Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.mft
File: 5eaQaKix-3-geVuvm7OrhslORvw.mft (raw, json)
Hash identifier: kBJU64qZhSLE6SuKqBgMnHcKIgGHyg+7Nxd9YXExwqU=
Subject key identifier: 80:07:4C:5C:AA:49:C7:BB:97:5A:0F:76:43:7D:8A:F4:6A:29:03:89
Authority key identifier: E5:E6:90:68:A8:B1:FB:7F:A0:79:5B:AF:9B:B3:AB:86:C9:4E:46:FC
Certificate issuer: /CN=e5e69068a8b1fb7fa0795baf9bb3ab86c94e46fc
Certificate serial: 019D2771D06E01BBD23B6363702FB37A3B4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5eaQaKix-3-geVuvm7OrhslORvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.mft
Manifest number: 1538
Signing time: Thu 26 Mar 2026 00:01:03 +0000
Manifest this update: Thu 26 Mar 2026 00:01:03 +0000
Manifest next update: Fri 27 Mar 2026 00:01:03 +0000
Files and hashes: 1: 5eaQaKix-3-geVuvm7OrhslORvw.crl (hash: mUwjx1ibOoztmVpNhHdxXAfUEe5rC4lZPOluLJc+z/0=)
2: CBtJzFMoigMYechG5k_lhWICkAA.roa (hash: 6qcOp5zAWvjz4mUxBNJFQHjpgjjuwwz7xV3uMQfNfLc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5eaQaKix-3-geVuvm7OrhslORvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:d0:6e:01:bb:d2:3b:63:63:70:2f:b3:7a:3b:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5e69068a8b1fb7fa0795baf9bb3ab86c94e46fc
Validity
Not Before: Mar 26 00:01:03 2026 GMT
Not After : Mar 27 00:01:03 2026 GMT
Subject: CN=80074c5caa49c7bb975a0f76437d8af46a290389
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f5:06:5e:af:8e:d8:73:ba:09:ec:39:18:b8:
e6:c2:98:d1:6a:8f:2b:0d:d3:00:70:5b:47:3b:33:
d2:b3:2f:a3:61:4a:76:c4:33:c3:d8:ef:d0:89:8b:
f9:a8:81:15:05:79:9f:e9:f9:6c:77:24:ce:e3:39:
e2:40:b7:45:7d:a0:00:3c:0e:a8:16:7f:f6:32:d4:
0a:38:26:7a:e5:32:7a:4c:f6:96:9d:11:60:87:ac:
c1:d0:7e:8d:72:85:21:86:45:e7:a0:35:2a:05:41:
0f:bc:f5:3a:00:96:39:7a:5e:46:0e:3e:d3:1e:ad:
6a:c3:2b:b4:f7:74:7a:f5:31:c1:0b:79:87:5f:d6:
6d:1b:31:28:90:e4:fa:9e:7a:e5:0a:cb:ee:a0:ae:
10:4b:3d:c1:9b:de:69:69:d5:fb:18:fb:a8:ae:7c:
17:73:9e:3b:33:6a:fb:ef:51:39:8c:f5:ed:cb:05:
cd:ce:62:7f:5e:8a:8b:d3:39:26:20:e8:52:46:75:
6f:d8:78:db:90:9a:4e:19:29:95:57:59:7c:ea:4c:
b9:51:04:ab:0b:e9:19:36:9b:11:66:5a:3b:46:83:
cc:ea:93:42:71:39:d2:d5:c8:3f:90:09:6b:9b:a2:
28:27:22:92:b7:f9:3c:b1:2d:ea:2b:b4:7f:36:42:
2a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:07:4C:5C:AA:49:C7:BB:97:5A:0F:76:43:7D:8A:F4:6A:29:03:89
X509v3 Authority Key Identifier:
keyid:E5:E6:90:68:A8:B1:FB:7F:A0:79:5B:AF:9B:B3:AB:86:C9:4E:46:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5eaQaKix-3-geVuvm7OrhslORvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:25:98:e6:64:d6:d8:01:13:f0:73:27:b9:de:31:71:fb:97:
ce:e7:a1:f8:30:18:94:fe:e2:e8:73:0c:4b:50:51:21:ca:ca:
53:ca:5c:29:16:ce:0a:e0:98:38:4b:d6:b0:20:ff:94:bb:02:
d7:3d:45:ab:e6:0a:58:18:58:ff:46:57:cc:c3:35:a2:df:3e:
b2:7f:1e:98:cf:16:ef:38:c2:3c:a1:c2:49:ee:b2:5c:a9:3b:
64:4b:36:d2:18:f7:7c:4b:0b:6a:e3:5b:de:76:15:ff:7e:ba:
66:0a:fb:91:bf:75:b2:d6:d3:71:ba:16:f4:1a:4d:0d:62:43:
b7:86:64:21:bf:89:3a:45:85:c1:a0:62:be:1e:49:43:27:b4:
f6:70:c7:23:55:e4:e7:92:88:a7:df:56:8b:32:45:21:61:01:
b0:e4:fc:66:c1:66:13:46:76:05:d3:33:18:b2:04:4a:3c:9c:
3c:37:10:45:02:f1:ef:a3:20:b5:f7:21:25:ae:c2:a6:2b:03:
e3:a0:03:89:6c:10:99:71:ae:c3:a4:3d:25:e5:e8:4a:4a:6d:
bf:73:e6:07:40:28:8a:6f:c2:ce:25:06:dd:bc:25:23:43:84:
57:fd:1f:1d:2c:e5:b9:31:02:30:e7:64:67:e1:c4:14:6f:84:
36:a0:47:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:26:37 2026 by rpki-client