 1: 5GZIM5avs3fl43nRYVveD9TZ7Uc.crl (hash: 0m5IUdCj6Xq0FjOk8tI1yTpbF464AgRENZISG/Y6Jvo=)
2: hNYIQ5HHhINGm0B4xE-M57SIxF0.roa (hash: FqszJttjAhJJ6gXeV7wcVvhxNzpQaBx6Ggtmu08rd0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/18b5bb-8e41-4e88-bdbe-341c63614280/1/5GZIM5avs3fl43nRYVveD9TZ7Uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/18b5bb-8e41-4e88-bdbe-341c63614280/1/5GZIM5avs3fl43nRYVveD9TZ7Uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/5GZIM5avs3fl43nRYVveD9TZ7Uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:d2:cd:1b:2c:d0:25:de:34:92:b5:fc:4a:91:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e466483396afb377e5e379d1615bde0fd4d9ed47
Validity
Not Before: Mar 26 04:01:21 2026 GMT
Not After : Mar 27 04:01:21 2026 GMT
Subject: CN=4134181157d16d975694242a1cb7f4fc33abf50e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:69:35:79:8e:73:45:52:21:58:75:0a:20:66:
4c:25:a5:b8:9a:e3:88:95:d1:3c:23:1f:1d:90:94:
76:f4:ad:bd:91:82:e3:58:56:ea:72:30:42:ff:af:
38:73:a1:73:20:81:c3:09:3f:bc:ec:9b:c5:ac:c2:
6a:14:7e:13:1c:a3:36:cf:0d:55:bd:4e:d1:ee:3e:
a8:e1:0f:a2:a5:9a:57:9f:4a:71:6b:14:19:2c:a8:
29:05:85:bb:48:ac:dc:f4:e0:cf:74:f2:95:3c:36:
b3:50:4f:cb:f6:fa:88:14:cc:d0:c9:e9:ee:19:b3:
cd:19:06:80:da:f6:9b:2c:17:04:52:28:e6:06:91:
48:16:8a:f5:2a:43:5e:bf:28:84:82:95:bc:77:e6:
4f:9a:40:12:fb:f0:bc:59:a3:d5:02:e1:bb:62:1e:
54:2b:0f:b6:b6:71:3f:e0:73:3f:1d:51:ab:74:eb:
34:85:3b:9c:a4:79:8f:67:89:9c:6a:a8:99:bb:95:
83:1a:f6:a1:95:15:a9:63:3f:2e:79:e1:fc:df:aa:
27:db:f3:8e:76:3c:a7:ed:1c:c3:13:70:67:23:c2:
16:4a:80:44:19:d1:d2:91:0e:39:f7:40:c8:c4:34:
40:07:6b:ff:a3:8e:33:55:8d:13:c2:c9:35:ba:12:
3b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:34:18:11:57:D1:6D:97:56:94:24:2A:1C:B7:F4:FC:33:AB:F5:0E
X509v3 Authority Key Identifier:
keyid:E4:66:48:33:96:AF:B3:77:E5:E3:79:D1:61:5B:DE:0F:D4:D9:ED:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5GZIM5avs3fl43nRYVveD9TZ7Uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/18b5bb-8e41-4e88-bdbe-341c63614280/1/5GZIM5avs3fl43nRYVveD9TZ7Uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/18b5bb-8e41-4e88-bdbe-341c63614280/1/5GZIM5avs3fl43nRYVveD9TZ7Uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:a4:47:50:e1:f2:35:35:f2:12:c2:0e:4b:7a:15:4c:67:93:
54:f5:65:30:02:24:1a:43:63:0b:dc:c0:33:db:66:c6:cb:1c:
c8:c7:a0:6e:27:93:6a:48:1f:00:f0:3a:aa:85:fc:df:47:d3:
73:0a:15:f2:da:69:c7:c9:9d:89:5b:f2:18:77:78:2d:b5:93:
66:c1:9d:d3:37:e8:76:88:b7:a5:e3:96:09:14:56:28:37:aa:
33:43:a5:d1:ac:2c:fd:21:4b:9b:2d:24:11:98:0d:6d:4b:4b:
f0:6d:96:72:11:89:05:45:89:f5:dd:d0:00:95:cc:dd:f3:de:
a5:9b:36:de:a4:fe:64:5a:f7:b1:4d:59:f7:8d:1b:f5:52:05:
87:26:ec:1b:81:a6:c5:5f:51:25:6d:f2:91:bd:0b:23:1a:e7:
f6:e8:75:89:dc:25:18:06:77:37:b1:41:d4:a5:da:bb:a2:9f:
01:44:20:4f:7c:02:8e:bb:f2:87:d4:e9:e4:a6:ab:66:94:e8:
58:c7:b6:eb:48:01:d3:ea:b7:d4:f9:6c:b1:29:8f:48:9c:1e:
25:5e:ef:d8:60:68:14:fe:90:de:6e:b9:76:d2:6a:87:b1:6a:
b2:35:dc:a6:d2:89:1e:0a:00:25:a8:0e:b4:27:53:fa:5b:7f:
26:56:cc:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:28:49 2026 by rpki-client