Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/5LEwYQHMnsn86YUoDB2w83wTWjo.mft
File: 5LEwYQHMnsn86YUoDB2w83wTWjo.mft (raw, json)
Hash identifier: mCEwNynlGTfNT1vyke9s4f2akkEZXhb6fRvH/aTtvFQ=
Subject key identifier: 85:0C:50:7B:CA:AF:5E:6C:35:DF:A0:C6:71:C2:75:EF:ED:09:C2:ED
Authority key identifier: E4:B1:30:61:01:CC:9E:C9:FC:E9:85:28:0C:1D:B0:F3:7C:13:5A:3A
Certificate issuer: /CN=e4b1306101cc9ec9fce985280c1db0f37c135a3a
Certificate serial: 019D37896348C96FF631F9B44988A5C5D635
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5LEwYQHMnsn86YUoDB2w83wTWjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/5LEwYQHMnsn86YUoDB2w83wTWjo.mft
Manifest number: 13D1
Signing time: Sun 29 Mar 2026 03:00:43 +0000
Manifest this update: Sun 29 Mar 2026 03:00:43 +0000
Manifest next update: Mon 30 Mar 2026 03:00:43 +0000
Files and hashes: 1: 5LEwYQHMnsn86YUoDB2w83wTWjo.crl (hash: ti9BIk8+qWSTCicXTeD5V8ImOtKkyV/hpkmxYPK5cI8=)
2: 8JfslYvm4v2DCkR1-kzWFB_UtnE.roa (hash: h87YXxxAOMgfpmrehAUMRdu+AwUhFPQd8qPAjnOPFQU=)
3: BQRT8MPKIPPADJStIFOXOoMHZS0.roa (hash: wXB7gl0TFstv2Pg/iuzGAlhhO65kpfWM+7GC5YZkRE8=)
4: zO6oWxgMXvv1E7No-VDUZLT2hYA.roa (hash: a+qLzMk3gjifCi7ls2zl3kNVE9LPAd8t8Cx6dxnL76U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/5LEwYQHMnsn86YUoDB2w83wTWjo.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/5LEwYQHMnsn86YUoDB2w83wTWjo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5LEwYQHMnsn86YUoDB2w83wTWjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:63:48:c9:6f:f6:31:f9:b4:49:88:a5:c5:d6:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4b1306101cc9ec9fce985280c1db0f37c135a3a
Validity
Not Before: Mar 29 03:00:43 2026 GMT
Not After : Mar 30 03:00:43 2026 GMT
Subject: CN=850c507bcaaf5e6c35dfa0c671c275efed09c2ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d6:71:70:28:53:34:11:55:d1:02:6b:3e:f8:
4c:4f:1c:a3:ce:d6:d0:ab:15:07:93:13:fa:54:30:
05:52:d9:a4:88:74:c8:ce:81:b2:43:26:a1:8c:36:
ad:3f:55:d0:a5:4e:99:f7:3d:ae:30:9c:aa:1f:69:
36:25:77:3c:60:98:a7:35:fe:a0:ce:3f:68:16:fa:
0a:d7:78:66:c5:dc:41:3e:38:d0:69:d9:5c:61:13:
0c:67:65:69:08:23:92:ba:4a:96:58:07:39:f3:7c:
c6:1f:36:3d:99:97:2c:fc:c6:4d:42:58:f2:43:10:
f7:94:d1:64:81:7a:c5:af:be:89:57:cf:55:7c:9d:
df:fb:e8:a9:49:83:29:79:af:dc:72:20:ec:9c:23:
9f:00:17:f1:c7:51:18:a5:0e:e3:a7:15:d3:59:6d:
b5:bd:9f:35:3c:74:01:3b:d8:b1:78:db:88:8c:45:
25:93:c4:4b:e2:07:f4:f7:46:55:bb:82:29:89:33:
40:fe:17:44:3b:2c:fc:9d:da:5e:75:5d:a7:3a:3c:
dd:ff:d9:37:d5:8d:34:4a:ca:a5:73:9e:0a:f4:38:
07:bf:78:03:08:ed:7a:05:26:4a:ce:86:3e:37:c5:
f9:27:5c:7d:dd:79:e0:db:0c:0c:8f:3b:3f:f8:26:
8f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:0C:50:7B:CA:AF:5E:6C:35:DF:A0:C6:71:C2:75:EF:ED:09:C2:ED
X509v3 Authority Key Identifier:
keyid:E4:B1:30:61:01:CC:9E:C9:FC:E9:85:28:0C:1D:B0:F3:7C:13:5A:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5LEwYQHMnsn86YUoDB2w83wTWjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/5LEwYQHMnsn86YUoDB2w83wTWjo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/5LEwYQHMnsn86YUoDB2w83wTWjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:b4:69:2f:68:7d:d3:a6:2c:3a:99:78:c2:eb:6d:43:07:9f:
76:48:b1:87:4a:27:e2:5f:41:16:45:1c:53:ed:be:e6:18:f1:
ca:2f:13:e5:1a:4f:7d:56:77:92:9b:78:cf:92:1a:e9:90:40:
89:b8:bf:7d:ea:7f:05:e0:12:71:5a:1d:84:b5:11:34:8d:5a:
7c:fb:4f:03:51:d4:8c:6b:23:b4:31:42:fb:fa:41:c9:95:b3:
f3:ab:2f:78:99:e2:da:6a:21:70:68:b6:b5:64:a5:e6:5d:32:
1a:34:34:45:2b:53:dd:0c:d3:0b:7d:d4:56:4d:a4:00:19:e4:
97:d7:15:ce:fc:d1:ef:82:12:32:a4:c9:73:e4:48:f1:71:45:
91:4d:4e:e2:3a:d8:d2:fd:4c:85:a1:8b:61:4a:c2:5b:48:35:
07:92:8e:51:ed:18:74:24:f8:11:d1:28:2f:ac:63:2d:ce:8f:
b7:65:05:28:40:20:ce:e6:7b:c9:aa:d8:13:77:be:02:1b:ad:
1b:15:a7:10:0f:12:84:32:13:b7:1a:23:73:8f:b3:76:15:9c:
16:7c:13:0c:9a:a7:7c:96:d5:a4:d2:43:67:6d:46:51:45:ad:
8f:77:8c:0d:ea:c3:d2:8c:ee:50:4c:3f:e2:24:3d:d3:d7:14:
e6:76:ed:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:52 2026 by rpki-client