Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/5c949fM57nd9p0khCpbs7Za38uc.mft
File: 5c949fM57nd9p0khCpbs7Za38uc.mft (raw, json)
Hash identifier: FQnsW4gLbJ8JHWa16Fo5Pok4LULODJzmSI36aNGtZsQ=
Subject key identifier: 76:43:F7:13:EA:13:04:C9:DF:03:3F:D7:3D:7F:90:AF:84:93:94:C8
Authority key identifier: E5:CF:78:F5:F3:39:EE:77:7D:A7:49:21:0A:96:EC:ED:96:B7:F2:E7
Certificate issuer: /CN=e5cf78f5f339ee777da749210a96eced96b7f2e7
Certificate serial: 019D37526FCCEB0FFD4DC4EC95DB54D74BCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5c949fM57nd9p0khCpbs7Za38uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/5c949fM57nd9p0khCpbs7Za38uc.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 02:00:42 +0000
Manifest this update: Sun 29 Mar 2026 02:00:42 +0000
Manifest next update: Mon 30 Mar 2026 02:00:42 +0000
Files and hashes: 1: 3MgBeBik8U9z4rsKZn1-j_MeR28.roa (hash: Gwe+UNs1EWrBxp855Kdh43FiD7zP/RqH6MQJ/cKKklc=)
2: 5c949fM57nd9p0khCpbs7Za38uc.crl (hash: yi8LWtlzMq+JcnKmoc4AHl7ofEXeKucrDPuYmq6uexQ=)
3: Xyw_X4GzbwozPV7bmdhreFXRSgQ.roa (hash: bf34zgz/96MaGcKXCeZJRm7nCxKcToEP6ozueo2hqgk=)
4: w0ihDXGfTZCgkEenDCg532cQiaA.roa (hash: FD0rcoCr63ClMKaKqYqlIdIfUuQ7pv+xZCDIgLRthGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/5c949fM57nd9p0khCpbs7Za38uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/5c949fM57nd9p0khCpbs7Za38uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/5c949fM57nd9p0khCpbs7Za38uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:6f:cc:eb:0f:fd:4d:c4:ec:95:db:54:d7:4b:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5cf78f5f339ee777da749210a96eced96b7f2e7
Validity
Not Before: Mar 29 02:00:42 2026 GMT
Not After : Mar 30 02:00:42 2026 GMT
Subject: CN=7643f713ea1304c9df033fd73d7f90af849394c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ed:c6:d9:8e:dd:a0:4e:6b:aa:d3:73:20:3e:
41:97:f4:25:42:8e:d4:08:4f:d4:37:f1:30:df:af:
1d:75:7d:73:03:2a:36:5e:e7:98:cc:3c:73:2a:21:
01:1d:ce:37:8a:a2:e8:24:f9:74:0e:d2:d4:0c:7c:
40:72:fe:b1:18:89:6d:f3:f2:9b:65:8f:ca:f2:46:
c3:d1:96:94:99:fe:57:0b:fe:76:c7:54:f0:bc:d1:
d4:fe:ce:8a:67:76:de:20:e4:84:63:52:cc:3b:f6:
8e:ad:67:c2:9d:c1:b6:dc:9a:51:04:6b:a3:9b:7f:
17:6d:2c:fc:56:51:f8:c3:c5:75:7c:c3:bd:da:d9:
68:1d:58:cf:f7:0e:3b:0d:3a:78:38:cf:e7:75:36:
90:aa:b7:e9:66:c7:60:da:b7:7f:3a:ec:80:39:68:
4b:58:97:ca:d1:65:1e:92:12:27:0c:d5:df:8e:a4:
4e:69:a2:33:0f:aa:a9:8e:0c:33:64:43:c8:f4:16:
b9:19:f2:13:a0:32:81:cc:05:07:30:ad:16:7b:e6:
b1:81:d7:19:35:81:ff:55:ec:eb:ed:f9:11:14:db:
83:9d:0e:81:2a:1b:58:0b:a4:6d:f4:18:76:f7:d6:
70:02:52:68:93:48:0e:12:81:f3:ef:6c:eb:6b:72:
23:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:43:F7:13:EA:13:04:C9:DF:03:3F:D7:3D:7F:90:AF:84:93:94:C8
X509v3 Authority Key Identifier:
keyid:E5:CF:78:F5:F3:39:EE:77:7D:A7:49:21:0A:96:EC:ED:96:B7:F2:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c949fM57nd9p0khCpbs7Za38uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/5c949fM57nd9p0khCpbs7Za38uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/5c949fM57nd9p0khCpbs7Za38uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:3b:ae:20:c3:15:78:d3:80:ee:0b:f8:cb:9e:86:d4:d7:d5:
41:60:a2:80:ee:04:e8:5e:06:80:5d:b3:d8:58:5b:3a:e6:8b:
84:b4:e2:0f:87:11:fe:83:fd:e9:f8:3a:8e:a1:5c:4d:8f:ca:
4d:40:be:b2:b6:5c:cd:fa:ac:54:39:19:34:5d:d0:56:09:03:
5f:46:7d:b7:97:59:75:ab:69:2f:f1:15:4a:1f:fa:b6:ae:1a:
d0:89:d9:ab:e6:7d:3b:da:12:f6:e8:a2:37:b8:99:f4:e8:6c:
fa:90:e3:2f:3f:8f:8c:a4:16:2b:b8:fb:b8:96:f1:0d:24:54:
33:f3:4d:8b:58:29:27:a3:83:ad:4f:a9:f2:a9:2b:85:12:87:
cd:3c:1a:71:43:64:de:99:8e:2a:d9:1a:2f:ca:f2:d0:f5:7c:
5f:a4:34:8b:44:95:b9:9c:e7:16:c6:68:b9:4f:a6:cf:8c:09:
66:20:e8:ed:83:ae:a9:e6:3f:80:86:c5:d0:4a:65:02:1c:f3:
31:2f:0f:8d:6a:69:b4:23:4d:92:7c:0b:85:69:8a:1f:82:d6:
e8:e1:d3:51:3b:14:dd:b1:92:01:d0:c8:c6:49:ab:4e:ce:a2:
7c:7d:f1:71:7c:6c:f9:76:fc:4c:e0:fa:0f:96:b3:0c:c3:91:
ee:92:b3:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:00 2026 by rpki-client