Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/897092-0750-4d96-b32f-5f205236de1f/1/5NJxw_qQOlkP31SJlEnmmPLpxjI.mft
File: 5NJxw_qQOlkP31SJlEnmmPLpxjI.mft (raw, json)
Hash identifier: g9N9b3eporYxJtJ+QFwAOL1gAsJcnRCBvIS9Hh7pCaQ=
Subject key identifier: 30:CC:CB:DA:3B:E2:E4:67:E7:32:D6:46:45:F5:77:0E:D4:1F:3C:F0
Authority key identifier: E4:D2:71:C3:FA:90:3A:59:0F:DF:54:89:94:49:E6:98:F2:E9:C6:32
Certificate issuer: /CN=e4d271c3fa903a590fdf54899449e698f2e9c632
Certificate serial: 019D3940D8BA3BCE4037929F3C000DBFEC82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5NJxw_qQOlkP31SJlEnmmPLpxjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/897092-0750-4d96-b32f-5f205236de1f/1/5NJxw_qQOlkP31SJlEnmmPLpxjI.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 11:00:44 +0000
Manifest this update: Sun 29 Mar 2026 11:00:44 +0000
Manifest next update: Mon 30 Mar 2026 11:00:44 +0000
Files and hashes: 1: 5NJxw_qQOlkP31SJlEnmmPLpxjI.crl (hash: YfTIEe8CWoqyd+8cuAaRZkM1skALdXp9WbY1uLbVmoo=)
2: 9ODgGDzFJ29sZbO5Y0-xsyNjK4c.roa (hash: OkUtbla+KQC+6tAPqsg9uxnsiQTpUI77ifjU89ybPE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/897092-0750-4d96-b32f-5f205236de1f/1/5NJxw_qQOlkP31SJlEnmmPLpxjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/897092-0750-4d96-b32f-5f205236de1f/1/5NJxw_qQOlkP31SJlEnmmPLpxjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5NJxw_qQOlkP31SJlEnmmPLpxjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:d8:ba:3b:ce:40:37:92:9f:3c:00:0d:bf:ec:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4d271c3fa903a590fdf54899449e698f2e9c632
Validity
Not Before: Mar 29 11:00:44 2026 GMT
Not After : Mar 30 11:00:44 2026 GMT
Subject: CN=30cccbda3be2e467e732d64645f5770ed41f3cf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:91:8c:5a:f0:f9:53:64:27:e6:c9:15:09:a0:
78:b9:49:de:c3:ea:40:0d:56:5d:f6:8a:4c:02:12:
ea:b4:01:91:d6:37:a9:8e:97:06:80:a9:c0:9a:59:
c3:b9:a5:d5:bd:8d:62:cf:49:5b:66:29:7a:b1:46:
00:05:f2:b5:b8:d2:36:67:ff:6d:c9:10:e5:67:fa:
e5:68:b4:37:b6:4e:c3:fd:89:3e:4f:b2:92:e4:6e:
b6:b7:33:bd:bb:94:78:2d:8e:1c:c6:54:7f:e9:07:
aa:7d:26:4a:82:70:88:a5:fb:f7:25:de:67:bc:86:
36:67:3a:42:bb:85:c7:6d:ec:e2:7a:fa:e0:02:bc:
0c:c9:65:a7:81:1f:26:a8:a3:67:e8:5c:62:2d:99:
0c:5c:f8:c7:a9:e2:b7:94:36:11:93:8e:03:24:f3:
4c:55:61:aa:8d:88:c3:b1:ef:8c:f5:9f:2f:25:32:
82:51:76:b4:be:ef:5a:41:29:a3:63:63:cf:f5:53:
69:44:84:94:ec:39:f7:6c:19:7e:66:16:7b:eb:58:
ec:87:99:50:50:9a:30:36:ca:d6:d5:e0:a7:f6:ff:
6f:03:93:67:43:ce:65:b5:e9:9d:70:af:1a:2b:62:
37:d2:f0:0a:bd:c7:dc:b6:35:a7:fb:0d:95:82:84:
db:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:CC:CB:DA:3B:E2:E4:67:E7:32:D6:46:45:F5:77:0E:D4:1F:3C:F0
X509v3 Authority Key Identifier:
keyid:E4:D2:71:C3:FA:90:3A:59:0F:DF:54:89:94:49:E6:98:F2:E9:C6:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5NJxw_qQOlkP31SJlEnmmPLpxjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/897092-0750-4d96-b32f-5f205236de1f/1/5NJxw_qQOlkP31SJlEnmmPLpxjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/897092-0750-4d96-b32f-5f205236de1f/1/5NJxw_qQOlkP31SJlEnmmPLpxjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:22:0d:e2:45:02:7d:81:5e:22:1a:34:e9:90:23:01:50:7a:
ee:41:be:9c:35:04:b8:59:c9:a6:95:9e:81:8c:6a:57:37:27:
9b:ad:d0:05:55:84:2d:40:ed:49:29:6d:d3:ce:f5:dd:54:34:
85:04:ee:46:66:16:f2:15:55:b9:30:4f:21:2a:cd:e9:cf:fb:
d4:e3:e5:c9:66:cb:58:6f:e2:6e:d5:8f:57:ca:5a:6d:66:ad:
0b:a7:45:60:26:69:a5:c7:4d:a8:9a:4f:bb:c5:42:b8:ec:63:
e8:e7:a2:4c:7e:c3:98:17:f1:e9:75:80:6d:73:75:92:4a:c9:
70:61:76:d4:74:8a:56:8d:92:a1:e1:ee:7b:45:3e:5a:f9:69:
4a:88:27:3f:3e:36:0f:6a:40:57:3d:bb:41:bd:73:1c:be:49:
a0:f2:0d:10:aa:65:0b:24:9c:1e:35:08:44:07:33:d6:3f:c1:
a6:a5:47:57:69:90:92:6a:3b:66:cb:7f:f3:e6:cc:a3:e3:06:
4b:7f:44:5e:22:46:b0:f4:f5:3e:a7:c8:81:85:2a:aa:15:3a:
58:58:de:bf:0e:6c:f2:bc:1b:13:01:81:52:69:c4:e7:e3:eb:
04:1f:3e:ed:3c:04:88:17:b3:9f:13:af:cb:b5:a9:cd:a8:a1:
3f:49:4f:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:26:36 2026 by rpki-client