Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/060cea-e920-40de-90da-8d49ebcae9b3/1/5gSc-H3Y8f1MgCS1psnqlPF7b70.mft
File: 5gSc-H3Y8f1MgCS1psnqlPF7b70.mft (raw, json)
Hash identifier: qmZjb1bX1JHH4Ye/rrlwHUbuvXC8ZpvVmI0AYhrmaU4=
Subject key identifier: 20:B9:BC:0B:AD:E5:2A:76:7B:E4:7D:15:B8:7D:6B:04:EF:96:B8:1F
Authority key identifier: E6:04:9C:F8:7D:D8:F1:FD:4C:80:24:B5:A6:C9:EA:94:F1:7B:6F:BD
Certificate issuer: /CN=e6049cf87dd8f1fd4c8024b5a6c9ea94f17b6fbd
Certificate serial: 019D389BEC3452B8CABD77A2C1D3051703F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5gSc-H3Y8f1MgCS1psnqlPF7b70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/060cea-e920-40de-90da-8d49ebcae9b3/1/5gSc-H3Y8f1MgCS1psnqlPF7b70.mft
Manifest number: 1823
Signing time: Sun 29 Mar 2026 08:00:35 +0000
Manifest this update: Sun 29 Mar 2026 08:00:35 +0000
Manifest next update: Mon 30 Mar 2026 08:00:35 +0000
Files and hashes: 1: 5gSc-H3Y8f1MgCS1psnqlPF7b70.crl (hash: sOuG+b1D0zzRV5AnKKEcgQFWaJqaSvJfwo1RInffPpA=)
2: t2FHnnEHf_6TSghs3_z2wcfp-bA.roa (hash: 91+RIg0AqSl330cDSTT6P3HSGmorFbL8LnE7d4GsH5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/060cea-e920-40de-90da-8d49ebcae9b3/1/5gSc-H3Y8f1MgCS1psnqlPF7b70.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/060cea-e920-40de-90da-8d49ebcae9b3/1/5gSc-H3Y8f1MgCS1psnqlPF7b70.mft
rsync://rpki.ripe.net/repository/DEFAULT/5gSc-H3Y8f1MgCS1psnqlPF7b70.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:ec:34:52:b8:ca:bd:77:a2:c1:d3:05:17:03:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6049cf87dd8f1fd4c8024b5a6c9ea94f17b6fbd
Validity
Not Before: Mar 29 08:00:35 2026 GMT
Not After : Mar 30 08:00:35 2026 GMT
Subject: CN=20b9bc0bade52a767be47d15b87d6b04ef96b81f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:db:b5:81:e5:95:f9:c1:5e:46:1d:f6:d3:c6:
21:6b:77:d0:60:1e:b1:be:04:19:64:ee:d7:33:0f:
4d:68:72:e3:2a:5c:5d:e2:51:d7:2b:17:1a:cb:b3:
ab:52:71:8e:af:9f:32:82:50:0f:83:82:59:e4:fe:
8b:03:b3:a1:e8:7d:9d:3a:3b:3b:68:14:aa:e3:6c:
e9:1e:da:66:52:b0:91:65:5c:7b:57:cc:7c:53:f7:
28:25:4e:f0:a1:67:8f:1d:03:54:42:7c:93:7c:39:
be:59:d2:b3:ff:0a:03:52:d6:84:3e:1e:b5:c8:bc:
5f:4d:b0:9e:85:a2:07:40:e1:7c:72:12:1f:8d:6f:
1b:bd:3f:6c:4f:a2:cf:ec:08:a8:85:23:52:45:b9:
a4:e7:ba:ea:5f:b6:f0:1c:a8:db:12:a0:ef:64:fa:
c7:8c:03:fb:27:15:1f:b4:b5:fa:c8:b5:11:c9:af:
90:72:27:5a:fc:45:b1:3c:2d:02:9c:00:54:2a:ce:
bc:bc:55:79:8d:c4:5c:3a:b1:ae:be:5c:9e:2b:c4:
5a:1d:dd:bd:a4:51:c2:9d:e0:92:4c:73:5d:00:0c:
72:1b:87:71:ce:d0:7f:ee:3b:2e:f1:e6:a7:d9:ae:
f9:0d:59:a0:41:b6:e6:b3:5c:a0:97:a2:ba:4f:4b:
94:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:B9:BC:0B:AD:E5:2A:76:7B:E4:7D:15:B8:7D:6B:04:EF:96:B8:1F
X509v3 Authority Key Identifier:
keyid:E6:04:9C:F8:7D:D8:F1:FD:4C:80:24:B5:A6:C9:EA:94:F1:7B:6F:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5gSc-H3Y8f1MgCS1psnqlPF7b70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/060cea-e920-40de-90da-8d49ebcae9b3/1/5gSc-H3Y8f1MgCS1psnqlPF7b70.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/060cea-e920-40de-90da-8d49ebcae9b3/1/5gSc-H3Y8f1MgCS1psnqlPF7b70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:0c:3d:e4:0d:23:8d:cd:37:95:34:16:91:a3:35:3b:e8:e7:
ff:f5:77:7b:50:55:88:9e:17:82:61:84:0b:0a:a0:09:d9:59:
63:5e:35:cd:e7:4a:e2:62:8f:1f:b4:78:a8:fe:6b:75:cf:94:
1f:76:19:ec:74:5b:0b:85:a3:98:14:35:ac:c3:08:87:a4:59:
2e:dc:92:19:9b:1b:a2:24:79:bd:ff:d3:79:30:d4:3e:fc:5d:
e9:19:cc:64:98:07:14:7e:aa:74:f2:c2:08:a9:40:30:2c:12:
9d:da:9f:97:7f:ac:a2:a4:57:b2:a1:fe:de:7d:54:99:f4:79:
50:18:13:ed:4a:df:d5:35:ba:8d:01:46:0d:7d:5a:0c:14:a7:
2a:b7:71:ce:aa:78:95:fd:15:fe:38:96:1d:cf:e4:07:2e:6d:
69:f0:48:a0:63:ac:50:ee:03:71:f7:6e:d7:bf:37:f0:7b:8c:
38:21:19:fc:ca:97:9f:1f:02:9b:29:e4:cf:66:8e:8f:1e:39:
af:0f:8b:d3:4b:1f:64:eb:5e:b9:8e:19:3c:4d:82:87:9d:c7:
f1:7c:8f:ca:d2:4e:a1:33:2b:a5:ac:41:17:24:ed:0b:62:b3:
ac:11:3e:3e:89:4f:f3:42:b3:f5:93:46:65:de:69:75:f1:f7:
df:00:05:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:15:58 2026 by rpki-client