Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/f7c636-0d1e-47f3-b05d-a7fd2f9e74cf/1/5U0JIEfb6alooWDzFfq5u5yDVtc.mft
File: 5U0JIEfb6alooWDzFfq5u5yDVtc.mft (raw, json)
Hash identifier: ZX+GrGpBt/i3kKuBAZiPKTU4MfIf54iMnwTtMslqBZw=
Subject key identifier: DB:68:35:30:3A:A6:B5:19:13:82:19:D0:67:6B:42:05:F2:F5:BB:74
Authority key identifier: E5:4D:09:20:47:DB:E9:A9:68:A1:60:F3:15:FA:B9:BB:9C:83:56:D7
Certificate issuer: /CN=e54d092047dbe9a968a160f315fab9bb9c8356d7
Certificate serial: 019D37F7745A6DBA977614B9D62BE3C38863
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5U0JIEfb6alooWDzFfq5u5yDVtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/f7c636-0d1e-47f3-b05d-a7fd2f9e74cf/1/5U0JIEfb6alooWDzFfq5u5yDVtc.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 05:00:57 +0000
Manifest this update: Sun 29 Mar 2026 05:00:57 +0000
Manifest next update: Mon 30 Mar 2026 05:00:57 +0000
Files and hashes: 1: 3mjUvr0ozA9KcVybdk9dg1L1c6M.roa (hash: l/BbA+peuMfkmg4IEpqF3b3AQLeDvrOYYkuX2oEB8Ko=)
2: 5U0JIEfb6alooWDzFfq5u5yDVtc.crl (hash: OJOt/rP0yUj22QGoMhz/xPKbqhbY1prkCg++1Gh/cxg=)
3: Oa_sii1Clbbek1SF0NauE94faXI.asa (hash: YEmLQlVRuHxGBIqwaUaToyDICFpczhTHLQZcRXVFos4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/f7c636-0d1e-47f3-b05d-a7fd2f9e74cf/1/5U0JIEfb6alooWDzFfq5u5yDVtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/f7c636-0d1e-47f3-b05d-a7fd2f9e74cf/1/5U0JIEfb6alooWDzFfq5u5yDVtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/5U0JIEfb6alooWDzFfq5u5yDVtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:74:5a:6d:ba:97:76:14:b9:d6:2b:e3:c3:88:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e54d092047dbe9a968a160f315fab9bb9c8356d7
Validity
Not Before: Mar 29 05:00:57 2026 GMT
Not After : Mar 30 05:00:57 2026 GMT
Subject: CN=db6835303aa6b519138219d0676b4205f2f5bb74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:62:f6:98:65:62:98:15:9a:68:25:01:93:ab:
9d:0a:be:69:21:85:41:7f:f7:2f:90:df:91:b0:bd:
e0:f9:75:15:af:a6:d0:8f:81:3d:31:ed:12:66:09:
63:b7:9d:41:50:11:7b:2c:fb:7c:e9:68:03:24:1b:
ff:e3:65:30:69:35:e4:bd:7e:e6:e4:cd:2d:e3:dd:
0c:99:4e:22:e5:21:84:c9:b6:62:e2:7c:53:de:36:
bb:e3:67:00:db:ef:3e:b3:f1:2a:a9:6b:0d:01:13:
88:a2:84:35:24:f2:d5:67:d9:7d:58:4d:3d:b3:81:
53:62:8d:6d:5c:e8:ed:a2:47:2d:28:45:f8:c4:49:
a2:90:b9:45:10:59:00:42:81:cf:99:d9:4d:e9:0f:
b3:ca:42:06:ef:cd:1c:3b:42:01:0d:f8:30:b9:d5:
d2:9e:a2:b3:70:b0:61:67:d0:5d:0f:0e:66:f6:6e:
71:32:0a:10:fa:55:f8:fd:aa:3d:4f:b1:99:98:b3:
42:55:ea:65:be:cf:35:4b:d7:fd:7a:6c:33:54:a7:
1e:7a:ac:e7:05:e1:08:fe:2e:a4:53:d6:8e:2b:e7:
fa:30:e9:89:5a:2c:19:5b:6b:b3:74:ac:91:e9:06:
6a:5c:fe:8f:1e:72:70:82:a4:cd:91:6d:c8:c1:18:
ac:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:68:35:30:3A:A6:B5:19:13:82:19:D0:67:6B:42:05:F2:F5:BB:74
X509v3 Authority Key Identifier:
keyid:E5:4D:09:20:47:DB:E9:A9:68:A1:60:F3:15:FA:B9:BB:9C:83:56:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5U0JIEfb6alooWDzFfq5u5yDVtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/f7c636-0d1e-47f3-b05d-a7fd2f9e74cf/1/5U0JIEfb6alooWDzFfq5u5yDVtc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/f7c636-0d1e-47f3-b05d-a7fd2f9e74cf/1/5U0JIEfb6alooWDzFfq5u5yDVtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:21:00:ed:b8:3c:ea:73:4d:29:67:71:03:4d:5b:29:14:1b:
fd:b2:9b:9c:d2:87:18:2e:fe:9f:29:8d:18:0d:67:b1:bc:32:
fa:b5:1d:35:2b:18:c7:2b:d0:c2:76:9e:d6:6a:33:6e:b8:1e:
22:d8:22:bd:8a:f3:22:ff:c0:5b:f0:72:0b:ec:74:b3:6c:0c:
7f:ff:d9:72:64:8a:82:86:f4:6a:09:a7:63:98:c0:dc:4c:f0:
52:fc:6c:ee:5d:42:a5:e4:22:27:17:fe:47:f9:6a:8e:88:c4:
8e:dc:df:da:3e:55:63:ca:2e:2c:29:5c:62:15:ed:1e:f5:f6:
35:4a:bc:68:8e:d1:0f:ea:d3:87:91:7d:3e:eb:e8:6b:68:58:
18:41:50:1d:67:ca:00:a7:14:0f:00:6e:e6:53:15:fc:f4:b6:
13:8a:52:51:e0:2e:07:c3:5c:20:a2:f2:36:5c:51:f5:71:e3:
8f:4b:0f:55:47:85:48:8a:ee:e9:d8:67:79:09:f7:ad:f1:33:
4c:67:ba:d4:49:06:fd:57:57:49:d5:cd:1b:03:f0:45:1d:38:
2b:be:94:5d:dc:e5:0a:c2:84:0f:2e:23:79:3b:ae:b3:5b:f7:
e7:a5:de:9f:4b:ba:bb:b0:f3:a6:c9:b6:f6:1f:73:54:fd:4e:
b7:8d:84:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:46:29 2026 by rpki-client