Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/af23c6-efec-491b-87cd-9faa62a1f178/1/5cn_8vjtDWWq0LlPgDby7hru6go.mft
File: 5cn_8vjtDWWq0LlPgDby7hru6go.mft (raw, json)
Hash identifier: eVV4HYcIKEA7u7gz2vov7Iza9FB+kWE8zt3r4sKtRRQ=
Subject key identifier: BE:14:E0:5D:BB:D7:F8:C8:1E:3F:57:5B:F3:54:5B:CB:2E:0D:21:6E
Authority key identifier: E5:C9:FF:F2:F8:ED:0D:65:AA:D0:B9:4F:80:36:F2:EE:1A:EE:EA:0A
Certificate issuer: /CN=e5c9fff2f8ed0d65aad0b94f8036f2ee1aeeea0a
Certificate serial: 019D378962B0CCC4F4EDE79BEE882C0BE9C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5cn_8vjtDWWq0LlPgDby7hru6go.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/af23c6-efec-491b-87cd-9faa62a1f178/1/5cn_8vjtDWWq0LlPgDby7hru6go.mft
Manifest number: 16D5
Signing time: Sun 29 Mar 2026 03:00:43 +0000
Manifest this update: Sun 29 Mar 2026 03:00:43 +0000
Manifest next update: Mon 30 Mar 2026 03:00:43 +0000
Files and hashes: 1: 5cn_8vjtDWWq0LlPgDby7hru6go.crl (hash: 02Tu+NcM8dz/7Nyc6GSFX8Er/yaCMJf/EgyJE6EqCqs=)
2: 660vFFGpn8clSWO6FY_HjESqHac.roa (hash: PavhF4oz19TrgmDV4DTkSyfBE4qBlY8WfjSQlelqWBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/af23c6-efec-491b-87cd-9faa62a1f178/1/5cn_8vjtDWWq0LlPgDby7hru6go.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/af23c6-efec-491b-87cd-9faa62a1f178/1/5cn_8vjtDWWq0LlPgDby7hru6go.mft
rsync://rpki.ripe.net/repository/DEFAULT/5cn_8vjtDWWq0LlPgDby7hru6go.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:62:b0:cc:c4:f4:ed:e7:9b:ee:88:2c:0b:e9:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5c9fff2f8ed0d65aad0b94f8036f2ee1aeeea0a
Validity
Not Before: Mar 29 03:00:43 2026 GMT
Not After : Mar 30 03:00:43 2026 GMT
Subject: CN=be14e05dbbd7f8c81e3f575bf3545bcb2e0d216e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:56:f9:fe:a4:2a:83:98:ce:ff:e7:16:ed:53:
3c:58:fe:cf:d6:89:e3:fb:6e:5f:8b:1d:13:32:42:
d0:ad:97:21:5e:93:5c:82:d8:d9:60:ec:92:ab:bd:
d1:e6:58:1a:b7:d8:a0:44:41:7e:b9:09:84:62:56:
f5:cb:58:d6:81:77:b2:8f:58:48:2b:d4:a1:46:4a:
34:c8:4f:c1:43:ec:00:83:6f:c9:ac:aa:51:6c:d2:
68:16:f8:f0:fc:d1:eb:ed:df:b3:bd:08:67:1e:e2:
7f:42:9a:05:63:e5:20:47:f1:a3:fd:57:88:ed:5e:
0d:a1:88:2e:36:37:c0:5b:bc:08:9e:76:34:46:23:
da:08:47:05:d1:34:c1:b1:f2:41:d2:c1:8a:3e:7f:
ac:c6:5f:bb:7f:ba:66:5b:f5:f8:29:07:8f:c1:5a:
da:63:02:dc:63:53:83:a5:f9:93:97:ac:f3:b7:95:
e4:67:65:a4:e1:97:48:8c:ad:1a:34:87:b4:db:cc:
ec:13:73:fc:59:21:38:ed:f5:87:40:13:87:ea:5d:
07:d2:84:55:48:19:ac:fc:84:72:c8:62:c9:cc:23:
1d:90:33:a0:01:3b:9c:a5:9b:0e:6b:3f:6b:dd:65:
83:07:2b:2d:40:2c:ed:1d:1d:8c:7d:50:1b:db:5b:
30:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:14:E0:5D:BB:D7:F8:C8:1E:3F:57:5B:F3:54:5B:CB:2E:0D:21:6E
X509v3 Authority Key Identifier:
keyid:E5:C9:FF:F2:F8:ED:0D:65:AA:D0:B9:4F:80:36:F2:EE:1A:EE:EA:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5cn_8vjtDWWq0LlPgDby7hru6go.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/af23c6-efec-491b-87cd-9faa62a1f178/1/5cn_8vjtDWWq0LlPgDby7hru6go.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/af23c6-efec-491b-87cd-9faa62a1f178/1/5cn_8vjtDWWq0LlPgDby7hru6go.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:bb:cd:cd:60:33:c9:2d:e6:14:ad:19:18:40:b8:82:56:e4:
c2:22:38:78:c5:6f:73:50:1b:4a:a8:80:4b:6f:aa:ae:82:5f:
38:21:92:78:1d:33:11:f6:36:68:36:24:8e:0b:07:66:6e:72:
ab:1d:63:3c:8d:16:9b:26:01:84:b7:0e:7d:a8:d7:38:a6:58:
24:4a:bc:20:88:5a:1f:cc:bc:d7:0c:64:c8:ec:bd:91:b4:de:
b2:7f:c8:fd:3d:ca:36:0f:90:32:4e:bc:81:6e:52:70:9d:9e:
8b:8a:e9:80:36:0e:dc:59:fb:7c:b5:94:16:f7:ea:e0:9e:33:
df:65:ed:b3:b4:63:a6:b4:ac:f6:91:f6:0d:28:ce:7f:1a:31:
08:9d:8f:3f:d0:41:84:e7:eb:3f:ad:81:20:2f:c3:a1:cf:2d:
8c:fa:83:23:29:ce:c9:b9:42:79:4d:25:73:e2:54:ac:dd:35:
0e:20:18:ad:22:8c:77:b5:29:f3:7a:9c:4d:9f:8b:93:9c:e9:
1f:15:73:e5:85:cd:64:69:73:5d:fe:d5:19:38:51:6c:60:e7:
02:0f:cd:dc:fd:4d:cb:b9:4c:37:15:d4:e6:43:a5:ae:98:6b:
44:bf:1d:41:bf:0d:27:5a:ad:f5:66:56:ab:e4:2a:d2:8f:57:
0f:ec:f3:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:06:53 2026 by rpki-client