Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/734e0c-786e-4631-a923-e8b8fcc41e85/1/5gBk3PcZ7YmZ2nkvb7_D_pvHCJg.mft
File: 5gBk3PcZ7YmZ2nkvb7_D_pvHCJg.mft (raw, json)
Hash identifier: 0D3Nl/cRXI3iHgSWbi2jeNfL7EpWFzkAokb7QO0BCfE=
Subject key identifier: 2B:F1:89:0E:63:02:25:F8:88:63:BC:D9:E3:EC:FF:EA:43:05:74:94
Authority key identifier: E6:00:64:DC:F7:19:ED:89:99:DA:79:2F:6F:BF:C3:FE:9B:C7:08:98
Certificate issuer: /CN=e60064dcf719ed8999da792f6fbfc3fe9bc70898
Certificate serial: 019D3AF856A56A93E09E3D61EDF1D1D9EF6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5gBk3PcZ7YmZ2nkvb7_D_pvHCJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/734e0c-786e-4631-a923-e8b8fcc41e85/1/5gBk3PcZ7YmZ2nkvb7_D_pvHCJg.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 19:00:46 +0000
Manifest this update: Sun 29 Mar 2026 19:00:46 +0000
Manifest next update: Mon 30 Mar 2026 19:00:46 +0000
Files and hashes: 1: 1-pJL_RqO1YmMrkb8oqu5jkasDqw.roa (hash: tXskn9qxJGgIuj8H/bglOap8ueKyjcb9VQBsaau/B14=)
2: 5gBk3PcZ7YmZ2nkvb7_D_pvHCJg.crl (hash: MA31nefr2cAYaxM95ecv21d9dFZvgdbjgyxu019Mvbg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/734e0c-786e-4631-a923-e8b8fcc41e85/1/5gBk3PcZ7YmZ2nkvb7_D_pvHCJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/734e0c-786e-4631-a923-e8b8fcc41e85/1/5gBk3PcZ7YmZ2nkvb7_D_pvHCJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/5gBk3PcZ7YmZ2nkvb7_D_pvHCJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:f8:56:a5:6a:93:e0:9e:3d:61:ed:f1:d1:d9:ef:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e60064dcf719ed8999da792f6fbfc3fe9bc70898
Validity
Not Before: Mar 29 19:00:46 2026 GMT
Not After : Mar 30 19:00:46 2026 GMT
Subject: CN=2bf1890e630225f88863bcd9e3ecffea43057494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:dc:5a:60:6b:3b:09:02:9b:29:5e:f1:a5:ec:
ad:35:9f:23:66:6b:a3:11:0e:28:28:80:7a:f1:48:
36:a5:91:0a:6f:f7:d1:ca:4e:db:1f:76:2d:11:fe:
42:17:ec:54:a0:0c:d4:b9:bc:64:7b:dd:85:26:77:
15:3b:1d:04:c0:cd:b1:6a:14:21:67:a6:30:30:f7:
ae:4f:90:c5:68:c8:b8:ea:07:1c:75:e5:e1:e3:05:
84:64:96:35:c3:67:b2:72:a0:be:0e:bd:fd:4f:9f:
12:86:c2:44:87:5c:83:9b:68:e4:65:7f:fd:ff:c2:
dc:bf:a1:7d:ff:08:4b:d2:64:8f:d0:8e:56:d9:b2:
93:cf:7d:83:a7:ed:15:ed:d7:ed:41:89:c5:57:19:
9f:ea:0d:0c:35:11:97:75:78:cc:8b:86:1c:2a:15:
f5:c8:70:3d:33:8a:0c:c6:9d:d9:e2:78:05:b2:94:
4c:1c:ba:21:e1:a2:57:0b:8f:00:c9:fb:31:33:77:
1f:a3:17:16:27:da:85:03:a6:9d:2b:5c:32:38:4d:
86:23:4f:cd:85:d2:32:a7:aa:40:76:e7:a9:aa:45:
29:d0:13:3c:df:e5:9a:1c:52:88:4f:98:44:a8:1e:
64:14:64:a0:8f:9e:9e:34:98:77:59:04:b9:c2:ac:
ae:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:F1:89:0E:63:02:25:F8:88:63:BC:D9:E3:EC:FF:EA:43:05:74:94
X509v3 Authority Key Identifier:
keyid:E6:00:64:DC:F7:19:ED:89:99:DA:79:2F:6F:BF:C3:FE:9B:C7:08:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5gBk3PcZ7YmZ2nkvb7_D_pvHCJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/734e0c-786e-4631-a923-e8b8fcc41e85/1/5gBk3PcZ7YmZ2nkvb7_D_pvHCJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/734e0c-786e-4631-a923-e8b8fcc41e85/1/5gBk3PcZ7YmZ2nkvb7_D_pvHCJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:5c:a7:32:19:b1:fa:76:ef:4a:35:0d:22:ac:f0:7a:4f:12:
d3:40:86:3a:aa:86:61:66:a5:64:c2:d6:b8:bd:10:a9:bb:e6:
b7:aa:45:51:39:75:a2:15:f3:78:ee:b1:d7:73:7a:84:5d:bd:
bb:64:50:15:a7:47:3c:1d:a9:44:17:92:a6:56:ce:cd:7b:76:
d1:02:5e:bf:7a:4a:a5:c0:07:dd:fa:3c:58:6f:d8:1d:a1:f5:
6f:58:ce:33:06:26:1a:44:84:71:fc:43:12:af:93:16:d0:10:
62:e4:47:0a:a7:36:80:24:e8:a9:bc:60:d7:6f:57:38:11:49:
fe:45:3e:14:6f:4b:ef:4c:43:44:da:b5:4d:75:1b:86:da:3f:
3a:41:6d:21:07:cb:11:dd:47:7c:9b:ef:14:17:4c:03:95:38:
39:9b:79:c3:72:3a:04:b7:45:84:c1:fb:0e:c3:71:dc:33:a7:
91:8d:3a:18:c3:ad:21:fa:65:34:a9:29:b3:75:c0:2c:f9:90:
a1:b2:29:04:57:da:51:3a:66:40:5a:85:a7:81:b7:4a:0c:85:
65:e9:75:c5:13:63:e5:f7:a1:2c:19:35:f4:c6:dc:7b:36:0b:
9b:28:93:81:22:d5:52:90:0d:95:eb:35:43:aa:e7:51:bb:61:
c1:6d:c6:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:25:50 2026 by rpki-client