Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/d612e3-94eb-4866-b43c-e40b301401a9/1/5_4i9VHpWw8VAzxQNVLkm8phfGo.mft
File: 5_4i9VHpWw8VAzxQNVLkm8phfGo.mft (raw, json)
Hash identifier: Zo1Cw9m3IGDb9TtM0TnLPHAf729sn5PqB0FU2zyWMRI=
Subject key identifier: FF:C7:B1:14:2B:35:D7:6A:4A:B1:13:29:07:31:28:9B:CF:BA:D8:06
Authority key identifier: E7:FE:22:F5:51:E9:5B:0F:15:03:3C:50:35:52:E4:9B:CA:61:7C:6A
Certificate issuer: /CN=e7fe22f551e95b0f15033c503552e49bca617c6a
Certificate serial: 019D1C4A02C046272D39A65BDC5915345AF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_4i9VHpWw8VAzxQNVLkm8phfGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/d612e3-94eb-4866-b43c-e40b301401a9/1/5_4i9VHpWw8VAzxQNVLkm8phfGo.mft
Manifest number: 04EA
Signing time: Mon 23 Mar 2026 20:01:45 +0000
Manifest this update: Mon 23 Mar 2026 20:01:45 +0000
Manifest next update: Tue 24 Mar 2026 20:01:45 +0000
Files and hashes: 1: 5_4i9VHpWw8VAzxQNVLkm8phfGo.crl (hash: IZMNAa9vSM7WXyJT6cnSiVqwlAXiYMMe1s8k7ySrMU0=)
2: O12iTFYfdA2zCw72150Nud1E6y0.roa (hash: z5mYMpvdZLPaUzxNIg/54hb62dd6baAvlEXsN8ohQB8=)
3: _fFHLP85mXG233c_oo6_tp_deIs.roa (hash: n25U7OP6QQrrsEGd6Mi0uXlEH7hkC7fcd6BN0xsYQhk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/d612e3-94eb-4866-b43c-e40b301401a9/1/5_4i9VHpWw8VAzxQNVLkm8phfGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/d612e3-94eb-4866-b43c-e40b301401a9/1/5_4i9VHpWw8VAzxQNVLkm8phfGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5_4i9VHpWw8VAzxQNVLkm8phfGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 24 Mar 2026 16:19:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1c:4a:02:c0:46:27:2d:39:a6:5b:dc:59:15:34:5a:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7fe22f551e95b0f15033c503552e49bca617c6a
Validity
Not Before: Mar 23 20:01:45 2026 GMT
Not After : Mar 24 20:01:45 2026 GMT
Subject: CN=ffc7b1142b35d76a4ab113290731289bcfbad806
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:0a:7e:7d:b0:27:09:6b:a0:d0:1c:64:1e:1c:
21:c4:d3:01:02:25:7e:64:33:73:ee:46:09:68:ed:
12:19:be:b5:37:16:68:33:4f:02:b2:ef:cf:7b:32:
84:ab:fd:a5:f2:3d:41:8f:90:bb:1d:ab:95:41:90:
98:64:b1:1e:5d:c6:42:22:79:17:5d:36:b6:75:15:
c3:67:3b:ff:3e:fa:8c:e3:dd:84:4b:4e:16:2e:d4:
ec:85:a4:b2:e1:11:be:80:20:4c:51:d2:ae:4a:58:
cd:db:29:6f:d5:99:30:8e:86:0d:ca:19:51:f5:31:
27:e5:a5:fa:7a:bc:db:c3:51:70:99:d7:01:c5:5e:
d1:c5:d8:d2:bb:7f:f3:5d:19:30:63:5d:45:09:2d:
f2:03:c0:25:12:88:83:b0:06:57:18:ae:60:65:a6:
1d:09:00:c7:d7:f8:5e:49:bb:2f:11:47:0f:d8:30:
5c:89:5f:81:f9:98:d5:f3:9f:b6:63:73:a7:4f:e7:
1f:9b:f1:80:60:5c:52:2d:ff:35:ca:8e:c5:76:42:
35:68:6c:2b:24:c4:3e:af:32:a8:10:77:64:08:7a:
a4:1c:59:aa:d8:ca:06:59:5c:be:d0:ed:30:a6:0e:
eb:20:ad:15:44:ba:12:0c:91:17:13:a0:74:07:c0:
71:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:C7:B1:14:2B:35:D7:6A:4A:B1:13:29:07:31:28:9B:CF:BA:D8:06
X509v3 Authority Key Identifier:
keyid:E7:FE:22:F5:51:E9:5B:0F:15:03:3C:50:35:52:E4:9B:CA:61:7C:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_4i9VHpWw8VAzxQNVLkm8phfGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d612e3-94eb-4866-b43c-e40b301401a9/1/5_4i9VHpWw8VAzxQNVLkm8phfGo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d612e3-94eb-4866-b43c-e40b301401a9/1/5_4i9VHpWw8VAzxQNVLkm8phfGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:6d:e1:a9:fa:84:83:ee:b5:2c:4a:81:b9:03:05:7f:f7:4b:
99:6d:e0:92:98:87:dc:1f:05:6c:66:29:8e:91:05:3c:a4:aa:
e0:d0:79:e9:64:40:aa:a2:31:d7:c2:db:af:0e:a3:47:55:2b:
ba:e6:5c:bc:c4:c1:25:dd:82:ea:0d:bf:30:4c:55:84:eb:bd:
b9:f4:c1:4f:cf:c3:cd:0b:b5:76:a8:c9:0d:b0:4b:c7:8a:93:
03:94:67:28:ae:56:15:2d:d8:98:63:24:61:a3:f4:8f:d4:9a:
dc:bc:78:3f:61:41:50:18:54:17:2d:1f:aa:8b:6a:9b:75:ef:
d2:37:c8:34:c4:e5:12:6c:d2:cf:5e:9c:a7:f3:09:31:97:a0:
fd:e9:c8:7c:c7:bb:b5:43:d3:8e:cf:c5:df:1a:a2:2b:cf:8e:
13:22:a0:96:5c:be:30:42:7a:97:f3:1f:c6:1b:13:e8:81:63:
8e:6a:b8:3b:cd:db:29:e5:ef:0f:f3:c2:de:d6:57:2d:6f:e1:
6f:66:f2:23:f0:06:ce:e8:7f:86:f7:59:86:57:2b:e9:ae:08:
97:a7:71:9e:07:f0:32:b6:82:af:71:57:a0:ae:c1:a4:1a:f0:
9b:5a:34:45:a2:8d:c8:33:58:e4:4a:73:8e:39:3d:7a:d9:e9:
af:d7:55:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 23 22:00:28 2026 by rpki-client