Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/0f19e9-1b2b-4812-ab5a-fdf84f83a274/1/M5VDMDSfV1Aqdq5umZh-_D47gQk.mft
File: M5VDMDSfV1Aqdq5umZh-_D47gQk.mft (raw, json)
Hash identifier: WfNZLA24W0RiP5/ejWJ98J+4vRvnaswnTnnaRRpyanA=
Subject key identifier: D5:39:1C:11:01:4B:D6:F7:2E:F8:99:B8:86:20:E0:13:06:F3:82:02
Authority key identifier: 33:95:43:30:34:9F:57:50:2A:76:AE:6E:99:98:7E:FC:3E:3B:81:09
Certificate issuer: /CN=33954330349f57502a76ae6e99987efc3e3b8109
Certificate serial: 019D37F78D0FF5DE396658340201E3976E71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M5VDMDSfV1Aqdq5umZh-_D47gQk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/0f19e9-1b2b-4812-ab5a-fdf84f83a274/1/M5VDMDSfV1Aqdq5umZh-_D47gQk.mft
Manifest number: 1898
Signing time: Sun 29 Mar 2026 05:01:03 +0000
Manifest this update: Sun 29 Mar 2026 05:01:03 +0000
Manifest next update: Mon 30 Mar 2026 05:01:03 +0000
Files and hashes: 1: 4wx0MOu1mZcNgjgLVuHZ5KDPjA8.roa (hash: 0jso45NlBZKrRKZeACFspDxL58QZmOoRo1b0JCMIPZ4=)
2: M5VDMDSfV1Aqdq5umZh-_D47gQk.crl (hash: XRhy+DWb4lRgxDApXRzGDGGSIF5JwRfc7V2Ttz0b2N0=)
3: PEqDu8ivi9UVZhqhCJ7IvyfJdcE.roa (hash: Q7IRGtNWGMxResmk4bDtY/IpB1kb7EOVGytLvz9NzXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/0f19e9-1b2b-4812-ab5a-fdf84f83a274/1/M5VDMDSfV1Aqdq5umZh-_D47gQk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/0f19e9-1b2b-4812-ab5a-fdf84f83a274/1/M5VDMDSfV1Aqdq5umZh-_D47gQk.mft
rsync://rpki.ripe.net/repository/DEFAULT/M5VDMDSfV1Aqdq5umZh-_D47gQk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:8d:0f:f5:de:39:66:58:34:02:01:e3:97:6e:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33954330349f57502a76ae6e99987efc3e3b8109
Validity
Not Before: Mar 29 05:01:03 2026 GMT
Not After : Mar 30 05:01:03 2026 GMT
Subject: CN=d5391c11014bd6f72ef899b88620e01306f38202
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:8a:8a:3c:82:66:0b:66:20:1f:17:49:46:e1:
4a:d5:5c:6e:ce:b1:ea:89:52:b3:c6:bd:a6:2d:68:
dd:ba:f3:3b:45:68:d4:ef:d8:41:8e:a9:c6:8c:09:
4d:36:34:cf:9f:4b:b1:fc:08:33:fb:5f:95:e5:85:
63:5a:41:89:73:70:11:40:a8:90:2c:8c:1c:51:9d:
04:f2:0a:a3:c9:38:2a:ef:3f:9b:c2:e0:22:d5:f0:
fe:1f:64:66:10:e5:50:ef:7d:c1:92:16:b1:c9:2c:
d2:2a:21:5e:eb:04:a4:ce:f3:9f:19:94:ab:4c:eb:
48:d5:f6:a6:ea:8b:24:f0:a6:1c:ae:67:4c:67:9b:
ac:cb:c8:f2:60:5f:e1:b6:3e:b3:27:a9:88:c6:fc:
41:71:10:ec:23:45:ba:28:78:53:38:47:1f:a0:a2:
5d:08:4f:e0:07:7c:c7:5b:b4:7f:56:ae:5e:17:c6:
01:d2:f3:4b:69:9e:e9:ab:46:d7:85:d7:91:a8:7c:
10:4f:b1:7f:3f:5e:ef:fb:64:36:b2:0f:4e:ac:ba:
a8:4a:69:62:3a:d8:ae:e6:b6:f6:22:e8:1a:53:92:
1b:ca:76:29:0f:95:c7:5a:13:ee:37:a3:04:58:22:
25:65:80:6f:13:4e:8e:43:ab:d0:72:6e:e6:fe:05:
b1:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:39:1C:11:01:4B:D6:F7:2E:F8:99:B8:86:20:E0:13:06:F3:82:02
X509v3 Authority Key Identifier:
keyid:33:95:43:30:34:9F:57:50:2A:76:AE:6E:99:98:7E:FC:3E:3B:81:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M5VDMDSfV1Aqdq5umZh-_D47gQk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/0f19e9-1b2b-4812-ab5a-fdf84f83a274/1/M5VDMDSfV1Aqdq5umZh-_D47gQk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/0f19e9-1b2b-4812-ab5a-fdf84f83a274/1/M5VDMDSfV1Aqdq5umZh-_D47gQk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:2e:dc:c1:00:06:09:e3:15:44:d0:a3:c1:82:3a:35:a8:96:
41:b1:66:8e:bf:51:02:6c:9f:f1:53:23:3b:00:b5:d2:e3:eb:
b0:01:89:70:f9:e0:d6:64:62:c8:9c:c6:c4:58:5d:7d:89:d7:
91:2a:3f:81:37:a3:28:3e:21:82:0b:0a:ed:1e:c4:5d:8e:6a:
63:c4:c4:9d:fe:91:54:2c:e1:50:a3:f6:8d:6f:19:10:95:9b:
11:57:d9:5d:35:71:8f:05:93:d9:bd:aa:7b:bd:8e:46:0d:c1:
0a:bf:c5:4b:02:9b:44:04:49:d4:c0:1d:e8:4b:4b:87:b5:70:
aa:fa:94:d0:5b:ef:bc:72:e9:34:c4:c0:6f:6a:a6:92:fe:e2:
20:45:8a:4a:ca:f8:ac:22:cd:85:2d:1c:8f:f2:66:cd:37:82:
cc:6c:5e:13:8f:2e:c7:69:dd:30:45:d6:47:08:1c:04:f2:c2:
f7:4d:91:c5:54:31:e6:f8:0b:cd:ea:1d:36:3b:26:b2:0f:a2:
7e:b8:21:0d:39:a4:2d:3f:5b:52:6e:03:d0:6b:79:73:ae:e8:
e4:39:89:db:18:df:7d:53:01:78:ae:51:78:8b:d8:79:d8:94:
7f:e9:01:6b:76:65:a3:fe:12:d8:37:6d:3c:ed:12:b7:1d:f4:
b7:66:80:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:27:59 2026 by rpki-client