Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/4799f6-765f-4ad2-8c43-1c5b1012d2c3/1/5x1wnYsYTFpQyUMdzK9km8hoRwQ.mft
File: 5x1wnYsYTFpQyUMdzK9km8hoRwQ.mft (raw, json)
Hash identifier: TSIzF3qj0MHfqDTf4JRBRIzmg586wJaC4Amfycv4RcE=
Subject key identifier: 8A:A9:E4:69:F2:26:57:74:BC:1E:0D:99:CA:DC:9A:95:3A:68:34:E0
Authority key identifier: E7:1D:70:9D:8B:18:4C:5A:50:C9:43:1D:CC:AF:64:9B:C8:68:47:04
Certificate issuer: /CN=e71d709d8b184c5a50c9431dccaf649bc8684704
Certificate serial: 019D389BEE42B94D05BC3556E16EE184B09D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5x1wnYsYTFpQyUMdzK9km8hoRwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/4799f6-765f-4ad2-8c43-1c5b1012d2c3/1/5x1wnYsYTFpQyUMdzK9km8hoRwQ.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 08:00:36 +0000
Manifest this update: Sun 29 Mar 2026 08:00:36 +0000
Manifest next update: Mon 30 Mar 2026 08:00:36 +0000
Files and hashes: 1: 5x1wnYsYTFpQyUMdzK9km8hoRwQ.crl (hash: vv+A5tINbi/jj2da6h7ELqXmRnLUyUk65QHCNj3vKUo=)
2: cPmuXHtpdWHOv_IohN-yvdSZh00.roa (hash: uWWYQC9FttyGHNgD7wIoeeDy1sX/WMjKSFeXWzNylw8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/4799f6-765f-4ad2-8c43-1c5b1012d2c3/1/5x1wnYsYTFpQyUMdzK9km8hoRwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/4799f6-765f-4ad2-8c43-1c5b1012d2c3/1/5x1wnYsYTFpQyUMdzK9km8hoRwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5x1wnYsYTFpQyUMdzK9km8hoRwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:ee:42:b9:4d:05:bc:35:56:e1:6e:e1:84:b0:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e71d709d8b184c5a50c9431dccaf649bc8684704
Validity
Not Before: Mar 29 08:00:36 2026 GMT
Not After : Mar 30 08:00:36 2026 GMT
Subject: CN=8aa9e469f2265774bc1e0d99cadc9a953a6834e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f2:8e:be:5e:2a:c6:d3:44:0a:2e:f5:89:e9:
6b:71:2f:ca:1a:19:f8:9a:b2:d7:ad:3b:31:18:34:
1e:fc:22:1d:52:81:a6:81:5c:06:e5:d2:20:76:84:
93:94:e4:68:68:55:fd:4a:c0:1e:f3:20:9e:4d:dd:
3c:a6:32:c1:3b:79:ab:26:55:fa:f7:7f:03:da:44:
97:12:12:ff:cc:f9:30:34:72:80:7f:84:94:5c:ba:
a3:a9:d6:48:a6:b5:e4:79:96:5d:83:e5:a7:65:54:
6e:74:47:a8:68:66:14:bd:6d:a2:48:78:29:73:59:
38:1f:8d:40:8a:a6:7a:d8:8b:3e:52:64:a9:f9:9c:
b4:39:c8:33:7d:f7:a8:ad:eb:d2:5f:d2:3a:a2:85:
27:c9:a9:45:94:b3:5c:86:de:a2:81:81:80:25:eb:
b0:0b:75:b5:6f:d0:fa:48:ff:2f:db:39:de:d0:7b:
2a:6f:e4:4f:4d:db:ba:05:32:25:c2:b9:d7:b3:5d:
38:7c:9c:d3:03:ce:3d:d2:e7:07:00:fb:c0:30:28:
a5:72:5f:70:0e:7c:81:e5:15:7b:9a:d3:ce:dd:55:
1a:0f:7f:e5:66:e0:be:8b:4f:15:27:83:e7:0b:1f:
92:1a:43:d2:4b:a0:19:fc:2d:b7:ef:b4:95:4f:f7:
4d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:A9:E4:69:F2:26:57:74:BC:1E:0D:99:CA:DC:9A:95:3A:68:34:E0
X509v3 Authority Key Identifier:
keyid:E7:1D:70:9D:8B:18:4C:5A:50:C9:43:1D:CC:AF:64:9B:C8:68:47:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5x1wnYsYTFpQyUMdzK9km8hoRwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4799f6-765f-4ad2-8c43-1c5b1012d2c3/1/5x1wnYsYTFpQyUMdzK9km8hoRwQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4799f6-765f-4ad2-8c43-1c5b1012d2c3/1/5x1wnYsYTFpQyUMdzK9km8hoRwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:c6:f7:bb:42:9d:20:f0:16:f4:9e:6a:3e:82:37:b6:fe:10:
5a:a7:5e:ce:98:07:1e:be:43:16:ea:d7:1e:26:e5:67:8b:bc:
37:13:0a:28:89:fc:a3:c3:34:9c:d1:de:e5:f0:25:e2:87:74:
2e:77:ff:70:3f:50:92:0b:c4:93:78:f7:37:d8:0b:6c:a7:82:
6c:1e:fc:2c:3e:e2:31:47:ca:42:6c:00:aa:9b:b1:bc:83:d4:
02:41:dd:49:89:84:49:4f:2d:31:9e:52:44:f6:e1:ac:5c:13:
f1:8d:2f:2e:e2:50:cd:8c:2a:fd:54:e3:55:43:95:82:3b:6e:
bc:f4:45:78:56:71:74:56:2d:49:fa:a5:51:0c:63:40:88:b9:
27:f6:bd:51:ad:82:54:a0:42:41:df:3a:bd:d7:3c:e3:93:3a:
39:25:40:57:fc:04:ae:0d:5e:05:98:c9:44:d5:e8:a2:c0:dc:
bd:95:3b:44:29:7c:ec:ac:5d:10:c5:63:42:ac:b6:4b:d0:d4:
b0:8c:11:21:b7:7e:c5:20:7a:3b:18:b3:18:55:73:26:74:38:
4e:c4:3b:2a:e3:06:eb:7c:e4:cd:73:1b:52:37:17:16:68:21:
27:85:98:bb:0c:72:df:0b:48:e2:d3:0c:93:97:24:84:ff:43:
12:fe:d2:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:06 2026 by rpki-client