Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/5a5638-455a-4250-94f0-0561bde0bfa8/1/5nwNRx3D5HkEyTV9QPl3o-CBtL0.mft
File: 5nwNRx3D5HkEyTV9QPl3o-CBtL0.mft (raw, json)
Hash identifier: ACDFrk621FGwr9qmrnJ1K0DNzgL093923ssLHNYX14s=
Subject key identifier: 58:42:A7:F2:ED:17:89:49:31:67:9B:EB:82:85:F5:40:72:AE:C5:C0
Authority key identifier: E6:7C:0D:47:1D:C3:E4:79:04:C9:35:7D:40:F9:77:A3:E0:81:B4:BD
Certificate issuer: /CN=e67c0d471dc3e47904c9357d40f977a3e081b4bd
Certificate serial: 019D38D366C311348E72D7FA8F37DB4BE6B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5nwNRx3D5HkEyTV9QPl3o-CBtL0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/5a5638-455a-4250-94f0-0561bde0bfa8/1/5nwNRx3D5HkEyTV9QPl3o-CBtL0.mft
Manifest number: 0A53
Signing time: Sun 29 Mar 2026 09:01:11 +0000
Manifest this update: Sun 29 Mar 2026 09:01:11 +0000
Manifest next update: Mon 30 Mar 2026 09:01:11 +0000
Files and hashes: 1: 5nwNRx3D5HkEyTV9QPl3o-CBtL0.crl (hash: ymH3tr2qKj0KQ2UySDPOFi318H69gLqWu756Jov4NIE=)
2: nwkylzsl9GQOKn32orn5yakjbK0.roa (hash: /75YPo5s/Ms0uyukdFXeyU5GUYakwPsjdM3EpdWBr4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/5a5638-455a-4250-94f0-0561bde0bfa8/1/5nwNRx3D5HkEyTV9QPl3o-CBtL0.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/5a5638-455a-4250-94f0-0561bde0bfa8/1/5nwNRx3D5HkEyTV9QPl3o-CBtL0.mft
rsync://rpki.ripe.net/repository/DEFAULT/5nwNRx3D5HkEyTV9QPl3o-CBtL0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:66:c3:11:34:8e:72:d7:fa:8f:37:db:4b:e6:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e67c0d471dc3e47904c9357d40f977a3e081b4bd
Validity
Not Before: Mar 29 09:01:11 2026 GMT
Not After : Mar 30 09:01:11 2026 GMT
Subject: CN=5842a7f2ed17894931679beb8285f54072aec5c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:92:a8:60:6d:9d:79:94:13:91:00:3b:52:fb:
13:7a:0d:32:de:64:9f:a0:93:95:a6:76:6e:01:de:
52:c3:d4:ac:76:a9:61:12:02:e2:c5:6e:85:d8:3c:
14:74:fd:5a:71:df:ac:09:24:24:37:03:bb:69:bd:
9d:3e:c0:ae:a2:45:66:6d:89:2b:85:5c:2a:75:8d:
75:16:1f:1f:58:e7:39:3d:5d:a5:0e:d2:a6:0c:cc:
8e:2d:9c:72:e9:54:0c:d5:71:a3:01:c7:33:f9:3a:
86:9f:ce:31:2f:50:9d:83:13:ee:ad:57:c0:a2:95:
32:5f:82:27:3d:4f:6e:5c:99:02:ae:f7:7a:82:0e:
e7:64:25:11:4d:39:70:ee:4a:88:9a:e2:88:8a:e2:
1b:0a:c7:64:e1:4d:31:29:e5:08:13:81:e1:f5:86:
b6:1c:b6:9c:9d:66:36:87:bc:e9:a8:41:c6:b2:c4:
ca:67:05:12:51:6d:85:06:f1:2a:55:55:6f:dd:f7:
3e:72:28:3c:a4:46:c5:ac:64:89:b1:a2:cf:b8:4f:
01:78:c3:8b:8b:f2:70:e1:bb:76:91:2e:30:24:c8:
b4:db:59:9d:28:fa:a3:e9:72:f9:fb:24:7b:c2:38:
b5:65:37:e2:31:7c:2c:19:b1:f6:87:95:43:c8:2e:
f5:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:42:A7:F2:ED:17:89:49:31:67:9B:EB:82:85:F5:40:72:AE:C5:C0
X509v3 Authority Key Identifier:
keyid:E6:7C:0D:47:1D:C3:E4:79:04:C9:35:7D:40:F9:77:A3:E0:81:B4:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5nwNRx3D5HkEyTV9QPl3o-CBtL0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/5a5638-455a-4250-94f0-0561bde0bfa8/1/5nwNRx3D5HkEyTV9QPl3o-CBtL0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/5a5638-455a-4250-94f0-0561bde0bfa8/1/5nwNRx3D5HkEyTV9QPl3o-CBtL0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:f4:af:ea:5c:a5:1c:be:40:ab:11:67:8d:c9:6b:d7:46:d5:
86:b8:c9:e8:fd:a6:5a:80:35:b9:fd:a0:d0:3a:ce:ca:20:02:
9e:18:db:cf:62:b3:ce:e2:47:1e:5e:f4:74:ab:2f:80:67:56:
62:49:d0:0d:78:fb:fe:53:74:4f:d7:8f:98:93:1e:9d:79:21:
87:37:52:13:b7:fc:a8:a8:6c:57:04:86:a8:cf:4c:77:9d:3f:
de:99:79:f4:38:57:4e:f6:bc:58:46:f2:8b:f2:1c:62:5d:93:
22:cf:35:30:83:ac:b5:70:57:5f:85:ef:2b:6b:d7:83:ea:cf:
5e:58:c9:15:2c:14:63:83:0d:cf:6c:ea:f7:0b:8f:e3:2e:98:
e0:e7:38:31:5b:fe:96:bc:9d:d7:5c:ac:a7:40:b1:38:6e:95:
02:e2:d7:1e:6f:83:d4:a7:4c:54:b8:3b:a0:ee:bb:5b:89:c8:
99:38:e0:3c:b6:79:7a:35:19:83:fc:fb:ba:5c:5f:0a:83:39:
4f:0b:39:90:ca:8b:57:9d:a0:e7:5b:9f:87:39:d1:aa:14:5c:
b0:5f:af:bd:95:35:f8:ef:5a:66:c6:47:fc:99:aa:62:ea:da:
6e:db:81:af:b9:0d:9f:b8:fd:0d:4d:0d:95:4b:18:19:fd:34:
37:ee:d3:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:12 2026 by rpki-client