Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/248133-8670-4167-a195-6e2f588c0c7e/1/5H78nMPZxL0porvBVVH4LyXPEbo.mft
File: 5H78nMPZxL0porvBVVH4LyXPEbo.mft (raw, json)
Hash identifier: vDc17ryXvOpdRcOI3WWLGU6Ba4pNjm6lN5sD1J1CGVI=
Subject key identifier: B0:4B:3B:93:38:C8:B8:20:9F:CD:09:E3:A2:24:FE:76:F8:62:AA:58
Authority key identifier: E4:7E:FC:9C:C3:D9:C4:BD:29:A2:BB:C1:55:51:F8:2F:25:CF:11:BA
Certificate issuer: /CN=e47efc9cc3d9c4bd29a2bbc15551f82f25cf11ba
Certificate serial: 019D37F75B81BE1D92497F9AF6A2DA2C3844
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5H78nMPZxL0porvBVVH4LyXPEbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/248133-8670-4167-a195-6e2f588c0c7e/1/5H78nMPZxL0porvBVVH4LyXPEbo.mft
Manifest number: 1042
Signing time: Sun 29 Mar 2026 05:00:50 +0000
Manifest this update: Sun 29 Mar 2026 05:00:50 +0000
Manifest next update: Mon 30 Mar 2026 05:00:50 +0000
Files and hashes: 1: 5H78nMPZxL0porvBVVH4LyXPEbo.crl (hash: 2s1p6dgqvcxAhlBjWxom7ujBNorCcG8XqG3oMgWqaI8=)
2: vfg-SAjuqUJDpM-dI7gV1uCQ2uw.roa (hash: R/EtSB73ZGWrRnb/Gf2BJqZ0RYrtTKAiO9HiXzdMKyc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/248133-8670-4167-a195-6e2f588c0c7e/1/5H78nMPZxL0porvBVVH4LyXPEbo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/248133-8670-4167-a195-6e2f588c0c7e/1/5H78nMPZxL0porvBVVH4LyXPEbo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5H78nMPZxL0porvBVVH4LyXPEbo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:5b:81:be:1d:92:49:7f:9a:f6:a2:da:2c:38:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e47efc9cc3d9c4bd29a2bbc15551f82f25cf11ba
Validity
Not Before: Mar 29 05:00:50 2026 GMT
Not After : Mar 30 05:00:50 2026 GMT
Subject: CN=b04b3b9338c8b8209fcd09e3a224fe76f862aa58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:35:7f:28:b7:1e:44:59:d9:b4:12:c8:ee:c2:
7b:12:51:99:a7:07:fd:5e:9d:79:9e:3d:aa:1e:74:
f1:6f:cf:d8:8e:e8:89:af:2f:c6:4b:1f:32:66:3f:
6f:ec:43:6a:1e:ec:ca:a7:ce:85:48:a5:2b:21:38:
df:76:12:eb:62:df:cb:12:d2:57:6a:4f:24:74:c0:
02:98:75:de:4f:b6:5f:b5:45:c4:2d:89:0e:b6:56:
b2:a6:05:bd:6a:db:3f:ad:99:10:b8:7d:a1:33:f1:
17:ed:c6:e3:99:69:3a:6e:41:42:d0:3b:9f:22:b2:
ce:0d:87:59:15:ec:84:8c:26:43:bf:66:53:87:28:
cc:a8:7e:7a:94:83:3f:bf:59:19:2c:6f:c0:a1:71:
cc:be:31:6b:c9:94:53:48:fb:11:1a:a7:d6:3f:99:
67:5b:a1:fa:3b:b4:af:f5:0e:02:75:6b:c7:16:04:
48:8e:39:f6:e0:38:20:26:34:b5:10:b4:fd:c6:9a:
06:a6:fc:fd:f1:f1:60:30:4e:b6:f2:a8:32:8b:bf:
e0:b0:0b:1f:30:d7:2b:73:7e:7a:c8:c9:92:06:b5:
a1:44:06:c6:78:2f:16:43:27:4c:1f:e9:f2:85:c5:
57:55:05:38:24:09:81:52:2e:5e:6c:fe:f4:a6:c6:
d7:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:4B:3B:93:38:C8:B8:20:9F:CD:09:E3:A2:24:FE:76:F8:62:AA:58
X509v3 Authority Key Identifier:
keyid:E4:7E:FC:9C:C3:D9:C4:BD:29:A2:BB:C1:55:51:F8:2F:25:CF:11:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5H78nMPZxL0porvBVVH4LyXPEbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/248133-8670-4167-a195-6e2f588c0c7e/1/5H78nMPZxL0porvBVVH4LyXPEbo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/248133-8670-4167-a195-6e2f588c0c7e/1/5H78nMPZxL0porvBVVH4LyXPEbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:d2:00:67:80:77:54:a4:fe:be:de:1b:69:4c:16:c1:94:42:
7c:0b:f9:ba:02:6b:e4:3f:19:72:74:0d:71:bc:e8:b9:54:e2:
f2:63:93:94:16:82:c0:66:1c:d2:c4:07:99:e9:f6:67:40:73:
43:b3:67:ea:e3:00:7b:d2:65:cc:be:b2:75:b1:ce:f3:3f:28:
85:c7:2b:36:97:b0:97:34:b0:c4:c0:84:30:09:c7:d2:d3:23:
cf:5d:c1:9f:a4:15:ce:c8:70:97:60:78:2a:3a:f2:1c:f7:bb:
e7:85:05:03:cc:76:9b:5a:89:1a:d2:c0:d9:d2:4b:02:f3:56:
bd:13:51:f9:f7:b9:46:f6:1b:d1:69:1c:d6:e2:28:5d:47:45:
35:fa:e1:9a:fc:91:d8:5b:be:34:c0:97:7c:a0:91:25:69:66:
1d:55:80:8f:8b:07:13:2c:2f:66:09:39:15:f1:62:a0:6f:dd:
2e:48:5a:f2:ef:d7:57:cc:23:ae:33:bc:84:6c:1a:f8:d0:0c:
da:c6:e1:38:4f:08:9e:06:d6:b3:36:19:5c:aa:03:57:d6:25:
5e:ff:7a:9c:63:fa:f4:a0:37:44:b6:29:7f:e0:ae:95:72:72:
d2:66:88:90:bb:fb:4d:e4:a2:e5:1f:b1:30:4b:ac:14:f8:81:
53:7e:ad:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:54:02 2026 by rpki-client