
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/5171c7-8dfc-4d11-ae22-c28be483878a/1/e_es5VMOXVCQfS3bQ1vym03x1uQ.mft
File: e_es5VMOXVCQfS3bQ1vym03x1uQ.mft (raw, json)
Hash identifier: ar8xaZEB67Nar1dWtujE0kzAjqzAYJ5/QsxTV0+GV9M=
Subject key identifier: 5A:F9:F7:04:9F:AD:0F:3D:12:7A:8E:FD:B3:6A:4C:B5:14:FD:CC:F6
Authority key identifier: 7B:F7:AC:E5:53:0E:5D:50:90:7D:2D:DB:43:5B:F2:9B:4D:F1:D6:E4
Certificate issuer: /CN=7bf7ace5530e5d50907d2ddb435bf29b4df1d6e4
Certificate serial: 019D28BBB9F32B7C614F9272A7F973D27B7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e_es5VMOXVCQfS3bQ1vym03x1uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/5171c7-8dfc-4d11-ae22-c28be483878a/1/e_es5VMOXVCQfS3bQ1vym03x1uQ.mft
Manifest number: 0680
Signing time: Thu 26 Mar 2026 06:01:24 +0000
Manifest this update: Thu 26 Mar 2026 06:01:24 +0000
Manifest next update: Fri 27 Mar 2026 06:01:24 +0000
Files and hashes: 1: e_es5VMOXVCQfS3bQ1vym03x1uQ.crl (hash: Z4TWLHxXNeGQDFN5qB/Twq1HqJnKVwKZG4rYwGLSAHU=)
2: yn22QITeYuSiQ4etW04NOKsyiwg.roa (hash: Hhng+JY/6IvIYBVuvykD/FKUSe2wsbGUoRKGJNpfZo8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/5171c7-8dfc-4d11-ae22-c28be483878a/1/e_es5VMOXVCQfS3bQ1vym03x1uQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/5171c7-8dfc-4d11-ae22-c28be483878a/1/e_es5VMOXVCQfS3bQ1vym03x1uQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/e_es5VMOXVCQfS3bQ1vym03x1uQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:b9:f3:2b:7c:61:4f:92:72:a7:f9:73:d2:7b:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bf7ace5530e5d50907d2ddb435bf29b4df1d6e4
Validity
Not Before: Mar 26 06:01:24 2026 GMT
Not After : Mar 27 06:01:24 2026 GMT
Subject: CN=5af9f7049fad0f3d127a8efdb36a4cb514fdccf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b7:ef:d7:c8:a1:40:1f:17:6e:32:0d:83:d5:
72:0e:fe:e6:99:58:bc:d2:0c:f5:ee:06:d0:03:fa:
29:66:d4:a7:33:5e:85:6e:4b:ad:42:dc:39:fa:44:
ea:cb:31:7e:91:68:cc:9e:4d:93:47:e2:40:e0:9e:
ae:1c:eb:eb:fe:38:3b:9c:d9:72:4a:d7:21:e4:2f:
08:7e:e6:13:41:da:92:63:14:9a:be:27:8d:b4:1d:
e2:bd:80:e4:65:33:26:d8:47:08:e4:a9:22:47:3c:
0a:2e:7d:34:fc:48:d7:64:82:81:7f:9c:5d:be:33:
5b:63:24:f6:fa:a7:6c:d1:d7:56:33:ee:84:92:f3:
82:bf:6c:55:aa:1f:9c:6f:66:d5:57:b3:e5:15:f3:
af:78:65:11:70:79:9c:8a:d5:ff:48:b1:c8:ed:15:
a0:30:ea:fe:c3:a3:41:8c:5c:4c:c6:e2:06:aa:a0:
0d:93:8e:20:3d:f9:28:7d:09:44:79:00:85:4d:e5:
b9:4b:3b:01:19:46:f8:5b:80:76:33:26:ac:b1:fa:
66:4b:e6:fc:69:d7:ed:14:0f:e1:87:53:1d:de:ee:
e2:51:a9:97:ea:46:e2:f4:f2:f8:3f:e6:38:0a:ad:
f4:aa:5c:b8:be:0d:e1:e8:74:58:7c:fb:ef:95:94:
e5:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:F9:F7:04:9F:AD:0F:3D:12:7A:8E:FD:B3:6A:4C:B5:14:FD:CC:F6
X509v3 Authority Key Identifier:
keyid:7B:F7:AC:E5:53:0E:5D:50:90:7D:2D:DB:43:5B:F2:9B:4D:F1:D6:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e_es5VMOXVCQfS3bQ1vym03x1uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/5171c7-8dfc-4d11-ae22-c28be483878a/1/e_es5VMOXVCQfS3bQ1vym03x1uQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/5171c7-8dfc-4d11-ae22-c28be483878a/1/e_es5VMOXVCQfS3bQ1vym03x1uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:1f:da:79:9e:51:15:d0:10:bd:60:f5:6f:00:2a:8b:14:ff:
2d:60:5c:c9:37:6c:f6:1a:df:eb:e1:ba:6c:0d:11:4e:2c:d1:
c3:e4:4b:bd:8b:04:a5:1c:1d:98:b1:c3:b0:4d:df:f3:9a:a1:
27:38:d7:8b:0e:34:23:89:bd:8f:e3:6c:f2:3c:b2:63:40:26:
58:0f:ca:f9:34:0c:21:f5:41:54:a4:e5:75:1e:c9:d8:0a:76:
69:15:73:49:5e:17:6d:c9:a5:2d:71:79:70:c0:d6:7d:96:e8:
0c:b2:01:a6:db:4e:4c:13:69:2c:7e:73:aa:2f:a9:2c:e1:ac:
da:5c:3a:bf:00:22:e2:98:ad:aa:2b:83:af:25:8a:9a:f8:93:
a4:18:a6:2d:b0:08:a9:e1:ef:34:d8:22:1b:7a:45:83:c1:6e:
95:6a:6d:30:86:13:d5:e1:8c:dc:e1:91:62:1c:ac:14:2a:54:
36:32:4b:5e:e4:d2:4e:03:6b:32:39:e4:1c:96:cc:23:84:1c:
8a:ed:c4:c2:45:cb:e1:a4:ce:9a:14:f6:ef:df:24:0e:0f:9b:
30:57:91:85:a9:db:e6:2c:9d:4d:83:48:d7:3e:b0:81:ed:2e:
ca:be:3c:d9:34:11:65:eb:df:78:5e:63:93:de:6f:98:88:65:
ab:16:f6:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:56:13 2026 by rpki-client