Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/5f575f-992c-48e9-9158-d80f5ea62d44/1/ML5SuuTUjd3Jy-wgdqupHJU64S4.mft
File: ML5SuuTUjd3Jy-wgdqupHJU64S4.mft (raw, json)
Hash identifier: ADXDuzLE0ioNesLIRqYe+keHtPB0i8So+nn8TaSXCMs=
Subject key identifier: 99:B3:19:8B:22:7D:CB:20:C5:C0:D5:90:CE:A7:FD:8B:2B:FF:9A:9E
Authority key identifier: 30:BE:52:BA:E4:D4:8D:DD:C9:CB:EC:20:76:AB:A9:1C:95:3A:E1:2E
Certificate issuer: /CN=30be52bae4d48dddc9cbec2076aba91c953ae12e
Certificate serial: 019D37F75F107AE93E3BB41D3F3AFCF94F32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ML5SuuTUjd3Jy-wgdqupHJU64S4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/5f575f-992c-48e9-9158-d80f5ea62d44/1/ML5SuuTUjd3Jy-wgdqupHJU64S4.mft
Manifest number: 1522
Signing time: Sun 29 Mar 2026 05:00:51 +0000
Manifest this update: Sun 29 Mar 2026 05:00:51 +0000
Manifest next update: Mon 30 Mar 2026 05:00:51 +0000
Files and hashes: 1: HgFja2bLpVL2qd4TnI1Z6oWyNO8.roa (hash: xWIulmmQRVp8Zbt+l6Hy12uHB1PLbHRuuRd4Ash/YeI=)
2: ML5SuuTUjd3Jy-wgdqupHJU64S4.crl (hash: ZuugeEJY7l6uhB+uEqP+0L6NaEWGIp+hrGsf8gNNtEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/5f575f-992c-48e9-9158-d80f5ea62d44/1/ML5SuuTUjd3Jy-wgdqupHJU64S4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/5f575f-992c-48e9-9158-d80f5ea62d44/1/ML5SuuTUjd3Jy-wgdqupHJU64S4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ML5SuuTUjd3Jy-wgdqupHJU64S4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:5f:10:7a:e9:3e:3b:b4:1d:3f:3a:fc:f9:4f:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30be52bae4d48dddc9cbec2076aba91c953ae12e
Validity
Not Before: Mar 29 05:00:51 2026 GMT
Not After : Mar 30 05:00:51 2026 GMT
Subject: CN=99b3198b227dcb20c5c0d590cea7fd8b2bff9a9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:42:bd:0c:ca:50:92:47:5a:dc:03:d1:f8:dd:
ad:39:40:3c:71:cc:00:88:16:ea:6f:87:7d:97:2a:
d1:ab:2e:ff:58:5a:36:29:ba:40:c2:80:0b:55:70:
da:b1:59:b1:c6:4f:dc:14:c0:fa:dd:e5:a7:fd:b4:
9d:ec:26:4b:e4:76:0e:e2:f1:77:52:a1:39:32:5a:
d2:a0:e1:46:aa:16:35:a9:57:ba:91:c9:eb:64:eb:
dd:94:0f:f7:c7:41:e9:99:ec:82:47:8e:f2:53:f9:
d3:7d:a2:c0:4d:d3:4e:4b:b0:db:40:ca:64:d7:ab:
a7:b3:fd:47:c0:63:25:b5:8b:cf:8c:bf:e9:5d:b3:
b6:92:5c:20:61:54:c6:b8:be:4f:7f:fb:b2:6e:ac:
c3:88:c9:d9:58:79:5c:c2:b5:79:4b:21:8a:39:81:
aa:6d:48:dd:9c:b9:35:6d:a1:83:39:9c:96:e1:a3:
ea:09:98:9a:b6:06:d4:e6:3c:32:70:f5:52:ec:4e:
df:e9:b0:1d:bf:1f:0a:1b:d2:5c:bb:dd:db:3b:af:
60:6e:77:37:1c:47:7b:da:18:37:c6:09:e9:98:38:
65:e8:70:cd:a4:35:37:72:ce:d7:f2:3b:5b:21:27:
51:c9:d4:76:5f:94:c4:27:80:3b:2c:2e:4c:d5:89:
14:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:B3:19:8B:22:7D:CB:20:C5:C0:D5:90:CE:A7:FD:8B:2B:FF:9A:9E
X509v3 Authority Key Identifier:
keyid:30:BE:52:BA:E4:D4:8D:DD:C9:CB:EC:20:76:AB:A9:1C:95:3A:E1:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ML5SuuTUjd3Jy-wgdqupHJU64S4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5f575f-992c-48e9-9158-d80f5ea62d44/1/ML5SuuTUjd3Jy-wgdqupHJU64S4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5f575f-992c-48e9-9158-d80f5ea62d44/1/ML5SuuTUjd3Jy-wgdqupHJU64S4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:69:40:9b:3b:21:5d:e4:2b:75:4d:bf:de:f0:f9:6a:30:1a:
3f:e8:dd:47:da:bd:aa:a4:e6:9c:f7:65:e3:e1:59:42:4c:65:
f9:67:dc:04:e9:79:3a:3e:aa:91:7f:f3:3d:cd:ef:02:2a:ca:
97:9c:0c:32:ab:50:37:dd:f5:41:fb:de:2c:2d:1f:8a:e1:87:
5f:8a:99:07:4d:bb:dc:ca:62:16:47:51:6c:3a:d0:35:40:98:
4d:13:f9:dc:0b:71:c9:6d:85:ef:3c:f1:f4:bb:9b:db:c5:05:
60:c7:e7:f0:d2:63:6e:8d:3f:05:df:4b:2d:7d:cb:43:90:80:
ad:4d:58:54:b0:9e:ac:8c:e0:64:13:de:0a:c5:c2:96:00:fe:
ee:14:80:d6:1e:e7:cc:e4:6f:8e:1c:da:41:70:6d:36:95:2b:
1c:73:a0:2d:ad:0c:d0:da:eb:1d:53:8b:72:e8:62:9c:b4:47:
3f:52:65:b4:59:db:d2:ec:5d:c9:2e:d4:a3:e6:3e:3a:12:e4:
a7:18:39:4b:33:79:de:07:bc:ab:49:68:a4:8b:d5:bb:2e:9b:
9d:e4:d0:11:f8:f7:18:b2:a9:ac:55:4e:f9:1f:c5:a3:39:3f:
4f:a2:2d:8b:9f:c1:68:14:3f:ea:5a:c1:d0:30:b1:84:99:04:
de:73:af:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:50:14 2026 by rpki-client