Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/f39a17-8387-4fba-9ed0-3ead7792073c/1/5fbO0n_GD5APrBt1HbHuS_eFqrM.mft
File: 5fbO0n_GD5APrBt1HbHuS_eFqrM.mft (raw, json)
Hash identifier: xu2lGgQki7swQaWfsx3ubc5iA4cFVwELrPddKdg5hXs=
Subject key identifier: 1A:B8:F9:9A:53:FA:7E:51:7B:4B:BD:3D:5A:AF:AA:D9:EA:C1:AF:B9
Authority key identifier: E5:F6:CE:D2:7F:C6:0F:90:0F:AC:1B:75:1D:B1:EE:4B:F7:85:AA:B3
Certificate issuer: /CN=e5f6ced27fc60f900fac1b751db1ee4bf785aab3
Certificate serial: 019D38D2FBEBAF411EE5C5A7147174C5D80C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5fbO0n_GD5APrBt1HbHuS_eFqrM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/f39a17-8387-4fba-9ed0-3ead7792073c/1/5fbO0n_GD5APrBt1HbHuS_eFqrM.mft
Manifest number: 1894
Signing time: Sun 29 Mar 2026 09:00:44 +0000
Manifest this update: Sun 29 Mar 2026 09:00:44 +0000
Manifest next update: Mon 30 Mar 2026 09:00:44 +0000
Files and hashes: 1: 5fbO0n_GD5APrBt1HbHuS_eFqrM.crl (hash: 1NvI+aQUFk2/+yF+R67r/X/OirXLhH3+eeKfenU85aI=)
2: y_OQIDAMHlaoBXlRn0zGw_Gh1QI.roa (hash: lYKfm5Dp+lf/dj7OuCbcWwuPJCfkOvV2il96b5sLugY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/f39a17-8387-4fba-9ed0-3ead7792073c/1/5fbO0n_GD5APrBt1HbHuS_eFqrM.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/f39a17-8387-4fba-9ed0-3ead7792073c/1/5fbO0n_GD5APrBt1HbHuS_eFqrM.mft
rsync://rpki.ripe.net/repository/DEFAULT/5fbO0n_GD5APrBt1HbHuS_eFqrM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:fb:eb:af:41:1e:e5:c5:a7:14:71:74:c5:d8:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5f6ced27fc60f900fac1b751db1ee4bf785aab3
Validity
Not Before: Mar 29 09:00:44 2026 GMT
Not After : Mar 30 09:00:44 2026 GMT
Subject: CN=1ab8f99a53fa7e517b4bbd3d5aafaad9eac1afb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:72:0e:13:bb:33:b9:d8:af:05:55:1d:a5:f0:
92:ac:9a:0a:3f:31:52:29:eb:77:be:d7:51:56:72:
9e:fc:66:45:f1:37:82:2d:e5:f9:ab:3b:da:74:40:
b1:6d:a8:a2:1b:fb:8e:c7:91:1c:aa:2d:55:04:8a:
e2:67:32:2d:cc:e2:4e:a7:43:8d:76:4b:cf:3e:ff:
19:4c:2d:f7:55:82:b7:59:26:4d:1e:4e:8d:67:24:
e4:7e:d2:88:d5:d7:b7:fe:a8:63:ee:37:d4:d7:c2:
90:4d:0e:0d:fe:3e:9d:0f:1d:93:3e:11:0c:98:e1:
1f:23:e4:95:72:86:98:e8:b4:09:33:84:3b:f9:ce:
0c:12:8d:cf:c0:29:23:9d:dd:1f:4a:9f:70:30:09:
54:83:60:30:ee:2a:a7:1d:c7:6c:b7:de:d6:eb:07:
0a:e6:63:0e:b6:0d:05:d8:61:7e:ff:ed:8e:de:32:
cb:ab:ef:00:5c:c5:ce:2e:d3:5b:be:92:c4:ff:c2:
af:a1:e4:cd:bf:76:07:79:90:c8:48:e9:6f:98:a9:
c6:95:0e:69:30:35:38:5e:b8:17:d5:29:74:e1:f3:
fd:68:f0:18:20:7d:5f:31:55:6a:06:fc:f5:60:cc:
b2:94:ac:a9:1a:bc:31:68:ae:0e:50:4b:5c:63:c6:
a7:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:B8:F9:9A:53:FA:7E:51:7B:4B:BD:3D:5A:AF:AA:D9:EA:C1:AF:B9
X509v3 Authority Key Identifier:
keyid:E5:F6:CE:D2:7F:C6:0F:90:0F:AC:1B:75:1D:B1:EE:4B:F7:85:AA:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5fbO0n_GD5APrBt1HbHuS_eFqrM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/f39a17-8387-4fba-9ed0-3ead7792073c/1/5fbO0n_GD5APrBt1HbHuS_eFqrM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/f39a17-8387-4fba-9ed0-3ead7792073c/1/5fbO0n_GD5APrBt1HbHuS_eFqrM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:91:0a:ec:11:55:cf:e9:e7:d7:77:a9:9c:8a:8d:ae:61:5a:
95:b2:2f:44:4a:4f:1f:85:3d:df:e2:27:50:a0:c4:ce:ea:be:
15:7a:0f:e4:b7:59:d9:92:6e:bf:2c:dc:23:50:5a:b6:41:81:
ba:77:61:c2:1b:0a:f8:e2:6f:29:57:1b:0c:9f:00:44:28:1a:
09:97:66:e4:36:e8:c7:81:75:b1:a0:88:02:c1:12:7d:09:db:
81:89:11:1b:21:9e:63:81:cd:e1:5f:12:24:17:a7:28:c5:c1:
99:c1:40:1b:d8:49:26:fb:75:31:33:44:db:a7:3a:36:71:3a:
b6:d5:da:c2:a8:b1:a5:4a:e8:08:34:3e:f0:f1:00:7e:d0:03:
0d:f4:7e:5d:3f:f9:3a:5c:d9:2d:65:4c:81:2a:e7:59:81:cf:
70:e1:40:60:ec:74:66:df:7a:d3:0f:ca:fc:b1:58:d5:df:da:
f0:3a:05:bb:15:81:93:cc:1c:5c:59:a1:1e:d9:58:4b:a8:ff:
41:13:ee:ab:ef:98:e6:15:8a:b8:8b:90:6c:fd:97:61:c7:f5:
7b:70:a1:e5:ee:43:5d:4e:ae:99:02:b6:ad:f3:c2:66:69:ff:
7b:c2:27:b6:9f:cf:2f:28:ec:a3:2a:f6:db:e1:d1:50:ba:90:
ee:8c:97:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:49:17 2026 by rpki-client