Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/5ca07a-b242-4144-a264-7d547ec84114/1/5rtLno321mTvy3e0EEFcg0phd4I.mft
File: 5rtLno321mTvy3e0EEFcg0phd4I.mft (raw, json)
Hash identifier: /8Ptdymw93M/PsfU7cToapU8znaoXeReoOihL+7vYwo=
Subject key identifier: 9C:D2:60:BD:4E:8B:B4:14:10:B8:94:02:CE:74:ED:8C:9F:72:2F:BA
Authority key identifier: E6:BB:4B:9E:8D:F6:D6:64:EF:CB:77:B4:10:41:5C:83:4A:61:77:82
Certificate issuer: /CN=e6bb4b9e8df6d664efcb77b410415c834a617782
Certificate serial: 019D38D39DF73D5AE10E55C3BF7DA872E9BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5rtLno321mTvy3e0EEFcg0phd4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/5ca07a-b242-4144-a264-7d547ec84114/1/5rtLno321mTvy3e0EEFcg0phd4I.mft
Manifest number: 067A
Signing time: Sun 29 Mar 2026 09:01:25 +0000
Manifest this update: Sun 29 Mar 2026 09:01:25 +0000
Manifest next update: Mon 30 Mar 2026 09:01:25 +0000
Files and hashes: 1: 5rtLno321mTvy3e0EEFcg0phd4I.crl (hash: KdCipbwzFFRJJvOwmfdI0+SEDozwc1EdoyQTyeW+sfE=)
2: Q92n5As_StLfCEOsCZRxLPjQigk.roa (hash: m0A5cImf1wfkQyI07Q9zPZS2LIiSLajm2W221r5jirk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/5ca07a-b242-4144-a264-7d547ec84114/1/5rtLno321mTvy3e0EEFcg0phd4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/5ca07a-b242-4144-a264-7d547ec84114/1/5rtLno321mTvy3e0EEFcg0phd4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/5rtLno321mTvy3e0EEFcg0phd4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:9d:f7:3d:5a:e1:0e:55:c3:bf:7d:a8:72:e9:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6bb4b9e8df6d664efcb77b410415c834a617782
Validity
Not Before: Mar 29 09:01:25 2026 GMT
Not After : Mar 30 09:01:25 2026 GMT
Subject: CN=9cd260bd4e8bb41410b89402ce74ed8c9f722fba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:80:bc:92:c4:4f:8a:a8:ba:a9:1f:81:85:05:
e1:91:e4:7d:b6:09:88:9b:df:d4:2f:f4:54:ed:00:
ad:80:92:dd:f5:10:62:a4:d9:7c:87:eb:e5:f7:79:
2e:fd:64:4a:97:ba:01:be:25:0e:5a:7b:f4:d2:ff:
56:18:73:f0:63:3a:80:60:38:00:49:e7:5e:58:be:
6b:43:ef:75:a5:67:50:8c:c6:b4:b8:39:93:8d:79:
a1:c5:d9:08:c6:ba:bd:25:4a:a7:92:b3:16:79:57:
b4:87:58:b0:87:41:ec:62:d9:38:d6:5f:fc:25:ec:
ee:c9:00:2b:a2:5b:a0:4d:fe:a9:ae:19:69:01:db:
c7:75:06:14:25:55:8a:66:c0:52:e5:1f:17:11:09:
1d:d2:3e:98:04:13:0e:51:2b:39:41:0b:4c:e1:77:
21:54:07:df:0d:5c:c9:7f:cd:18:3f:98:2b:da:c0:
f0:48:59:97:64:31:02:70:83:80:5c:f2:e3:31:2d:
16:6b:c7:8d:e1:bb:32:84:47:ba:b1:ad:78:b3:61:
0d:2b:ee:15:9b:46:47:53:9d:88:36:f9:83:93:74:
5d:75:2e:96:43:7a:e4:62:ae:95:f1:9a:a3:f1:9f:
b7:7a:ad:32:fd:00:6a:d7:46:4a:d0:02:d4:21:21:
32:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:D2:60:BD:4E:8B:B4:14:10:B8:94:02:CE:74:ED:8C:9F:72:2F:BA
X509v3 Authority Key Identifier:
keyid:E6:BB:4B:9E:8D:F6:D6:64:EF:CB:77:B4:10:41:5C:83:4A:61:77:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5rtLno321mTvy3e0EEFcg0phd4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/5ca07a-b242-4144-a264-7d547ec84114/1/5rtLno321mTvy3e0EEFcg0phd4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/5ca07a-b242-4144-a264-7d547ec84114/1/5rtLno321mTvy3e0EEFcg0phd4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:e5:83:36:eb:e1:f2:ee:78:86:4d:3c:9b:ca:6d:07:72:62:
f7:23:0b:75:a7:68:73:22:a5:7d:cc:12:88:e6:62:98:b6:fd:
de:e1:2c:02:e8:79:11:41:1f:9a:35:65:5a:fb:58:46:86:86:
58:37:bb:87:53:16:ce:d3:76:79:71:36:ba:10:3c:95:d8:58:
50:7b:35:ff:6b:cb:f6:4a:72:d5:de:90:0f:db:61:ce:b7:2a:
4f:34:e3:20:06:b5:6a:d3:02:00:62:be:6a:3e:f4:08:51:ab:
35:f9:54:4c:db:59:45:c1:39:18:3b:6e:db:3d:77:2e:ba:bc:
4a:dc:f2:d0:98:88:84:9a:aa:ba:7a:d2:66:55:0b:88:d2:6f:
bd:ad:78:76:11:00:ea:6c:16:42:50:5d:a0:89:b4:33:35:8d:
e0:c2:3c:4c:83:39:95:b6:ea:15:48:a9:59:86:02:bf:a3:c1:
29:30:9e:c1:f7:e5:c4:14:f4:63:56:14:27:67:ca:1f:ab:c9:
53:13:01:fd:c7:16:ec:c4:b0:dd:ef:df:f6:33:e9:63:53:05:
0f:03:83:57:e1:18:6c:ab:67:bb:49:62:98:cc:1b:6b:b8:eb:
55:26:63:9d:ca:ff:0f:24:13:1b:7c:a6:7d:40:23:65:b2:a0:
28:fb:13:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:55:10 2026 by rpki-client