Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/9ef60a-73ee-40e1-9006-c0b3b0f54beb/1/5GWsyQgJ77RczaJQoQV2GElLhus.mft
File: 5GWsyQgJ77RczaJQoQV2GElLhus.mft (raw, json)
Hash identifier: xR7Z0TVjSzUQuO6L/lNB+aLn8+f6NGAxG4jvjZb9j2U=
Subject key identifier: 97:2E:85:73:EE:7C:75:D3:08:12:AD:A9:86:25:53:1C:0B:B7:13:03
Authority key identifier: E4:65:AC:C9:08:09:EF:B4:5C:CD:A2:50:A1:05:76:18:49:4B:86:EB
Certificate issuer: /CN=e465acc90809efb45ccda250a1057618494b86eb
Certificate serial: 019D2A72E6906D58E6CDAE038AEBB621D9F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5GWsyQgJ77RczaJQoQV2GElLhus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/9ef60a-73ee-40e1-9006-c0b3b0f54beb/1/5GWsyQgJ77RczaJQoQV2GElLhus.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 14:01:06 +0000
Manifest this update: Thu 26 Mar 2026 14:01:06 +0000
Manifest next update: Fri 27 Mar 2026 14:01:06 +0000
Files and hashes: 1: 2SzXHkxCLVLxwqT1VXOIbH7zS1U.roa (hash: aCYVx/y4t8hASeqhW625AjPBxOCwC/8c0JG862QvXD0=)
2: 5GWsyQgJ77RczaJQoQV2GElLhus.crl (hash: 2hkyNe/FKq0ML9DpI0yRfAyvL9wzkhZ7tfQT3PdYCdE=)
3: xprnXzLHdgCC1ErposCq6vG3jPU.roa (hash: yXNFomv+hurOUmhTIqZgZ4hQnilyhZpNY276iiDrBf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/9ef60a-73ee-40e1-9006-c0b3b0f54beb/1/5GWsyQgJ77RczaJQoQV2GElLhus.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/9ef60a-73ee-40e1-9006-c0b3b0f54beb/1/5GWsyQgJ77RczaJQoQV2GElLhus.mft
rsync://rpki.ripe.net/repository/DEFAULT/5GWsyQgJ77RczaJQoQV2GElLhus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:e6:90:6d:58:e6:cd:ae:03:8a:eb:b6:21:d9:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e465acc90809efb45ccda250a1057618494b86eb
Validity
Not Before: Mar 26 14:01:06 2026 GMT
Not After : Mar 27 14:01:06 2026 GMT
Subject: CN=972e8573ee7c75d30812ada98625531c0bb71303
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:08:27:40:30:26:e2:68:2f:1e:44:90:65:d5:
3a:6a:43:b1:41:14:36:d1:a1:0a:43:91:b7:65:7d:
76:45:f8:92:4e:72:9d:54:ff:3b:f1:48:6f:63:df:
12:75:d2:9f:c5:e2:2b:b9:c8:89:21:a6:b0:36:3d:
c2:ee:93:30:fb:d3:fa:72:75:97:78:82:76:40:84:
f3:19:6e:53:75:88:ce:39:18:c6:4d:7d:c9:8e:43:
4d:ba:80:e1:28:cb:90:9b:9b:6e:c4:c6:2e:bd:2d:
18:0d:4d:b8:c4:a6:94:40:63:34:9d:8a:e7:ba:46:
55:0c:dd:8c:b6:f9:43:7e:b6:f7:96:21:3a:31:59:
31:d1:38:f5:d9:00:7d:9e:b7:07:67:2e:74:b3:4d:
35:1d:ee:cc:51:21:f0:c9:fc:85:17:9c:d1:f4:56:
09:40:28:ee:17:73:86:c1:e4:7d:47:e0:8c:14:41:
55:28:5a:86:e3:bd:eb:bd:8d:47:4b:bc:01:1d:20:
03:49:c3:02:b9:3b:32:63:b7:bc:88:1e:3f:a3:19:
2a:bf:26:40:d6:0f:7a:00:43:0e:4e:c1:2a:a0:44:
0f:64:43:66:39:47:33:c2:cd:da:a4:61:85:32:64:
d7:e8:b2:bb:e5:bb:e4:c2:fb:d9:26:c2:70:4f:58:
38:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:2E:85:73:EE:7C:75:D3:08:12:AD:A9:86:25:53:1C:0B:B7:13:03
X509v3 Authority Key Identifier:
keyid:E4:65:AC:C9:08:09:EF:B4:5C:CD:A2:50:A1:05:76:18:49:4B:86:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5GWsyQgJ77RczaJQoQV2GElLhus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/9ef60a-73ee-40e1-9006-c0b3b0f54beb/1/5GWsyQgJ77RczaJQoQV2GElLhus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/9ef60a-73ee-40e1-9006-c0b3b0f54beb/1/5GWsyQgJ77RczaJQoQV2GElLhus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:0a:da:f1:a0:85:80:a5:90:dd:e5:78:4a:a7:45:94:8a:57:
c8:b4:2b:b1:df:4b:47:33:f6:d8:86:23:e3:07:0b:ac:d7:29:
52:3d:e6:b6:ab:b9:5d:6a:6f:18:4e:fc:33:7b:12:1a:0a:2f:
e0:66:9e:49:48:bb:72:22:4c:e2:c6:09:ad:f5:d6:ec:7c:e5:
5e:9a:75:44:19:70:a1:99:af:bb:70:9a:25:11:f1:84:c5:95:
16:1c:06:07:b4:d5:96:d5:0c:f2:d4:1b:97:23:6b:2f:2e:2f:
0c:99:40:b1:99:2a:75:ec:3b:2a:c3:c3:17:65:b7:7c:e5:5f:
e6:ae:32:00:f5:e6:67:4f:d2:9a:7f:bc:8f:7d:c2:9f:33:ad:
22:3a:79:7d:ce:96:71:4e:4c:15:59:3c:ba:0c:dc:9d:8a:d6:
8c:72:83:5b:09:aa:d8:a2:a1:eb:8d:7a:1a:02:7f:d2:91:51:
60:5f:d0:f1:a3:3a:8e:12:bc:91:8d:ca:e0:c7:02:0c:30:4f:
be:08:96:75:6b:8b:a8:95:20:28:4b:57:34:d6:0a:43:d5:c6:
72:f0:d0:38:5b:07:0d:c5:3b:56:00:ec:ee:48:d5:56:ab:36:
b0:e5:01:49:84:a0:7f:4b:55:3e:78:d3:82:cc:4b:e1:50:a9:
ea:66:fb:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:33:30 2026 by rpki-client