Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.mft
File: 5kaCrbAjjMdy0cW0mGx6M5hjZKA.mft (raw, json)
Hash identifier: GLieEnqVGaHDnCtNK7sAdDISz6mOZhyDWW9ckZvHs9Y=
Subject key identifier: 6F:6E:0B:40:D0:4F:72:D9:81:A1:47:F7:DD:1D:A4:4B:80:3F:A6:DA
Authority key identifier: E6:46:82:AD:B0:23:8C:C7:72:D1:C5:B4:98:6C:7A:33:98:63:64:A0
Certificate issuer: /CN=e64682adb0238cc772d1c5b4986c7a33986364a0
Certificate serial: 019D375247382BA4EBE8BC5B6D8AA10E6462
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5kaCrbAjjMdy0cW0mGx6M5hjZKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 02:00:32 +0000
Manifest this update: Sun 29 Mar 2026 02:00:32 +0000
Manifest next update: Mon 30 Mar 2026 02:00:32 +0000
Files and hashes: 1: 5kaCrbAjjMdy0cW0mGx6M5hjZKA.crl (hash: Lag1WUYMw5O+JHgjRHEkr0nm2g4NiKmOkozWguGG/uA=)
2: e2x_8PpcIHOJJPXsPBjrkhlkVvo.roa (hash: QXzcET22GY2j2zVB7MrhPNOcYIzpk5pDfm9vuuXWqYk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5kaCrbAjjMdy0cW0mGx6M5hjZKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:47:38:2b:a4:eb:e8:bc:5b:6d:8a:a1:0e:64:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e64682adb0238cc772d1c5b4986c7a33986364a0
Validity
Not Before: Mar 29 02:00:32 2026 GMT
Not After : Mar 30 02:00:32 2026 GMT
Subject: CN=6f6e0b40d04f72d981a147f7dd1da44b803fa6da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:95:69:5e:7e:2f:75:c6:ae:55:ff:8e:9e:6a:
25:47:d0:40:c1:2e:2d:f5:3a:65:9b:50:5e:45:e0:
4e:d7:0a:d7:90:ea:fa:d0:da:53:74:b3:f9:9c:26:
55:fd:a7:a4:ca:d3:5c:68:43:12:22:d0:37:7b:cd:
94:ab:93:dd:88:ed:6b:95:9d:ac:32:82:ef:21:50:
22:1b:5c:03:d8:cd:1c:20:79:e4:48:7e:68:57:86:
ff:f1:1c:70:81:fe:01:87:ba:97:72:f0:fe:ee:e1:
a7:ef:c4:63:50:0a:f7:43:0d:e4:46:26:10:57:6c:
0d:be:30:36:32:74:b5:f9:1d:4b:26:a4:c7:71:5d:
64:b6:6a:b3:7b:1b:9d:da:92:cf:54:7c:fb:8a:5a:
7c:ff:f6:ef:d8:29:93:bc:ff:3e:b5:73:49:31:30:
e7:31:8d:73:e9:97:b9:82:07:8d:36:15:ee:71:02:
49:a7:75:6e:52:1b:2c:0d:fa:48:53:da:81:a3:19:
e3:2d:64:fa:c8:7a:5f:58:fd:07:63:05:30:09:6e:
23:e2:d2:b7:32:78:1f:fe:59:d5:16:20:aa:1c:ef:
1f:fe:6d:1e:ed:58:f0:67:f3:24:69:0c:2d:1c:0f:
06:af:f9:e7:2f:f6:f3:8c:8b:72:41:5c:9d:90:d7:
78:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:6E:0B:40:D0:4F:72:D9:81:A1:47:F7:DD:1D:A4:4B:80:3F:A6:DA
X509v3 Authority Key Identifier:
keyid:E6:46:82:AD:B0:23:8C:C7:72:D1:C5:B4:98:6C:7A:33:98:63:64:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5kaCrbAjjMdy0cW0mGx6M5hjZKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:bd:f2:94:d5:07:c7:31:85:0a:40:9f:e8:0f:d7:91:a6:90:
8a:54:76:a0:96:72:38:ca:bc:3e:82:b0:a0:5f:47:b3:e7:4b:
0b:34:2f:6a:24:db:b3:8c:ba:eb:44:11:8a:b6:f7:69:7f:3e:
a8:b1:fe:44:bb:9d:f9:4a:d5:12:aa:0c:63:52:47:36:ee:fd:
16:e9:cc:0c:6a:fb:fa:b1:87:5b:90:8a:9b:59:a4:28:e3:30:
ad:9e:8b:ad:1d:97:e5:3d:a0:13:45:d1:1e:d4:3d:ed:8a:aa:
51:ff:68:a0:03:e0:ab:92:0e:4f:d7:5e:2a:c9:55:b4:d4:8c:
99:03:50:6f:fd:a3:08:ef:41:95:66:24:ca:da:82:d3:f1:58:
52:12:b5:b9:c9:1c:41:7d:d9:91:8b:ac:5c:e3:59:be:07:9e:
3c:bd:40:71:ce:1f:2e:aa:a4:e8:ac:0d:3b:8d:a2:a2:6b:99:
c9:e4:da:eb:2d:9c:4a:2f:86:79:89:c9:5d:6a:2f:52:80:76:
60:bc:a4:c3:f6:72:f1:ea:88:63:89:67:b4:2e:c8:da:f8:42:
12:af:78:90:8b:77:d1:ac:72:ce:79:33:a4:f5:88:44:48:5b:
2c:bc:f0:21:e1:8b:22:4d:62:1a:0e:40:71:03:db:95:8e:89:
51:d6:3d:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:03 2026 by rpki-client