Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/5jRhbtvWAVT6Pax36pDb18aKEy0.mft
File: 5jRhbtvWAVT6Pax36pDb18aKEy0.mft (raw, json)
Hash identifier: lu6Y5r+IHHb427RVGIsdd3SPSkj4Ebzrt3dA5J8jPZY=
Subject key identifier: A5:9E:24:34:61:5F:8A:D4:52:3A:44:3C:A0:CB:5E:3E:E2:56:B3:EF
Authority key identifier: E6:34:61:6E:DB:D6:01:54:FA:3D:AC:77:EA:90:DB:D7:C6:8A:13:2D
Certificate issuer: /CN=e634616edbd60154fa3dac77ea90dbd7c68a132d
Certificate serial: 019D67D16F492B364C2C1A6862E7DE90FA13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5jRhbtvWAVT6Pax36pDb18aKEy0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/5jRhbtvWAVT6Pax36pDb18aKEy0.mft
Manifest number: 1636
Signing time: Tue 07 Apr 2026 12:01:11 +0000
Manifest this update: Tue 07 Apr 2026 12:01:11 +0000
Manifest next update: Wed 08 Apr 2026 12:01:11 +0000
Files and hashes: 1: 5jRhbtvWAVT6Pax36pDb18aKEy0.crl (hash: BBIdGjQT7ZVjtXJ656OGEyD75sUMdNZpJuj/9Dt86Ks=)
2: Htdodj1EnLAQWvHL9dfSRXWphBY.roa (hash: 4qm2iqRXbtgb8aQs2u9Qec4WCWSDsvZanKGj3hNNhZs=)
3: qUbS3fckMBwSjTB5lnxF3fZbp3s.roa (hash: KAFzjWDg92Eqz8mPAygaN1C2exNmJZnhRSrRBX3vbQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/5jRhbtvWAVT6Pax36pDb18aKEy0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/5jRhbtvWAVT6Pax36pDb18aKEy0.mft
rsync://rpki.ripe.net/repository/DEFAULT/5jRhbtvWAVT6Pax36pDb18aKEy0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Apr 2026 12:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:67:d1:6f:49:2b:36:4c:2c:1a:68:62:e7:de:90:fa:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e634616edbd60154fa3dac77ea90dbd7c68a132d
Validity
Not Before: Apr 7 12:01:11 2026 GMT
Not After : Apr 8 12:01:11 2026 GMT
Subject: CN=a59e2434615f8ad4523a443ca0cb5e3ee256b3ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:0c:53:36:b3:e5:2c:cf:29:1d:fe:0b:75:15:
1d:f7:61:31:4e:d3:61:4f:e0:80:d9:60:a3:7a:8c:
0d:da:0e:17:be:ab:8a:a8:d2:88:10:57:64:86:54:
3a:9b:36:a1:b2:bc:71:da:8a:b3:42:ed:28:9b:c9:
4a:5b:cd:b5:40:d6:62:f2:94:f5:2c:d9:fe:af:b2:
eb:ae:37:ba:1e:b4:15:c4:44:07:2e:ad:4e:61:bf:
eb:30:9b:07:a2:27:c5:2f:f5:66:c3:0b:c4:31:e5:
da:20:18:21:70:65:51:56:4a:87:d3:fa:f3:0b:b1:
ae:11:e9:ef:bb:1a:89:36:27:d0:c6:69:99:98:cf:
ac:2e:96:73:5e:c2:69:1f:ce:37:02:bb:f9:b2:93:
8f:a6:da:ab:ad:0c:d6:5b:59:05:a2:c3:e4:67:a4:
d6:a3:d9:27:ab:91:f7:53:b1:6e:ad:f3:1a:a6:40:
dd:c3:f0:f8:13:57:3f:c2:c8:64:63:46:f2:7c:5c:
b2:80:db:7c:fd:42:59:f3:89:34:6d:0f:21:0b:0b:
28:e3:ee:b5:2d:e6:75:18:05:73:e4:ec:29:8f:ba:
b7:4f:d4:23:3f:3e:b2:35:fd:f3:6f:f2:06:33:7a:
b2:9a:ee:13:9a:9b:9f:6b:a4:52:c2:e0:e4:50:7d:
65:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:9E:24:34:61:5F:8A:D4:52:3A:44:3C:A0:CB:5E:3E:E2:56:B3:EF
X509v3 Authority Key Identifier:
keyid:E6:34:61:6E:DB:D6:01:54:FA:3D:AC:77:EA:90:DB:D7:C6:8A:13:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5jRhbtvWAVT6Pax36pDb18aKEy0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/5jRhbtvWAVT6Pax36pDb18aKEy0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/5jRhbtvWAVT6Pax36pDb18aKEy0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:ab:3c:f5:d3:22:1d:f0:0e:ae:b1:ca:82:4d:c9:6b:78:cd:
54:55:18:33:33:d5:eb:21:4e:4d:d2:52:c0:b8:6b:28:a1:a3:
09:fe:25:5a:37:2e:0a:a7:c5:66:44:4a:a6:82:dc:d9:c8:4e:
87:59:29:7f:9d:14:3b:b5:95:95:06:23:7b:c3:cd:5b:96:0d:
a3:81:28:36:ab:87:c4:8b:22:a0:af:04:0a:7b:01:d8:c7:cb:
80:fe:b2:f2:38:ba:32:51:ef:d1:b7:62:76:05:db:2b:8e:b3:
3e:60:3d:f1:44:d6:da:c3:a3:06:a8:dd:12:b7:1d:3f:01:d6:
46:b1:b3:fb:c2:a5:33:80:65:59:a4:e3:ab:6c:0c:75:44:7d:
73:ea:83:2e:98:b9:aa:93:30:d0:f5:c5:13:ae:0d:06:58:c0:
1d:8e:f6:06:3b:51:75:86:22:73:46:26:30:42:46:e7:f5:8d:
38:bf:6f:8d:5a:3b:01:f5:d7:23:46:a1:3d:fe:f3:55:ae:1f:
9a:ac:e3:74:d7:3c:b9:4f:48:b7:09:fb:15:59:47:8e:2e:b3:
fc:46:54:d9:c5:15:ad:7d:a5:41:8a:97:2c:65:47:d9:c4:96:
84:68:b5:ab:ea:b5:c1:df:e7:bb:b0:0d:b6:28:cb:40:de:bf:
56:e2:fa:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 20:56:05 2026 by rpki-client