Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/0cc042-cf2b-4616-92e0-af0556c47a37/1/5Bv3i3CsJ2y_ZbuQn5k0CC9NLXk.mft
File: 5Bv3i3CsJ2y_ZbuQn5k0CC9NLXk.mft (raw, json)
Hash identifier: Jo9LQq4VMfa9b8rg+8ykfCf7DLrdNFYxu2WznHU9OcI=
Subject key identifier: 45:2D:0C:EA:D5:B2:17:48:F5:81:11:CD:B0:F1:54:FC:23:F9:F1:2A
Authority key identifier: E4:1B:F7:8B:70:AC:27:6C:BF:65:BB:90:9F:99:34:08:2F:4D:2D:79
Certificate issuer: /CN=e41bf78b70ac276cbf65bb909f9934082f4d2d79
Certificate serial: 019D37C0694A502A155AB3F2EFEFC60955CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Bv3i3CsJ2y_ZbuQn5k0CC9NLXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/0cc042-cf2b-4616-92e0-af0556c47a37/1/5Bv3i3CsJ2y_ZbuQn5k0CC9NLXk.mft
Manifest number: 1522
Signing time: Sun 29 Mar 2026 04:00:49 +0000
Manifest this update: Sun 29 Mar 2026 04:00:49 +0000
Manifest next update: Mon 30 Mar 2026 04:00:49 +0000
Files and hashes: 1: 2FfewzchtBOlT_1-bM1KbwVEptI.roa (hash: XCreExSvtYmion6efW1Ds82lk+nlI9Ef/9JOGZG0IwY=)
2: 5Bv3i3CsJ2y_ZbuQn5k0CC9NLXk.crl (hash: Ito2y8z4vwX3XmJDqR0X+KrFdRvPKdKMjwJAOOzoCZo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/0cc042-cf2b-4616-92e0-af0556c47a37/1/5Bv3i3CsJ2y_ZbuQn5k0CC9NLXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/0cc042-cf2b-4616-92e0-af0556c47a37/1/5Bv3i3CsJ2y_ZbuQn5k0CC9NLXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Bv3i3CsJ2y_ZbuQn5k0CC9NLXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:69:4a:50:2a:15:5a:b3:f2:ef:ef:c6:09:55:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e41bf78b70ac276cbf65bb909f9934082f4d2d79
Validity
Not Before: Mar 29 04:00:49 2026 GMT
Not After : Mar 30 04:00:49 2026 GMT
Subject: CN=452d0cead5b21748f58111cdb0f154fc23f9f12a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:10:72:1d:9e:c5:78:cd:62:16:64:2f:bd:0e:
a0:a7:f9:52:ee:69:98:8f:35:51:8f:90:9f:32:5f:
b7:8e:b8:69:f5:1e:1c:cb:9b:6b:8a:07:d9:5c:1e:
ef:98:56:a0:d7:fa:6e:7d:6b:f0:3c:47:c0:47:a8:
54:56:25:d8:cc:66:fb:67:18:21:f3:8a:2e:5f:ed:
22:cf:14:d8:aa:1d:cf:45:3b:4e:ff:70:e3:57:62:
17:98:2b:4a:4b:b3:4b:b6:d6:83:36:de:d8:02:f2:
bb:d7:6a:a8:f4:22:01:22:6f:e1:bf:a9:1e:7f:51:
b4:e0:50:d4:c0:1d:4d:96:07:04:65:79:ef:6b:e0:
17:63:b0:e5:41:e6:62:9f:a8:a8:7e:77:36:ed:73:
18:be:87:43:e5:03:44:73:a1:24:86:ec:ab:a8:19:
2c:0a:1b:22:2c:86:5e:4a:f1:01:f5:b2:50:50:a9:
9a:2f:0d:d1:0c:aa:7f:d2:e3:2c:bf:49:aa:ad:4a:
28:f5:c8:e6:98:ba:de:a6:05:b2:ed:0f:bf:b9:5a:
e0:1d:7f:92:69:b9:28:b5:37:ad:32:07:98:ca:15:
5f:5b:f3:df:e5:8c:b4:c3:cc:d9:21:00:f8:f4:11:
6a:51:f9:df:c8:09:c7:ee:44:72:a1:7b:28:39:5f:
23:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:2D:0C:EA:D5:B2:17:48:F5:81:11:CD:B0:F1:54:FC:23:F9:F1:2A
X509v3 Authority Key Identifier:
keyid:E4:1B:F7:8B:70:AC:27:6C:BF:65:BB:90:9F:99:34:08:2F:4D:2D:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Bv3i3CsJ2y_ZbuQn5k0CC9NLXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/0cc042-cf2b-4616-92e0-af0556c47a37/1/5Bv3i3CsJ2y_ZbuQn5k0CC9NLXk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/0cc042-cf2b-4616-92e0-af0556c47a37/1/5Bv3i3CsJ2y_ZbuQn5k0CC9NLXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:a7:24:d5:90:17:2d:cd:37:8e:cb:a8:91:69:3a:51:90:0a:
22:1f:8d:c1:6c:bf:c7:71:6c:e5:cd:05:4b:9d:dd:27:9c:1b:
e8:88:29:95:ea:19:4c:94:4f:71:e8:c0:c1:8d:58:a0:7d:42:
49:50:4e:7b:38:25:57:e8:cc:8c:92:28:37:54:48:ff:48:66:
9d:62:f3:85:51:e5:b5:2c:22:39:c7:6b:3c:b3:d1:d3:84:79:
91:22:c0:e6:2e:e3:6f:3b:ff:4f:3d:0e:0f:08:ad:a7:96:b0:
94:3b:8e:d3:c0:1e:33:78:04:ce:5c:36:fb:d8:79:ec:44:01:
62:f2:f9:85:d0:a8:5c:75:cb:94:57:c3:54:eb:c3:2b:78:4b:
57:00:85:25:fe:d6:dd:58:fe:16:ee:d2:c1:e0:4d:6e:c1:11:
a7:9e:93:2d:71:54:fa:1d:d2:88:2d:1d:18:bb:85:0d:2e:58:
f1:77:42:a6:ea:84:9d:36:f9:b3:ec:9e:cd:97:17:54:a6:b1:
96:aa:ef:01:ac:0c:1a:16:1b:44:76:9e:77:b3:43:0f:1e:bb:
46:30:2c:5b:7b:28:9c:01:34:7f:ce:83:1a:e6:a9:4b:dd:bf:
0a:27:b8:e9:3d:02:c4:25:65:9d:59:5c:6a:92:10:9f:d1:7c:
2f:ce:9f:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:43 2026 by rpki-client