Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/68bff6-7b2c-4ecf-8006-ed14af6db888/1/5oaWVQmmScUIq4q3L3JXvvNfeTA.mft
File: 5oaWVQmmScUIq4q3L3JXvvNfeTA.mft (raw, json)
Hash identifier: 3EO6+Y4VohwwMCN33Uskj1CTSBS2RXeRXc7vHgK9idA=
Subject key identifier: 69:5A:6E:4A:3C:64:9C:6B:2C:E9:3D:16:F7:4F:80:4A:42:26:B8:F4
Authority key identifier: E6:86:96:55:09:A6:49:C5:08:AB:8A:B7:2F:72:57:BE:F3:5F:79:30
Certificate issuer: /CN=e686965509a649c508ab8ab72f7257bef35f7930
Certificate serial: 019D382E6345983B845D5B344982CAD739FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5oaWVQmmScUIq4q3L3JXvvNfeTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/68bff6-7b2c-4ecf-8006-ed14af6db888/1/5oaWVQmmScUIq4q3L3JXvvNfeTA.mft
Manifest number: 0118
Signing time: Sun 29 Mar 2026 06:00:57 +0000
Manifest this update: Sun 29 Mar 2026 06:00:57 +0000
Manifest next update: Mon 30 Mar 2026 06:00:57 +0000
Files and hashes: 1: 5oaWVQmmScUIq4q3L3JXvvNfeTA.crl (hash: /o9Fnu+vEV4oUrMHlQ7WV60DJR+jTzSODnyx+1L7ZfQ=)
2: HW91ceRJgWG3iZvp7l-CZ4g114o.roa (hash: DJW7zDRRrxF8a0KLlMx4QW/WpXaZuql+x/3IqGrDfJE=)
3: MHca-Spbwu4KckiWw0Dq8WRDlXI.roa (hash: 1Fh8PbvTtxhEEhmRRroTAZu9epm44Y5y/MNbSvWf+o8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/68bff6-7b2c-4ecf-8006-ed14af6db888/1/5oaWVQmmScUIq4q3L3JXvvNfeTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/68bff6-7b2c-4ecf-8006-ed14af6db888/1/5oaWVQmmScUIq4q3L3JXvvNfeTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5oaWVQmmScUIq4q3L3JXvvNfeTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:63:45:98:3b:84:5d:5b:34:49:82:ca:d7:39:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e686965509a649c508ab8ab72f7257bef35f7930
Validity
Not Before: Mar 29 06:00:57 2026 GMT
Not After : Mar 30 06:00:57 2026 GMT
Subject: CN=695a6e4a3c649c6b2ce93d16f74f804a4226b8f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d4:d2:7a:c2:f1:e5:cb:fd:47:d3:36:13:99:
32:c3:ba:e7:12:65:4a:f9:15:31:c3:60:57:49:43:
f6:10:6b:eb:69:86:31:c2:a0:ac:bd:50:6f:a1:04:
8f:62:98:ee:90:18:71:7b:c6:f9:45:f1:81:fb:b2:
5f:e5:96:81:ec:d9:bc:c0:e4:4b:73:d7:b0:e7:11:
3c:4c:3e:d2:67:46:eb:2d:39:bb:52:5a:f5:84:0e:
7c:6a:2f:eb:f2:a5:76:89:40:5c:6b:59:85:c1:6d:
be:bb:44:86:6e:8a:8f:e9:20:7b:2b:3d:df:52:15:
67:c5:d3:cb:bd:ab:f3:59:4f:d4:50:03:32:78:38:
8a:e4:41:77:bf:a4:8d:85:b1:bd:5d:ff:c8:65:51:
8c:e1:6d:6f:f6:2a:78:1e:0f:fd:37:83:dc:90:9c:
7e:00:50:26:bc:07:5c:b6:22:ce:9b:d0:c9:e0:f3:
45:4e:59:b2:24:44:01:a2:fa:3d:71:17:19:e6:63:
de:6e:32:0f:05:b9:ca:44:73:5b:d2:21:9e:d4:5f:
03:b7:29:b3:76:cb:a2:e5:6d:cb:72:55:d9:a3:41:
09:67:b3:c6:1e:87:d5:78:fc:c2:dd:1f:c0:1f:9e:
be:23:6d:b4:cb:f1:24:75:c8:ad:e9:01:10:26:1a:
c2:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:5A:6E:4A:3C:64:9C:6B:2C:E9:3D:16:F7:4F:80:4A:42:26:B8:F4
X509v3 Authority Key Identifier:
keyid:E6:86:96:55:09:A6:49:C5:08:AB:8A:B7:2F:72:57:BE:F3:5F:79:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5oaWVQmmScUIq4q3L3JXvvNfeTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/68bff6-7b2c-4ecf-8006-ed14af6db888/1/5oaWVQmmScUIq4q3L3JXvvNfeTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/68bff6-7b2c-4ecf-8006-ed14af6db888/1/5oaWVQmmScUIq4q3L3JXvvNfeTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:74:a0:b3:a5:15:4e:3c:f8:eb:e9:45:a7:8a:a8:46:5e:86:
34:f2:ac:76:d5:66:0d:fb:e7:e3:ca:7b:e3:77:88:12:db:5d:
d5:28:0b:0e:b7:f0:80:0b:97:82:87:db:ad:15:31:43:82:56:
6f:05:aa:ac:9a:fb:55:7b:48:85:b0:ac:37:51:64:c8:0e:5e:
64:04:6a:42:25:ab:65:ab:fe:5d:60:ce:42:d8:5d:f8:67:38:
64:61:df:0e:57:88:53:cd:01:05:08:9f:2e:77:aa:e4:f2:1c:
0e:e6:54:9c:08:cb:d1:16:85:e2:30:cf:9f:3a:d7:2f:e8:af:
88:e2:67:0b:bc:80:0c:33:5d:a3:a3:6f:5e:46:36:c3:41:11:
34:b6:6b:76:c7:dd:b9:e6:dd:be:ef:a9:42:d2:2f:de:73:08:
5c:63:41:5a:4d:e1:0a:6c:2b:ac:7b:e3:b8:17:ef:57:3c:63:
85:90:1f:63:cb:94:a4:e9:e8:c0:b3:63:c9:9b:15:ff:2e:f7:
98:bf:9f:05:36:99:22:7d:47:89:fc:cb:ab:8e:8a:f6:65:75:
03:7e:aa:47:b5:1b:1a:ab:2f:dd:3a:6a:d6:35:b1:9b:24:f4:
94:f9:9f:db:38:03:9c:b0:2a:26:13:62:3b:49:79:b7:85:22:
db:59:98:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:20 2026 by rpki-client