Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/003ca9-c390-4274-8fc6-7c504703bb02/1/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.mft
File: 5dqOnPyLFg7Fm1QPOdiXPUIYMSo.mft (raw, json)
Hash identifier: m1GfFtqWRh49fSEmCEkExnRwVgyMwqmrx6Ljf5sd4i8=
Subject key identifier: 25:1A:EB:65:64:87:1B:9E:58:21:78:E3:12:0F:75:12:0E:08:E0:93
Authority key identifier: E5:DA:8E:9C:FC:8B:16:0E:C5:9B:54:0F:39:D8:97:3D:42:18:31:2A
Certificate issuer: /CN=e5da8e9cfc8b160ec59b540f39d8973d4218312a
Certificate serial: 019D37895206DCCD39AC004F20AFCF30D82B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/003ca9-c390-4274-8fc6-7c504703bb02/1/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.mft
Manifest number: 01CD
Signing time: Sun 29 Mar 2026 03:00:39 +0000
Manifest this update: Sun 29 Mar 2026 03:00:39 +0000
Manifest next update: Mon 30 Mar 2026 03:00:39 +0000
Files and hashes: 1: 1Xd9T-vmTqWcRzDMcqdo4DeoQuQ.roa (hash: xBqelHlXV4izENr8HmikmcGOwsrcVkd1Rr1h+hdnJUI=)
2: 2zoKFMcGfaIUIi0gjgVI6WP5WyM.roa (hash: Is6VwvQ998n5+DQaPOHXWLSY0DuPhfOU5Gr/Ve2Nr3w=)
3: 5dqOnPyLFg7Fm1QPOdiXPUIYMSo.crl (hash: L4TGijFAyZs3KzYYg1mv55C/OSvEAIJ9/Czpzvq6qqo=)
4: r7ykq-I8ljDq2QXxZrYFAqBWgd8.roa (hash: 8dNxZY7QKRfX/M2WT1sGj39y/DFg2Rn6j5AsES2fgtU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/003ca9-c390-4274-8fc6-7c504703bb02/1/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/003ca9-c390-4274-8fc6-7c504703bb02/1/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:52:06:dc:cd:39:ac:00:4f:20:af:cf:30:d8:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5da8e9cfc8b160ec59b540f39d8973d4218312a
Validity
Not Before: Mar 29 03:00:39 2026 GMT
Not After : Mar 30 03:00:39 2026 GMT
Subject: CN=251aeb6564871b9e582178e3120f75120e08e093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:19:17:f5:ce:cd:d7:b8:ce:6a:5a:fe:74:c2:
3e:56:c5:d3:a8:02:5f:7c:c3:e1:9b:20:9e:d8:9c:
1b:4d:3e:7e:a6:99:1d:29:82:ce:10:a4:ac:8d:5f:
14:47:28:dc:a2:9c:8d:7e:45:fc:12:64:fb:56:82:
d4:ab:3d:1c:e8:0b:d5:c9:29:4b:ff:58:a8:9c:41:
9d:37:c5:8b:5c:b1:a4:f0:8b:72:85:28:9c:c8:41:
56:20:7f:16:78:42:b0:74:7c:2b:bd:0b:40:76:0e:
9a:1a:79:83:68:16:04:0e:d0:83:05:56:20:97:77:
ea:c5:a0:19:06:00:02:1b:26:15:96:26:66:7f:05:
5d:60:0a:20:4f:45:23:35:0d:6d:50:11:36:eb:98:
cd:3f:2a:cf:79:07:ba:8f:1b:d3:2e:d5:3d:c0:07:
10:d5:5d:b3:75:55:b7:7f:99:fa:35:aa:cb:e2:4d:
6e:20:d1:9c:a9:88:ae:4e:4d:1f:58:92:53:a4:1e:
8b:7e:22:3d:fa:7a:e5:ec:a0:65:35:0f:75:a0:c0:
13:ea:fc:8c:45:a5:a7:02:8f:f4:a6:67:fa:d6:eb:
b2:28:4a:0f:c9:b8:df:fe:5f:f8:d6:52:e2:f5:f1:
99:a1:43:04:9e:94:6b:2e:02:81:f5:91:3b:0d:57:
94:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:1A:EB:65:64:87:1B:9E:58:21:78:E3:12:0F:75:12:0E:08:E0:93
X509v3 Authority Key Identifier:
keyid:E5:DA:8E:9C:FC:8B:16:0E:C5:9B:54:0F:39:D8:97:3D:42:18:31:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/003ca9-c390-4274-8fc6-7c504703bb02/1/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/003ca9-c390-4274-8fc6-7c504703bb02/1/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:a9:2d:e6:15:18:69:d7:15:7b:f7:09:5c:20:bc:6e:b7:d6:
be:7b:0f:f1:68:c6:e0:85:9f:6f:00:e8:d7:2a:82:23:7c:df:
38:23:17:ad:9b:74:2c:30:ac:ab:c6:dc:aa:5b:86:59:81:9d:
45:22:a5:1a:d1:ce:e6:43:71:f3:8b:49:86:97:ee:9d:46:ca:
94:fa:61:cd:9b:98:5e:07:cd:a9:c5:f6:f6:98:77:bb:99:8f:
a2:05:8a:29:f9:cf:ce:20:e5:ef:d0:46:4a:cc:4e:fe:a4:09:
37:97:11:91:f6:06:45:93:9e:d9:e9:bf:6e:08:35:b2:a9:3a:
fd:d9:69:74:ab:59:31:41:f7:15:95:fe:96:c3:4f:cd:ab:4b:
1c:10:eb:c2:ad:55:b2:fb:aa:77:52:0f:2a:c0:05:ad:fa:5d:
c1:07:8e:b5:2e:b5:e0:59:ab:2d:3e:0e:e7:da:15:5b:e0:6f:
22:76:99:7f:da:0d:ea:bd:38:51:ed:a2:23:83:e4:ea:25:fc:
cf:cc:03:56:3d:88:3a:a9:26:2a:e0:fd:5a:33:6c:24:a1:39:
a1:46:42:58:0a:b1:8d:70:6c:03:e6:65:9d:5c:8e:90:2b:61:
6e:1d:4d:8f:00:b6:48:97:15:9b:74:d0:fc:5c:24:0f:36:bf:
78:41:80:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:44:16 2026 by rpki-client