Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/0cf7b9-938f-4c17-8ec7-d18d1ea568f5/1/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.mft
File: 5CAqP8Go6Fyd_S1l0xmoDdH7kX0.mft (raw, json)
Hash identifier: ijQxaei1TsK+VDUNPJ3q/SkganTnBCzwF7cZQGyArF4=
Subject key identifier: 11:03:11:38:8F:04:58:FD:68:66:A7:19:92:31:E2:34:C7:47:2C:34
Authority key identifier: E4:20:2A:3F:C1:A8:E8:5C:9D:FD:2D:65:D3:19:A8:0D:D1:FB:91:7D
Certificate issuer: /CN=e4202a3fc1a8e85c9dfd2d65d319a80dd1fb917d
Certificate serial: 019D3909AB32D248B801008D2B9B2FC8EFCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/0cf7b9-938f-4c17-8ec7-d18d1ea568f5/1/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.mft
Manifest number: 13EC
Signing time: Sun 29 Mar 2026 10:00:28 +0000
Manifest this update: Sun 29 Mar 2026 10:00:28 +0000
Manifest next update: Mon 30 Mar 2026 10:00:28 +0000
Files and hashes: 1: 5CAqP8Go6Fyd_S1l0xmoDdH7kX0.crl (hash: MMCP57/8Zv5LvS65GmdinhsZgAFcKb4A0xE4tGIfH0w=)
2: bqf5qipql10pKq2IW1cVBIAiNT0.roa (hash: +2BT4dwhMNJVzlVWSCe67UeT7mC6TzS9Mo4QbFrZxHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/0cf7b9-938f-4c17-8ec7-d18d1ea568f5/1/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/0cf7b9-938f-4c17-8ec7-d18d1ea568f5/1/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:ab:32:d2:48:b8:01:00:8d:2b:9b:2f:c8:ef:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4202a3fc1a8e85c9dfd2d65d319a80dd1fb917d
Validity
Not Before: Mar 29 10:00:28 2026 GMT
Not After : Mar 30 10:00:28 2026 GMT
Subject: CN=110311388f0458fd6866a7199231e234c7472c34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:09:dd:94:e3:cf:8b:5c:b2:c7:fc:32:8f:b5:
ee:dc:c5:66:84:9f:20:a1:a3:d2:61:70:ac:6d:4e:
3d:25:38:85:a1:3b:47:1f:60:fa:1d:e9:e4:b7:c3:
53:84:d9:4a:c2:ea:81:9b:5f:71:7c:02:59:a6:7b:
b9:83:b6:17:9d:c1:a8:ea:64:ba:39:5a:a9:04:dc:
2c:ca:d2:b9:fc:12:3a:ee:74:ef:f4:4b:ca:58:d8:
a8:45:40:48:9a:b2:4a:b0:f5:79:f5:64:6c:3d:21:
29:28:83:a2:b3:81:ef:40:9d:fe:f9:f9:b2:72:ff:
48:e2:03:ca:d1:11:c8:c5:9a:d1:bf:a1:b2:44:f0:
83:12:1d:be:29:d0:ac:cf:8c:06:9e:f0:0d:f1:c9:
51:1c:56:5c:ad:4f:16:72:3e:67:aa:99:6b:6e:00:
d5:28:39:74:1c:61:ed:3d:ab:80:e2:0b:55:d2:64:
1b:e5:a3:bd:d0:f6:95:bf:a6:08:07:4d:67:9e:b8:
87:e6:20:b5:70:dd:d9:40:96:7c:bd:76:aa:30:20:
93:98:8e:49:b3:ed:90:1c:b0:9c:ea:a5:f8:32:6c:
09:d0:a2:86:a9:af:1b:b5:da:39:57:41:9b:b5:06:
a0:59:b2:84:d6:43:db:22:81:29:5c:f2:7d:04:07:
08:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:03:11:38:8F:04:58:FD:68:66:A7:19:92:31:E2:34:C7:47:2C:34
X509v3 Authority Key Identifier:
keyid:E4:20:2A:3F:C1:A8:E8:5C:9D:FD:2D:65:D3:19:A8:0D:D1:FB:91:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/0cf7b9-938f-4c17-8ec7-d18d1ea568f5/1/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/0cf7b9-938f-4c17-8ec7-d18d1ea568f5/1/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:02:3d:e6:68:cf:65:16:33:8b:cd:ad:b5:59:18:cc:35:5e:
6b:1b:57:9d:82:b1:f6:bf:16:d1:15:7d:51:31:e1:dc:e2:ab:
fe:d9:be:f0:63:da:f4:64:5e:b3:b5:48:d4:30:9b:87:52:32:
06:a8:58:11:98:7c:23:80:01:f5:a8:eb:97:1f:f1:a5:51:90:
c8:3e:b5:c3:1e:a4:72:56:e4:be:fc:86:b7:48:3d:d1:30:64:
6e:8c:77:d8:04:7b:69:4d:6a:9f:90:fc:e8:e9:fb:3b:52:47:
bd:08:42:41:9a:82:e3:9b:51:66:f7:1b:39:43:97:5c:e2:9f:
c3:b8:69:ee:af:1b:0a:9d:ac:2a:d6:ea:e1:ea:98:26:ad:3f:
b7:ae:da:7f:17:28:88:cc:6d:5d:70:47:f4:85:a5:13:d5:62:
b1:25:84:6d:17:be:e6:39:28:59:0c:4b:4a:ff:3b:08:7b:d4:
bd:de:ae:58:16:d1:b9:a6:ed:57:c7:b5:18:1d:db:82:51:b8:
bb:79:f3:6b:25:a3:55:33:ff:0c:53:70:04:d2:d7:a2:46:df:
a4:55:86:09:75:b7:69:68:37:31:da:8a:a9:4a:c7:3c:00:61:
06:7c:70:32:97:ce:d2:ec:88:80:bb:b4:94:89:f5:4c:a1:ea:
1a:dd:f1:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:53:50 2026 by rpki-client