Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/e91813-927e-47a5-b702-de5378461fee/1/s5xw9844MbjyzOidsUon3aoOmcI.mft
File: s5xw9844MbjyzOidsUon3aoOmcI.mft (raw, json)
Hash identifier: U2ITm/FzEDbvEfHGQuy9OcAhFGSjfm57uEOrq20+YfU=
Subject key identifier: 66:3F:90:17:B0:0A:2E:6C:F1:73:6B:12:EB:8B:84:ED:AD:4B:0C:6B
Authority key identifier: B3:9C:70:F7:CE:38:31:B8:F2:CC:E8:9D:B1:4A:27:DD:AA:0E:99:C2
Certificate issuer: /CN=b39c70f7ce3831b8f2cce89db14a27ddaa0e99c2
Certificate serial: 019D2816FE701DC81107E396DCFF7496C1AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s5xw9844MbjyzOidsUon3aoOmcI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/e91813-927e-47a5-b702-de5378461fee/1/s5xw9844MbjyzOidsUon3aoOmcI.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 03:01:28 +0000
Manifest this update: Thu 26 Mar 2026 03:01:28 +0000
Manifest next update: Fri 27 Mar 2026 03:01:28 +0000
Files and hashes: 1: 4oagPgJG74n6HXB_8ZxEG0Z-zQQ.roa (hash: SihbXUlI6CJuGEx9+oO0M0CfndPW0YeuEcTHzRftuKM=)
2: eR0_T7rJiSO4J7CxpKrWHFxxpOc.roa (hash: EZHtgyXuVhoKYg4ldCwReKSDjf4sa7sqciiJnV/pNsU=)
3: gk6Oi_1ZEpbTJNkrcfzivPseRk4.roa (hash: MTngT7ag+SmUmwcOQxAC0+9glcY1SoAbKgViBkJyexI=)
4: s5xw9844MbjyzOidsUon3aoOmcI.crl (hash: 0GkLHBErIJVJPEbGlznI2ebWbWDEvuB0z4DB76CewGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/e91813-927e-47a5-b702-de5378461fee/1/s5xw9844MbjyzOidsUon3aoOmcI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/e91813-927e-47a5-b702-de5378461fee/1/s5xw9844MbjyzOidsUon3aoOmcI.mft
rsync://rpki.ripe.net/repository/DEFAULT/s5xw9844MbjyzOidsUon3aoOmcI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 03:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:fe:70:1d:c8:11:07:e3:96:dc:ff:74:96:c1:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b39c70f7ce3831b8f2cce89db14a27ddaa0e99c2
Validity
Not Before: Mar 26 03:01:28 2026 GMT
Not After : Mar 27 03:01:28 2026 GMT
Subject: CN=663f9017b00a2e6cf1736b12eb8b84edad4b0c6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:0c:0f:8e:ae:5f:61:ff:af:95:63:f7:c0:f0:
df:3b:de:df:b5:a8:98:39:2c:18:ff:4e:79:84:a7:
20:8b:52:4c:fa:f5:83:be:cb:d0:d1:f1:91:45:6e:
ed:d1:d2:bd:0c:78:46:bc:4d:ae:b6:48:9e:91:cb:
27:66:f6:34:57:f6:88:fd:ea:59:8b:69:94:bd:0e:
de:db:47:f4:1b:8f:78:e9:67:4f:4c:6c:9c:45:3f:
b5:2a:a9:50:1f:f6:b1:75:1b:28:54:0d:c6:7a:92:
68:a5:3e:d0:23:7b:c4:da:fc:e1:a6:29:91:72:8b:
80:04:4e:3b:eb:45:ef:54:a9:66:b6:72:7a:aa:cf:
d7:50:88:ad:1d:5a:02:3e:84:db:c1:6c:d4:6c:d6:
82:c5:d3:07:c0:9d:91:57:e2:dd:e3:f5:59:05:f9:
ab:29:66:ee:04:ec:f1:e0:f0:9f:da:d9:42:96:d8:
92:38:5d:12:66:36:6d:b4:15:8f:1a:a0:8a:c6:86:
57:88:2a:69:40:c2:c0:d3:99:1c:e1:12:27:87:ca:
ff:47:45:4f:e7:87:34:77:1a:0b:c1:b6:a5:19:57:
d9:95:36:d6:94:5c:6c:bf:35:fd:59:c2:7e:60:9f:
74:73:e4:99:8a:8a:fb:41:ec:cc:cf:cd:82:39:53:
62:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:3F:90:17:B0:0A:2E:6C:F1:73:6B:12:EB:8B:84:ED:AD:4B:0C:6B
X509v3 Authority Key Identifier:
keyid:B3:9C:70:F7:CE:38:31:B8:F2:CC:E8:9D:B1:4A:27:DD:AA:0E:99:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s5xw9844MbjyzOidsUon3aoOmcI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e91813-927e-47a5-b702-de5378461fee/1/s5xw9844MbjyzOidsUon3aoOmcI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e91813-927e-47a5-b702-de5378461fee/1/s5xw9844MbjyzOidsUon3aoOmcI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:74:ec:fc:65:fc:0a:5c:57:a0:9d:df:e9:02:67:5e:32:73:
10:05:b0:5b:d8:12:e3:4e:f9:c6:db:ab:b3:32:8b:9a:88:fe:
16:c2:90:c4:32:dd:2b:05:93:94:0e:c8:8c:33:60:1f:ee:51:
a8:8e:50:72:18:12:97:50:74:82:59:83:3d:a8:b1:4a:45:a6:
86:89:86:59:57:bd:59:a2:3e:a4:f1:a6:cb:b6:47:d6:9d:21:
fc:62:dd:26:06:55:2d:2d:78:45:e8:6e:de:dc:22:2f:7c:a5:
2a:68:77:9a:cb:94:a2:f7:91:93:fe:b8:66:f0:2e:91:aa:03:
55:20:8c:bd:27:34:a9:dc:11:a7:ef:19:47:d4:75:b5:e2:48:
ff:5c:6b:27:40:e0:8a:e1:1e:ec:ab:40:3c:8b:ca:83:e4:99:
0b:67:46:b8:a1:27:04:fb:67:93:73:6f:28:30:88:dc:8a:7f:
1d:e9:f6:70:0d:3d:27:f0:a9:c4:cf:21:e6:60:5f:c2:db:84:
ad:87:54:29:15:ed:90:cd:40:98:9d:62:d3:92:d9:6b:62:16:
4c:f2:fa:ed:a4:d6:eb:d8:74:cc:54:4a:8a:da:ef:6d:ea:4c:
bb:e8:f9:28:e2:07:bc:a8:87:42:d9:60:18:82:75:dc:1d:4c:
43:e0:3c:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:17:55 2026 by rpki-client