Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/5jGwgNTqb9Bham5wHHyBXW_4fAA.mft
File: 5jGwgNTqb9Bham5wHHyBXW_4fAA.mft (raw, json)
Hash identifier: K8WuTzFJrkV7SvmrXcikhSiAKSGzw7KszzKwnxMDmuQ=
Subject key identifier: A8:94:A8:57:3A:88:B5:66:30:96:66:E5:EC:B0:AF:65:ED:4C:68:A6
Authority key identifier: E6:31:B0:80:D4:EA:6F:D0:61:6A:6E:70:1C:7C:81:5D:6F:F8:7C:00
Certificate issuer: /CN=e631b080d4ea6fd0616a6e701c7c815d6ff87c00
Certificate serial: 019D37C11FD5AB389137F117EA88EE16B56D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5jGwgNTqb9Bham5wHHyBXW_4fAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/5jGwgNTqb9Bham5wHHyBXW_4fAA.mft
Manifest number: 0A5D
Signing time: Sun 29 Mar 2026 04:01:36 +0000
Manifest this update: Sun 29 Mar 2026 04:01:36 +0000
Manifest next update: Mon 30 Mar 2026 04:01:36 +0000
Files and hashes: 1: 3Uu6-Km0t7pl2GLMEbSI9_TLxag.roa (hash: hXLyK65nAY5+Ut+o0gb/BjxofeYx4PkadbFG04BKn8s=)
2: 4RhMZahyPAwo146TEpPKu9ePT2I.roa (hash: tBGvizwGCjR2IcH4F8OLjMl+yMIqhcGRdbR2C5pIbnk=)
3: 5jGwgNTqb9Bham5wHHyBXW_4fAA.crl (hash: Ms7zIjtFkksv05N0adwesElX7LRWxTfjY1sdIGo7EdE=)
4: H4QLFR4-VWtTH3wvuaow12NPB4c.roa (hash: bdQlsc3BPSHO6Zn9QaadsNsV4OnEPV5+i5GaKzval08=)
5: VqQ8LXtIPe1fQZeq9wCKCKkt2vk.roa (hash: ZjsRHcqnbmBi1pKtOmtj/GMa3B6D/+8G+2zRtMncp6A=)
6: p3_p0oefeCWIGWl--B6scwMOl68.roa (hash: TzUMNS4PCBQmbQd3CE8J49kK3X/KRKK4UzkYkcKRrPc=)
7: x1IDat6YDBdzEhpue2RnoEodHRk.roa (hash: GNbqBnSl6BYmQm/dEuII/J8pPs8l3TWXFnBRJpdqWP0=)
8: zPofNoaI2RS9IpHftjHCFMeYgVg.roa (hash: GrlWnZ81qO00EP6m7P5v1VXEnw8zBrYaQ+SSPFWD5L0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/5jGwgNTqb9Bham5wHHyBXW_4fAA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/5jGwgNTqb9Bham5wHHyBXW_4fAA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5jGwgNTqb9Bham5wHHyBXW_4fAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c1:1f:d5:ab:38:91:37:f1:17:ea:88:ee:16:b5:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e631b080d4ea6fd0616a6e701c7c815d6ff87c00
Validity
Not Before: Mar 29 04:01:36 2026 GMT
Not After : Mar 30 04:01:36 2026 GMT
Subject: CN=a894a8573a88b566309666e5ecb0af65ed4c68a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1c:96:26:66:97:f6:b9:41:71:f2:bb:61:ca:
45:fd:d1:1c:fb:2a:01:03:94:e8:8f:a2:5e:29:07:
0b:fd:a3:bd:80:f4:c9:30:ab:62:29:6e:af:0a:31:
6d:a4:e2:2c:c9:cb:7b:c9:87:d1:95:26:f5:c4:4c:
13:ed:d0:72:58:dc:8c:89:7b:c7:36:d7:6c:50:ce:
7f:43:d4:da:a7:9c:18:d5:7c:23:19:f9:20:a1:2c:
9c:e0:b7:2f:8f:1f:d9:38:1a:e0:aa:ab:f6:e9:1e:
89:ac:22:b6:51:a8:4f:7d:97:7d:a5:7f:12:48:94:
e5:2f:50:7e:32:8e:ae:53:48:33:85:90:b8:c2:30:
55:16:e5:e9:03:d6:cb:7d:95:bc:e0:1b:65:37:82:
5e:30:7f:7c:81:1a:15:57:bd:c8:4b:54:66:ac:49:
88:46:31:c0:ce:83:bc:d1:dd:6d:9c:4a:de:94:fa:
14:28:b4:50:e7:a6:57:48:15:8d:5c:e7:4f:bc:00:
5f:6a:04:ae:2e:a2:af:cc:10:38:dc:a5:16:eb:ea:
6e:70:dc:e2:81:0f:7c:a4:98:d0:f3:db:91:a8:cf:
ee:9d:f9:1a:87:e0:33:9c:e5:73:63:dd:9a:b4:4e:
ce:2e:ea:c8:95:0c:ef:f9:b1:53:db:f0:ce:a4:7c:
23:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:94:A8:57:3A:88:B5:66:30:96:66:E5:EC:B0:AF:65:ED:4C:68:A6
X509v3 Authority Key Identifier:
keyid:E6:31:B0:80:D4:EA:6F:D0:61:6A:6E:70:1C:7C:81:5D:6F:F8:7C:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5jGwgNTqb9Bham5wHHyBXW_4fAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/5jGwgNTqb9Bham5wHHyBXW_4fAA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/5jGwgNTqb9Bham5wHHyBXW_4fAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:4e:2f:7e:74:c6:5e:d5:b9:c6:b9:be:00:9a:20:70:b9:42:
f0:50:01:24:27:18:8b:76:b0:eb:71:34:10:28:63:88:d3:48:
6f:ed:40:56:27:27:8b:31:86:7b:67:cd:91:6b:30:7a:eb:0f:
b3:55:ee:3a:e6:b1:7c:68:3a:8d:eb:fc:ab:ea:70:3a:9e:f0:
35:4e:8c:a0:46:f4:a3:d9:80:1f:f0:77:a4:c9:48:f8:b9:58:
fc:6d:aa:f6:48:5a:52:81:02:4b:2a:bb:f3:8a:36:e9:f2:11:
71:c4:b6:ca:6e:70:66:ab:30:71:cb:66:77:dc:c6:28:67:18:
84:30:1e:bd:1b:16:4c:41:c2:de:12:ff:90:93:8f:20:ae:bb:
fe:f9:ee:6a:aa:5d:3e:3f:a9:d4:0d:b6:aa:fd:ef:fd:cb:4f:
45:07:2e:12:00:74:c0:c7:85:a0:22:53:15:01:b1:f1:ef:ee:
1c:de:36:be:7e:4b:42:5c:ea:95:d3:43:48:15:b9:5e:34:38:
91:a8:a0:9c:3e:5d:49:7c:65:b6:44:0d:bf:e7:a3:b2:b4:d4:
96:6a:bd:cc:99:87:28:0e:7a:20:c3:64:3c:96:61:04:cf:c6:
bd:30:4f:59:1c:ea:be:c8:b1:db:fa:0a:15:26:f0:33:6c:d3:
5c:d4:a0:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:37:45 2026 by rpki-client