Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/c28ea4-059c-49dd-9278-a4db396c8987/1/N5SayE0LhpEPT9PPWWKSfYNFCus.mft
File: N5SayE0LhpEPT9PPWWKSfYNFCus.mft (raw, json)
Hash identifier: Ih9CyOSAB/DWRNyEsP/YJGedpo/OPryKpNpy2T3yc/0=
Subject key identifier: C2:5B:57:F7:88:CD:1E:0F:58:12:2B:B8:52:65:8C:81:A3:77:5D:DE
Authority key identifier: 37:94:9A:C8:4D:0B:86:91:0F:4F:D3:CF:59:62:92:7D:83:45:0A:EB
Certificate issuer: /CN=37949ac84d0b86910f4fd3cf5962927d83450aeb
Certificate serial: 019D38656E5ABA123AAB77D03D7781B53C2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N5SayE0LhpEPT9PPWWKSfYNFCus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/c28ea4-059c-49dd-9278-a4db396c8987/1/N5SayE0LhpEPT9PPWWKSfYNFCus.mft
Manifest number: 189D
Signing time: Sun 29 Mar 2026 07:01:04 +0000
Manifest this update: Sun 29 Mar 2026 07:01:04 +0000
Manifest next update: Mon 30 Mar 2026 07:01:04 +0000
Files and hashes: 1: Bn04BFcMPFN1TqHi3csM-ALPIfs.roa (hash: +INhzeZUw2CmtEj9Af/bdJ+8Ap6m7pDf8RJiS9DpoYM=)
2: DQfM8H6WtevT9OTpqjzrSvRshz4.roa (hash: XQFiObFKRxqaZwBbqwYCnX/4N71hlkX9gE2Ecl5B+eM=)
3: Ifvi8Rkz_RCT_kQAOoUbVtgRD7U.roa (hash: GmJT3KMSt6Tc17lIuj5c/Jso9piZJloJhb9qCB+XTkU=)
4: N5SayE0LhpEPT9PPWWKSfYNFCus.crl (hash: mjLlu3fQNqka9hiHfZsybEcydhFlVltumbdrVdrfeZ4=)
5: PUKkt35cHiKGiJvSjqXEn6uVP7Y.roa (hash: Bmwa3jnfP0hJvyVvtY0byaw0ncITKSVJhGUCxBAyHJ0=)
6: eRkG__v-agv3NMIcUwrG_j0F1S4.roa (hash: qxtO1OQQFM2+lJPuzN9yMsque6yNP09ybveH8spKwIw=)
7: g6ci3WfJTG-Y86iSe60tqhYMX8g.roa (hash: YfCrk+xs8TI3rk14RXIEUL8LFbz6foR+U1kA+FdbRuM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/c28ea4-059c-49dd-9278-a4db396c8987/1/N5SayE0LhpEPT9PPWWKSfYNFCus.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/c28ea4-059c-49dd-9278-a4db396c8987/1/N5SayE0LhpEPT9PPWWKSfYNFCus.mft
rsync://rpki.ripe.net/repository/DEFAULT/N5SayE0LhpEPT9PPWWKSfYNFCus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:6e:5a:ba:12:3a:ab:77:d0:3d:77:81:b5:3c:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37949ac84d0b86910f4fd3cf5962927d83450aeb
Validity
Not Before: Mar 29 07:01:04 2026 GMT
Not After : Mar 30 07:01:04 2026 GMT
Subject: CN=c25b57f788cd1e0f58122bb852658c81a3775dde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:dc:0d:cb:71:76:61:40:7c:00:11:8a:64:8d:
0c:27:35:d3:ac:c6:80:94:78:9e:01:d8:f3:3e:e0:
f6:90:ac:c4:35:51:57:81:fe:02:51:a0:3d:9e:c5:
b2:42:ec:7e:47:c1:17:85:26:87:d9:07:e2:5b:80:
14:7c:e1:9a:01:dd:64:4f:e7:aa:36:bd:19:3e:cd:
c0:6f:b0:8e:9e:b2:8b:bb:c9:bb:7b:e7:4f:7d:f2:
bd:0d:d9:e4:ec:10:19:87:66:e8:a9:c4:16:7d:2e:
51:9c:0b:d2:8e:3f:10:fb:3b:96:38:ec:ea:56:08:
16:25:ea:bf:eb:ed:76:01:72:ba:72:a7:a3:10:db:
15:7c:fa:7c:4d:1a:e3:88:d4:c4:81:a5:22:04:73:
63:1c:b5:39:f2:01:04:2c:ca:5e:16:b6:ff:8c:71:
35:71:63:4b:44:38:a9:1b:1e:13:58:2b:cd:ed:95:
e2:de:6d:07:01:f2:bc:b9:cf:16:a0:e0:68:3d:b1:
06:b8:40:fb:a8:91:df:52:88:c1:07:dd:d4:75:02:
af:5c:51:9e:2e:92:5a:9f:29:32:25:11:50:d5:a5:
8f:95:09:f9:bb:30:62:af:42:a0:2a:d6:2f:4c:d1:
20:aa:74:92:ab:0c:eb:5d:f1:99:bd:40:65:de:a7:
b6:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:5B:57:F7:88:CD:1E:0F:58:12:2B:B8:52:65:8C:81:A3:77:5D:DE
X509v3 Authority Key Identifier:
keyid:37:94:9A:C8:4D:0B:86:91:0F:4F:D3:CF:59:62:92:7D:83:45:0A:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N5SayE0LhpEPT9PPWWKSfYNFCus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/c28ea4-059c-49dd-9278-a4db396c8987/1/N5SayE0LhpEPT9PPWWKSfYNFCus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/c28ea4-059c-49dd-9278-a4db396c8987/1/N5SayE0LhpEPT9PPWWKSfYNFCus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:1a:6f:74:bf:4c:83:d1:0d:96:a6:d2:be:ca:b7:34:63:ce:
d4:f2:01:ce:9c:bd:96:5f:82:4a:b6:6f:d5:20:9b:d3:c2:e8:
3b:6e:b2:92:37:bb:8b:48:09:5e:c4:77:26:0c:da:96:ce:75:
b0:ab:32:92:88:a3:37:a0:18:4e:97:30:5d:20:6c:b5:05:79:
80:97:b4:47:b9:fa:a6:ec:74:8d:c7:82:e1:80:69:e6:0b:93:
b5:ef:b7:42:c9:dc:78:d7:91:48:f6:c1:79:4d:a5:c5:d9:fc:
36:6f:71:ec:4c:06:06:33:3c:32:07:67:13:d8:d5:30:ba:43:
4e:c7:53:9d:35:28:f6:de:78:14:a4:09:82:41:b6:69:fb:7f:
14:b8:6e:80:44:29:50:c8:cf:2a:a3:52:e6:b5:52:29:f2:53:
ee:3a:eb:e1:37:8f:e5:3e:c1:c5:7a:b7:fe:c8:8c:f7:fc:ec:
2b:e9:e6:d4:ee:df:3e:3b:f0:b3:30:4f:36:c5:6d:d1:5c:0e:
fd:21:72:ad:67:32:38:e0:1b:db:ab:70:ae:f4:df:e3:2a:48:
8a:a9:1c:a8:7f:d1:f0:28:df:c8:b0:dd:3e:0d:58:8d:98:d8:
3c:44:3a:09:2c:62:c1:c1:fe:13:34:bb:8c:a7:94:33:81:5a:
80:95:ec:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:23:54 2026 by rpki-client