Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/f37203-f172-459f-8315-82f25ac6887f/1/5iMpnuR7T2EtuQoU-V5AdnrgZlc.mft
File: 5iMpnuR7T2EtuQoU-V5AdnrgZlc.mft (raw, json)
Hash identifier: dsEqLKH2JA2NckJWH/wGYL1MVpHHW62RvSfOQMXBcAA=
Subject key identifier: C1:7A:93:A0:25:B5:73:18:86:62:DD:C5:E8:36:E5:DB:46:B4:E6:58
Authority key identifier: E6:23:29:9E:E4:7B:4F:61:2D:B9:0A:14:F9:5E:40:76:7A:E0:66:57
Certificate issuer: /CN=e623299ee47b4f612db90a14f95e40767ae06657
Certificate serial: 019D382E2B411B5A34232CD0400DA389B44A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5iMpnuR7T2EtuQoU-V5AdnrgZlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/f37203-f172-459f-8315-82f25ac6887f/1/5iMpnuR7T2EtuQoU-V5AdnrgZlc.mft
Manifest number: 1520
Signing time: Sun 29 Mar 2026 06:00:42 +0000
Manifest this update: Sun 29 Mar 2026 06:00:42 +0000
Manifest next update: Mon 30 Mar 2026 06:00:42 +0000
Files and hashes: 1: 5iMpnuR7T2EtuQoU-V5AdnrgZlc.crl (hash: R4mNAYWHxJOWTH8qAKtGcY0hPbv7YtSWBsh1sX+iPwE=)
2: kVVy-YWr30S0GSdgLLy6UhLp1JQ.roa (hash: MLFi2OYZr+v/54OGb70/05XIuu/GA7oMfXFZI0ZBmD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/f37203-f172-459f-8315-82f25ac6887f/1/5iMpnuR7T2EtuQoU-V5AdnrgZlc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/f37203-f172-459f-8315-82f25ac6887f/1/5iMpnuR7T2EtuQoU-V5AdnrgZlc.mft
rsync://rpki.ripe.net/repository/DEFAULT/5iMpnuR7T2EtuQoU-V5AdnrgZlc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:2b:41:1b:5a:34:23:2c:d0:40:0d:a3:89:b4:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e623299ee47b4f612db90a14f95e40767ae06657
Validity
Not Before: Mar 29 06:00:42 2026 GMT
Not After : Mar 30 06:00:42 2026 GMT
Subject: CN=c17a93a025b573188662ddc5e836e5db46b4e658
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f9:cb:36:72:e2:b4:4e:e9:4d:bb:58:8b:82:
0b:74:47:64:f8:91:a5:24:23:0d:27:8c:6c:37:bf:
6d:eb:18:c9:04:9f:ed:57:9f:c1:24:c0:f1:62:61:
8d:76:6c:e4:fd:21:67:86:b2:f6:88:91:db:7e:11:
28:3b:d2:3f:6e:4b:dd:b3:32:61:ec:66:dc:1a:f1:
8c:ad:0f:74:f6:4b:1a:36:95:60:60:38:89:78:54:
db:c2:90:8e:77:71:44:1e:d9:56:8b:89:3e:c4:dc:
2f:9b:f4:3e:ce:4f:98:c6:9d:ab:a2:28:53:6b:da:
d7:99:bd:20:b6:1e:51:d2:9e:99:a6:16:69:25:5c:
9e:7e:ed:46:b9:f1:da:94:e9:5c:b6:7a:79:34:25:
69:30:fe:72:cd:91:36:4e:89:cc:06:b2:67:e7:59:
15:d2:9a:8b:e7:4d:b7:91:b7:7f:0c:4c:3c:e3:d3:
f9:a2:b5:d8:fe:c0:94:56:d6:2f:b6:87:10:a2:74:
07:67:e2:88:59:99:c0:ea:1a:36:66:2e:55:59:24:
3b:32:e9:fb:48:ff:a6:31:16:92:16:e9:77:11:7d:
ca:4c:47:19:53:f0:69:b3:8d:06:07:32:5e:37:fc:
c6:5e:f0:09:ef:b9:77:50:77:a0:30:e7:1f:14:d3:
bc:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:7A:93:A0:25:B5:73:18:86:62:DD:C5:E8:36:E5:DB:46:B4:E6:58
X509v3 Authority Key Identifier:
keyid:E6:23:29:9E:E4:7B:4F:61:2D:B9:0A:14:F9:5E:40:76:7A:E0:66:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5iMpnuR7T2EtuQoU-V5AdnrgZlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/f37203-f172-459f-8315-82f25ac6887f/1/5iMpnuR7T2EtuQoU-V5AdnrgZlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/f37203-f172-459f-8315-82f25ac6887f/1/5iMpnuR7T2EtuQoU-V5AdnrgZlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:45:f9:3b:73:04:75:31:c5:81:08:05:fc:42:ad:bd:94:a9:
19:34:89:09:73:3a:ae:35:a4:cc:23:20:46:bb:93:98:8b:5c:
02:e6:ad:5d:07:da:02:c7:ec:39:28:1f:b4:b2:3e:79:30:68:
d8:92:af:1e:d1:db:3c:d7:53:a9:44:c8:f4:cc:73:75:eb:e4:
00:a7:c2:0e:af:c0:79:27:30:07:90:29:20:fa:9e:5c:c5:7e:
b0:68:3d:52:e3:5c:a2:39:4b:8a:95:74:16:ab:43:2e:d0:98:
39:4d:ea:de:1c:4e:c5:5f:a1:60:27:5a:1b:8e:8b:75:62:83:
f6:20:13:8d:a6:9d:6d:f8:9a:31:fd:72:88:0c:06:3c:d4:b5:
e0:af:66:df:fa:25:a6:97:72:f5:8c:dc:d9:e8:a2:84:20:85:
70:51:37:c3:50:ba:7d:8b:f0:60:31:89:f8:c3:0c:0e:2d:0b:
e4:d4:80:8f:ab:70:33:c3:9f:ed:8d:ed:ad:0e:b0:10:aa:e2:
4a:eb:bb:e2:76:be:f8:21:d9:09:d6:82:7b:df:a0:3d:27:90:
0a:43:ef:bc:4b:ee:c7:05:27:dc:b8:9b:7c:8c:7a:4e:e2:05:
91:c6:b2:c3:ca:75:c2:ce:a9:dc:4b:a6:9f:cd:b6:98:cd:46:
18:41:af:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:08 2026 by rpki-client