Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/2f541c-ea12-446f-bea4-a82a153ab13e/1/5dfxPZFnbuwdyazIcjFtYqx3nXs.mft
File: 5dfxPZFnbuwdyazIcjFtYqx3nXs.mft (raw, json)
Hash identifier: DV0zyyqQvjzUs/qWq8te6Qe20zXsEH9WnHUPqyUSEXE=
Subject key identifier: DF:5A:43:36:F4:F5:A4:B6:D6:9C:52:E4:39:00:18:BB:6E:D3:69:BD
Authority key identifier: E5:D7:F1:3D:91:67:6E:EC:1D:C9:AC:C8:72:31:6D:62:AC:77:9D:7B
Certificate issuer: /CN=e5d7f13d91676eec1dc9acc872316d62ac779d7b
Certificate serial: 019D38D29C6C81965992AFA19D7413CBAB3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5dfxPZFnbuwdyazIcjFtYqx3nXs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/2f541c-ea12-446f-bea4-a82a153ab13e/1/5dfxPZFnbuwdyazIcjFtYqx3nXs.mft
Manifest number: 02B0
Signing time: Sun 29 Mar 2026 09:00:19 +0000
Manifest this update: Sun 29 Mar 2026 09:00:19 +0000
Manifest next update: Mon 30 Mar 2026 09:00:19 +0000
Files and hashes: 1: 5dfxPZFnbuwdyazIcjFtYqx3nXs.crl (hash: 2laBQu4DwnmB/oRkkd+aY/JRiefo19ezYZ/o4wUtXzQ=)
2: KbZLx2_rFtlHuG7zcnRaRaQol2w.roa (hash: +PvTCrqc0M/beR/HvEF/hRLA4hC3UuAO8zDUgE+xCOs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/2f541c-ea12-446f-bea4-a82a153ab13e/1/5dfxPZFnbuwdyazIcjFtYqx3nXs.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/2f541c-ea12-446f-bea4-a82a153ab13e/1/5dfxPZFnbuwdyazIcjFtYqx3nXs.mft
rsync://rpki.ripe.net/repository/DEFAULT/5dfxPZFnbuwdyazIcjFtYqx3nXs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:9c:6c:81:96:59:92:af:a1:9d:74:13:cb:ab:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5d7f13d91676eec1dc9acc872316d62ac779d7b
Validity
Not Before: Mar 29 09:00:19 2026 GMT
Not After : Mar 30 09:00:19 2026 GMT
Subject: CN=df5a4336f4f5a4b6d69c52e4390018bb6ed369bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5c:8c:7d:69:31:32:dd:85:bd:e9:a2:f8:d1:
0c:26:49:93:df:71:59:2c:39:d6:ae:86:0f:97:0a:
23:7c:78:d7:46:47:b2:25:54:7a:6b:7f:98:04:fa:
52:93:92:bd:d6:fb:6e:9f:56:36:1f:9f:5e:e6:76:
fd:97:51:b8:eb:14:a1:70:39:3f:f5:ae:e6:ee:07:
82:ee:c5:83:38:88:e4:37:70:fb:64:5a:ca:04:4a:
7e:ab:09:67:03:d5:a0:4f:36:56:b2:16:ae:8a:08:
f2:d3:2b:48:c0:28:9d:6b:f0:61:b3:7c:35:5b:8e:
ac:75:12:af:60:b8:03:f6:f9:0c:88:49:1e:82:69:
13:ee:fb:32:6d:fa:d5:e0:4f:ed:8d:07:47:ab:21:
86:a4:1c:b9:ee:ab:82:6f:c1:6f:4d:8a:78:ec:c8:
c0:0f:18:80:72:41:b6:86:81:f7:2c:3b:0d:03:1e:
0e:b0:98:00:54:04:44:68:43:eb:05:33:3c:6d:82:
e9:76:70:ab:8e:7f:21:56:cf:f0:b5:22:a0:82:35:
b8:06:42:37:89:f9:81:6e:2c:3b:3d:a7:43:a2:83:
2a:a8:87:63:47:bc:73:ea:23:5e:48:24:a9:73:9b:
bf:0f:2c:6b:01:7b:4b:eb:b8:ad:52:24:fd:ca:98:
fe:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:5A:43:36:F4:F5:A4:B6:D6:9C:52:E4:39:00:18:BB:6E:D3:69:BD
X509v3 Authority Key Identifier:
keyid:E5:D7:F1:3D:91:67:6E:EC:1D:C9:AC:C8:72:31:6D:62:AC:77:9D:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5dfxPZFnbuwdyazIcjFtYqx3nXs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2f541c-ea12-446f-bea4-a82a153ab13e/1/5dfxPZFnbuwdyazIcjFtYqx3nXs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2f541c-ea12-446f-bea4-a82a153ab13e/1/5dfxPZFnbuwdyazIcjFtYqx3nXs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:17:e7:27:76:0c:20:f2:04:f5:2d:e0:9e:f3:fd:d9:b5:d1:
73:07:37:4e:a3:d6:8a:82:aa:69:e6:83:28:10:44:18:bd:fa:
0a:3e:ae:aa:60:b0:a9:f1:38:d6:f5:a6:80:8d:31:2f:f6:66:
1c:d1:db:05:34:5a:c1:b3:a9:91:62:f3:c5:29:4a:47:2e:71:
9b:a8:70:5b:80:83:9f:cd:2a:db:fc:29:d7:57:c4:11:4a:00:
ac:7d:a2:2f:e1:a9:9d:a6:c9:3c:e3:8f:b5:1f:a7:60:3e:33:
2d:91:e3:61:4e:22:17:d2:60:15:ce:80:e9:b5:c7:48:3c:0c:
2a:ab:b6:d1:c5:c6:90:91:26:6b:90:cf:0b:71:19:49:8f:07:
04:4b:42:f7:c2:2d:cd:21:02:e8:21:f4:43:8a:17:e8:d4:d9:
6f:e0:88:60:f2:9a:9b:2f:ff:6e:ec:8c:cb:66:2e:fc:56:9d:
e1:8e:e1:00:bd:ae:9a:6b:72:fb:00:61:47:97:0d:02:9a:ca:
e0:8f:93:e5:eb:75:4c:b3:70:e3:e7:5a:6f:a8:ea:a8:36:42:
1f:f0:1e:1b:98:0d:40:55:df:b2:95:12:14:9c:25:7c:f5:eb:
ac:3e:24:73:88:3d:93:bc:ae:23:4e:48:48:c7:35:9e:8d:19:
86:74:35:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:15:20 2026 by rpki-client