Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/2cc22c-2d71-46d6-9215-38c5b0c4f152/1/5aHlGcnOd1ddifB89xjzsMyG7FU.mft
File: 5aHlGcnOd1ddifB89xjzsMyG7FU.mft (raw, json)
Hash identifier: zgxN0rdr6RF8RcCIQ7AKhaatkhVZsbMUk8w7A5jm9y4=
Subject key identifier: E7:B6:8B:8E:3C:87:3A:38:73:39:97:81:72:5B:C7:E3:4A:37:2F:BC
Authority key identifier: E5:A1:E5:19:C9:CE:77:57:5D:89:F0:7C:F7:18:F3:B0:CC:86:EC:55
Certificate issuer: /CN=e5a1e519c9ce77575d89f07cf718f3b0cc86ec55
Certificate serial: 019D3940E2A34A79B7DAAA5CECC3369AEE90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5aHlGcnOd1ddifB89xjzsMyG7FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/2cc22c-2d71-46d6-9215-38c5b0c4f152/1/5aHlGcnOd1ddifB89xjzsMyG7FU.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 11:00:46 +0000
Manifest this update: Sun 29 Mar 2026 11:00:46 +0000
Manifest next update: Mon 30 Mar 2026 11:00:46 +0000
Files and hashes: 1: 5aHlGcnOd1ddifB89xjzsMyG7FU.crl (hash: VbyH5QNigsS1hCdvEHOepVFFsIk4nZy89wyXjjnCRmM=)
2: WG7wAcXOQAIG2_4E3zJbWmoA3W0.roa (hash: 7hBSMbb3+udDNajYBSGLEQiPuq6VzstQJyrB9xeEhCg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/2cc22c-2d71-46d6-9215-38c5b0c4f152/1/5aHlGcnOd1ddifB89xjzsMyG7FU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/2cc22c-2d71-46d6-9215-38c5b0c4f152/1/5aHlGcnOd1ddifB89xjzsMyG7FU.mft
rsync://rpki.ripe.net/repository/DEFAULT/5aHlGcnOd1ddifB89xjzsMyG7FU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:e2:a3:4a:79:b7:da:aa:5c:ec:c3:36:9a:ee:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5a1e519c9ce77575d89f07cf718f3b0cc86ec55
Validity
Not Before: Mar 29 11:00:46 2026 GMT
Not After : Mar 30 11:00:46 2026 GMT
Subject: CN=e7b68b8e3c873a3873399781725bc7e34a372fbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ec:42:d3:66:bd:74:4e:0f:4e:e3:40:b3:1c:
e8:db:48:1e:01:69:af:06:8d:6e:f7:2d:70:d8:ba:
97:3e:45:8a:d2:1f:59:ec:19:ee:0a:81:4a:14:a7:
45:b0:26:da:a6:d8:cd:a8:02:10:fa:1e:29:65:41:
ce:c1:f3:2b:e4:38:de:39:78:81:ff:e5:7f:3a:8d:
58:73:e4:27:ed:04:e1:93:b9:0e:c1:27:2e:60:e8:
df:90:51:fc:5d:f9:84:de:47:4d:c0:b3:fd:f8:cc:
74:ce:54:4b:22:80:3c:ee:b7:12:a3:66:c2:8c:33:
60:8a:5d:3b:f3:8a:da:d8:56:cf:d4:3d:e4:15:e6:
92:e2:1f:f4:bf:52:4e:21:84:2a:9a:c1:28:02:cb:
70:c0:de:64:78:33:3e:3e:85:cc:da:f7:be:db:8b:
99:18:bc:1a:9a:78:5c:40:16:fc:1b:84:6e:f5:0f:
65:93:40:31:dc:1b:21:4f:a0:ee:12:bc:bc:10:ad:
83:40:6e:76:b5:57:ee:f9:cd:9b:74:0f:57:6d:ac:
27:9d:c5:95:17:cb:a6:0b:99:e0:25:84:4f:5c:b1:
9e:e1:45:8a:37:9f:59:d7:2b:2f:e6:49:89:f2:eb:
0b:65:41:be:98:90:36:ac:4b:27:80:86:57:62:2b:
4b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:B6:8B:8E:3C:87:3A:38:73:39:97:81:72:5B:C7:E3:4A:37:2F:BC
X509v3 Authority Key Identifier:
keyid:E5:A1:E5:19:C9:CE:77:57:5D:89:F0:7C:F7:18:F3:B0:CC:86:EC:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5aHlGcnOd1ddifB89xjzsMyG7FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2cc22c-2d71-46d6-9215-38c5b0c4f152/1/5aHlGcnOd1ddifB89xjzsMyG7FU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2cc22c-2d71-46d6-9215-38c5b0c4f152/1/5aHlGcnOd1ddifB89xjzsMyG7FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:f8:dc:cd:65:96:c9:12:f7:e0:08:1d:87:12:b8:42:f8:ae:
3e:40:94:d1:6e:5e:56:63:cd:1f:9b:37:ad:ef:7c:57:a4:1b:
ec:03:b2:1b:fc:47:40:de:c9:d5:81:6e:0b:73:11:fe:ed:ae:
05:19:ef:64:93:10:7c:a7:47:93:66:56:08:de:08:cf:b8:50:
3c:9d:69:55:f8:cd:6d:ef:e0:5a:7b:ab:17:b8:94:b6:40:2d:
4e:4e:cb:23:0a:74:30:ca:83:51:61:67:bf:24:78:92:11:c9:
e3:84:ee:b0:1b:26:f1:10:de:dc:14:cc:ce:ef:9e:6f:5d:d1:
99:0b:ab:9c:a7:0b:03:11:e7:d5:7a:86:7c:1c:e6:58:b8:bc:
22:81:b2:0e:d5:0d:1b:6c:ca:59:e3:59:b9:5d:a0:6d:5e:38:
ac:2b:1e:cc:13:ec:2a:3e:42:ef:cf:60:0b:ae:36:9e:30:90:
35:a7:b5:6c:44:60:ea:ed:14:7d:dc:18:c5:30:11:cc:b3:77:
7e:e8:03:7a:fd:b5:51:22:e7:67:77:a0:4c:17:be:f4:06:82:
f9:cc:66:9d:ff:35:98:12:85:a3:dd:aa:ba:cf:73:a3:8f:10:
95:28:51:46:ef:47:46:ba:25:87:d5:b4:06:4e:66:67:01:10:
a6:54:3c:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:00:22 2026 by rpki-client