Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.mft
File: 5TrZtDK7g9FBxIDe54vDX_R8tyw.mft (raw, json)
Hash identifier: v5w6k5Xai+eZQy121UW3UFEJDUslViweTJETpyazAu8=
Subject key identifier: 9E:A7:84:7C:32:B3:F2:15:4E:A8:41:5B:F5:16:B0:92:59:94:B3:11
Authority key identifier: E5:3A:D9:B4:32:BB:83:D1:41:C4:80:DE:E7:8B:C3:5F:F4:7C:B7:2C
Certificate issuer: /CN=e53ad9b432bb83d141c480dee78bc35ff47cb72c
Certificate serial: 019D3865D12A1AC74BE67F293BCDEE6DE7A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5TrZtDK7g9FBxIDe54vDX_R8tyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 07:01:29 +0000
Manifest this update: Sun 29 Mar 2026 07:01:29 +0000
Manifest next update: Mon 30 Mar 2026 07:01:29 +0000
Files and hashes: 1: 22YItsxKYLcgNNKzIexf7AwBkoI.roa (hash: o0O379ObLu85XEWjeGzNjJwnF/cIhXVQ3F8uTxlowzs=)
2: 5TrZtDK7g9FBxIDe54vDX_R8tyw.crl (hash: Ah/gIJ882bLnoARcX54DR3gtJ/PCfM+FmtMev9TV2Zw=)
3: kHScl5Ibz629FSHvZmCUNM5bVMc.roa (hash: 7czMzsVRqlDw8LwOhs7NR54XvbzvMnmeYfTf1rgt4PU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5TrZtDK7g9FBxIDe54vDX_R8tyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:d1:2a:1a:c7:4b:e6:7f:29:3b:cd:ee:6d:e7:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e53ad9b432bb83d141c480dee78bc35ff47cb72c
Validity
Not Before: Mar 29 07:01:29 2026 GMT
Not After : Mar 30 07:01:29 2026 GMT
Subject: CN=9ea7847c32b3f2154ea8415bf516b0925994b311
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b9:38:08:dc:e3:6f:c3:18:9f:5e:29:9c:ee:
ac:e2:34:02:5b:04:55:f7:ec:9f:0f:79:61:aa:18:
20:da:b5:eb:65:c1:2f:4f:b3:1b:bf:21:55:49:e3:
22:61:27:93:e3:4f:3e:ac:f9:9c:43:a9:b7:08:a0:
bd:e7:7c:c2:59:e0:5e:f5:c3:17:e4:c6:81:04:08:
32:eb:49:6f:b3:9a:d0:39:e6:8f:20:e2:3f:8c:10:
ae:19:a9:87:51:af:e8:a5:62:e2:1e:4e:e3:45:22:
26:6e:1a:8d:ab:d1:d9:22:73:17:b8:3a:7b:f1:31:
04:37:80:89:80:48:19:a5:c3:ae:25:6d:6c:bd:f8:
15:44:48:e2:5c:39:6b:86:7e:c4:ee:38:df:06:fa:
e8:c4:9f:18:41:60:59:45:51:c7:6a:75:63:e3:5f:
98:de:11:35:68:27:0e:a3:ab:ff:63:c4:23:90:80:
24:ce:46:b2:09:22:b6:f2:ca:58:30:ba:e5:51:c0:
ac:75:93:5c:3d:27:0f:3a:24:ef:bd:24:6f:6b:cb:
9c:d5:be:b8:57:61:77:c4:0c:6e:a9:d3:e2:11:d3:
01:8e:ea:23:d0:8c:7a:01:00:53:3e:ec:c6:89:e4:
f9:08:38:6a:00:ed:cc:89:57:4b:13:dd:81:c2:02:
98:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:A7:84:7C:32:B3:F2:15:4E:A8:41:5B:F5:16:B0:92:59:94:B3:11
X509v3 Authority Key Identifier:
keyid:E5:3A:D9:B4:32:BB:83:D1:41:C4:80:DE:E7:8B:C3:5F:F4:7C:B7:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5TrZtDK7g9FBxIDe54vDX_R8tyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:80:1f:25:a6:0f:59:e1:46:b2:05:54:a0:21:92:52:a9:10:
17:51:2b:2c:01:20:86:a3:97:c5:1d:c9:b3:6d:5f:a4:22:28:
6a:57:9f:cf:64:92:9b:d8:89:27:b9:75:03:fc:ed:86:93:73:
50:35:a7:81:8d:50:ba:ec:47:dc:f8:9f:c4:16:00:e6:5e:c7:
3c:56:58:78:49:33:9a:e5:fb:36:2f:b1:ec:5f:74:8d:d6:15:
94:65:31:da:71:a7:c3:a0:6b:62:f5:33:62:74:bc:f7:e0:10:
67:6f:a2:09:37:24:49:5f:fc:b8:e4:6a:40:df:dd:9d:e5:1f:
18:47:39:ce:fd:4a:58:89:b5:7d:23:0b:08:6b:90:c3:db:21:
a6:91:a0:dc:9c:d0:6b:c6:4c:e1:cc:39:41:a6:9d:4c:37:c4:
33:c5:03:43:11:1d:30:13:2a:2c:15:0a:4e:0b:6a:27:d9:e7:
9d:b9:b4:38:c2:94:ee:10:57:2f:b5:ca:c1:c9:fa:26:0f:aa:
c8:6a:e5:05:28:18:fc:fc:d9:a1:51:e0:35:b4:73:0f:62:9e:
e9:29:d1:b8:61:b1:b7:d3:f3:52:7e:91:01:6e:c3:25:b9:7f:
64:e6:2f:94:67:f3:29:92:47:7c:a7:fd:60:93:59:39:15:3e:
ef:7c:79:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:14 2026 by rpki-client