Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/226018-0e06-435e-abfd-f5ffee1720c1/1/5QxErpgedJLTuiHihHIIAYA5jWQ.mft
File: 5QxErpgedJLTuiHihHIIAYA5jWQ.mft (raw, json)
Hash identifier: 3Q18dXZrjOmQSk7hhAzUy5Nu/NJPu3J7uVwPNIcWHL8=
Subject key identifier: F4:9A:CD:CE:D4:E6:43:D6:0C:60:39:AE:8F:16:29:A8:F4:C8:21:AF
Authority key identifier: E5:0C:44:AE:98:1E:74:92:D3:BA:21:E2:84:72:08:01:80:39:8D:64
Certificate issuer: /CN=e50c44ae981e7492d3ba21e28472080180398d64
Certificate serial: 019D3865735F411110AB6A3747E68614FFE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5QxErpgedJLTuiHihHIIAYA5jWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/226018-0e06-435e-abfd-f5ffee1720c1/1/5QxErpgedJLTuiHihHIIAYA5jWQ.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 07:01:05 +0000
Manifest this update: Sun 29 Mar 2026 07:01:05 +0000
Manifest next update: Mon 30 Mar 2026 07:01:05 +0000
Files and hashes: 1: 5QxErpgedJLTuiHihHIIAYA5jWQ.crl (hash: NgCm6DWtTde5rSYSJktcdEgcqCfBGR9RyZ6JkPXVrEU=)
2: e69PQnEzusQYZ-DbIlnf2eJlsBE.roa (hash: 4zZYbNl+2JdQefSGJOQxcNxDZWIZe2qXFHWTtyVsmQU=)
3: glYko7Sp1JLcpRtPgtRJtpgechE.roa (hash: I3eBEUtzH+51u13OfXKNVDxOVZpjsrqrlvg0BT9d+Dc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/226018-0e06-435e-abfd-f5ffee1720c1/1/5QxErpgedJLTuiHihHIIAYA5jWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/226018-0e06-435e-abfd-f5ffee1720c1/1/5QxErpgedJLTuiHihHIIAYA5jWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5QxErpgedJLTuiHihHIIAYA5jWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:73:5f:41:11:10:ab:6a:37:47:e6:86:14:ff:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e50c44ae981e7492d3ba21e28472080180398d64
Validity
Not Before: Mar 29 07:01:05 2026 GMT
Not After : Mar 30 07:01:05 2026 GMT
Subject: CN=f49acdced4e643d60c6039ae8f1629a8f4c821af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e7:ef:7b:08:a5:92:90:0f:e4:7a:6b:91:7d:
b3:31:67:a7:db:69:21:fc:db:1b:d9:68:63:a5:6c:
9b:5d:49:56:3f:a8:41:83:66:dc:c7:e6:53:3c:65:
bd:de:d3:c7:90:4d:0f:81:3e:0b:57:9f:17:e0:79:
73:e3:c9:e2:9a:32:9f:6d:62:f9:0a:0b:02:e7:15:
88:8d:53:8e:9f:c5:4e:4c:04:78:8c:fe:f8:c9:38:
7d:27:db:6c:1b:6c:60:36:9d:d3:0c:27:b3:72:9f:
d1:ac:09:5a:01:55:ae:8b:77:31:04:3d:57:44:72:
1f:34:08:18:e6:fb:11:75:97:1f:85:48:15:03:e7:
ce:52:ed:4b:3a:e8:a9:06:f5:3a:79:c2:b0:4e:79:
40:57:c2:08:df:4a:5e:57:65:4f:d9:cd:7b:31:7e:
7f:d8:bf:dd:8a:7d:c9:3f:b3:aa:13:74:b7:c8:95:
16:6a:52:a7:82:95:a2:9d:59:c6:41:1a:5c:82:7e:
85:e1:82:20:be:7f:f7:1d:74:76:9f:50:03:84:10:
3d:a5:fb:a7:31:e2:79:0c:84:15:99:48:78:1c:17:
1e:b5:cd:97:3c:a2:c7:6b:58:56:c3:84:06:29:1f:
0e:ad:3e:a3:0d:96:d2:e7:a7:8f:60:91:53:c1:4c:
56:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:9A:CD:CE:D4:E6:43:D6:0C:60:39:AE:8F:16:29:A8:F4:C8:21:AF
X509v3 Authority Key Identifier:
keyid:E5:0C:44:AE:98:1E:74:92:D3:BA:21:E2:84:72:08:01:80:39:8D:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5QxErpgedJLTuiHihHIIAYA5jWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/226018-0e06-435e-abfd-f5ffee1720c1/1/5QxErpgedJLTuiHihHIIAYA5jWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/226018-0e06-435e-abfd-f5ffee1720c1/1/5QxErpgedJLTuiHihHIIAYA5jWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:bf:08:ff:e4:7a:c6:7f:ec:3d:ec:f5:b1:96:82:ac:dc:62:
13:d9:f0:17:ae:5b:0b:a0:82:b2:b7:ac:4a:06:a2:91:54:1e:
00:c6:65:7e:18:6a:41:f6:07:b3:24:74:c8:29:35:f2:a7:22:
6e:9f:a9:ef:b8:2c:a9:15:53:4b:59:5e:1b:f9:e7:f0:67:53:
f1:eb:05:70:2d:0f:f6:4b:de:63:90:9d:dd:34:8b:fc:67:58:
6e:5a:e0:9d:50:c6:ac:00:23:e6:ca:93:4e:a4:3b:3e:99:33:
4c:b2:bb:f5:5a:13:4e:d7:4a:27:c4:b8:55:71:5d:53:71:e7:
a6:4f:80:bb:08:ff:01:e8:07:9c:19:3e:40:87:48:29:91:b5:
fd:ad:6d:21:fc:ad:d1:a2:ca:02:cf:64:40:d7:1b:05:0d:97:
08:0d:59:db:38:7a:a0:52:6f:08:01:ad:ac:1c:1f:73:30:b2:
4d:cc:a4:18:35:e0:cc:ea:09:53:13:86:4a:8c:85:c0:26:2d:
56:7f:ab:bf:a7:a1:d0:b3:4f:8f:0a:e0:77:50:ad:85:d4:54:
03:c5:a2:fb:e5:77:7e:64:87:71:03:89:df:eb:3d:39:f6:fb:
24:7e:e5:bc:c8:24:b8:83:84:5d:81:0d:79:9c:9d:eb:82:1e:
a8:56:00:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:10:06 2026 by rpki-client