Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.mft
File: 5-XEyZ1hMQSZgq-a2bhmArKSm7g.mft (raw, json)
Hash identifier: JMI+D/sE7+TXY13jatjU35QNz9EgZHYM3wppD53MYcs=
Subject key identifier: E7:A0:97:5A:9F:CF:8E:27:4C:8E:2C:97:72:BB:AF:DF:DB:6C:E5:55
Authority key identifier: E7:E5:C4:C9:9D:61:31:04:99:82:AF:9A:D9:B8:66:02:B2:92:9B:B8
Certificate issuer: /CN=e7e5c4c99d6131049982af9ad9b86602b2929bb8
Certificate serial: 019D28BB7FE3F823121A42DD0DE956CF2244
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5-XEyZ1hMQSZgq-a2bhmArKSm7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 06:01:09 +0000
Manifest this update: Thu 26 Mar 2026 06:01:09 +0000
Manifest next update: Fri 27 Mar 2026 06:01:09 +0000
Files and hashes: 1: 5-XEyZ1hMQSZgq-a2bhmArKSm7g.crl (hash: ER4XfxBocOcg1efMKYbWRyisXpKHFLgbI2+qR1FnLpk=)
2: z-3swOq83iQal-4HNbXMWQFTmtk.roa (hash: 2AnlHpZVm/nKwMz5eQ79wwh/KAfXL/jahLqbUXf70ls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/5-XEyZ1hMQSZgq-a2bhmArKSm7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:7f:e3:f8:23:12:1a:42:dd:0d:e9:56:cf:22:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7e5c4c99d6131049982af9ad9b86602b2929bb8
Validity
Not Before: Mar 26 06:01:09 2026 GMT
Not After : Mar 27 06:01:09 2026 GMT
Subject: CN=e7a0975a9fcf8e274c8e2c9772bbafdfdb6ce555
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9f:cb:74:5f:69:89:9f:3a:ab:28:69:09:2a:
03:5f:8a:12:32:2a:98:fe:1d:8d:d8:d8:1f:19:51:
d0:27:6d:ff:ea:a1:51:b6:f8:ff:ec:1e:e8:33:cd:
ec:b2:14:df:a9:45:54:22:7f:1c:23:25:6d:dc:1c:
91:c7:35:98:09:58:7e:69:46:a6:ad:27:e1:11:48:
0e:c9:4c:74:00:fd:60:d1:4d:ed:22:d7:87:8b:99:
bb:d7:30:4c:b2:19:12:f6:83:06:3d:9c:f8:96:a4:
98:71:bc:94:45:ef:78:f5:bf:10:a4:21:fb:c3:02:
de:e3:a4:c1:2f:c7:89:0e:ba:ce:25:9b:fe:cb:f5:
2a:73:5f:b2:f5:8d:da:d2:1f:cc:7a:27:19:a8:7c:
87:b5:2f:dd:86:23:8a:78:50:73:4c:9c:8c:9b:0f:
11:be:d7:5c:53:95:4b:7d:3d:6e:ae:9f:d4:f9:9f:
f8:44:af:6e:1b:4b:4d:28:09:bd:b6:18:60:8d:e8:
41:6e:ab:54:9c:7b:66:df:8f:d9:1b:c0:36:c4:c9:
58:ea:12:80:4a:d0:ee:bd:e0:f9:24:f8:c2:75:cb:
86:50:31:01:0e:21:64:99:92:e2:38:7f:78:3c:5c:
ec:09:89:22:38:a2:42:bc:49:e4:09:fd:35:7e:ef:
90:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:A0:97:5A:9F:CF:8E:27:4C:8E:2C:97:72:BB:AF:DF:DB:6C:E5:55
X509v3 Authority Key Identifier:
keyid:E7:E5:C4:C9:9D:61:31:04:99:82:AF:9A:D9:B8:66:02:B2:92:9B:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5-XEyZ1hMQSZgq-a2bhmArKSm7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:f1:98:d6:e3:e0:99:8a:5d:fa:7b:c9:a2:50:9b:54:0c:5a:
34:cc:5f:1e:be:25:b4:52:2c:9e:1c:97:51:0f:0d:e1:09:89:
14:d5:a4:03:4e:96:7f:fa:74:51:84:48:49:7c:48:e8:0d:4a:
96:98:99:8c:0f:0d:a7:cd:02:0b:b2:26:74:81:41:01:b8:73:
5c:90:de:48:db:44:0f:a9:67:0a:b8:9c:cb:83:81:b0:8f:6f:
b5:12:cd:1e:7d:bb:ef:14:94:2e:2f:97:0c:83:d0:4d:0e:b7:
ec:3d:33:2f:5b:d6:1f:3d:71:89:39:44:fe:97:1b:35:29:3f:
0b:14:74:11:2f:a8:bb:51:fd:59:13:a3:99:0a:54:65:a4:0a:
b9:23:8e:40:5a:4e:3c:15:5f:36:58:dc:03:c6:f9:d3:1b:4b:
74:fc:21:f5:ee:db:cb:b0:ea:c8:f2:f4:fb:50:3d:18:ef:fd:
7b:45:c4:7a:43:47:4d:75:d1:2e:c7:c7:1d:56:fb:28:fe:48:
be:da:de:b9:fa:f2:fa:e2:eb:d0:1f:ee:a3:77:82:64:df:85:
13:ad:9a:38:8e:82:30:df:e3:56:2e:35:00:e6:08:2b:b6:6e:
8f:e8:07:32:80:e6:6c:cc:29:c1:c2:5b:35:0f:bc:13:8c:1d:
13:6a:34:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:18:17 2026 by rpki-client