Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/5acd78-d670-4192-b564-040e0644fbe8/1/0N5hiCK4r2-eyv_NfVRZt8wRRJo.mft
File: 0N5hiCK4r2-eyv_NfVRZt8wRRJo.mft (raw, json)
Hash identifier: WiJRuQhlX+QJQckeRE4qNHkXqGZA84L61ZtUerqZvAs=
Subject key identifier: 55:7E:E6:EB:39:E3:13:59:B9:C1:8A:BA:83:43:3B:81:C2:C5:6C:E9
Authority key identifier: D0:DE:61:88:22:B8:AF:6F:9E:CA:FF:CD:7D:54:59:B7:CC:11:44:9A
Certificate issuer: /CN=d0de618822b8af6f9ecaffcd7d5459b7cc11449a
Certificate serial: 019D26CCE8E94C97DC8F09CB3FF9E4AE68AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0N5hiCK4r2-eyv_NfVRZt8wRRJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/5acd78-d670-4192-b564-040e0644fbe8/1/0N5hiCK4r2-eyv_NfVRZt8wRRJo.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 21:00:56 +0000
Manifest this update: Wed 25 Mar 2026 21:00:56 +0000
Manifest next update: Thu 26 Mar 2026 21:00:56 +0000
Files and hashes: 1: 0N5hiCK4r2-eyv_NfVRZt8wRRJo.crl (hash: PnWQKuM6UA+cZFGwN749w3/T+mJEOyHZXKySmMtEh/w=)
2: 18LvMJbaobz9RVoG3KwWtt6oPsk.roa (hash: U928xEWQEvSL1IP/0rVvcpbAEWqlTfBez50gOZPkoHY=)
3: 5jCnir6W6gAd6_EDtQEmsCT7w14.roa (hash: 0wvxGHojLuaQ4hENlIsY48YCfJ44p5EM0SkFd7dB+g4=)
4: bQqTZ3ArgViLCoqi3gs3VHHEcM8.roa (hash: aWk0i4GB/D7KkQJxNXNTSQ961hAd3k/+4U2XwwZMILk=)
5: vW2RW7QY1hflVRyn1_CDLNIOZtQ.roa (hash: M4ZBHT4dK/BF7Hs2UlU9Rb4uebu3FER628aOLG71DV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/5acd78-d670-4192-b564-040e0644fbe8/1/0N5hiCK4r2-eyv_NfVRZt8wRRJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/5acd78-d670-4192-b564-040e0644fbe8/1/0N5hiCK4r2-eyv_NfVRZt8wRRJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0N5hiCK4r2-eyv_NfVRZt8wRRJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:e8:e9:4c:97:dc:8f:09:cb:3f:f9:e4:ae:68:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0de618822b8af6f9ecaffcd7d5459b7cc11449a
Validity
Not Before: Mar 25 21:00:56 2026 GMT
Not After : Mar 26 21:00:56 2026 GMT
Subject: CN=557ee6eb39e31359b9c18aba83433b81c2c56ce9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:61:43:e3:ad:2e:8d:fa:c2:41:5f:85:f0:34:
ea:e7:e7:f9:6d:0b:62:ab:4f:4a:04:fd:fb:36:8b:
08:33:23:07:3e:9d:d5:90:a9:a6:1e:a9:be:77:a5:
92:8e:f2:37:6c:97:b6:8c:89:14:9d:90:9f:6b:d9:
21:a6:d0:f7:00:4a:e3:6e:21:d2:e4:8b:b8:43:1e:
2f:04:7b:4a:d5:aa:83:e4:73:cb:f5:ff:36:67:d4:
f4:2e:82:62:d1:74:b4:85:ad:30:21:5f:34:ea:a9:
27:58:a7:1f:0e:bc:ed:39:a1:0b:6f:43:cf:dc:59:
14:44:1a:56:bc:cd:49:6f:86:34:8c:ac:4a:9e:ee:
95:55:27:3f:8d:a2:db:5d:b1:66:5f:cb:a7:78:e9:
89:71:be:be:df:7a:2b:55:ba:33:ad:0e:6e:75:03:
dd:f2:15:05:44:46:18:5f:7b:d3:92:19:50:f3:32:
b3:67:32:5f:34:10:c1:b1:3b:64:0c:d7:99:97:da:
d7:c1:74:e3:3a:67:b3:7e:77:09:88:c0:c8:0f:1f:
62:12:fa:62:92:eb:d7:c2:1c:6f:90:50:78:10:a7:
62:c4:6d:03:55:c0:91:ec:3c:c9:5e:9a:2c:64:4c:
cc:ce:ee:64:1a:bb:36:f9:dc:f5:de:9e:6a:89:17:
fd:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:7E:E6:EB:39:E3:13:59:B9:C1:8A:BA:83:43:3B:81:C2:C5:6C:E9
X509v3 Authority Key Identifier:
keyid:D0:DE:61:88:22:B8:AF:6F:9E:CA:FF:CD:7D:54:59:B7:CC:11:44:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0N5hiCK4r2-eyv_NfVRZt8wRRJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5acd78-d670-4192-b564-040e0644fbe8/1/0N5hiCK4r2-eyv_NfVRZt8wRRJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5acd78-d670-4192-b564-040e0644fbe8/1/0N5hiCK4r2-eyv_NfVRZt8wRRJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:ae:c5:39:f1:37:a8:04:b3:53:82:1c:91:8e:26:c5:6f:2f:
ac:6d:e0:a1:9d:d0:a5:ca:f9:77:b5:0c:23:4c:02:29:da:88:
a0:e0:2e:3a:9b:be:54:e1:81:c9:f2:d3:27:ec:f8:e1:a4:ab:
55:63:ad:c4:b4:03:44:4e:7a:b8:ff:dd:e8:d6:df:de:1a:3a:
ba:41:e4:cb:d5:ad:89:bf:49:46:7a:7e:00:17:d5:32:8f:a7:
1d:08:88:a2:83:0d:4c:ab:12:8b:53:ef:3a:71:b7:2a:d1:e2:
73:ee:c7:e3:97:67:ec:63:50:70:9e:a3:8a:ac:08:d3:2d:c0:
98:ef:b3:24:3d:5b:de:81:4c:69:57:01:d5:af:00:e0:77:d2:
39:88:05:c6:cf:f1:dd:8f:95:71:1e:5a:57:e0:65:58:df:ff:
1d:22:62:3d:c4:e3:66:ec:43:ce:a3:01:3a:44:a2:dd:44:38:
8f:fa:72:d2:97:83:e3:9b:40:1f:44:30:47:1d:69:43:bd:c4:
4c:ee:7f:b3:c9:81:01:2c:ee:13:39:7c:75:29:44:a0:cf:32:
d1:0c:e3:6c:40:7e:dc:0f:43:67:cf:cc:6a:2c:33:a3:7e:7c:
d2:54:c3:fb:d9:5b:23:d2:4d:8d:1f:a2:33:a1:f4:a3:d0:65:
41:d0:64:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:29 2026 by rpki-client