Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/a27a19-90b5-4671-bbc1-472d882e9d72/1/5gBvGrt1cn57wwwXnml00tGPjzg.mft
File: 5gBvGrt1cn57wwwXnml00tGPjzg.mft (raw, json)
Hash identifier: hQla8aChmOjl8ztiYUZiIbg8v1Fclq7Lhhoqi4SWqt4=
Subject key identifier: 98:59:FA:56:BA:07:E0:49:F2:BB:88:66:28:59:1E:6E:4E:2A:17:3C
Authority key identifier: E6:00:6F:1A:BB:75:72:7E:7B:C3:0C:17:9E:69:74:D2:D1:8F:8F:38
Certificate issuer: /CN=e6006f1abb75727e7bc30c179e6974d2d18f8f38
Certificate serial: 019D281693639B652767F0C003F0B26E2078
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5gBvGrt1cn57wwwXnml00tGPjzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/a27a19-90b5-4671-bbc1-472d882e9d72/1/5gBvGrt1cn57wwwXnml00tGPjzg.mft
Manifest number: 13DC
Signing time: Thu 26 Mar 2026 03:01:01 +0000
Manifest this update: Thu 26 Mar 2026 03:01:01 +0000
Manifest next update: Fri 27 Mar 2026 03:01:01 +0000
Files and hashes: 1: 5gBvGrt1cn57wwwXnml00tGPjzg.crl (hash: aBMRc7cC7H0TKLQoWeFFFF4sZT1o/tq7MvazJB3jHOI=)
2: MWO6M6MJ4bPprYC1GxT7fwTCMB4.roa (hash: ANyTmu/82kqGvMyK/QfVvJiysGdLYGce9RuoYKBpHjk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/a27a19-90b5-4671-bbc1-472d882e9d72/1/5gBvGrt1cn57wwwXnml00tGPjzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/a27a19-90b5-4671-bbc1-472d882e9d72/1/5gBvGrt1cn57wwwXnml00tGPjzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/5gBvGrt1cn57wwwXnml00tGPjzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:93:63:9b:65:27:67:f0:c0:03:f0:b2:6e:20:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6006f1abb75727e7bc30c179e6974d2d18f8f38
Validity
Not Before: Mar 26 03:01:01 2026 GMT
Not After : Mar 27 03:01:01 2026 GMT
Subject: CN=9859fa56ba07e049f2bb886628591e6e4e2a173c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ec:08:05:c7:8d:75:3b:14:62:d8:7a:58:32:
47:b7:a9:38:88:dc:63:b1:5e:c7:25:0f:42:62:14:
92:8a:db:57:6e:26:fd:d9:ae:f8:aa:92:e1:21:f7:
de:d2:2f:9d:9c:eb:3e:c7:d5:ac:b1:d7:7c:c7:fc:
1d:8e:b2:2b:0a:67:2a:0c:cb:5d:1c:a4:46:92:ae:
75:a6:43:4f:bc:2f:a1:c5:f7:9a:83:45:33:5f:cc:
06:2f:07:84:2c:53:d9:22:68:44:92:a4:f1:3a:f0:
52:fa:25:bc:7d:96:fe:41:ac:07:02:ee:db:53:86:
8d:93:2c:fc:54:ac:34:d4:7b:54:7a:3d:65:a1:90:
6e:c9:d2:23:e1:49:c4:c4:2a:6a:6c:5a:24:20:75:
fb:c7:b2:ef:d0:da:97:a2:5e:51:81:17:95:0a:a7:
30:a4:94:82:cc:dc:ce:1b:a8:fc:f9:73:d1:58:59:
1c:7d:c1:68:6d:c2:78:5e:a1:ea:5f:fa:24:be:b6:
97:30:2d:70:27:1d:30:d6:ea:e8:de:48:6d:f7:69:
fc:ca:af:11:2e:1b:c9:42:6e:56:66:80:30:12:39:
a2:97:4e:05:02:ae:76:8d:04:fb:07:54:fc:88:31:
7c:f5:9d:80:37:cb:69:30:63:e0:9d:a3:16:18:62:
3f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:59:FA:56:BA:07:E0:49:F2:BB:88:66:28:59:1E:6E:4E:2A:17:3C
X509v3 Authority Key Identifier:
keyid:E6:00:6F:1A:BB:75:72:7E:7B:C3:0C:17:9E:69:74:D2:D1:8F:8F:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5gBvGrt1cn57wwwXnml00tGPjzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a27a19-90b5-4671-bbc1-472d882e9d72/1/5gBvGrt1cn57wwwXnml00tGPjzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a27a19-90b5-4671-bbc1-472d882e9d72/1/5gBvGrt1cn57wwwXnml00tGPjzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:68:ec:57:72:c7:cc:8d:b8:74:b4:05:da:c5:2a:e1:bd:c7:
cb:d0:ea:00:3c:4e:73:ef:a4:a0:75:fa:6a:5e:82:07:5a:b1:
2c:3e:f5:b8:c3:44:93:ec:b9:2e:3f:28:84:3f:01:45:36:e1:
74:96:8a:c6:da:e5:6c:f0:a6:76:07:fa:aa:f0:84:39:84:6a:
81:4b:4d:98:4c:3f:d2:fa:19:6d:1b:f4:e7:0e:6a:85:10:73:
e1:1f:8e:42:27:31:74:28:b6:78:41:3c:11:9e:1d:60:77:e7:
8c:cb:b5:82:d7:da:44:87:8e:b4:16:b1:d8:7b:ae:2c:9a:9c:
59:00:78:8c:93:f9:8f:7d:eb:b5:2b:85:b7:00:b4:32:7a:23:
ff:f0:76:c7:9b:46:07:65:4d:98:0d:21:65:6a:74:f8:76:53:
6c:d0:e2:99:6d:13:a9:63:b6:6d:a6:eb:aa:e0:98:0d:1b:c1:
b0:4a:ba:07:b1:e0:4a:eb:3a:d2:ff:a3:f3:b0:fa:89:f8:86:
e8:76:4b:aa:31:b1:a9:72:32:12:fa:4b:24:cf:8f:81:63:d3:
fd:a2:48:e0:46:92:f8:23:3e:93:90:fb:e7:bf:3d:ae:b8:43:
5e:ae:8e:b4:56:ae:b8:f1:9a:93:2b:03:42:2a:d1:c4:e8:07:
60:c7:fa:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:05:36 2026 by rpki-client