Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.mft
File: 5b15I6_brofQeyMI3TidnPCC7W0.mft (raw, json)
Hash identifier: 1Z/ilVxk/lLiJ1sqkb+/bFyzvFsy4UlQCknTtiVKGyE=
Subject key identifier: 30:AC:12:D4:28:13:02:99:2E:DD:88:9A:65:35:08:E7:14:E6:B2:5D
Authority key identifier: E5:BD:79:23:AF:DB:AE:87:D0:7B:23:08:DD:38:9D:9C:F0:82:ED:6D
Certificate issuer: /CN=e5bd7923afdbae87d07b2308dd389d9cf082ed6d
Certificate serial: 019D33E3D8D2AF7776C5C7E1CDC3A5A57475
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.mft
Manifest number: 136A
Signing time: Sat 28 Mar 2026 10:01:03 +0000
Manifest this update: Sat 28 Mar 2026 10:01:03 +0000
Manifest next update: Sun 29 Mar 2026 10:01:03 +0000
Files and hashes: 1: 0QsDdeC8WDkI2mRII63AEJgwGL0.roa (hash: 8Van+iVY6DYl8neGvsGg9ItzBr6NdUFFOVcUSDS2B4A=)
2: 5b15I6_brofQeyMI3TidnPCC7W0.crl (hash: e//bI58wNSMBy3MdQZWzyjXsJHr60jtZzVkcHdpm7jk=)
3: FvDB3xvyGUKLfutOGVneEg7UFiQ.asa (hash: eJi/wJQyoV4yaUyCjcKLxDOTczXJuwcA4Gxi8/xhRPE=)
4: Uk_XDceW-ZPDKMcc_f2F6eLioUk.roa (hash: jLiOckt+vrx8TOSEJT6TLvtJFvKCadRGVP5+VbDfoXE=)
5: dyKVgNsjZxg_ms1n2E7Bfw10stc.roa (hash: BqmZyOOtyNCSkSJ7x/mGSb0glowMzHs3l/S8+cc3Vzw=)
6: hS2aW8FUkBTQalOuciQCsDXmneo.roa (hash: Pa+owwfEnOZARjAauR/QvY9V1pwMcDiCDnFUwH+c7nw=)
7: krebELS6FLfilnA__hBq0uhvWyo.roa (hash: XGJZqlWxpa74go/FmTdiLNyWAGB5hXKCDhTD8hHKfr0=)
8: r6u9dpLSj0CY155j3O_twzf6XaM.roa (hash: 5n0yIUoXlWVJAu7RaNAjMF0M5FSiyxRzAHjcXV59g30=)
9: uQtOTVjA9edAk2AfPQUPe5C5AYo.asa (hash: mpazgkRYNNbUsNPK4E/B9pMgCqrNdejGSwW54YC+PH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.mft
rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:e3:d8:d2:af:77:76:c5:c7:e1:cd:c3:a5:a5:74:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5bd7923afdbae87d07b2308dd389d9cf082ed6d
Validity
Not Before: Mar 28 10:01:03 2026 GMT
Not After : Mar 29 10:01:03 2026 GMT
Subject: CN=30ac12d4281302992edd889a653508e714e6b25d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e4:6c:a3:e3:5c:92:13:84:21:a2:8a:59:01:
0b:06:c1:e2:fe:6c:8c:23:78:73:3c:f8:60:67:99:
61:d8:b9:61:fd:17:ab:3a:e8:55:12:f2:03:23:bc:
fa:7a:77:6f:1e:26:3d:57:4d:06:98:7f:cb:02:c2:
ab:d2:bd:a2:de:ae:ac:ea:74:3d:d0:bb:a2:cb:d8:
26:76:68:fe:62:12:56:1b:be:24:83:d9:63:19:96:
71:42:4f:94:9c:77:d3:c5:17:3f:1a:0b:db:42:82:
0d:33:98:c8:7e:f8:1f:a3:24:81:58:fa:95:50:48:
5b:29:dc:15:37:71:c1:b0:51:c1:77:84:53:0d:9e:
22:92:94:81:8d:25:60:ae:0a:dd:48:3d:30:2e:9d:
ba:7c:82:4d:c1:f9:c9:6c:02:e6:e7:7d:61:76:d5:
a7:b6:0f:c3:a5:05:94:72:9a:e2:95:4e:51:a3:7a:
55:97:ab:d7:ba:b8:f8:08:90:bd:ed:83:1f:35:b8:
8c:f9:04:13:36:d8:6e:f9:a7:ee:0e:96:39:03:57:
4a:24:e7:85:87:7a:60:c2:07:57:a8:c4:c9:5e:fc:
32:ed:d2:9b:a2:d6:b1:78:70:ac:21:62:d3:f4:8e:
e3:85:3b:71:83:27:e7:9c:df:a9:46:f9:56:46:7a:
a2:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:AC:12:D4:28:13:02:99:2E:DD:88:9A:65:35:08:E7:14:E6:B2:5D
X509v3 Authority Key Identifier:
keyid:E5:BD:79:23:AF:DB:AE:87:D0:7B:23:08:DD:38:9D:9C:F0:82:ED:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:41:5c:f4:b6:c0:87:7f:c3:f0:41:f2:b7:93:85:48:24:d8:
7f:92:da:18:b6:bc:07:0b:ec:ab:20:6f:08:5f:4d:94:b7:48:
c8:af:bc:91:c0:d1:7c:3e:75:1a:b5:1b:b4:33:bc:92:0c:06:
88:92:f1:05:fe:22:f3:4a:ea:ac:54:a4:6e:3c:d7:d1:12:db:
e4:fc:c6:e2:4c:dd:68:35:41:1f:26:07:e3:38:e7:84:a3:64:
47:17:35:8b:5d:8c:14:2f:4f:c0:96:e5:0d:97:c2:9b:65:91:
72:c1:e0:ae:d0:41:95:41:a5:2a:e1:dc:60:6d:50:6e:60:de:
fb:0d:dd:07:54:49:0f:c1:e3:11:8f:28:3a:98:5a:3b:d2:c8:
75:96:1c:5f:9f:1e:2e:29:a7:3d:c0:c1:6b:92:6b:b4:3a:57:
fd:e7:3a:26:1a:ba:7b:6e:da:b2:aa:27:8e:ba:dd:f1:fe:e1:
c5:9c:d5:3d:e7:5d:d4:5f:fa:c5:a6:ec:d4:28:23:0c:a8:39:
42:6e:fa:9c:8b:43:b2:44:0c:e8:cf:ab:c9:d3:60:27:0b:6a:
ca:48:6c:40:bd:5b:ab:22:4d:14:cd:de:8c:a9:44:48:e0:ac:
ba:3e:28:c3:89:d1:08:c3:a0:de:d9:ee:22:bf:58:8b:31:25:
0d:02:a6:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:09:58 2026 by rpki-client