Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/5UTiZtTrnMfe0pLBKwaxynvOp3g.mft
File: 5UTiZtTrnMfe0pLBKwaxynvOp3g.mft (raw, json)
Hash identifier: WzihkyUSxtCI1GYSXRV7qynkVv0VqcDDcOySHyfAuas=
Subject key identifier: 98:2E:B9:8C:90:49:43:90:C0:3B:CE:77:B2:53:8B:30:6B:13:3F:FB
Authority key identifier: E5:44:E2:66:D4:EB:9C:C7:DE:D2:92:C1:2B:06:B1:CA:7B:CE:A7:78
Certificate issuer: /CN=e544e266d4eb9cc7ded292c12b06b1ca7bcea778
Certificate serial: 019D389BE11DAF2C8CA24F19EA5D6EA3E015
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5UTiZtTrnMfe0pLBKwaxynvOp3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/5UTiZtTrnMfe0pLBKwaxynvOp3g.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 08:00:32 +0000
Manifest this update: Sun 29 Mar 2026 08:00:32 +0000
Manifest next update: Mon 30 Mar 2026 08:00:32 +0000
Files and hashes: 1: 5UTiZtTrnMfe0pLBKwaxynvOp3g.crl (hash: WjQ0XsSEwMBs7yWxh4WiWvHhAkReMZf6UvijXc3h6B8=)
2: q6jiQ8kIIOAVEl2Xp2qX5_pMoSI.roa (hash: nTyqp5QiWNzkKcVcQsp2jGxyBaOXuQpq1p5YA426WVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/5UTiZtTrnMfe0pLBKwaxynvOp3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/5UTiZtTrnMfe0pLBKwaxynvOp3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/5UTiZtTrnMfe0pLBKwaxynvOp3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:e1:1d:af:2c:8c:a2:4f:19:ea:5d:6e:a3:e0:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e544e266d4eb9cc7ded292c12b06b1ca7bcea778
Validity
Not Before: Mar 29 08:00:32 2026 GMT
Not After : Mar 30 08:00:32 2026 GMT
Subject: CN=982eb98c90494390c03bce77b2538b306b133ffb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:38:ce:58:c5:f8:54:95:40:7b:20:36:5f:50:
3c:4b:76:ef:60:d6:94:f2:8b:ea:c2:b2:15:d7:5f:
50:49:5c:47:5c:8d:df:94:4b:6f:6b:1d:f4:0c:34:
f2:4b:a3:5c:f3:bc:88:8f:1b:67:07:56:c1:f0:15:
27:2c:ba:16:ad:74:ed:f5:b1:12:2f:79:0d:9e:c6:
ef:ce:eb:20:f0:88:85:7e:c4:18:3a:bd:93:3f:10:
bf:ed:38:be:cf:b1:f9:5f:86:d4:ea:9e:35:cf:e4:
99:63:0c:77:35:5c:53:b0:6c:09:71:9f:e2:9e:4d:
f0:b8:68:ca:cf:55:8f:40:7f:c0:4f:19:81:72:ac:
0f:c5:18:b5:0c:0c:22:3b:1c:25:24:56:0c:02:ad:
b8:7c:e7:82:30:23:6d:6b:f5:57:81:3e:15:19:55:
08:b9:cf:74:24:cd:95:07:0b:b6:fe:a3:cd:24:78:
a6:a2:25:c0:2d:54:17:50:9f:4e:0f:64:b1:7a:97:
9e:26:a2:a1:d4:92:e4:fa:96:a2:88:29:cb:54:eb:
b3:00:64:d4:cc:fc:c8:69:e9:2d:7a:ba:22:77:e6:
f6:f2:9d:f0:30:10:a8:08:32:7e:d9:1f:1d:1c:17:
0a:b7:f2:cd:a0:a6:53:d6:80:d5:37:3b:d1:c4:4e:
6b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:2E:B9:8C:90:49:43:90:C0:3B:CE:77:B2:53:8B:30:6B:13:3F:FB
X509v3 Authority Key Identifier:
keyid:E5:44:E2:66:D4:EB:9C:C7:DE:D2:92:C1:2B:06:B1:CA:7B:CE:A7:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5UTiZtTrnMfe0pLBKwaxynvOp3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/5UTiZtTrnMfe0pLBKwaxynvOp3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/5UTiZtTrnMfe0pLBKwaxynvOp3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:cf:90:72:9f:04:4f:ba:16:a7:e2:fa:c9:06:81:3a:2d:3e:
4b:5f:66:c5:83:d5:a5:fa:5f:4c:2c:ae:52:1d:18:27:30:8f:
b7:ca:a4:1f:87:21:9b:ea:d9:fe:97:a1:75:94:c9:db:f7:21:
ce:31:2a:d2:e4:b8:60:b8:6b:3c:65:b1:74:74:6e:06:8e:66:
ca:88:3f:83:7d:5f:88:6a:83:fc:4d:a3:50:4f:c2:10:ae:b1:
0f:3a:ca:45:df:3f:c8:ce:14:86:b2:f9:c3:63:a7:b6:e9:0b:
2f:7f:0e:51:06:df:a5:06:e9:89:cf:7a:7c:cd:b5:93:27:c8:
4e:66:5c:5c:55:a2:bf:7e:6d:08:74:dd:28:01:77:c9:c2:86:
b9:95:41:93:8a:4d:fa:af:18:66:af:6b:2f:48:c4:88:8e:50:
c9:7f:d2:7d:42:b0:59:7b:d2:af:43:1c:b3:da:0b:c0:b5:21:
75:56:6c:4f:f3:46:d7:d3:3b:19:cb:f7:4a:ac:cc:56:ea:52:
a0:d6:c2:5c:b8:7d:c8:10:42:8f:dc:cb:b3:39:96:c3:c7:b1:
47:7e:5d:7f:52:3b:3d:2b:f5:c0:96:25:bb:e5:a9:5d:68:d6:
d3:39:7b:11:b4:31:82:51:13:ef:82:56:84:43:2c:dc:3e:4c:
fd:51:54:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:55:48 2026 by rpki-client