Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/ba1c97-0e56-4840-b613-b361a2c457c4/1/5fmFqUAlRIkU3qoXQiBzBDklE90.mft
File: 5fmFqUAlRIkU3qoXQiBzBDklE90.mft (raw, json)
Hash identifier: VQi+Nwgh5atFi/GOvBanAl3WWwOIQ/GC0MV66J7TeSs=
Subject key identifier: 0E:D3:7F:9B:8C:2B:82:2B:C3:0D:5C:38:9E:6B:64:8B:44:44:75:A0
Authority key identifier: E5:F9:85:A9:40:25:44:89:14:DE:AA:17:42:20:73:04:39:25:13:DD
Certificate issuer: /CN=e5f985a94025448914deaa1742207304392513dd
Certificate serial: 019D37F769BC313E91333F2185EBA25B2507
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5fmFqUAlRIkU3qoXQiBzBDklE90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/ba1c97-0e56-4840-b613-b361a2c457c4/1/5fmFqUAlRIkU3qoXQiBzBDklE90.mft
Manifest number: 0460
Signing time: Sun 29 Mar 2026 05:00:54 +0000
Manifest this update: Sun 29 Mar 2026 05:00:54 +0000
Manifest next update: Mon 30 Mar 2026 05:00:54 +0000
Files and hashes: 1: 5fmFqUAlRIkU3qoXQiBzBDklE90.crl (hash: XoJaLspwV2rcoam28rCdnqEma2FDzRx1vtzImepp2qE=)
2: i19szVZhRKN0uM8PI30DBqNVBcc.roa (hash: BxpnJWWpyzAJHpDXAkgY/3s3l/OZgniCap33rZlXUMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/ba1c97-0e56-4840-b613-b361a2c457c4/1/5fmFqUAlRIkU3qoXQiBzBDklE90.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/ba1c97-0e56-4840-b613-b361a2c457c4/1/5fmFqUAlRIkU3qoXQiBzBDklE90.mft
rsync://rpki.ripe.net/repository/DEFAULT/5fmFqUAlRIkU3qoXQiBzBDklE90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:69:bc:31:3e:91:33:3f:21:85:eb:a2:5b:25:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5f985a94025448914deaa1742207304392513dd
Validity
Not Before: Mar 29 05:00:54 2026 GMT
Not After : Mar 30 05:00:54 2026 GMT
Subject: CN=0ed37f9b8c2b822bc30d5c389e6b648b444475a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:f0:05:34:a3:a5:d9:99:c5:5f:86:b3:ac:0c:
60:c3:ab:5d:fe:e0:25:f2:97:1b:bc:a9:a0:b1:c6:
16:c6:aa:89:ef:04:79:54:d9:b0:1d:bf:d7:71:16:
13:7a:3d:8d:cb:1d:17:8c:8a:e4:23:ee:2b:10:b0:
97:e9:c7:aa:35:6a:df:89:39:ac:2c:f0:5f:a5:4a:
63:72:c8:eb:d1:8f:8d:f9:8e:2f:53:14:cd:94:9b:
f0:2f:53:39:3c:80:2e:b7:03:49:c4:70:99:95:11:
2d:91:89:fd:e2:8b:13:af:92:25:09:f6:60:69:38:
82:66:5b:61:82:1c:9c:31:73:4e:25:2f:d6:5e:27:
eb:96:46:5d:19:73:12:c8:08:f0:c9:d2:fb:85:29:
91:cb:e9:19:75:8f:85:0a:84:43:66:c7:2b:9d:b9:
23:81:b3:0e:68:34:26:bc:5f:f5:7c:1f:36:eb:56:
34:e7:30:d5:f3:0c:36:3a:87:0e:b5:8f:f6:43:b3:
62:71:06:d9:67:f9:63:8a:d6:85:bb:78:60:5f:f8:
42:88:8b:9f:75:48:d9:09:03:f0:8b:11:c3:a3:11:
26:6b:b9:3d:18:8f:57:d1:1e:29:eb:15:ff:3b:a0:
2c:c5:03:13:55:d9:b5:57:4e:ba:f1:38:c1:bc:2a:
de:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:D3:7F:9B:8C:2B:82:2B:C3:0D:5C:38:9E:6B:64:8B:44:44:75:A0
X509v3 Authority Key Identifier:
keyid:E5:F9:85:A9:40:25:44:89:14:DE:AA:17:42:20:73:04:39:25:13:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5fmFqUAlRIkU3qoXQiBzBDklE90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/ba1c97-0e56-4840-b613-b361a2c457c4/1/5fmFqUAlRIkU3qoXQiBzBDklE90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/ba1c97-0e56-4840-b613-b361a2c457c4/1/5fmFqUAlRIkU3qoXQiBzBDklE90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:f7:2d:ed:26:f1:ba:41:3f:d5:3a:72:62:bc:8b:46:42:09:
26:46:18:62:2e:33:e4:49:9c:4d:7a:7c:9b:34:97:8b:1d:8c:
9c:f3:7c:af:e9:6c:87:8a:25:05:67:38:80:da:a0:50:17:9d:
73:c4:7c:5d:ed:d8:96:cf:26:5b:af:26:f4:18:14:73:bd:d6:
cb:94:4f:0c:f1:51:e5:6b:c7:7b:0c:a8:6e:55:7b:93:c2:62:
cf:60:32:a1:40:f6:5c:bd:25:d6:36:13:42:93:0a:0d:ec:69:
6e:7d:f2:b6:1d:a5:b5:c5:5a:c0:b2:d8:34:00:64:f5:21:fa:
00:e6:5d:67:bc:7d:3c:11:1a:5f:c3:12:d4:6b:4f:37:6e:85:
42:b4:39:8b:26:79:47:83:01:ae:86:6e:1d:41:0d:cc:d2:a0:
34:c5:30:90:98:fb:85:e1:79:ae:5d:b6:b3:48:bb:55:ea:dd:
b5:21:c1:66:f3:1c:00:f0:98:63:dd:3e:75:83:74:44:e2:74:
f6:b7:0a:b5:f0:39:97:de:5e:69:51:95:8e:a8:4c:50:96:dd:
c6:c3:75:a0:3a:c2:e3:2c:aa:50:ab:f5:3e:f4:ad:6c:08:91:
94:df:0a:07:c1:15:34:d3:d0:73:be:f1:53:8d:6f:ae:f4:ea:
a9:29:8a:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:27:58 2026 by rpki-client