Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/5snUihjDwNLk5jp7g4haeWd1WCY.mft
File: 5snUihjDwNLk5jp7g4haeWd1WCY.mft (raw, json)
Hash identifier: cofoKhtYVVYKW2jZHyYhQbOO7DHAot6+97mDeQc0j9o=
Subject key identifier: F5:87:4C:EA:2E:38:89:9B:FE:D5:30:C3:3E:CF:81:5E:EE:90:F6:3D
Authority key identifier: E6:C9:D4:8A:18:C3:C0:D2:E4:E6:3A:7B:83:88:5A:79:67:75:58:26
Certificate issuer: /CN=e6c9d48a18c3c0d2e4e63a7b83885a7967755826
Certificate serial: 019D3909F36F0E283D6B6567D0883790F808
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5snUihjDwNLk5jp7g4haeWd1WCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/5snUihjDwNLk5jp7g4haeWd1WCY.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 10:00:46 +0000
Manifest this update: Sun 29 Mar 2026 10:00:46 +0000
Manifest next update: Mon 30 Mar 2026 10:00:46 +0000
Files and hashes: 1: 5snUihjDwNLk5jp7g4haeWd1WCY.crl (hash: /4O1yOre9ztgptesLwB1OMnVSYusSl/8VNCxVVuEcTU=)
2: xTcMswF38ZE38tgLMYO-vbYGTRk.roa (hash: PD9c4dxb1fJ5/IhIPAC6oOP7byhN52l5phW+HJUN+kg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/5snUihjDwNLk5jp7g4haeWd1WCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/5snUihjDwNLk5jp7g4haeWd1WCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/5snUihjDwNLk5jp7g4haeWd1WCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:f3:6f:0e:28:3d:6b:65:67:d0:88:37:90:f8:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6c9d48a18c3c0d2e4e63a7b83885a7967755826
Validity
Not Before: Mar 29 10:00:46 2026 GMT
Not After : Mar 30 10:00:46 2026 GMT
Subject: CN=f5874cea2e38899bfed530c33ecf815eee90f63d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:af:34:60:e5:ae:8a:23:1b:40:f8:3c:45:9c:
da:75:57:85:a5:28:a1:08:e6:56:f8:21:b6:b9:6b:
9b:44:0e:a8:4a:30:76:2d:e9:f5:c3:97:7f:08:55:
2e:53:4c:56:62:82:2a:3f:32:ab:ad:9a:22:3c:80:
a3:8d:d5:72:68:2d:99:ad:c3:2c:90:a5:2c:fa:1a:
59:18:60:b9:cd:72:80:8b:dd:5c:b9:02:25:21:d5:
12:e1:af:1b:07:72:a8:64:ce:3f:15:e3:b9:08:19:
4c:f5:8a:e7:bd:7f:c5:89:47:07:59:16:04:10:1c:
f0:d7:99:4a:5d:22:48:85:e0:76:b2:74:d0:9c:b4:
05:82:6d:80:31:42:ea:47:7e:6e:42:91:d5:84:bd:
b7:71:5e:76:d8:c9:b4:7a:e2:68:68:62:11:76:1e:
24:03:d1:82:67:1f:8c:97:6e:d8:4c:f6:3e:27:15:
eb:96:21:c0:38:38:ee:9e:02:3f:22:c8:67:3a:52:
0a:b5:f8:6a:b4:3a:f6:30:91:c8:bf:0f:4c:76:45:
36:24:dc:c9:5f:8d:37:21:19:82:63:70:c2:77:81:
2f:80:77:b8:a6:e7:a2:7f:73:17:bc:54:6e:72:65:
e3:6a:6a:76:3e:01:70:67:7f:54:85:6f:da:c1:07:
79:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:87:4C:EA:2E:38:89:9B:FE:D5:30:C3:3E:CF:81:5E:EE:90:F6:3D
X509v3 Authority Key Identifier:
keyid:E6:C9:D4:8A:18:C3:C0:D2:E4:E6:3A:7B:83:88:5A:79:67:75:58:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5snUihjDwNLk5jp7g4haeWd1WCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/5snUihjDwNLk5jp7g4haeWd1WCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/5snUihjDwNLk5jp7g4haeWd1WCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:3d:05:7e:2d:6a:1c:b4:32:e4:fc:9b:43:fd:6d:b8:cb:51:
a8:5f:41:d4:7b:04:2b:aa:f7:d7:7c:74:8d:4e:d4:de:bf:f9:
53:56:01:c4:f3:85:71:29:38:b1:05:84:ba:e6:f1:2b:1b:49:
03:d7:82:3c:1a:ca:f9:59:9c:2d:64:db:1c:ff:cc:82:b4:5d:
a4:6c:dd:8f:50:ad:cb:08:57:25:5c:7d:f3:b7:44:be:5a:75:
9e:ba:db:4f:37:c1:68:46:6c:81:c2:26:2a:40:4b:41:25:a0:
3f:49:67:f3:95:2a:25:7e:f7:87:51:7a:5d:c7:f9:82:97:db:
d8:28:63:0c:e4:31:5f:4c:3b:b3:f0:90:78:29:0f:bd:4a:38:
6e:ac:97:66:3c:2e:1c:99:92:9d:b2:c5:8f:6a:62:bb:ca:6b:
77:2a:7b:8e:08:0a:b2:1e:3d:f1:69:74:d4:2a:93:ac:93:3d:
94:6f:1f:ce:08:09:af:1d:96:86:51:f8:68:51:dd:af:55:23:
2f:ca:fb:83:e0:dc:c8:05:4b:3d:e4:d3:02:b3:84:7b:10:b1:
d5:11:ae:04:99:63:0c:f3:b2:af:67:07:14:a5:de:eb:d2:05:
68:86:44:fd:89:f5:0f:ee:ad:16:72:2c:f0:a2:cf:24:c1:ef:
c8:e7:dc:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:28:23 2026 by rpki-client