Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/60aed1-6f74-43a9-976f-7ed5e31ae44f/1/5H48mpUfGxWBE6t8PfGd_DNtnu8.mft
File: 5H48mpUfGxWBE6t8PfGd_DNtnu8.mft (raw, json)
Hash identifier: s1LvwQS1lteKrsXSDC3KOfrILhhyQconKHtTWAOBHO4=
Subject key identifier: 13:28:5B:C2:A9:51:C1:7E:D5:3C:03:CC:BC:67:B5:C0:3D:C9:7B:7E
Authority key identifier: E4:7E:3C:9A:95:1F:1B:15:81:13:AB:7C:3D:F1:9D:FC:33:6D:9E:EF
Certificate issuer: /CN=e47e3c9a951f1b158113ab7c3df19dfc336d9eef
Certificate serial: 019D36E437AE5A8DFC294973F6CF127CD9CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5H48mpUfGxWBE6t8PfGd_DNtnu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/60aed1-6f74-43a9-976f-7ed5e31ae44f/1/5H48mpUfGxWBE6t8PfGd_DNtnu8.mft
Manifest number: 038E
Signing time: Sun 29 Mar 2026 00:00:19 +0000
Manifest this update: Sun 29 Mar 2026 00:00:19 +0000
Manifest next update: Mon 30 Mar 2026 00:00:19 +0000
Files and hashes: 1: 5H48mpUfGxWBE6t8PfGd_DNtnu8.crl (hash: seNccL7Qogm4LrjONMzXjtO5jjTVdB6np7fccb0c/so=)
2: Oc9HRrXCcjMhVI-oJuxtYW0MPF8.roa (hash: lFaS4PWNt6dClxtVqJKrrjUbZ/RkYzsaigOX31gfWdI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/60aed1-6f74-43a9-976f-7ed5e31ae44f/1/5H48mpUfGxWBE6t8PfGd_DNtnu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/60aed1-6f74-43a9-976f-7ed5e31ae44f/1/5H48mpUfGxWBE6t8PfGd_DNtnu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/5H48mpUfGxWBE6t8PfGd_DNtnu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 00:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:36:e4:37:ae:5a:8d:fc:29:49:73:f6:cf:12:7c:d9:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e47e3c9a951f1b158113ab7c3df19dfc336d9eef
Validity
Not Before: Mar 29 00:00:19 2026 GMT
Not After : Mar 30 00:00:19 2026 GMT
Subject: CN=13285bc2a951c17ed53c03ccbc67b5c03dc97b7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ca:5f:5b:b3:d5:39:7f:91:53:ed:36:da:47:
cd:40:f7:da:de:3f:36:51:db:a4:bb:fa:02:1a:cf:
49:ee:51:e4:0c:f0:0d:1d:2c:1e:c0:27:e1:67:15:
15:74:09:67:6d:ee:a9:3f:b8:9a:43:15:4e:7e:46:
6d:4f:0f:a0:3e:0d:2f:1e:c0:87:64:8e:89:1d:c9:
e9:8f:a5:d8:97:57:b8:b2:9a:f2:16:a5:3c:d8:16:
78:5b:14:05:40:b5:53:33:7f:54:12:8f:b6:05:1f:
8c:7c:29:9d:5e:61:9e:e2:43:72:48:e0:b6:8e:06:
de:d3:f4:52:01:d0:59:33:48:68:19:9c:2c:37:c3:
75:f0:1b:92:9d:96:17:4f:bc:8c:6d:90:1a:f8:84:
f0:94:28:1b:3f:86:2e:e4:eb:d5:e7:a5:96:f9:82:
94:ab:7a:84:62:ed:34:3c:15:5d:1b:8e:08:d8:73:
54:c6:ee:c5:7d:49:23:ff:46:7a:f9:2a:bd:62:1a:
b1:45:38:b4:74:c0:3b:86:ba:09:e3:23:28:a8:c5:
b9:79:47:0d:7b:b9:dd:6e:e0:c8:d4:c9:d1:09:7b:
ce:58:40:af:a1:0d:0d:de:78:36:be:60:9a:25:8e:
61:a2:ea:3a:e3:80:8c:d1:b8:d6:88:98:c7:e0:22:
8a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:28:5B:C2:A9:51:C1:7E:D5:3C:03:CC:BC:67:B5:C0:3D:C9:7B:7E
X509v3 Authority Key Identifier:
keyid:E4:7E:3C:9A:95:1F:1B:15:81:13:AB:7C:3D:F1:9D:FC:33:6D:9E:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5H48mpUfGxWBE6t8PfGd_DNtnu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/60aed1-6f74-43a9-976f-7ed5e31ae44f/1/5H48mpUfGxWBE6t8PfGd_DNtnu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/60aed1-6f74-43a9-976f-7ed5e31ae44f/1/5H48mpUfGxWBE6t8PfGd_DNtnu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:79:b7:7f:6e:36:9e:89:b9:1f:9d:39:e6:b8:25:85:d2:1d:
39:fb:61:39:aa:8c:2d:6f:c0:54:96:42:99:a2:bf:4b:05:f5:
dc:56:21:7c:97:51:71:c5:d8:19:18:57:36:78:4d:6a:fe:45:
78:f7:dc:ee:9f:26:04:6c:24:f1:51:88:f5:d8:b4:95:47:d0:
84:c2:37:1e:0b:63:e3:cf:9d:25:85:a7:76:09:a0:bc:bd:68:
7b:9e:58:d1:8b:1d:5d:6e:b6:b2:5d:41:a7:de:b4:83:fc:05:
1c:ac:33:6e:d1:8f:99:75:df:8d:07:18:f8:c1:95:23:18:e2:
12:47:c0:7a:13:fb:83:84:ad:28:e3:f4:e3:42:f4:47:65:6b:
f8:8b:72:4a:2a:d8:12:85:01:25:a3:c1:f1:96:8f:4c:a1:15:
91:19:ea:6d:2d:e7:f4:f4:85:a6:06:29:be:eb:09:20:12:f6:
e6:93:0f:e0:2a:48:51:24:81:c1:78:10:8d:03:22:8c:13:d9:
8f:9c:ee:ef:85:e1:d7:63:1e:49:65:46:3b:6a:e2:7b:ef:cc:
c7:84:0e:7f:7c:46:b8:7e:ee:05:6f:9d:33:89:0d:05:19:80:
6b:25:9d:2c:69:38:5f:61:6c:c0:d6:e9:1c:f9:20:02:fb:dd:
85:38:dd:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:39 2026 by rpki-client