Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.mft
File: 5Gfb5qx1WpBjw2CxUl6ET9Kle5M.mft (raw, json)
Hash identifier: nO1RaghslrIzCzySe6LhuDXbVoOY017rLSrJNUbqRrE=
Subject key identifier: F8:C0:BF:F0:9E:FC:87:DD:4A:BF:38:A7:70:66:F5:3E:B6:D1:F0:5D
Authority key identifier: E4:67:DB:E6:AC:75:5A:90:63:C3:60:B1:52:5E:84:4F:D2:A5:7B:93
Certificate issuer: /CN=e467dbe6ac755a9063c360b1525e844fd2a57b93
Certificate serial: 019D389BCBA5A1C710C8EB04107645B49220
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.mft
Manifest number: 0C7F
Signing time: Sun 29 Mar 2026 08:00:27 +0000
Manifest this update: Sun 29 Mar 2026 08:00:27 +0000
Manifest next update: Mon 30 Mar 2026 08:00:27 +0000
Files and hashes: 1: 4GxbIuH661wSAuRQff8xB62kOr8.roa (hash: 6Ggl9o0/dEzCv20oHVldt8BKrvybom3vgPN0XshsfwI=)
2: 5Gfb5qx1WpBjw2CxUl6ET9Kle5M.crl (hash: 8p+ViCMVyTDfo/mwfDcWxi37/ldDB5+gHf+ubRU9vSM=)
3: LB1iluIm_5YolIXGM1SSD3ekV9E.roa (hash: cqW0TcvZRqAF5iPp1DQLv1tr7B8xMD8GEmBQO/JGsBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:cb:a5:a1:c7:10:c8:eb:04:10:76:45:b4:92:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e467dbe6ac755a9063c360b1525e844fd2a57b93
Validity
Not Before: Mar 29 08:00:27 2026 GMT
Not After : Mar 30 08:00:27 2026 GMT
Subject: CN=f8c0bff09efc87dd4abf38a77066f53eb6d1f05d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:74:86:2d:b5:3c:5b:92:81:ee:b2:a2:7c:f7:
41:88:77:6c:e5:58:72:19:51:f5:b8:4d:e2:da:07:
c2:9c:22:e6:9a:5b:86:69:3b:15:19:84:cb:40:e8:
d4:16:04:50:3f:17:bf:8d:71:6c:03:6f:85:b2:1a:
20:cb:4d:7b:a6:63:a8:1b:93:8a:e6:17:80:09:4e:
ce:a7:fc:4a:66:d5:42:31:6a:2f:3c:22:62:a6:ab:
96:d3:10:7b:95:32:d7:b2:c6:e2:f3:a1:66:6c:15:
7b:86:c1:22:af:1a:8c:cb:59:e1:61:94:90:ce:f9:
f8:b1:ea:40:16:e0:07:c5:8a:58:84:80:e8:ef:03:
b7:56:b8:8a:5d:94:8c:07:65:e0:95:5c:36:6c:81:
f4:35:64:84:1e:68:7d:44:be:df:ec:6e:2e:3d:c1:
00:d8:ac:76:d6:92:1b:fa:13:eb:55:05:ca:cb:78:
74:03:b7:c5:21:2f:2b:44:43:54:0d:b2:4a:25:8c:
80:f5:be:c0:36:5d:e6:a0:c9:b5:2d:8b:6e:f3:49:
0e:ef:6d:2e:30:b1:e9:35:6f:eb:07:68:25:f6:bc:
76:6f:48:c6:54:0c:91:ea:7d:42:6a:8b:be:b6:58:
9b:14:18:b8:ab:ad:95:1a:87:71:c8:a0:b4:5f:6e:
b1:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:C0:BF:F0:9E:FC:87:DD:4A:BF:38:A7:70:66:F5:3E:B6:D1:F0:5D
X509v3 Authority Key Identifier:
keyid:E4:67:DB:E6:AC:75:5A:90:63:C3:60:B1:52:5E:84:4F:D2:A5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:ae:f0:8e:46:9a:87:ab:81:6a:44:b5:03:7c:cc:7a:4d:56:
c6:34:98:56:cc:27:6a:9d:41:08:ef:67:34:98:c8:ae:f0:29:
a3:ec:68:0b:6b:0e:05:b8:c6:15:97:1d:9c:2d:f6:7c:87:78:
cc:e0:d8:f1:d4:8f:c2:9d:05:fc:4a:52:ad:ca:74:50:ad:18:
e3:44:e5:a5:82:16:a3:fd:d0:1d:71:81:eb:c5:30:7c:a5:c0:
3b:c8:ae:23:c9:a3:50:5c:ae:9a:f6:c3:f7:06:29:f1:6b:7d:
15:54:73:84:a7:71:d6:4b:5f:b1:74:95:02:56:2b:50:fb:36:
c4:d3:49:0a:ce:11:75:df:87:44:66:d2:0a:96:2a:47:34:86:
7c:45:c9:02:fb:7e:a1:c3:ae:58:3d:52:6b:3c:e4:7c:b0:42:
1b:c6:90:b7:c7:69:8a:6c:a2:11:94:0d:83:96:98:da:17:92:
9f:78:54:d4:7e:11:a6:01:74:f0:7c:07:2c:62:9d:e1:ff:c5:
7b:b7:a3:a2:4a:ba:c2:1b:d4:ab:7b:00:f0:e0:7f:31:f0:60:
bf:d0:7e:79:d2:10:03:a6:a6:f0:10:bf:b9:cb:a0:08:e0:37:
54:ab:a2:1c:6a:0f:62:c4:6b:74:cc:b0:62:ca:9e:08:34:52:
be:2b:2d:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:24 2026 by rpki-client