Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/0e8b5d-ee98-47fb-a389-03fa7a9c371e/1/5ARKnRChnmsaztrJ_3eNT0CQaMs.mft
File: 5ARKnRChnmsaztrJ_3eNT0CQaMs.mft (raw, json)
Hash identifier: u8pP6AJTQU5OO8dS6APyDLzouBypvWVaUW6+3NpUPFo=
Subject key identifier: 90:17:72:62:43:CB:D0:F3:3D:28:AA:C1:F8:A7:A6:79:26:65:63:56
Authority key identifier: E4:04:4A:9D:10:A1:9E:6B:1A:CE:DA:C9:FF:77:8D:4F:40:90:68:CB
Certificate issuer: /CN=e4044a9d10a19e6b1acedac9ff778d4f409068cb
Certificate serial: 019D39AE74B7C8C794986105DB8867EE0665
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5ARKnRChnmsaztrJ_3eNT0CQaMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/0e8b5d-ee98-47fb-a389-03fa7a9c371e/1/5ARKnRChnmsaztrJ_3eNT0CQaMs.mft
Manifest number: 0DE2
Signing time: Sun 29 Mar 2026 13:00:27 +0000
Manifest this update: Sun 29 Mar 2026 13:00:27 +0000
Manifest next update: Mon 30 Mar 2026 13:00:27 +0000
Files and hashes: 1: 5ARKnRChnmsaztrJ_3eNT0CQaMs.crl (hash: otJmYYUovr0oFiJ2+nn4afr8pZuA0JnRGARKedUp4O8=)
2: kkPGy3M1-5xu9OIRpXmU25SAI2Y.roa (hash: cyrjAwqc3oU6K0wTg1ctpzSIWyDuDU/OKlnASWiAbYg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/0e8b5d-ee98-47fb-a389-03fa7a9c371e/1/5ARKnRChnmsaztrJ_3eNT0CQaMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/0e8b5d-ee98-47fb-a389-03fa7a9c371e/1/5ARKnRChnmsaztrJ_3eNT0CQaMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/5ARKnRChnmsaztrJ_3eNT0CQaMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 13:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:74:b7:c8:c7:94:98:61:05:db:88:67:ee:06:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4044a9d10a19e6b1acedac9ff778d4f409068cb
Validity
Not Before: Mar 29 13:00:27 2026 GMT
Not After : Mar 30 13:00:27 2026 GMT
Subject: CN=9017726243cbd0f33d28aac1f8a7a67926656356
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:39:43:ab:07:fa:c0:8b:f5:d5:9b:79:9e:80:
0c:74:bc:c8:fa:53:5c:7e:e6:a0:f3:66:52:53:7c:
8e:7e:94:3a:b6:bc:da:59:e1:70:3c:5e:af:91:c7:
52:22:d6:cb:c0:48:ca:bb:79:d6:7e:80:d5:6e:d6:
38:47:72:d7:be:dc:a9:b1:c9:31:e0:9c:d3:5e:2c:
53:8d:72:98:49:16:f6:15:24:94:54:89:5f:e0:bf:
48:8e:32:f6:9d:75:1e:19:c1:49:54:53:54:17:39:
0a:71:7a:e2:05:df:71:b2:8d:3a:18:4d:f5:28:e7:
60:80:e0:a8:d3:53:6b:04:b0:67:3d:2a:e3:da:ad:
d5:9d:4a:e3:a4:44:d6:96:a2:2d:14:75:fb:04:05:
40:57:2c:cf:7a:2f:a9:9f:d4:40:37:8c:90:21:57:
66:e6:0f:64:01:90:4f:31:18:72:ca:35:ca:c7:3e:
6e:66:6a:51:31:40:0d:8c:e3:d3:f6:20:a0:74:c8:
ad:93:c5:7d:5a:3f:8b:c9:3a:1b:a2:10:3e:3d:82:
71:be:5d:91:fb:54:59:07:5c:9e:9d:33:3e:17:e3:
89:3e:70:34:64:d6:9b:d9:a7:d1:99:45:b1:e4:e3:
07:d9:b6:a8:5e:e3:de:f5:aa:ae:46:0d:35:60:46:
9b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:17:72:62:43:CB:D0:F3:3D:28:AA:C1:F8:A7:A6:79:26:65:63:56
X509v3 Authority Key Identifier:
keyid:E4:04:4A:9D:10:A1:9E:6B:1A:CE:DA:C9:FF:77:8D:4F:40:90:68:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5ARKnRChnmsaztrJ_3eNT0CQaMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0e8b5d-ee98-47fb-a389-03fa7a9c371e/1/5ARKnRChnmsaztrJ_3eNT0CQaMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0e8b5d-ee98-47fb-a389-03fa7a9c371e/1/5ARKnRChnmsaztrJ_3eNT0CQaMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:49:7f:f8:49:ce:a5:e7:ea:8c:08:e5:c4:4f:b6:7b:9d:23:
7e:fd:c9:da:15:87:3d:65:7b:14:80:f5:f2:35:4f:f3:76:cb:
cf:4f:a5:ed:59:8b:5a:7f:4d:b8:2d:dc:3d:10:5e:15:00:7b:
35:98:cc:b1:9f:6d:bb:56:0e:67:ce:76:ec:44:be:ff:fa:58:
fb:6a:c4:6c:10:56:f6:f5:01:bf:50:ca:de:78:ef:b5:28:b7:
a7:fb:19:e9:a5:10:55:50:f6:5c:70:61:82:92:ba:8e:3a:69:
17:f0:85:90:e2:71:69:e3:ec:78:35:bd:e3:72:b3:2c:c9:54:
ed:9f:39:6b:db:76:3d:5d:23:81:44:86:91:6f:21:a4:42:2b:
d0:e3:c5:68:43:18:4f:54:b3:08:51:98:40:35:7b:65:23:7c:
9f:a4:6a:04:08:7f:61:93:a9:21:db:07:cc:2f:42:c1:f9:3a:
6a:98:b3:9b:f9:7f:90:57:53:82:bd:19:c7:45:57:5a:5e:55:
a8:61:51:bc:14:5a:c6:2f:c6:1f:2a:37:d8:1c:13:17:a9:b9:
02:ec:69:34:7f:08:c1:3f:43:67:1c:80:95:84:55:85:0a:22:
11:d9:7f:a1:c6:01:73:2f:8f:9b:4e:82:16:8e:aa:eb:66:93:
0a:7d:18:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:25:41 2026 by rpki-client