Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/5xhRIOejuWK5_-Sr7RbQqjoyBRg.mft
File: 5xhRIOejuWK5_-Sr7RbQqjoyBRg.mft (raw, json)
Hash identifier: CU2jjq71IrKVbcSuiuo0UEnmco2Hwk7saj4PMSTJLxk=
Subject key identifier: 66:37:2D:D6:94:2E:1D:DC:6F:8F:6F:7A:FD:60:D8:86:75:67:81:6E
Authority key identifier: E7:18:51:20:E7:A3:B9:62:B9:FF:E4:AB:ED:16:D0:AA:3A:32:05:18
Certificate issuer: /CN=e7185120e7a3b962b9ffe4abed16d0aa3a320518
Certificate serial: 019D38D347B845E4D746B7D2C3679ABFFCC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5xhRIOejuWK5_-Sr7RbQqjoyBRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/5xhRIOejuWK5_-Sr7RbQqjoyBRg.mft
Manifest number: 1263
Signing time: Sun 29 Mar 2026 09:01:03 +0000
Manifest this update: Sun 29 Mar 2026 09:01:03 +0000
Manifest next update: Mon 30 Mar 2026 09:01:03 +0000
Files and hashes: 1: 5xhRIOejuWK5_-Sr7RbQqjoyBRg.crl (hash: keo8DKVRBDkZ/TVRNia4LyFP6k0pRvawbvML2wM5aWQ=)
2: yKWW9KUUcuSOBUZmFNhXRUNBXdk.roa (hash: BmUfImdK1cFMPb6WqiazHO8FeAIX1xO92EWzQ8s2qXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/5xhRIOejuWK5_-Sr7RbQqjoyBRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/5xhRIOejuWK5_-Sr7RbQqjoyBRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/5xhRIOejuWK5_-Sr7RbQqjoyBRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:47:b8:45:e4:d7:46:b7:d2:c3:67:9a:bf:fc:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7185120e7a3b962b9ffe4abed16d0aa3a320518
Validity
Not Before: Mar 29 09:01:03 2026 GMT
Not After : Mar 30 09:01:03 2026 GMT
Subject: CN=66372dd6942e1ddc6f8f6f7afd60d8867567816e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:37:3b:82:4f:f8:eb:65:fd:72:08:fa:6d:c3:
01:b7:06:01:fe:3a:48:c7:68:6b:30:f4:35:ef:e7:
a2:81:0b:d3:5b:b4:93:5b:07:c6:a0:17:e8:db:de:
d7:ee:e2:94:3e:cb:88:a5:d6:88:d5:66:69:23:b4:
ab:da:54:84:6c:38:b9:10:22:15:f9:3c:d7:cd:fc:
4a:86:95:18:d1:f5:84:ff:1f:bc:8f:88:d6:2d:5a:
99:53:02:d9:b4:d7:72:2a:04:5d:e5:12:37:ee:ef:
0f:53:0e:5b:9b:01:75:d5:ac:53:ac:16:e9:d8:2d:
24:63:63:6a:53:41:c5:8f:38:82:42:31:49:a9:08:
52:5a:09:11:75:09:b1:b7:bb:4f:b6:0f:bd:4f:8a:
b5:25:04:7c:f5:2e:22:e4:f8:3d:93:d7:d2:9c:c7:
37:05:1a:d3:ee:7a:16:c9:ee:b3:cc:fd:ec:6f:8b:
4e:0b:6e:08:74:5e:4f:e4:62:00:3d:4c:67:9a:eb:
a2:55:40:0f:64:8d:38:15:16:c1:af:4d:ab:0c:4e:
ad:af:d4:28:f0:db:09:28:9d:89:7d:3f:0a:b0:81:
18:19:f6:d3:ae:cc:a2:9a:e8:1f:cd:40:6d:71:07:
72:89:74:82:3b:c4:98:ad:d4:4d:8f:db:2f:a7:e8:
31:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:37:2D:D6:94:2E:1D:DC:6F:8F:6F:7A:FD:60:D8:86:75:67:81:6E
X509v3 Authority Key Identifier:
keyid:E7:18:51:20:E7:A3:B9:62:B9:FF:E4:AB:ED:16:D0:AA:3A:32:05:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5xhRIOejuWK5_-Sr7RbQqjoyBRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/5xhRIOejuWK5_-Sr7RbQqjoyBRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/5xhRIOejuWK5_-Sr7RbQqjoyBRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:2c:37:7e:fc:96:dd:8e:ba:62:6e:98:e6:77:d7:79:2b:ab:
01:21:e0:62:4d:fb:32:54:38:c8:56:a9:a5:2a:05:dd:43:e8:
f5:e3:94:a4:b7:66:3e:b8:69:27:6d:cf:2b:53:48:9e:9a:a1:
f3:2c:20:45:f3:f0:2d:a0:23:24:09:7c:60:3f:cf:0e:c8:9e:
28:50:f0:5c:db:36:18:69:de:69:38:3f:c1:9a:2e:aa:56:e0:
79:61:c5:6d:86:bc:00:f9:79:12:ac:6d:3d:19:ee:f3:76:3a:
50:24:8a:48:d1:ee:ce:32:ff:de:03:d4:f8:41:8b:53:62:eb:
fa:99:78:bf:1e:a0:79:25:0f:38:a6:c1:66:b0:c9:df:53:39:
75:6e:c2:0f:f6:20:4d:c1:70:e9:23:bc:18:59:c9:6f:89:ca:
05:84:29:c0:40:f4:a0:f0:63:8d:30:f7:8d:b8:af:5a:85:2f:
a0:57:7c:4f:dc:d6:4c:a7:dc:6c:54:90:53:02:a3:b3:2c:ca:
d6:bb:b2:e5:4d:d0:6e:8a:26:7f:1b:c4:ce:71:af:7e:ea:ae:
e2:aa:47:c1:0a:3e:47:e7:f0:95:b9:d7:1d:54:6f:33:39:52:
64:19:9a:08:86:a6:c8:c2:5e:53:8d:fa:ad:ff:58:3e:34:0f:
c7:08:2e:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:03:07 2026 by rpki-client