Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/841257-9d93-4918-a8ae-72ca13dfad2b/1/5yHQ6mg8xnWULAmPWcQRyGDorto.mft
File: 5yHQ6mg8xnWULAmPWcQRyGDorto.mft (raw, json)
Hash identifier: QVqhou/C2Nrvd8kA7rAyQj2p/qXieiarpQlxOARLAEI=
Subject key identifier: E3:75:6C:E7:7A:1F:DE:7B:33:E0:DB:B8:72:F1:14:65:FD:84:38:EC
Authority key identifier: E7:21:D0:EA:68:3C:C6:75:94:2C:09:8F:59:C4:11:C8:60:E8:AE:DA
Certificate issuer: /CN=e721d0ea683cc675942c098f59c411c860e8aeda
Certificate serial: 019D27720810F7208802BD9FB64BFD8D76AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5yHQ6mg8xnWULAmPWcQRyGDorto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/841257-9d93-4918-a8ae-72ca13dfad2b/1/5yHQ6mg8xnWULAmPWcQRyGDorto.mft
Manifest number: 0468
Signing time: Thu 26 Mar 2026 00:01:17 +0000
Manifest this update: Thu 26 Mar 2026 00:01:17 +0000
Manifest next update: Fri 27 Mar 2026 00:01:17 +0000
Files and hashes: 1: 5yHQ6mg8xnWULAmPWcQRyGDorto.crl (hash: I+MGlvtXfWnGNaR0FlTVJWXZtnLCOV8hY9EeTzshQfk=)
2: STO2kom-zBw1tRgfWNcBAQ37NC8.roa (hash: a0Fmrw1wcNVYzRWWKC14G0JJl+6PihD7ZzdaxPHGENs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/841257-9d93-4918-a8ae-72ca13dfad2b/1/5yHQ6mg8xnWULAmPWcQRyGDorto.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/841257-9d93-4918-a8ae-72ca13dfad2b/1/5yHQ6mg8xnWULAmPWcQRyGDorto.mft
rsync://rpki.ripe.net/repository/DEFAULT/5yHQ6mg8xnWULAmPWcQRyGDorto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:08:10:f7:20:88:02:bd:9f:b6:4b:fd:8d:76:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e721d0ea683cc675942c098f59c411c860e8aeda
Validity
Not Before: Mar 26 00:01:17 2026 GMT
Not After : Mar 27 00:01:17 2026 GMT
Subject: CN=e3756ce77a1fde7b33e0dbb872f11465fd8438ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:5d:e9:5d:ae:2d:83:b9:18:ed:a1:e2:fb:45:
18:77:de:90:d5:08:dd:8f:5e:58:7d:26:ee:13:ff:
8f:39:c0:65:b9:ed:46:72:60:ce:92:1f:e9:ed:9e:
47:05:68:ed:63:93:1e:26:10:ac:91:33:13:a2:e3:
b4:21:eb:bd:60:f3:6f:6b:7c:22:57:7d:c8:e2:19:
8d:9b:d2:e9:22:04:c9:51:bb:a4:13:f9:d1:a7:a1:
7b:a7:02:a2:98:0a:6d:d2:af:ba:82:ba:b5:d8:6b:
50:bb:95:f5:f9:66:34:68:bf:22:85:d0:07:f6:3f:
20:56:b2:70:e4:1e:4c:d3:5c:70:3d:07:92:df:75:
ba:93:a6:95:4e:50:a0:d3:22:7b:a4:c4:39:36:02:
f9:25:52:46:cb:62:cd:03:a0:c6:aa:e9:62:47:3c:
b7:da:e9:51:35:18:56:8c:60:36:38:0b:f5:33:a1:
a9:de:c6:76:b8:89:21:3f:09:87:dd:d1:e6:6f:43:
d5:69:19:5b:bc:54:68:7a:25:20:64:c1:f1:e1:4b:
2b:e2:50:36:a4:a1:d7:95:06:56:c2:3d:79:07:aa:
08:e3:a6:83:a1:c9:e5:66:6c:44:82:b6:7c:24:ff:
91:a8:1b:42:12:ec:81:93:cb:de:e5:4f:0c:ee:bb:
60:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:75:6C:E7:7A:1F:DE:7B:33:E0:DB:B8:72:F1:14:65:FD:84:38:EC
X509v3 Authority Key Identifier:
keyid:E7:21:D0:EA:68:3C:C6:75:94:2C:09:8F:59:C4:11:C8:60:E8:AE:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5yHQ6mg8xnWULAmPWcQRyGDorto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/841257-9d93-4918-a8ae-72ca13dfad2b/1/5yHQ6mg8xnWULAmPWcQRyGDorto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/841257-9d93-4918-a8ae-72ca13dfad2b/1/5yHQ6mg8xnWULAmPWcQRyGDorto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:fd:98:16:3e:7a:ab:0b:c5:de:54:aa:5e:35:18:a6:24:97:
08:92:1b:ee:4a:3c:ed:44:dd:7b:b3:a6:4c:19:23:f9:a3:7b:
d4:dc:cd:4d:c0:4d:71:25:ce:b8:96:84:ae:77:39:63:bc:de:
85:8e:44:2c:d7:6a:9e:16:9c:10:57:68:31:e9:e6:69:47:9e:
f7:62:a0:37:66:8b:c8:c3:ed:6c:32:20:2b:ba:f4:5f:9b:04:
41:fd:e0:0e:7d:a8:cd:a4:a2:47:8c:4d:91:ac:53:2b:fa:8a:
2e:c9:be:67:a6:87:66:4e:46:55:3a:60:bb:03:e7:c1:75:b3:
b1:bb:85:d5:a3:2a:92:9d:9c:47:f8:58:b7:04:60:5e:c7:69:
30:f9:5d:1c:1f:25:aa:d3:60:23:b2:c8:bf:41:bb:89:40:ca:
9a:73:2a:f3:2d:45:f4:0f:86:6f:48:c3:9b:7a:c5:4e:6c:87:
cb:19:7b:8d:e9:4f:a6:99:1d:69:ba:c1:04:f7:96:d0:00:2a:
7f:82:ed:51:de:f6:db:b8:9c:6d:52:2b:b6:18:f5:c8:a8:9f:
57:ee:4d:7d:ba:6c:8d:fa:ed:4d:c8:ce:8d:2a:f7:3e:e5:ed:
39:7f:79:b5:7b:02:70:2c:da:bb:ac:1d:07:46:d5:f6:7e:01:
5c:9f:81:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:41:07 2026 by rpki-client