Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/d211c2-6ca9-4803-96b3-2e194ac1ad6f/1/r-us3hVZeiga4rspMG3E2m3Pt14.mft
File: r-us3hVZeiga4rspMG3E2m3Pt14.mft (raw, json)
Hash identifier: K0CAOZfL9NU4ECS/t2GLd90SWRA/3nZ9LM1zFGPzabg=
Subject key identifier: 48:2C:4C:48:CA:90:55:14:17:1C:78:FE:AC:54:81:3D:FE:02:79:30
Authority key identifier: AF:EB:AC:DE:15:59:7A:28:1A:E2:BB:29:30:6D:C4:DA:6D:CF:B7:5E
Certificate issuer: /CN=afebacde15597a281ae2bb29306dc4da6dcfb75e
Certificate serial: 019D39AF77055A8609F1A1A7B58B13948E9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-us3hVZeiga4rspMG3E2m3Pt14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/d211c2-6ca9-4803-96b3-2e194ac1ad6f/1/r-us3hVZeiga4rspMG3E2m3Pt14.mft
Manifest number: A5
Signing time: Sun 29 Mar 2026 13:01:33 +0000
Manifest this update: Sun 29 Mar 2026 13:01:33 +0000
Manifest next update: Mon 30 Mar 2026 13:01:33 +0000
Files and hashes: 1: jdSx0T-sdrzr500OOr7Atdy3Z4E.asa (hash: nbjDNb/jtcCfwpceFtypmGiC8RlKHHL0LGrtqS6ZCo8=)
2: r-us3hVZeiga4rspMG3E2m3Pt14.crl (hash: Vh9ADaQlq8/hdUQzvZQmqRAcVt0ycpLcFEcw6wUuiG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/d211c2-6ca9-4803-96b3-2e194ac1ad6f/1/r-us3hVZeiga4rspMG3E2m3Pt14.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/d211c2-6ca9-4803-96b3-2e194ac1ad6f/1/r-us3hVZeiga4rspMG3E2m3Pt14.mft
rsync://rpki.ripe.net/repository/DEFAULT/r-us3hVZeiga4rspMG3E2m3Pt14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:77:05:5a:86:09:f1:a1:a7:b5:8b:13:94:8e:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afebacde15597a281ae2bb29306dc4da6dcfb75e
Validity
Not Before: Mar 29 13:01:33 2026 GMT
Not After : Mar 30 13:01:33 2026 GMT
Subject: CN=482c4c48ca905514171c78feac54813dfe027930
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:36:66:21:0f:5a:cd:00:2a:4f:d7:3a:42:b5:
fc:1a:ba:7a:3f:ee:0a:c3:95:8c:ac:40:b4:08:da:
e9:fa:ce:51:e2:c7:a4:3d:34:55:b8:a5:12:a7:60:
11:e8:a1:5f:68:81:78:f0:38:9d:57:8f:db:d8:3e:
b4:66:3a:7f:d6:55:ef:26:3d:ac:fa:69:23:24:15:
93:5c:da:b1:df:76:e6:c2:5e:d8:64:39:c7:9a:03:
5c:ab:38:27:f0:23:cd:da:09:af:de:b4:9c:13:e7:
8d:f7:35:1f:6b:f0:e3:7d:f9:86:24:7b:ce:31:76:
26:eb:73:1a:0a:fd:25:2a:e4:b0:15:05:11:11:8e:
ec:5b:18:ab:c5:6c:68:60:1a:fe:8b:0c:63:1c:60:
73:fa:a5:a5:3b:dd:ac:46:2b:00:55:ae:5b:a0:7a:
0b:b6:18:94:1c:00:ca:d0:25:62:b8:91:c4:83:21:
43:6c:13:60:25:96:88:5f:33:5a:ea:a2:f3:a0:a1:
72:c1:31:3c:29:6f:7d:04:d6:34:cb:30:89:a4:d0:
74:a0:46:66:13:27:57:d5:22:aa:af:06:a7:5e:28:
77:ea:98:41:df:41:4a:6d:14:19:8c:1d:27:21:05:
07:fc:a6:3d:b9:30:75:3c:0c:83:b9:4f:11:5f:71:
a8:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:2C:4C:48:CA:90:55:14:17:1C:78:FE:AC:54:81:3D:FE:02:79:30
X509v3 Authority Key Identifier:
keyid:AF:EB:AC:DE:15:59:7A:28:1A:E2:BB:29:30:6D:C4:DA:6D:CF:B7:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-us3hVZeiga4rspMG3E2m3Pt14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d211c2-6ca9-4803-96b3-2e194ac1ad6f/1/r-us3hVZeiga4rspMG3E2m3Pt14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d211c2-6ca9-4803-96b3-2e194ac1ad6f/1/r-us3hVZeiga4rspMG3E2m3Pt14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:f6:53:4f:0c:7e:9f:45:75:5a:b9:2d:ba:4a:bf:87:16:22:
49:be:1a:bd:ff:e4:22:11:87:e3:ab:d8:ac:31:4c:12:58:2f:
15:4f:09:47:b1:e2:06:58:30:9d:75:b9:d4:41:aa:6d:fb:03:
d5:c0:c9:e1:ca:d1:f8:1f:44:6b:c5:b0:5e:8b:b2:77:63:17:
41:59:e4:52:ee:a5:ff:c9:5e:9b:58:29:6b:1f:7f:65:52:0b:
28:73:59:f8:72:ec:11:04:70:a0:03:5a:bd:90:8e:82:1a:69:
74:7a:60:4a:50:a5:0e:aa:76:1e:af:9d:09:aa:b7:8e:a9:91:
fd:a9:ca:86:fa:85:a1:d0:cf:a2:91:1b:fd:f7:e2:fb:99:2d:
b4:f6:4f:8f:43:ea:0a:6c:7b:f1:5a:c1:6e:3e:ee:f3:69:2e:
9f:b2:62:4d:6c:18:03:d6:e9:03:35:e1:48:dc:43:a8:e0:98:
b8:9c:52:1b:89:88:f3:df:c5:d4:12:73:9f:d3:5a:ba:63:69:
60:04:c4:2d:ab:4c:2a:d5:63:ad:79:27:5c:e6:e4:1d:ae:fc:
ae:73:13:c5:33:1f:21:7e:a9:d2:4c:36:13:c6:da:48:75:bf:
d7:a1:ca:6d:c2:ed:d3:3e:16:fb:70:84:60:0f:20:a3:93:3c:
0d:b9:a1:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:26:25 2026 by rpki-client