Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/9f54b5-a39a-4e60-8b1c-d1e460518483/1/5TmMlveEeBsu3CA8dRxOh5h4X6E.mft
File: 5TmMlveEeBsu3CA8dRxOh5h4X6E.mft (raw, json)
Hash identifier: r3E8XtxA/FsXxwC/XmhIPMMVWrADcl2fAWAbzv/ca8w=
Subject key identifier: 3E:31:18:91:6E:D3:C9:7B:89:38:F1:05:18:F3:27:0E:13:D0:85:B1
Authority key identifier: E5:39:8C:96:F7:84:78:1B:2E:DC:20:3C:75:1C:4E:87:98:78:5F:A1
Certificate issuer: /CN=e5398c96f784781b2edc203c751c4e8798785fa1
Certificate serial: 019D107BFDC9C027DAA2CC2E7CF216456F9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5TmMlveEeBsu3CA8dRxOh5h4X6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/9f54b5-a39a-4e60-8b1c-d1e460518483/1/5TmMlveEeBsu3CA8dRxOh5h4X6E.mft
Manifest number: 049C
Signing time: Sat 21 Mar 2026 13:00:54 +0000
Manifest this update: Sat 21 Mar 2026 13:00:54 +0000
Manifest next update: Sun 22 Mar 2026 13:00:54 +0000
Files and hashes: 1: 5TmMlveEeBsu3CA8dRxOh5h4X6E.crl (hash: f1Mv0Wj7fU8SuGpsGer36V1GmQA06oX7XlrknvDjMzU=)
2: TlB35RpoAYh9JfFwZIdprGXzgU8.roa (hash: XzBThBrqkP0celJU8AjVVtRAPROC88dRjyzplXxnsx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/9f54b5-a39a-4e60-8b1c-d1e460518483/1/5TmMlveEeBsu3CA8dRxOh5h4X6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/9f54b5-a39a-4e60-8b1c-d1e460518483/1/5TmMlveEeBsu3CA8dRxOh5h4X6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/5TmMlveEeBsu3CA8dRxOh5h4X6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Mar 2026 13:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:10:7b:fd:c9:c0:27:da:a2:cc:2e:7c:f2:16:45:6f:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5398c96f784781b2edc203c751c4e8798785fa1
Validity
Not Before: Mar 21 13:00:54 2026 GMT
Not After : Mar 22 13:00:54 2026 GMT
Subject: CN=3e3118916ed3c97b8938f10518f3270e13d085b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e6:b7:59:ba:8f:dd:d8:32:04:27:31:d1:d6:
0d:da:0f:d1:78:f8:d9:dd:34:17:d3:2e:56:5f:bd:
f2:67:41:b6:20:30:ab:7b:e3:f0:db:2a:ea:6c:c5:
a2:53:a9:d8:ee:d5:f0:6c:c6:34:fe:2c:98:ac:02:
a8:72:f2:dd:6a:c9:28:79:eb:ff:b1:49:a7:05:c7:
aa:2e:37:98:68:10:53:79:42:fa:e8:6b:93:58:28:
c2:58:64:b2:b3:b0:0f:0d:05:2a:26:af:35:12:60:
b3:18:3c:02:af:bb:bf:2e:61:23:56:58:03:c0:6e:
e8:c6:f9:ee:6d:c5:b6:b1:9a:4c:24:22:32:16:9d:
0c:fd:a8:f3:7f:4b:15:7e:ae:96:0e:86:84:bc:de:
bf:ca:bb:f2:b8:a8:9c:92:b7:89:50:c2:05:d5:0d:
ca:0f:d3:20:8f:71:ae:cd:f0:41:97:25:a6:dd:b9:
0c:e3:15:ce:a6:54:ba:d2:19:40:f5:b0:e9:e4:fa:
ef:f1:16:86:1d:aa:3a:58:8e:89:6d:bd:8d:32:03:
9f:fe:d3:39:4a:df:10:1b:bc:54:e2:1c:40:21:ca:
9f:38:95:d9:30:3e:56:6c:76:cd:b6:98:e9:5d:48:
28:9b:df:b1:e7:4c:37:e8:4f:53:80:87:77:a7:9a:
5e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:31:18:91:6E:D3:C9:7B:89:38:F1:05:18:F3:27:0E:13:D0:85:B1
X509v3 Authority Key Identifier:
keyid:E5:39:8C:96:F7:84:78:1B:2E:DC:20:3C:75:1C:4E:87:98:78:5F:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5TmMlveEeBsu3CA8dRxOh5h4X6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/9f54b5-a39a-4e60-8b1c-d1e460518483/1/5TmMlveEeBsu3CA8dRxOh5h4X6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/9f54b5-a39a-4e60-8b1c-d1e460518483/1/5TmMlveEeBsu3CA8dRxOh5h4X6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:09:8d:82:4e:86:7d:fc:a3:69:f5:5f:16:02:eb:97:a7:32:
a3:bd:58:44:8c:0b:fd:b3:c9:49:69:54:d8:f5:25:f5:2b:52:
f5:ba:79:1c:59:09:99:de:78:50:3a:4a:41:b1:cc:2c:b4:0c:
4b:7e:aa:df:d2:39:18:3a:f5:f4:d2:c9:8f:87:79:8d:2b:9e:
f2:23:dd:93:ef:f6:fa:b6:56:8b:06:83:1b:9a:d4:d9:00:5f:
a2:cf:3a:5a:40:d5:59:05:f5:d1:1c:9b:af:d3:9a:5c:e3:1e:
c8:4e:49:fd:be:96:89:92:79:9a:b0:8b:f4:f5:48:17:26:2c:
95:5f:1f:1d:be:2d:d7:84:ae:7a:99:0c:19:12:42:c3:da:3a:
d9:ae:ec:71:f0:91:df:bb:ea:c0:45:e0:8a:a1:c7:40:f5:9e:
36:6d:df:3a:bf:54:19:7d:0b:82:cb:14:59:41:0d:8d:8c:6b:
22:6b:4f:b7:07:0f:48:29:33:45:ab:97:df:72:41:ac:44:95:
b6:83:92:e5:46:72:57:fb:68:a2:7c:b3:0d:93:08:94:94:d8:
bb:02:83:89:58:cc:58:00:26:70:0d:b2:c1:f2:13:2b:aa:d6:
4c:38:e8:3b:5f:9b:43:2d:55:b9:aa:90:fb:bc:2d:f8:19:ed:
f5:c4:48:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 22 00:09:08 2026 by rpki-client