Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9f5223-a56c-465b-ac65-fd152a6a0587/1/5ar3bSe6gS4NXOIwXxfFMYjCWAw.mft
File: 5ar3bSe6gS4NXOIwXxfFMYjCWAw.mft (raw, json)
Hash identifier: ayw2JVMN8Y3Bw0GsdJxT3v81FmZ3JCu7W5s7Khr/M/Y=
Subject key identifier: E7:F6:29:57:7C:B4:78:D7:48:9B:CC:34:B7:53:0A:8B:CA:D4:4D:E0
Authority key identifier: E5:AA:F7:6D:27:BA:81:2E:0D:5C:E2:30:5F:17:C5:31:88:C2:58:0C
Certificate issuer: /CN=e5aaf76d27ba812e0d5ce2305f17c53188c2580c
Certificate serial: 019D2628671455F038DB7A3F2D5AC9FC258B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5ar3bSe6gS4NXOIwXxfFMYjCWAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9f5223-a56c-465b-ac65-fd152a6a0587/1/5ar3bSe6gS4NXOIwXxfFMYjCWAw.mft
Manifest number: 0A95
Signing time: Wed 25 Mar 2026 18:01:15 +0000
Manifest this update: Wed 25 Mar 2026 18:01:15 +0000
Manifest next update: Thu 26 Mar 2026 18:01:15 +0000
Files and hashes: 1: 5ar3bSe6gS4NXOIwXxfFMYjCWAw.crl (hash: ctdZPoMMMYxrjNHSDqOTsJGCJFtF7Xl8BZ4rLdb4a7I=)
2: oPgrYeYQdKE5w12V1Qsc5asf-z0.roa (hash: DyrqcRbA6WGivtdHIlCxrVDtSLyegGOpED1YlRSd3w0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9f5223-a56c-465b-ac65-fd152a6a0587/1/5ar3bSe6gS4NXOIwXxfFMYjCWAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/9f5223-a56c-465b-ac65-fd152a6a0587/1/5ar3bSe6gS4NXOIwXxfFMYjCWAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5ar3bSe6gS4NXOIwXxfFMYjCWAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:67:14:55:f0:38:db:7a:3f:2d:5a:c9:fc:25:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5aaf76d27ba812e0d5ce2305f17c53188c2580c
Validity
Not Before: Mar 25 18:01:15 2026 GMT
Not After : Mar 26 18:01:15 2026 GMT
Subject: CN=e7f629577cb478d7489bcc34b7530a8bcad44de0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:60:2e:68:95:89:ba:12:fb:5f:cf:cc:76:30:
ca:ce:49:9b:a6:31:5c:ce:12:63:18:b6:8d:13:d8:
cc:7e:a9:70:1f:1b:15:1d:4a:50:e2:d3:d1:59:71:
fa:22:b2:98:23:09:64:9d:75:c9:b4:6b:36:c8:3c:
b2:41:6d:a6:c0:69:77:d8:db:be:7c:9b:13:7a:1b:
dd:99:ae:64:6e:be:5e:81:9d:f8:b5:cf:9c:5b:c0:
97:f5:a3:1f:48:7d:b7:75:1e:0c:86:38:98:92:a8:
2d:48:cc:c9:d2:a8:21:4a:80:cf:61:1c:cf:60:89:
d0:55:d0:90:ff:05:61:c7:8f:a7:5c:a7:71:40:a1:
a5:8b:b4:52:a8:ab:87:38:0b:91:58:a0:7b:48:ea:
85:64:7a:92:b9:0f:d6:53:a9:de:19:70:56:c4:ee:
c5:ba:66:99:ee:07:bd:1e:66:38:44:a0:53:37:27:
47:38:ba:7e:f1:6b:68:8f:4e:40:a9:a6:a5:de:f9:
e1:cf:a2:57:d1:c8:b1:b9:1e:e0:64:65:cf:56:6b:
db:1c:0d:80:81:23:95:a7:02:f2:1a:5e:84:ae:f7:
57:f9:c4:6e:c2:e0:2e:6f:b5:35:49:41:81:cc:c6:
a6:5a:30:01:5b:68:a6:9d:24:a3:f6:09:31:df:ca:
ac:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:F6:29:57:7C:B4:78:D7:48:9B:CC:34:B7:53:0A:8B:CA:D4:4D:E0
X509v3 Authority Key Identifier:
keyid:E5:AA:F7:6D:27:BA:81:2E:0D:5C:E2:30:5F:17:C5:31:88:C2:58:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5ar3bSe6gS4NXOIwXxfFMYjCWAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9f5223-a56c-465b-ac65-fd152a6a0587/1/5ar3bSe6gS4NXOIwXxfFMYjCWAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9f5223-a56c-465b-ac65-fd152a6a0587/1/5ar3bSe6gS4NXOIwXxfFMYjCWAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:e0:3b:ea:7a:0f:bd:a7:9c:15:10:81:e8:98:1c:e4:e0:4d:
d9:45:db:b7:af:53:a2:84:59:68:80:47:6b:7e:44:b9:ee:61:
1d:09:6a:fc:ca:93:bb:6a:0e:9b:ad:67:bb:cb:60:54:9d:ad:
6c:1a:d0:4b:67:98:eb:bd:fb:eb:ee:05:28:40:1d:de:69:3b:
85:0a:82:5a:b6:9e:4f:e3:a1:50:01:a1:29:5b:48:92:2f:a1:
b4:f6:2c:f8:b9:10:73:ab:75:d6:aa:40:c8:fd:a5:d4:cc:e7:
48:1a:97:3b:2d:57:72:b7:de:1d:81:90:13:8d:4f:d1:3b:9b:
6c:cc:a2:5a:80:60:59:c4:40:ce:ca:e8:5f:2b:b7:bb:42:43:
88:81:da:36:8e:f7:ea:81:74:72:90:39:18:7d:06:b2:45:2d:
8c:66:76:80:fe:d1:73:94:fa:dd:d9:82:09:95:d0:1c:15:2e:
c7:ee:e1:4d:cb:18:32:18:fd:6a:18:36:ad:78:fa:90:2c:a5:
ce:ef:c6:69:b7:65:be:a7:e3:fc:06:bd:97:d2:90:40:3b:11:
1e:8a:c5:85:4d:95:54:97:49:5d:28:ed:ff:94:0a:02:c4:94:
c5:65:d2:d0:27:d5:6a:46:55:03:0c:2a:54:0d:06:2f:a4:63:
78:9b:0f:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:41 2026 by rpki-client