Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/0e8bad-121c-4a56-96cd-aacfc0dbed12/1/5sxlwnwjKYsMWg4Lx0ulEDSnBMg.mft
File: 5sxlwnwjKYsMWg4Lx0ulEDSnBMg.mft (raw, json)
Hash identifier: Wcy6vyNfdC76TNR0MStTzTl9BplG+HnxxAOuCx7HZLI=
Subject key identifier: 00:96:53:24:F6:DA:54:E8:56:59:10:00:84:34:EA:AF:54:05:63:98
Authority key identifier: E6:CC:65:C2:7C:23:29:8B:0C:5A:0E:0B:C7:4B:A5:10:34:A7:04:C8
Certificate issuer: /CN=e6cc65c27c23298b0c5a0e0bc74ba51034a704c8
Certificate serial: 019D37C04E6D0E0FE8DA9CDF8EA0355EB951
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5sxlwnwjKYsMWg4Lx0ulEDSnBMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/0e8bad-121c-4a56-96cd-aacfc0dbed12/1/5sxlwnwjKYsMWg4Lx0ulEDSnBMg.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 04:00:42 +0000
Manifest this update: Sun 29 Mar 2026 04:00:42 +0000
Manifest next update: Mon 30 Mar 2026 04:00:42 +0000
Files and hashes: 1: 5sxlwnwjKYsMWg4Lx0ulEDSnBMg.crl (hash: hbYi1GmRiYGCddNiDUTR+Tfjn/32O0N3LGVthsolU5Q=)
2: IcEfPnhAjewSEEO3LOP7u-TcVC4.roa (hash: BRMvl9t5zukkJheawmCAi6lNUM26ZBTh/KTKt1g+rZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/0e8bad-121c-4a56-96cd-aacfc0dbed12/1/5sxlwnwjKYsMWg4Lx0ulEDSnBMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/0e8bad-121c-4a56-96cd-aacfc0dbed12/1/5sxlwnwjKYsMWg4Lx0ulEDSnBMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/5sxlwnwjKYsMWg4Lx0ulEDSnBMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:4e:6d:0e:0f:e8:da:9c:df:8e:a0:35:5e:b9:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6cc65c27c23298b0c5a0e0bc74ba51034a704c8
Validity
Not Before: Mar 29 04:00:42 2026 GMT
Not After : Mar 30 04:00:42 2026 GMT
Subject: CN=00965324f6da54e8565910008434eaaf54056398
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:42:ed:fb:d0:eb:21:50:01:5d:84:c8:65:44:
be:45:d8:e2:7c:2e:14:4a:de:b1:bc:9c:65:ba:0c:
c9:13:e0:81:3f:25:2c:7d:4a:0a:84:65:87:69:35:
f5:b1:d4:8a:98:05:5e:12:5a:44:4e:ca:3b:1b:24:
30:e7:0e:da:88:7c:b8:07:b3:7f:94:66:81:50:1a:
77:ec:67:e2:2b:39:c6:78:d8:05:f8:aa:52:ac:ba:
3b:e2:e5:ad:4a:20:62:4f:fb:5e:f7:c3:6b:10:f0:
7c:bc:81:bf:bc:f1:5a:db:d2:f2:b2:d0:c8:0a:f2:
9a:25:d2:e3:76:47:fd:57:db:1c:be:42:e2:07:bb:
3d:6e:b6:a4:70:06:43:89:3a:48:cb:4e:cb:f8:cd:
73:0d:fa:b1:d5:95:cb:6f:d7:99:fb:97:a9:4b:a2:
ba:f7:2b:70:38:84:ee:3a:15:ca:be:43:56:31:ab:
ed:43:ed:7c:5d:e7:80:63:63:b4:81:66:28:b5:a0:
3d:92:1b:cc:90:8d:4d:95:cc:3c:94:06:41:a8:1b:
2d:3a:fd:8d:6b:34:5d:5c:9a:b3:15:eb:cf:48:69:
68:19:88:e5:7f:d0:fc:85:94:4d:fe:83:02:2c:71:
3e:5f:fa:a0:3e:30:95:0a:97:e3:63:50:96:67:52:
2c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:96:53:24:F6:DA:54:E8:56:59:10:00:84:34:EA:AF:54:05:63:98
X509v3 Authority Key Identifier:
keyid:E6:CC:65:C2:7C:23:29:8B:0C:5A:0E:0B:C7:4B:A5:10:34:A7:04:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5sxlwnwjKYsMWg4Lx0ulEDSnBMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0e8bad-121c-4a56-96cd-aacfc0dbed12/1/5sxlwnwjKYsMWg4Lx0ulEDSnBMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0e8bad-121c-4a56-96cd-aacfc0dbed12/1/5sxlwnwjKYsMWg4Lx0ulEDSnBMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:38:b0:3a:b4:2f:1f:93:dd:a9:40:74:52:ee:8d:8d:b0:90:
12:47:9e:a8:c4:ca:50:1c:a0:24:30:2a:56:df:3b:63:9e:a7:
d6:eb:88:b3:16:ea:bd:1b:53:85:b8:00:2d:c4:7c:27:88:fc:
ca:19:49:c3:2c:bf:36:44:d2:e7:1c:cd:96:02:29:d6:d4:fc:
d2:a9:0a:3f:8c:f5:fd:87:e3:91:a4:1c:23:0d:31:25:e7:51:
a6:be:fc:81:d7:ce:57:bb:02:ac:c1:e4:0f:02:a6:74:44:aa:
51:ea:bf:fa:87:60:59:73:51:63:dd:b1:2c:c0:bf:32:52:d9:
d6:a9:84:f8:a5:ce:fb:10:8a:59:10:d7:0d:2a:f0:46:9e:66:
28:3a:2e:5a:b3:14:b1:98:05:52:6a:37:72:23:b8:ad:47:b6:
b7:08:31:37:28:db:66:27:9a:2b:b9:d9:ca:62:38:6a:13:f8:
94:9c:9a:b6:46:c6:b1:f1:37:15:fe:b3:cc:a9:6b:45:8c:f3:
2f:15:cc:7a:2e:50:92:0a:8a:1b:78:55:c2:da:ac:de:24:95:
b8:c1:58:17:d9:8b:3f:16:f3:95:a2:c8:c5:1c:c3:f5:0d:bb:
34:34:1c:9f:fa:90:6f:4a:b4:5b:9e:02:e3:0e:10:73:1f:e2:
93:72:f7:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:08:35 2026 by rpki-client