Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/5ea2ff-8d66-4a11-93f8-2e2908588865/1/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.mft
File: 5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.mft (raw, json)
Hash identifier: fDD/viSMBthf7E3HZdLIprtPS60NlBi2PDe1nxMMa7s=
Subject key identifier: 71:A0:D0:C3:FA:40:44:B6:0F:79:22:DC:AF:73:89:A5:5E:35:06:4A
Authority key identifier: E4:7E:E5:BE:E3:ED:23:F9:43:76:1E:58:F0:EE:A9:7C:7C:5B:F8:7C
Certificate issuer: /CN=e47ee5bee3ed23f943761e58f0eea97c7c5bf87c
Certificate serial: 019D299744BCB1679D45722201B119C80D71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/5ea2ff-8d66-4a11-93f8-2e2908588865/1/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.mft
Manifest number: 0C37
Signing time: Thu 26 Mar 2026 10:01:12 +0000
Manifest this update: Thu 26 Mar 2026 10:01:12 +0000
Manifest next update: Fri 27 Mar 2026 10:01:12 +0000
Files and hashes: 1: 5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.crl (hash: cWxSjcCVN4OnD1GBE3TkVD+hrotcRNM5UgrWmI7HdQ0=)
2: cHSnTM0TIgMVZV_Pq7Op9CcRxNw.roa (hash: AyIttbsE/zYFTDAmxKD+ND4Xjn5eOSnndB3Dk5UaIJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/5ea2ff-8d66-4a11-93f8-2e2908588865/1/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/5ea2ff-8d66-4a11-93f8-2e2908588865/1/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 10:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:44:bc:b1:67:9d:45:72:22:01:b1:19:c8:0d:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e47ee5bee3ed23f943761e58f0eea97c7c5bf87c
Validity
Not Before: Mar 26 10:01:12 2026 GMT
Not After : Mar 27 10:01:12 2026 GMT
Subject: CN=71a0d0c3fa4044b60f7922dcaf7389a55e35064a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f1:25:62:d5:7a:0c:a2:cb:75:88:d9:db:71:
7b:6b:b3:75:d1:68:b6:e9:6b:9c:9f:1b:a3:5b:ef:
49:71:e9:4b:85:0d:cf:35:0b:e6:5f:8c:8d:e5:a0:
32:0e:60:f4:68:3b:99:61:af:91:94:5a:2a:f5:1b:
b4:fe:27:65:53:1b:bf:f0:cc:67:c3:09:dd:62:f7:
96:2b:af:2c:59:a3:3c:4d:ec:76:79:d6:2e:6a:58:
c9:20:49:45:92:10:d9:7d:5d:47:02:dc:47:0d:0d:
b5:5b:a6:40:4d:99:5e:24:ba:32:be:03:63:34:f7:
1c:72:d6:28:d6:3d:d8:4d:0d:fa:b2:3e:f3:ed:bb:
92:ed:52:ec:df:9d:c2:9e:76:b2:c5:21:af:08:37:
14:d3:13:47:4e:c0:b9:04:30:b9:49:e2:53:c0:71:
65:53:84:1d:13:d8:90:54:2f:fe:37:33:3b:7c:ac:
b6:d9:a6:ad:8a:8a:cd:f2:5e:6b:6e:58:08:b2:d0:
45:bc:00:7d:f2:fe:6c:20:68:f7:f5:ab:ec:24:a3:
93:b6:7f:31:7b:2f:39:dc:79:d9:65:a5:80:d7:99:
1c:62:81:f1:b0:ef:0f:e1:08:30:ac:b7:f2:94:70:
48:62:cf:c7:36:18:a8:21:06:19:a8:1a:63:67:ce:
b6:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:A0:D0:C3:FA:40:44:B6:0F:79:22:DC:AF:73:89:A5:5E:35:06:4A
X509v3 Authority Key Identifier:
keyid:E4:7E:E5:BE:E3:ED:23:F9:43:76:1E:58:F0:EE:A9:7C:7C:5B:F8:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/5ea2ff-8d66-4a11-93f8-2e2908588865/1/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/5ea2ff-8d66-4a11-93f8-2e2908588865/1/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:b9:a4:53:32:92:dd:fa:b6:d7:c3:a5:9f:01:c7:c3:c3:4d:
66:c9:17:14:5e:4e:2b:05:73:4e:66:d8:bb:01:bb:bf:f0:41:
c7:91:1c:67:3b:fb:ec:4a:fb:40:16:d2:7b:9b:b1:37:5e:38:
d2:9d:13:c9:14:24:78:25:2d:a0:5e:7c:3d:e4:08:04:f5:a4:
80:65:d3:17:96:8b:a0:b5:b3:0c:fd:c4:ae:a3:56:ec:5f:60:
15:d2:6b:6e:05:11:62:77:dd:5d:cb:4f:4c:ce:f0:71:52:2e:
fd:48:46:95:47:1c:59:ed:08:30:d7:9f:27:8f:73:8f:76:24:
90:5f:8b:93:cf:b9:08:eb:c7:e4:56:10:71:c8:ba:b6:c2:6e:
27:fb:a8:f8:05:e8:13:40:95:60:af:09:1e:eb:3f:f0:68:8d:
25:a7:10:12:85:dc:5f:d3:e8:f8:2f:6a:8d:b8:fa:b8:fb:75:
73:c7:83:b6:1d:28:73:86:7f:e3:a7:74:7e:9b:35:47:37:1f:
96:22:4e:c8:29:15:8b:e7:1d:6e:27:e0:18:83:8b:23:b4:33:
f9:d1:d8:0c:61:4f:ea:5d:42:e0:8e:cb:0b:68:f7:11:0a:40:
de:a7:bd:f8:2f:be:02:6b:dd:1f:b6:18:89:5f:b5:14:e5:0f:
e4:51:1b:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:37:20 2026 by rpki-client