Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/bc57ff-ab1b-4651-95b4-ddd7bf93d356/1/5z3xVch6WQrB5ThUTPM1bk_IF0g.mft
File: 5z3xVch6WQrB5ThUTPM1bk_IF0g.mft (raw, json)
Hash identifier: 9kjE4g2/EDpaIiXqAwk1hxCObUs+ZDK2KF2qHHrxC+0=
Subject key identifier: D4:AA:63:44:CF:84:12:89:1E:AC:7F:04:0C:55:24:8B:6F:D7:46:F2
Authority key identifier: E7:3D:F1:55:C8:7A:59:0A:C1:E5:38:54:4C:F3:35:6E:4F:C8:17:48
Certificate issuer: /CN=e73df155c87a590ac1e538544cf3356e4fc81748
Certificate serial: 019D273AB47FCC247CC1869BCCEBE8B07C1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5z3xVch6WQrB5ThUTPM1bk_IF0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/bc57ff-ab1b-4651-95b4-ddd7bf93d356/1/5z3xVch6WQrB5ThUTPM1bk_IF0g.mft
Manifest number: 1828
Signing time: Wed 25 Mar 2026 23:00:51 +0000
Manifest this update: Wed 25 Mar 2026 23:00:51 +0000
Manifest next update: Thu 26 Mar 2026 23:00:51 +0000
Files and hashes: 1: 5z3xVch6WQrB5ThUTPM1bk_IF0g.crl (hash: 2eNDSN4AfzNwMRM5IpzTSTIqMu66q8g4DSrwHP8N2aA=)
2: zL-LWx-Rz7OMaI1EPMJkxLg31_M.roa (hash: cgNfkZmen0X8xi6X3N5ufjIJZAx+Um78IAgsseJM+y8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/bc57ff-ab1b-4651-95b4-ddd7bf93d356/1/5z3xVch6WQrB5ThUTPM1bk_IF0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/bc57ff-ab1b-4651-95b4-ddd7bf93d356/1/5z3xVch6WQrB5ThUTPM1bk_IF0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/5z3xVch6WQrB5ThUTPM1bk_IF0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:b4:7f:cc:24:7c:c1:86:9b:cc:eb:e8:b0:7c:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e73df155c87a590ac1e538544cf3356e4fc81748
Validity
Not Before: Mar 25 23:00:51 2026 GMT
Not After : Mar 26 23:00:51 2026 GMT
Subject: CN=d4aa6344cf8412891eac7f040c55248b6fd746f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:66:9a:38:d1:76:b9:6a:39:32:f8:2a:eb:d1:
ed:18:ae:26:d7:63:f2:64:8e:a0:42:38:d8:c2:03:
78:31:8d:05:cf:72:03:cb:c5:b0:54:cb:c0:94:fa:
e8:44:ff:2e:7f:a9:e5:5a:ad:50:bc:c7:bc:6f:f0:
4d:92:a5:a2:3e:84:51:b1:c4:6a:b6:41:13:74:ac:
63:0f:1c:31:e6:4f:8b:fb:23:83:9f:10:7f:0d:71:
ea:05:b9:ce:af:dd:9a:88:75:33:e4:51:c7:96:18:
f5:5b:51:c1:9c:51:e4:28:16:0d:da:63:ab:3d:16:
23:5c:8f:f6:7b:22:61:43:cb:51:0a:20:36:4d:98:
8b:5f:ff:f2:ea:64:00:2a:54:9d:0f:c8:44:67:7e:
7d:a3:ac:b9:c8:32:6c:79:7c:60:0a:9e:4f:79:51:
4f:70:ce:f0:33:74:25:dd:d8:66:e7:45:5d:63:87:
b7:58:b0:fd:f2:76:82:a4:d1:4e:4f:26:67:9f:90:
5f:91:9d:34:7a:e0:8d:8e:80:1d:28:8d:6f:ef:5a:
30:84:19:7a:c3:8e:d4:e6:bc:bb:9a:d1:26:39:58:
80:a9:b2:3b:3d:88:85:9a:3c:15:6e:41:20:31:0a:
7c:f7:46:69:b0:7a:67:d5:0b:79:54:12:c2:56:8b:
5a:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:AA:63:44:CF:84:12:89:1E:AC:7F:04:0C:55:24:8B:6F:D7:46:F2
X509v3 Authority Key Identifier:
keyid:E7:3D:F1:55:C8:7A:59:0A:C1:E5:38:54:4C:F3:35:6E:4F:C8:17:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5z3xVch6WQrB5ThUTPM1bk_IF0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/bc57ff-ab1b-4651-95b4-ddd7bf93d356/1/5z3xVch6WQrB5ThUTPM1bk_IF0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/bc57ff-ab1b-4651-95b4-ddd7bf93d356/1/5z3xVch6WQrB5ThUTPM1bk_IF0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:e1:5b:8e:2f:b0:c1:c4:c7:f8:f7:a7:d6:e5:b1:42:b6:e8:
da:06:c9:e5:89:23:33:56:57:63:d5:3b:a7:f2:36:a5:f2:a1:
64:35:29:37:06:c0:4b:de:64:ed:3a:69:ca:10:d0:21:70:2e:
6d:c2:f8:83:02:db:2f:26:a3:6f:69:30:47:23:b3:6e:42:d1:
65:eb:b7:f5:66:79:b6:8f:ae:d2:01:68:4b:17:f4:39:20:60:
11:17:8c:0d:fb:87:aa:65:86:93:a2:eb:61:d6:93:c3:26:1b:
74:39:3b:69:85:2c:65:be:d4:07:50:57:f6:72:a3:4c:23:fd:
bd:9f:64:af:4f:70:97:72:54:5a:01:7e:18:29:f3:8c:1f:f3:
0a:54:94:1d:c6:e5:df:b3:12:e7:cf:78:e7:d1:a3:cb:50:b6:
ee:40:e4:40:fe:4d:6b:e6:5e:09:d1:55:70:4c:6f:90:d6:30:
52:00:9d:fe:c0:33:37:b9:64:39:e3:46:50:10:53:9b:1b:79:
39:6f:95:35:71:9e:ae:41:28:4b:04:ef:6b:2f:04:42:06:b3:
c3:52:9a:67:84:95:ea:f9:68:a6:55:9a:a0:fc:53:e3:d2:4a:
30:b9:c4:d1:01:8b:dd:ab:a7:bb:f2:44:96:d9:08:a6:d5:2b:
df:03:50:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:58:40 2026 by rpki-client