Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.mft
File: 5aGzZVL52sy5KsXDtEtCbWQ3SeI.mft (raw, json)
Hash identifier: 1a10w9Y6dalvsZiKpomKvop+gohANQUvkViNB5I4V/U=
Subject key identifier: 9C:66:8C:22:C5:18:19:DA:D4:70:15:51:D1:BF:C3:81:92:39:DF:23
Authority key identifier: E5:A1:B3:65:52:F9:DA:CC:B9:2A:C5:C3:B4:4B:42:6D:64:37:49:E2
Certificate issuer: /CN=e5a1b36552f9daccb92ac5c3b44b426d643749e2
Certificate serial: 019D3909CA10865D9EFA2807C0A053CA4DD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5aGzZVL52sy5KsXDtEtCbWQ3SeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.mft
Manifest number: 189B
Signing time: Sun 29 Mar 2026 10:00:36 +0000
Manifest this update: Sun 29 Mar 2026 10:00:36 +0000
Manifest next update: Mon 30 Mar 2026 10:00:36 +0000
Files and hashes: 1: 5aGzZVL52sy5KsXDtEtCbWQ3SeI.crl (hash: ZOgWfnPQgwF9pLHjnA+0/K2difsEGRx087AcPq1mkok=)
2: 79l3omq8_o54S6Kg8vandlH5J_o.roa (hash: KLDOrBiQlVs1TSmknTa83fxTQ2tVpuuxWM3N66P3QGg=)
3: Hp__tFbaZdaiAofy6QbTMuwaJyg.roa (hash: gy/Ii3yXNRU7ahYXH/J+iAr5bw4XRUBaMk0HedWPciE=)
4: SQTwMRoxF7FRyK6nUUWbCz4A9eo.roa (hash: uliL74kF/+emKLIjlFsJMg/YLv06A/SZL5XAxmC6u0o=)
5: bTW2H9C_f0Zyl4rbIo3Z2-aBupw.roa (hash: DXNshREIVgHPI/cdx6PYhMXkKa/NwvrXqrgQumwjc+8=)
6: fqTbi0RgE-7D6SKzQWOs1v9kD84.roa (hash: WZR3ueqxzI32wKwkJGwTbu9WI2FMxl/49YxT+UAs7do=)
7: gAoi5KcKNfH9vaBb2_wpm_FwOcw.roa (hash: cJ8BX4jA9U2tBUDrfO2OTPW3pXUTcKwubUVTAQu92zI=)
8: wULQ1rFany44hlJUjVnf6JD1px0.roa (hash: G805BanUjf0p0J0sQcSfwl8Lk7XU9K4q5pkH78H9/cE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5aGzZVL52sy5KsXDtEtCbWQ3SeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:ca:10:86:5d:9e:fa:28:07:c0:a0:53:ca:4d:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5a1b36552f9daccb92ac5c3b44b426d643749e2
Validity
Not Before: Mar 29 10:00:36 2026 GMT
Not After : Mar 30 10:00:36 2026 GMT
Subject: CN=9c668c22c51819dad4701551d1bfc3819239df23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d1:d7:bc:e5:5e:e4:33:66:ec:d4:e6:07:05:
da:af:3d:8e:8e:cc:38:58:d0:f7:a1:f6:79:1d:90:
b0:69:2d:4a:18:b8:1e:f9:84:d8:a2:46:14:bd:b1:
40:f3:5a:aa:b7:0d:43:cb:38:53:6b:89:04:9b:d4:
cd:30:9f:af:40:c4:91:de:ee:bc:5c:82:dd:aa:b9:
67:98:f0:63:4f:76:2c:ac:ea:ca:f9:24:2b:9f:a0:
aa:be:d2:b2:27:44:29:d3:45:d8:fd:70:0f:16:5a:
4d:5a:3b:5b:ae:59:95:73:ed:fe:b4:fe:29:01:86:
6e:c5:54:db:c2:56:50:5f:74:a7:fa:f4:59:c6:5a:
c7:0a:94:d1:06:b4:44:66:d0:60:20:6d:74:9e:1f:
df:97:50:f9:cb:02:51:91:b6:6f:c0:6d:6c:62:63:
e3:d4:bc:50:f5:90:84:f5:58:3e:59:81:40:01:1c:
62:dc:df:eb:42:08:46:4a:37:f6:39:89:a9:63:c6:
59:06:28:24:4e:ff:13:ab:80:82:26:83:2a:51:d5:
9b:df:03:0e:e8:8f:32:da:ad:cd:a2:cb:bc:c9:5a:
a5:48:62:5f:8f:af:2f:f2:a7:f9:0b:57:bb:3b:f3:
35:9a:97:7e:7d:c7:d6:4b:a3:3a:f1:58:bf:88:39:
d1:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:66:8C:22:C5:18:19:DA:D4:70:15:51:D1:BF:C3:81:92:39:DF:23
X509v3 Authority Key Identifier:
keyid:E5:A1:B3:65:52:F9:DA:CC:B9:2A:C5:C3:B4:4B:42:6D:64:37:49:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5aGzZVL52sy5KsXDtEtCbWQ3SeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:e9:92:d0:d8:b7:85:4a:cc:d5:8a:ae:bd:14:83:5c:69:e1:
93:57:e4:1c:db:77:8b:40:52:6c:3f:84:59:e4:bb:1d:0c:18:
8e:aa:4c:f3:ae:22:e7:74:96:60:c7:8c:b4:1a:eb:68:f6:b5:
49:94:2c:10:66:63:ae:91:33:28:82:74:a3:1f:08:8f:8c:9a:
40:89:a9:63:55:f2:14:b9:b8:ef:f3:4b:5a:61:41:4e:0c:03:
0d:b6:4b:c1:53:a0:82:1c:0d:4a:78:92:4c:fc:bb:03:a5:bb:
f7:cf:14:9c:47:b3:08:f3:5a:95:5a:65:68:2a:84:d8:8e:fe:
cc:f1:f7:fe:8a:95:7f:47:75:61:de:4b:5f:e5:46:e3:aa:0e:
4c:a0:99:eb:8d:6d:b6:4b:63:65:10:3e:71:59:22:e0:73:3b:
52:db:b4:b2:ed:9e:d9:9b:aa:34:3a:a1:38:3e:90:30:73:05:
76:bd:99:a4:e9:67:28:42:5b:19:06:eb:34:0a:14:50:68:57:
26:57:b2:b9:ab:58:0f:38:49:23:8b:c5:7d:6a:ab:50:24:b1:
f0:fe:91:19:e8:fa:ac:c0:f6:6f:cf:a8:32:39:2a:8a:67:47:
07:97:3b:66:48:73:66:1b:03:ff:cb:0a:7f:69:61:70:29:a5:
49:6c:01:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:58:56 2026 by rpki-client