Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/6bf90c-97d5-44c6-acda-c370ad298ca3/1/5CI8HxzaGbmTW0jH_c8gVcKWICg.mft
File: 5CI8HxzaGbmTW0jH_c8gVcKWICg.mft (raw, json)
Hash identifier: GM4KtTqiFTrsP7OXO33h5PBC36Ur8k+MEStbLDFYD9U=
Subject key identifier: 01:32:0E:BD:BA:32:2D:3D:CA:E3:1E:F7:03:ED:66:03:14:FE:23:37
Authority key identifier: E4:22:3C:1F:1C:DA:19:B9:93:5B:48:C7:FD:CF:20:55:C2:96:20:28
Certificate issuer: /CN=e4223c1f1cda19b9935b48c7fdcf2055c2962028
Certificate serial: 019D37F70878A4EFD2E6F9EEA3995026FA4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5CI8HxzaGbmTW0jH_c8gVcKWICg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/6bf90c-97d5-44c6-acda-c370ad298ca3/1/5CI8HxzaGbmTW0jH_c8gVcKWICg.mft
Manifest number: FA
Signing time: Sun 29 Mar 2026 05:00:29 +0000
Manifest this update: Sun 29 Mar 2026 05:00:29 +0000
Manifest next update: Mon 30 Mar 2026 05:00:29 +0000
Files and hashes: 1: 5CI8HxzaGbmTW0jH_c8gVcKWICg.crl (hash: SuTF2u6gj8I9C6j80zKkOtyw9MEdtO4xBlOYBv/XkUw=)
2: xuYEpRaA_BbVvcRMwj6GF8dzFtk.roa (hash: +oo5HVPSdE5F0vnX0GJbLJAscp8MlST1lOFf6d/1Nz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/6bf90c-97d5-44c6-acda-c370ad298ca3/1/5CI8HxzaGbmTW0jH_c8gVcKWICg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/6bf90c-97d5-44c6-acda-c370ad298ca3/1/5CI8HxzaGbmTW0jH_c8gVcKWICg.mft
rsync://rpki.ripe.net/repository/DEFAULT/5CI8HxzaGbmTW0jH_c8gVcKWICg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:08:78:a4:ef:d2:e6:f9:ee:a3:99:50:26:fa:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4223c1f1cda19b9935b48c7fdcf2055c2962028
Validity
Not Before: Mar 29 05:00:29 2026 GMT
Not After : Mar 30 05:00:29 2026 GMT
Subject: CN=01320ebdba322d3dcae31ef703ed660314fe2337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:9e:5d:63:d3:bc:3e:a4:8c:70:f3:98:28:3d:
f0:fc:6d:c1:37:4e:28:ef:f9:ce:62:c8:7a:fc:dc:
1d:2d:b8:37:d3:93:ef:d9:54:37:f7:e7:4f:3e:74:
7b:30:e0:46:73:1e:10:15:1f:04:45:87:45:92:e1:
cd:de:d3:6d:a4:5b:6a:ca:d4:a0:53:4b:0d:f3:68:
52:11:b6:c4:2b:3e:ab:b9:f1:9a:70:86:ed:3a:03:
25:d7:a3:19:e9:a1:41:48:98:87:d0:b6:e2:59:04:
bc:81:92:ac:cc:5a:5d:da:56:c7:60:73:89:18:7f:
97:77:d8:8e:24:f9:56:df:8e:73:a5:f0:fe:b5:9f:
b4:b9:9e:01:36:6b:a1:52:a1:8c:ee:c9:f8:3e:3c:
d0:08:ec:96:10:2b:1b:2a:9e:bb:c3:b7:7b:4a:36:
87:e8:08:4d:e0:f8:8b:01:0e:85:e2:d4:6c:96:cb:
1e:d2:35:ad:28:20:76:7f:9f:c0:d1:1f:a5:09:1a:
a9:d0:67:c9:f8:3a:41:cf:e6:cd:88:a2:4b:94:67:
07:5a:8d:90:d8:d2:07:6a:b7:25:f9:0e:23:05:33:
1f:d3:1c:e6:2f:a4:1e:70:79:41:c2:11:9b:c1:e4:
8c:1c:d0:d4:99:d1:74:de:95:ab:2d:0f:57:93:b7:
7c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:32:0E:BD:BA:32:2D:3D:CA:E3:1E:F7:03:ED:66:03:14:FE:23:37
X509v3 Authority Key Identifier:
keyid:E4:22:3C:1F:1C:DA:19:B9:93:5B:48:C7:FD:CF:20:55:C2:96:20:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5CI8HxzaGbmTW0jH_c8gVcKWICg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/6bf90c-97d5-44c6-acda-c370ad298ca3/1/5CI8HxzaGbmTW0jH_c8gVcKWICg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/6bf90c-97d5-44c6-acda-c370ad298ca3/1/5CI8HxzaGbmTW0jH_c8gVcKWICg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:e3:5e:b5:87:41:59:2b:7c:df:e3:31:13:16:78:f9:63:97:
7b:22:67:87:43:69:ef:47:e5:51:5b:bd:c8:9e:96:79:03:2b:
2c:da:44:f7:f9:8f:a5:4c:50:db:03:22:92:8d:d9:69:04:97:
2e:73:bf:97:ec:be:c8:b1:33:b7:c0:af:46:66:c1:fa:1a:fb:
67:85:60:41:05:f6:dc:de:12:91:20:74:2a:5c:9b:64:f4:4b:
c6:b8:25:ab:47:9e:e4:42:28:8c:90:af:23:07:c0:1b:ea:54:
30:4e:84:d5:a3:5f:6f:9c:ce:0a:56:48:bc:ac:fa:f7:a0:b7:
f1:27:6e:9d:c0:b4:ca:1c:8e:d4:ed:b7:9a:4a:cc:a1:e3:e8:
ef:d6:08:a0:09:00:1f:13:fc:43:b1:3c:8a:8f:d1:8f:f2:6e:
7b:a7:c9:98:80:a3:45:4a:62:09:7a:31:2d:ad:fb:c8:bb:56:
0f:05:74:7d:f9:6f:4b:21:7e:f8:63:32:e3:c3:0d:b5:3b:29:
69:2f:3e:2b:4a:72:12:b5:8f:7f:13:ae:9f:e7:a4:05:b8:52:
02:35:42:fa:27:4b:74:20:57:0f:63:13:4f:c8:4a:93:62:80:
72:12:0c:43:b3:6e:ab:62:00:05:e8:d7:19:d2:b3:c8:24:44:
60:d5:ee:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:31 2026 by rpki-client