Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/5oBHj67Itn3f7OY1fPJc8sodhdA.mft
File: 5oBHj67Itn3f7OY1fPJc8sodhdA.mft (raw, json)
Hash identifier: Gw/CbAARBc4foFdz8eYpry6R/S/bTfsv5xoPxKrfWtM=
Subject key identifier: 29:86:5D:A7:89:4B:E8:CF:49:D6:05:33:DD:9C:FA:69:F6:DF:25:14
Authority key identifier: E6:80:47:8F:AE:C8:B6:7D:DF:EC:E6:35:7C:F2:5C:F2:CA:1D:85:D0
Certificate issuer: /CN=e680478faec8b67ddfece6357cf25cf2ca1d85d0
Certificate serial: 019D36E4FFFA13B0028ABEB7F410788D5BEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5oBHj67Itn3f7OY1fPJc8sodhdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/5oBHj67Itn3f7OY1fPJc8sodhdA.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 00:01:10 +0000
Manifest this update: Sun 29 Mar 2026 00:01:10 +0000
Manifest next update: Mon 30 Mar 2026 00:01:10 +0000
Files and hashes: 1: 5oBHj67Itn3f7OY1fPJc8sodhdA.crl (hash: nE59gSpWH+KfW28vxTbaPeTf0696ULygTjTWiqciiSs=)
2: ymGU-blAl3Eiudw-0pPU5E8cWuM.roa (hash: sR3zp4LyEopkmIvV+/IzzZmry6sELnZ6ai0YOhaDCBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/5oBHj67Itn3f7OY1fPJc8sodhdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/5oBHj67Itn3f7OY1fPJc8sodhdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5oBHj67Itn3f7OY1fPJc8sodhdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 00:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:36:e4:ff:fa:13:b0:02:8a:be:b7:f4:10:78:8d:5b:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e680478faec8b67ddfece6357cf25cf2ca1d85d0
Validity
Not Before: Mar 29 00:01:10 2026 GMT
Not After : Mar 30 00:01:10 2026 GMT
Subject: CN=29865da7894be8cf49d60533dd9cfa69f6df2514
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:cf:1d:02:98:04:7d:d1:35:2d:ec:3e:24:5f:
62:a3:64:05:c0:ec:84:51:fa:a3:e6:15:a4:24:8c:
33:2f:7b:e8:1b:0d:72:c8:18:91:2d:c9:91:91:81:
e4:cb:04:5d:43:c0:52:75:ce:58:9e:dd:67:58:44:
92:fa:0b:de:0a:e7:4a:cc:9e:7a:58:2a:1c:1c:63:
49:42:18:97:3a:14:e9:80:9b:9b:69:a4:d6:e1:62:
c8:a2:f2:31:66:af:3d:99:b1:0a:51:9f:36:ce:1b:
e3:74:da:48:e9:32:46:93:a2:50:dd:19:98:22:77:
f9:8f:d6:fa:b9:f6:c3:ff:3b:a4:ef:31:3f:e4:d9:
f1:79:77:12:e6:1d:b4:47:0a:28:f2:f2:06:15:a9:
25:c3:54:c7:5f:4c:a8:04:ea:26:1b:15:7b:41:bf:
2a:e1:57:00:89:4e:36:9f:cc:c7:66:da:aa:fe:07:
27:e4:af:81:38:10:d5:d4:13:f7:2f:59:c8:15:c7:
30:75:e2:5d:14:5c:8a:ba:6d:a2:4c:63:16:5e:0c:
b9:f6:7c:48:17:f2:74:05:69:ed:ea:4e:6c:fc:7b:
75:48:03:12:2b:e9:16:96:5d:ef:cc:3e:9a:a7:88:
c4:da:c6:77:b7:1b:81:79:38:1d:aa:e4:02:00:7d:
cb:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:86:5D:A7:89:4B:E8:CF:49:D6:05:33:DD:9C:FA:69:F6:DF:25:14
X509v3 Authority Key Identifier:
keyid:E6:80:47:8F:AE:C8:B6:7D:DF:EC:E6:35:7C:F2:5C:F2:CA:1D:85:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5oBHj67Itn3f7OY1fPJc8sodhdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/5oBHj67Itn3f7OY1fPJc8sodhdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/5oBHj67Itn3f7OY1fPJc8sodhdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:e1:ed:c9:6b:17:7d:4c:a4:af:92:4b:64:c6:ed:79:e1:5a:
25:77:f4:d1:ce:eb:00:81:da:79:a4:14:7d:52:b4:33:df:c8:
47:57:53:7d:24:e1:80:bb:36:5b:08:b6:c1:a8:be:0f:d9:a2:
11:85:22:cd:37:95:08:ed:9e:bc:92:4c:cd:61:94:f3:6e:87:
7d:9c:72:7b:4d:7b:42:cd:42:cb:d9:25:4e:7f:a4:b6:0d:ac:
7d:a7:53:3e:e7:ec:38:73:25:94:2e:df:ec:5d:74:4e:64:d0:
4d:52:f4:c8:66:a9:65:39:81:a1:1e:2b:1d:4d:05:d0:ee:02:
63:07:4f:ac:e2:93:f0:79:86:89:14:7f:d0:c5:7a:b9:05:37:
61:28:50:77:64:40:e9:a9:91:fb:20:a1:3a:c9:f9:2c:f9:90:
75:d4:7f:4f:0c:0c:07:ad:27:84:ee:c4:d8:24:94:52:a1:11:
d0:34:28:d5:3e:e1:10:f8:77:89:8b:42:e9:31:5c:f1:b8:ad:
a1:bc:47:38:0e:8b:97:3c:ea:57:6a:05:92:f0:6f:55:87:b1:
e8:ff:9c:6c:d2:54:ce:67:c3:2b:e8:a4:9a:8a:20:ca:3b:cb:
ab:8e:8f:6e:e4:05:35:71:5b:02:22:88:20:47:61:a5:52:63:
80:98:6e:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:19:27 2026 by rpki-client