
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/036380-7fbe-4444-84d9-5cd004d6e366/1/5hbHsgGVYH8nsT2I-Svx0Os45g8.mft
File: 5hbHsgGVYH8nsT2I-Svx0Os45g8.mft (raw, json)
Hash identifier: HTQTm04bz53oDvPzTPbZt13B52WFsz+F1eS+enG/NOo=
Subject key identifier: C3:8E:31:C0:CF:CC:28:ED:B2:2C:8F:DD:6C:7C:FE:84:20:84:B3:5F
Authority key identifier: E6:16:C7:B2:01:95:60:7F:27:B1:3D:88:F9:2B:F1:D0:EB:38:E6:0F
Certificate issuer: /CN=e616c7b20195607f27b13d88f92bf1d0eb38e60f
Certificate serial: 019FA14DE206272007C41106DEFF93242E20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5hbHsgGVYH8nsT2I-Svx0Os45g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/036380-7fbe-4444-84d9-5cd004d6e366/1/5hbHsgGVYH8nsT2I-Svx0Os45g8.mft
Manifest number: 0483
Signing time: Mon 27 Jul 2026 02:01:03 +0000
Manifest this update: Mon 27 Jul 2026 02:01:03 +0000
Manifest next update: Tue 28 Jul 2026 02:01:03 +0000
Files and hashes: 1: 5hbHsgGVYH8nsT2I-Svx0Os45g8.crl (hash: +0qgW1+v/a3OTR+6d4LqAl5CWwgNsdH4cV8PdBdUxZM=)
2: 72Y0w9pV82pI3wLwx96KwjAs5oU.roa (hash: c5hQXuvcKRBmbu9AlA38sraM6CQffUtGwob8NZ7WzZo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/036380-7fbe-4444-84d9-5cd004d6e366/1/5hbHsgGVYH8nsT2I-Svx0Os45g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/036380-7fbe-4444-84d9-5cd004d6e366/1/5hbHsgGVYH8nsT2I-Svx0Os45g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/5hbHsgGVYH8nsT2I-Svx0Os45g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 02:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:4d:e2:06:27:20:07:c4:11:06:de:ff:93:24:2e:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e616c7b20195607f27b13d88f92bf1d0eb38e60f
Validity
Not Before: Jul 27 02:01:03 2026 GMT
Not After : Jul 28 02:01:03 2026 GMT
Subject: CN=c38e31c0cfcc28edb22c8fdd6c7cfe842084b35f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:8b:f0:a0:8c:43:7e:d2:12:d0:a0:5d:37:82:
b9:2f:da:8e:fa:0e:c7:0e:69:1b:e5:85:15:80:6f:
ea:9c:b1:37:7e:f1:ca:c2:25:e9:dd:ff:6e:82:3f:
0d:d3:01:cd:a6:2a:d2:cd:ca:2b:36:e8:ea:77:74:
f6:99:af:ec:92:79:3a:52:c2:bc:b4:92:e3:f1:99:
a0:54:a2:28:93:d3:df:32:ab:e5:10:0d:2b:40:f0:
80:3a:08:1c:80:56:3e:a2:2b:85:f1:e6:08:27:9a:
5f:de:63:8a:9f:76:38:70:f4:05:bd:7c:42:84:b3:
c8:d0:64:5b:b5:c6:ae:a1:74:50:c8:dd:6a:75:ba:
87:34:03:5b:ca:1e:2e:dc:80:3a:17:49:29:bf:c0:
e2:9e:41:9d:cb:29:a2:ed:8e:c5:0c:f0:f0:bd:13:
28:a1:34:6a:b1:91:b8:b1:fd:9d:dd:88:b2:2c:60:
83:08:a5:be:b1:79:e5:d0:6e:ee:54:5a:66:26:48:
f1:5e:73:9f:c0:cc:53:29:bb:6e:d1:b8:d9:cd:05:
e6:29:1a:60:ec:ba:ed:cc:32:b9:df:d4:56:fe:58:
ba:69:03:2c:d4:3b:66:54:60:59:4c:f3:e1:1c:04:
14:be:39:1a:96:31:14:61:32:8a:df:57:56:84:41:
83:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:8E:31:C0:CF:CC:28:ED:B2:2C:8F:DD:6C:7C:FE:84:20:84:B3:5F
X509v3 Authority Key Identifier:
keyid:E6:16:C7:B2:01:95:60:7F:27:B1:3D:88:F9:2B:F1:D0:EB:38:E6:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hbHsgGVYH8nsT2I-Svx0Os45g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/036380-7fbe-4444-84d9-5cd004d6e366/1/5hbHsgGVYH8nsT2I-Svx0Os45g8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/036380-7fbe-4444-84d9-5cd004d6e366/1/5hbHsgGVYH8nsT2I-Svx0Os45g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:1b:d1:3f:15:06:ee:fa:59:87:ed:df:2d:70:2e:c2:c7:64:
68:ea:3e:65:56:31:f4:cb:02:08:79:c9:1b:04:d9:82:6e:b3:
33:d4:1f:99:8c:3d:d4:f0:4d:8f:6a:01:92:59:ab:bb:1e:34:
1f:b2:08:2f:79:00:99:cb:49:94:37:d6:74:01:ac:16:ad:d8:
a3:7b:6d:e3:84:05:8e:08:f3:80:e3:0a:8c:c4:d6:81:a4:ca:
ff:7c:0b:1a:52:71:49:44:e8:b6:24:39:d1:31:98:52:a8:99:
dc:36:fd:28:89:ba:b2:bb:53:44:ea:1f:b7:bd:64:d2:73:0d:
cc:4d:f4:09:aa:c7:1d:7e:0d:3d:39:0f:7d:f6:f4:82:71:5a:
27:71:ef:1d:60:7c:f5:b5:09:51:7c:db:4f:ae:37:57:bf:24:
b6:6d:17:c1:fe:f1:b3:d9:37:81:b3:14:e3:69:40:06:d5:99:
0a:f3:f9:2b:3f:e7:46:67:f1:53:a7:6c:70:f8:7c:f1:0b:d5:
16:85:25:e1:f3:37:10:45:a6:1b:b7:89:14:fb:fe:b6:12:1e:
33:08:68:01:c0:3b:4e:62:47:03:49:3c:e4:47:eb:a1:44:10:
ab:99:7b:d1:67:5e:89:b1:99:a9:eb:db:01:12:30:17:02:c8:
67:dd:3b:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 10:26:53 2026 by rpki-client