Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/440877-319d-4630-a691-7991b4e4bfa2/1/5JWsuv5G7y9NbFH88jvXL2Oc_Qs.mft
File: 5JWsuv5G7y9NbFH88jvXL2Oc_Qs.mft (raw, json)
Hash identifier: f7IgArPNK/UB07DKvxxjlAA2YT6jFc6ezqrdwNzjq8o=
Subject key identifier: 28:72:66:76:40:0D:02:63:B2:3C:CA:2C:EC:E7:86:7A:86:C5:BD:A3
Authority key identifier: E4:95:AC:BA:FE:46:EF:2F:4D:6C:51:FC:F2:3B:D7:2F:63:9C:FD:0B
Certificate issuer: /CN=e495acbafe46ef2f4d6c51fcf23bd72f639cfd0b
Certificate serial: 019D389C020849EE498AE955E21CBF3940FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5JWsuv5G7y9NbFH88jvXL2Oc_Qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/440877-319d-4630-a691-7991b4e4bfa2/1/5JWsuv5G7y9NbFH88jvXL2Oc_Qs.mft
Manifest number: 0B49
Signing time: Sun 29 Mar 2026 08:00:41 +0000
Manifest this update: Sun 29 Mar 2026 08:00:41 +0000
Manifest next update: Mon 30 Mar 2026 08:00:41 +0000
Files and hashes: 1: 5JWsuv5G7y9NbFH88jvXL2Oc_Qs.crl (hash: 0P9ql0IIQ7Q9FTbyrWKXmCgVwc4kKFj6DxdTWhIXSQs=)
2: o45AvLtTXWpofzL1ORN3GJy42Sw.roa (hash: Kb4YnS6qGzK3YXYEHAE784icfkL1K33dQHPHFIXS48c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/440877-319d-4630-a691-7991b4e4bfa2/1/5JWsuv5G7y9NbFH88jvXL2Oc_Qs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/440877-319d-4630-a691-7991b4e4bfa2/1/5JWsuv5G7y9NbFH88jvXL2Oc_Qs.mft
rsync://rpki.ripe.net/repository/DEFAULT/5JWsuv5G7y9NbFH88jvXL2Oc_Qs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:02:08:49:ee:49:8a:e9:55:e2:1c:bf:39:40:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e495acbafe46ef2f4d6c51fcf23bd72f639cfd0b
Validity
Not Before: Mar 29 08:00:41 2026 GMT
Not After : Mar 30 08:00:41 2026 GMT
Subject: CN=28726676400d0263b23cca2cece7867a86c5bda3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:29:85:08:0c:59:77:e7:d3:81:32:b7:47:84:
db:34:19:77:72:e5:59:b6:6c:6c:dc:97:45:da:66:
63:10:34:95:28:98:9f:13:e8:50:61:05:37:61:ea:
50:69:a5:29:20:4f:a9:67:aa:e8:72:9f:5e:25:dc:
fe:ef:11:61:12:e2:09:98:f3:de:29:b4:42:12:a4:
82:2c:95:81:6c:6d:bb:11:98:38:de:08:f1:6c:d4:
e5:f9:b6:17:3b:2e:48:31:b7:3d:8e:6d:47:7d:89:
9e:ce:aa:77:f8:8c:b4:82:25:12:d0:0c:d4:e9:12:
2d:ca:91:19:a6:c0:b6:dd:45:51:78:d4:ff:d1:5e:
be:99:e9:7e:79:22:64:51:b1:48:62:55:d1:a9:f5:
a0:96:c1:ac:a3:0d:82:a8:08:5c:07:37:32:1b:00:
ed:bc:bb:4a:2b:ce:a3:ec:c2:7a:4b:02:2d:1f:cb:
01:6a:30:3f:54:21:ce:6a:cb:36:65:be:ba:70:53:
d9:cb:ff:90:4f:49:06:9a:a6:5e:4c:55:47:e3:8b:
d8:52:40:92:d8:7d:d4:c1:13:c9:61:37:d2:3d:8c:
f5:07:02:e0:2a:01:13:e0:bc:31:5a:10:44:17:c4:
23:cc:f7:05:fc:88:48:5f:32:10:20:00:6c:8b:6a:
e5:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:72:66:76:40:0D:02:63:B2:3C:CA:2C:EC:E7:86:7A:86:C5:BD:A3
X509v3 Authority Key Identifier:
keyid:E4:95:AC:BA:FE:46:EF:2F:4D:6C:51:FC:F2:3B:D7:2F:63:9C:FD:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5JWsuv5G7y9NbFH88jvXL2Oc_Qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/440877-319d-4630-a691-7991b4e4bfa2/1/5JWsuv5G7y9NbFH88jvXL2Oc_Qs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/440877-319d-4630-a691-7991b4e4bfa2/1/5JWsuv5G7y9NbFH88jvXL2Oc_Qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:7f:a6:97:7c:04:66:91:21:7a:e0:40:bb:82:11:50:4a:d7:
1d:b5:dc:a3:f9:71:03:86:6c:15:f9:e1:09:30:40:65:18:21:
96:e3:01:50:14:b7:7d:83:05:8c:7c:bc:ce:86:31:72:af:68:
19:1e:45:f8:3d:48:53:47:64:84:a0:f6:6c:f4:06:34:68:e2:
07:b3:09:aa:d0:68:8b:3e:20:81:dd:f2:4f:c3:20:99:d1:bc:
8e:62:8e:a0:94:c4:ba:13:3d:53:c8:8e:20:f1:51:b0:25:0e:
06:eb:7f:a9:bd:80:a9:f9:0f:aa:1a:91:9d:56:27:12:6c:11:
c0:20:83:ae:dd:f4:24:8e:a7:8e:ad:90:2c:6d:ee:9d:1c:21:
36:81:dc:fe:5c:ff:00:e8:56:8b:4d:4a:0c:a9:73:ea:7f:19:
72:1f:81:42:ec:fb:c0:ef:f9:df:88:86:34:7d:56:c5:75:05:
0b:78:25:f1:e1:f6:31:84:69:21:6f:bc:ef:b0:c7:da:1f:1b:
7c:ec:b0:cf:6b:21:e0:1b:2e:00:77:e2:32:66:bd:91:9d:c6:
d8:13:ca:9a:76:2f:d7:b2:18:f9:e1:48:7b:6b:37:95:9e:5a:
b1:a0:5f:78:08:13:e4:d9:dc:89:db:5b:b6:cc:c7:ee:f8:ce:
76:42:ad:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:06:16 2026 by rpki-client