Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/b41d13-cc7a-49d6-91c4-70aa645ecc29/1/5UTrMoWRGEs_r55xqTHLMl3LEag.mft
File: 5UTrMoWRGEs_r55xqTHLMl3LEag.mft (raw, json)
Hash identifier: dm6TAjIxRC/wXt9bkWTwB47qh0odhG0SbclDxzC2RZg=
Subject key identifier: 61:34:63:E5:D8:7E:23:52:EE:08:39:C6:89:42:46:F0:65:5B:1A:65
Authority key identifier: E5:44:EB:32:85:91:18:4B:3F:AF:9E:71:A9:31:CB:32:5D:CB:11:A8
Certificate issuer: /CN=e544eb328591184b3faf9e71a931cb325dcb11a8
Certificate serial: 019D27A8AB03CD0BAF59BC4B37F303BF573F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5UTrMoWRGEs_r55xqTHLMl3LEag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/b41d13-cc7a-49d6-91c4-70aa645ecc29/1/5UTrMoWRGEs_r55xqTHLMl3LEag.mft
Manifest number: 04A2
Signing time: Thu 26 Mar 2026 01:00:58 +0000
Manifest this update: Thu 26 Mar 2026 01:00:58 +0000
Manifest next update: Fri 27 Mar 2026 01:00:58 +0000
Files and hashes: 1: 5UTrMoWRGEs_r55xqTHLMl3LEag.crl (hash: KUuL3eXVHBzAXYi4KaMWMF0FmvxCxBpdvaw3S+GYF0g=)
2: rhEDto9LAcb21HwkdYYZj263_-Y.roa (hash: vpJNUlsikgDQkbTcXSuN12zAPLHXSB+mONKm4pukuXs=)
3: yD0u6CnOVpuk9WvVpytgxRU4D0s.roa (hash: hrSKknGCTUHrpDRk30g1RyFkiWwqNDnyIxOmbM3GicI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/b41d13-cc7a-49d6-91c4-70aa645ecc29/1/5UTrMoWRGEs_r55xqTHLMl3LEag.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/b41d13-cc7a-49d6-91c4-70aa645ecc29/1/5UTrMoWRGEs_r55xqTHLMl3LEag.mft
rsync://rpki.ripe.net/repository/DEFAULT/5UTrMoWRGEs_r55xqTHLMl3LEag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:ab:03:cd:0b:af:59:bc:4b:37:f3:03:bf:57:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e544eb328591184b3faf9e71a931cb325dcb11a8
Validity
Not Before: Mar 26 01:00:58 2026 GMT
Not After : Mar 27 01:00:58 2026 GMT
Subject: CN=613463e5d87e2352ee0839c6894246f0655b1a65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:19:20:85:c8:ce:eb:a6:d7:0e:d6:b4:3b:9e:
d1:ed:77:73:7f:cf:10:95:cb:61:8b:8d:75:16:48:
bc:31:9d:e1:f4:3b:0b:90:44:cd:2b:56:26:2a:41:
74:59:29:25:11:93:38:ec:cd:b8:22:5c:bd:e3:b1:
18:3b:39:bc:8d:d6:8b:d3:8c:b2:ef:5c:3d:63:5b:
ed:45:ea:1a:3e:ce:ad:1d:f8:a1:7e:e6:c6:f5:e7:
76:bd:3f:58:0b:fb:57:9d:51:aa:63:d5:ba:80:f6:
d2:66:8d:ce:dd:0e:ad:8f:79:52:1b:2c:94:c9:dc:
19:2b:a8:c6:73:cf:86:c1:31:9b:26:95:2b:ce:11:
e4:60:6e:21:9b:44:4e:cb:79:ee:5a:0c:ed:d2:0a:
20:5c:34:59:6c:3f:8e:e1:f6:84:ec:3e:90:88:c7:
d3:93:48:21:2d:87:79:df:1b:af:e2:96:ec:c4:df:
f4:72:8d:8d:9e:35:cd:f3:4d:c6:6c:9a:fa:d4:7c:
16:93:80:cb:dc:a6:3b:ab:92:27:f0:ab:e5:52:41:
6c:2b:f9:67:01:01:20:3d:10:f3:b3:ba:c7:6a:07:
29:5a:9e:ef:b7:eb:71:5a:e8:da:b0:1f:52:70:99:
21:2a:98:a6:96:83:6a:8b:3b:87:90:f4:95:41:5c:
05:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:34:63:E5:D8:7E:23:52:EE:08:39:C6:89:42:46:F0:65:5B:1A:65
X509v3 Authority Key Identifier:
keyid:E5:44:EB:32:85:91:18:4B:3F:AF:9E:71:A9:31:CB:32:5D:CB:11:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5UTrMoWRGEs_r55xqTHLMl3LEag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41d13-cc7a-49d6-91c4-70aa645ecc29/1/5UTrMoWRGEs_r55xqTHLMl3LEag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41d13-cc7a-49d6-91c4-70aa645ecc29/1/5UTrMoWRGEs_r55xqTHLMl3LEag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:c9:f2:ee:14:03:51:33:d7:51:0e:fe:4d:3c:2f:68:90:ca:
bc:66:8f:fe:45:ac:cd:76:0e:b7:30:29:ba:bc:1a:22:48:db:
94:68:92:49:fb:43:b0:43:28:7b:c4:08:c3:d9:81:ef:37:91:
10:cf:a4:3f:84:ba:77:14:b9:fd:3f:75:85:a5:53:87:e4:32:
b7:a3:0f:d4:f7:2d:05:90:48:e2:10:05:88:ba:c4:ac:1c:f7:
94:3d:11:dd:05:de:fe:a6:b1:c8:ff:73:44:b4:97:a6:10:c9:
b6:4b:82:a9:63:40:ff:a3:fb:31:8f:ed:7e:16:25:98:6e:5d:
6e:7d:38:fa:62:e5:91:37:6c:a7:d7:17:d3:2d:e2:89:38:3a:
c7:ac:d9:77:c2:6f:c7:90:a5:65:8c:1b:56:bc:ca:a5:92:2f:
6e:1f:37:21:0f:4f:34:16:aa:0f:8b:75:89:35:e5:e0:2e:b3:
a8:46:29:d4:0c:36:32:ec:a8:e1:f2:ad:d0:7f:13:f2:fe:ff:
f7:51:f7:f5:dc:a6:16:6c:4b:0c:2f:4d:b7:fd:07:89:cf:a7:
d2:f8:04:bc:25:b4:aa:20:87:62:60:09:04:0d:09:30:d2:35:
a0:cd:02:aa:17:9f:9d:fd:bc:73:31:c5:c5:21:f6:7c:ed:c7:
b7:9c:d2:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:16:38 2026 by rpki-client