Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/5XRVuKiwV21vlPfgFPazTVqmxNc.mft
File: 5XRVuKiwV21vlPfgFPazTVqmxNc.mft (raw, json)
Hash identifier: Y1GAgiSKqWMl1jz6JYxk8tkqhDxQqK00MwteMjzO1nU=
Subject key identifier: CD:A1:08:A8:19:6B:64:13:2B:DD:69:A7:6C:A6:BA:C9:58:33:F8:CA
Authority key identifier: E5:74:55:B8:A8:B0:57:6D:6F:94:F7:E0:14:F6:B3:4D:5A:A6:C4:D7
Certificate issuer: /CN=e57455b8a8b0576d6f94f7e014f6b34d5aa6c4d7
Certificate serial: 019D3752EADF919B7A1D0031733C7FEB5072
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5XRVuKiwV21vlPfgFPazTVqmxNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/5XRVuKiwV21vlPfgFPazTVqmxNc.mft
Manifest number: 0549
Signing time: Sun 29 Mar 2026 02:01:14 +0000
Manifest this update: Sun 29 Mar 2026 02:01:14 +0000
Manifest next update: Mon 30 Mar 2026 02:01:14 +0000
Files and hashes: 1: 5XRVuKiwV21vlPfgFPazTVqmxNc.crl (hash: 2VO5ehoIXgzbSCe/s3CwA5INnXVVK5E4gD0WWfLn7oQ=)
2: Gki0ECoPAysMOyKXl5MRgDPOl8U.asa (hash: E0R2O9JvpmCh8PA1gKVXhP81+K3nRGm/rwyvvFQeeqI=)
3: NPoJ48rOlMylXSV9suu4vTiIJd8.roa (hash: aQKCUY2SNtZbLIRkM+mjutTaN8ryl5E8Zuu6G5SpnXw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/5XRVuKiwV21vlPfgFPazTVqmxNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/5XRVuKiwV21vlPfgFPazTVqmxNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/5XRVuKiwV21vlPfgFPazTVqmxNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:ea:df:91:9b:7a:1d:00:31:73:3c:7f:eb:50:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e57455b8a8b0576d6f94f7e014f6b34d5aa6c4d7
Validity
Not Before: Mar 29 02:01:14 2026 GMT
Not After : Mar 30 02:01:14 2026 GMT
Subject: CN=cda108a8196b64132bdd69a76ca6bac95833f8ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f3:5d:e7:c8:03:49:bd:0a:a9:c3:9f:6f:c9:
5a:83:9f:e2:c1:fd:28:57:5e:01:49:50:af:fb:ee:
5f:c1:2d:de:92:fa:7d:7a:0d:4d:fb:b4:4d:e3:ed:
83:87:1e:63:b5:9f:f1:72:83:a8:3a:60:df:cc:86:
f9:55:8a:c4:ac:a2:23:94:54:f8:20:f3:87:04:32:
3b:d5:6d:68:f8:45:3b:de:7b:98:06:ca:12:ed:93:
82:fc:7f:c8:d2:41:96:bf:e2:08:29:03:31:7c:3b:
39:b5:ac:37:95:da:ff:bf:39:51:5b:27:63:45:c9:
31:a8:95:e8:37:96:63:52:2e:58:4f:8c:a4:8e:1c:
7f:38:ed:76:d4:28:ea:9e:4c:df:6a:08:24:59:e6:
36:ef:7d:18:a9:15:b7:ba:d5:2c:9f:c5:e6:2d:dd:
e0:14:e5:4c:90:0d:7f:89:d0:1e:3f:6b:5f:17:b6:
75:13:12:0a:32:81:24:72:5c:64:e1:c8:6d:6f:16:
9b:37:31:2c:b2:4c:5e:f3:39:38:f1:a4:c9:8c:f0:
d8:0b:3a:36:91:6a:88:ef:69:a7:f3:02:15:8b:6a:
e8:07:d6:eb:ab:ab:b6:db:79:64:3c:3c:ad:50:e1:
54:58:5d:65:26:bd:a6:e8:42:c4:1c:f9:aa:5e:c0:
76:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:A1:08:A8:19:6B:64:13:2B:DD:69:A7:6C:A6:BA:C9:58:33:F8:CA
X509v3 Authority Key Identifier:
keyid:E5:74:55:B8:A8:B0:57:6D:6F:94:F7:E0:14:F6:B3:4D:5A:A6:C4:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5XRVuKiwV21vlPfgFPazTVqmxNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/5XRVuKiwV21vlPfgFPazTVqmxNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/5XRVuKiwV21vlPfgFPazTVqmxNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:62:43:9e:4d:b6:c8:bc:bf:58:28:19:2d:ff:ce:d8:13:03:
17:f6:01:16:89:4a:c6:04:13:a4:cb:c0:3d:df:29:ea:54:2c:
01:39:66:c7:91:9e:27:01:49:39:6d:46:18:e3:1f:01:2c:51:
18:d2:83:02:84:d5:54:69:46:f5:8f:d3:a5:b9:fd:32:40:6e:
48:f9:a2:d5:30:0f:13:e3:46:48:28:31:7f:24:01:2e:e1:9b:
09:78:b8:08:98:42:c8:2c:9e:73:7c:b7:6a:9a:24:4a:78:e5:
df:17:8d:de:24:5f:ed:38:cf:66:c9:68:e3:32:f4:be:7b:d9:
43:20:cd:65:e1:2e:02:4f:bd:f8:91:50:c1:c1:26:5b:e4:11:
a0:1c:3b:af:8d:59:53:b5:8a:42:2d:bd:92:bc:e0:08:d2:b0:
35:73:ef:c0:88:6a:0a:e9:ea:4a:0a:97:99:52:83:a7:ea:7f:
13:78:7f:1c:86:41:67:a7:39:9a:bb:a3:e1:30:5b:ac:6e:b4:
f6:e7:d6:5f:a8:a3:ad:27:73:92:b4:9e:5f:1c:6f:8d:83:3c:
af:01:d2:b5:bf:c6:2c:86:31:3f:00:74:95:65:c6:58:63:21:
5e:3b:c5:03:82:af:9e:03:51:8e:68:bb:37:0d:81:f0:c9:d7:
4d:f0:3e:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:15 2026 by rpki-client