Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/d66af3-28b5-42eb-ad01-95d53b531545/1/5NU8R_Id1mUrZ_70lclP39FSjOs.mft
File: 5NU8R_Id1mUrZ_70lclP39FSjOs.mft (raw, json)
Hash identifier: 6gwgVITJm/qVnR/4lTpmPO8yDnD1LS7rEuiQ6TEYijs=
Subject key identifier: 86:68:25:29:67:04:E0:C7:F9:36:E6:1E:41:F3:54:04:27:4A:8A:7C
Authority key identifier: E4:D5:3C:47:F2:1D:D6:65:2B:67:FE:F4:95:C9:4F:DF:D1:52:8C:EB
Certificate issuer: /CN=e4d53c47f21dd6652b67fef495c94fdfd1528ceb
Certificate serial: 019DD087B099994872BA16C235FCF2EA7304
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5NU8R_Id1mUrZ_70lclP39FSjOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/d66af3-28b5-42eb-ad01-95d53b531545/1/5NU8R_Id1mUrZ_70lclP39FSjOs.mft
Manifest number: 0288
Signing time: Mon 27 Apr 2026 20:00:46 +0000
Manifest this update: Mon 27 Apr 2026 20:00:46 +0000
Manifest next update: Tue 28 Apr 2026 20:00:46 +0000
Files and hashes: 1: 5NU8R_Id1mUrZ_70lclP39FSjOs.crl (hash: lif1wNfv+F3JEL8hq9C9HEGOaMa3di6M0Dft/vNSsSA=)
2: DGLs36BU_cILxHYLxiJQIBEtMJI.roa (hash: qUohKLi8iKm8w87fsK66S0pB8JkDeoGnUD+Ll8azgYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/d66af3-28b5-42eb-ad01-95d53b531545/1/5NU8R_Id1mUrZ_70lclP39FSjOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/d66af3-28b5-42eb-ad01-95d53b531545/1/5NU8R_Id1mUrZ_70lclP39FSjOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/5NU8R_Id1mUrZ_70lclP39FSjOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d0:87:b0:99:99:48:72:ba:16:c2:35:fc:f2:ea:73:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4d53c47f21dd6652b67fef495c94fdfd1528ceb
Validity
Not Before: Apr 27 20:00:46 2026 GMT
Not After : Apr 28 20:00:46 2026 GMT
Subject: CN=866825296704e0c7f936e61e41f35404274a8a7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1a:4d:95:55:f5:8b:1a:f6:c7:c9:d7:91:1a:
6b:db:0b:0f:7e:70:59:5d:0a:a6:d5:47:1e:90:f8:
1d:35:b9:4f:50:d5:4f:8f:ce:b0:9c:03:f1:bd:58:
18:06:ba:7f:a8:9d:af:ee:c5:6f:ef:4d:ba:60:f1:
5d:17:ce:a1:4b:df:00:f8:47:c6:9e:db:0a:ee:5f:
ca:f8:cc:8a:b0:79:74:76:ff:76:bc:4c:c8:3d:b2:
8c:12:07:65:6f:d2:dc:24:5f:76:11:be:43:ca:7b:
de:fd:30:03:0d:ec:25:48:4c:b7:78:e8:e1:db:03:
76:9f:f3:44:6e:e8:27:ff:96:b1:42:5e:a3:2c:ba:
8e:f6:b5:75:55:8b:f7:9d:53:58:56:e3:f8:9e:41:
42:5e:bc:4b:36:97:78:80:01:2c:9a:51:5b:2e:79:
ae:8e:2f:e8:4a:65:89:d0:54:55:71:3c:44:0b:d5:
ca:96:32:b6:e8:23:85:15:5f:96:c4:f7:3e:16:66:
a8:cb:61:43:0f:04:35:d2:24:76:54:9c:13:06:5c:
8e:21:5d:fc:94:da:d7:a1:e7:d6:27:27:e7:fb:4d:
51:b8:d4:7d:2a:47:30:a5:8c:9e:e2:cd:c0:b7:c1:
65:40:99:ff:4b:98:65:35:ad:d5:d8:be:50:2c:ea:
b1:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:68:25:29:67:04:E0:C7:F9:36:E6:1E:41:F3:54:04:27:4A:8A:7C
X509v3 Authority Key Identifier:
keyid:E4:D5:3C:47:F2:1D:D6:65:2B:67:FE:F4:95:C9:4F:DF:D1:52:8C:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5NU8R_Id1mUrZ_70lclP39FSjOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/d66af3-28b5-42eb-ad01-95d53b531545/1/5NU8R_Id1mUrZ_70lclP39FSjOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/d66af3-28b5-42eb-ad01-95d53b531545/1/5NU8R_Id1mUrZ_70lclP39FSjOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:cb:6d:3b:85:ba:6d:87:d2:37:08:d6:0a:b1:8b:b7:71:77:
f6:d3:ba:39:a3:95:b2:59:70:44:c3:9f:75:bc:6c:8c:b3:7e:
00:43:c8:7c:54:5b:1c:03:3e:a9:ed:af:26:f7:64:21:cb:66:
2a:4a:82:85:95:a2:5f:a9:43:2a:b0:d9:cf:7b:a7:b4:93:bd:
64:64:c3:f0:ab:86:6e:9d:0b:12:7b:84:40:2a:58:dd:d2:5f:
22:1b:24:bd:30:7f:7d:91:aa:ee:71:52:79:68:0c:41:9a:de:
66:20:1c:e9:a4:47:97:85:1e:e4:d9:d3:85:52:bd:b2:a0:52:
42:58:0f:f6:fb:e9:b1:36:a5:dd:c3:b4:04:08:88:e0:7f:7a:
3f:ac:dc:eb:c9:fb:31:dd:4e:b9:b3:94:88:f3:1b:fe:89:93:
a2:16:fd:c6:bf:75:86:79:21:50:e0:9d:38:0b:13:99:c4:af:
d6:c7:01:9d:be:5e:21:9b:31:b2:84:cd:9b:20:55:fd:0a:b7:
4e:ca:80:53:99:f4:c2:57:64:86:e5:e4:77:56:ff:e5:a0:5f:
61:36:f1:e3:c7:b8:cf:72:5e:4e:b1:52:51:f9:15:a6:31:81:
e1:e3:4a:8d:2f:dd:0b:a5:03:5c:74:80:45:df:d3:09:5f:2f:
5a:93:0d:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 01:50:42 2026 by rpki-client