Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/784838-0e3b-46ba-8595-d8f6ab83b533/1/5bHedEPq8YzrBoiNfvk6VjWkrh4.mft
File: 5bHedEPq8YzrBoiNfvk6VjWkrh4.mft (raw, json)
Hash identifier: oCxXKlWBlqWAHLBSxTY1REZ/PVz3WNNzpwKbBRFyq6s=
Subject key identifier: F0:87:17:D0:A3:BE:4D:E9:B9:A9:AD:86:09:D9:9C:DA:CF:37:CD:E6
Authority key identifier: E5:B1:DE:74:43:EA:F1:8C:EB:06:88:8D:7E:F9:3A:56:35:A4:AE:1E
Certificate issuer: /CN=e5b1de7443eaf18ceb06888d7ef93a5635a4ae1e
Certificate serial: 019D394138FE498DB4E00596BDAEA0D3A3CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5bHedEPq8YzrBoiNfvk6VjWkrh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/784838-0e3b-46ba-8595-d8f6ab83b533/1/5bHedEPq8YzrBoiNfvk6VjWkrh4.mft
Manifest number: 0F4F
Signing time: Sun 29 Mar 2026 11:01:08 +0000
Manifest this update: Sun 29 Mar 2026 11:01:08 +0000
Manifest next update: Mon 30 Mar 2026 11:01:08 +0000
Files and hashes: 1: 1s9edady0IlLFTjAVGX74BTlTOU.roa (hash: UbGcCZaiXwxi+mV6BY8TzVOmDvRo6W4bzSToeQyBxU8=)
2: 5bHedEPq8YzrBoiNfvk6VjWkrh4.crl (hash: lubIYTVvLxhbyF5+9U8rH1ljvMFWINZfF7cAxuFXg68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/784838-0e3b-46ba-8595-d8f6ab83b533/1/5bHedEPq8YzrBoiNfvk6VjWkrh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/784838-0e3b-46ba-8595-d8f6ab83b533/1/5bHedEPq8YzrBoiNfvk6VjWkrh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/5bHedEPq8YzrBoiNfvk6VjWkrh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:38:fe:49:8d:b4:e0:05:96:bd:ae:a0:d3:a3:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5b1de7443eaf18ceb06888d7ef93a5635a4ae1e
Validity
Not Before: Mar 29 11:01:08 2026 GMT
Not After : Mar 30 11:01:08 2026 GMT
Subject: CN=f08717d0a3be4de9b9a9ad8609d99cdacf37cde6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:76:76:17:f2:ce:87:19:67:87:57:75:46:50:
95:25:92:a1:1a:23:72:b5:f4:4a:a7:83:91:da:a9:
8c:82:ea:c0:6a:c3:87:58:82:a9:7b:95:54:f5:e8:
6d:de:82:be:12:42:c0:0e:f1:7b:18:f1:34:9e:11:
ed:4d:85:d8:53:5d:4a:15:95:64:76:6d:8c:b4:fe:
e9:3c:eb:11:23:44:2a:d8:12:4f:7e:aa:c9:75:aa:
9f:9d:3f:01:d9:30:3e:e5:fd:5f:29:d7:1e:8e:68:
52:d8:24:f4:84:a5:29:75:8f:70:25:72:c6:65:99:
aa:92:d8:7e:5a:4f:96:26:52:ee:a1:bf:f0:a5:83:
e5:87:18:8b:6e:20:6f:5a:a8:2b:c6:c8:f1:dc:ce:
43:5f:d9:d3:80:1b:ba:04:1a:35:3d:8d:1f:7d:fe:
96:74:5e:0d:cb:aa:df:aa:21:38:74:9d:39:2a:45:
db:66:f4:c5:4f:6e:a8:b5:da:eb:71:90:e2:39:24:
29:df:2d:d5:d5:09:01:48:6c:95:1c:22:b7:2e:e2:
e2:25:ef:68:4e:26:42:6c:57:24:49:40:a5:e8:ff:
df:24:fc:b6:e1:a8:11:4c:9c:45:32:d2:5e:8e:bb:
16:b3:9d:9d:0e:40:5e:83:bb:28:05:cb:e5:58:bb:
4b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:87:17:D0:A3:BE:4D:E9:B9:A9:AD:86:09:D9:9C:DA:CF:37:CD:E6
X509v3 Authority Key Identifier:
keyid:E5:B1:DE:74:43:EA:F1:8C:EB:06:88:8D:7E:F9:3A:56:35:A4:AE:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5bHedEPq8YzrBoiNfvk6VjWkrh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/784838-0e3b-46ba-8595-d8f6ab83b533/1/5bHedEPq8YzrBoiNfvk6VjWkrh4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/784838-0e3b-46ba-8595-d8f6ab83b533/1/5bHedEPq8YzrBoiNfvk6VjWkrh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:f1:66:3d:80:f8:f0:d5:09:cb:03:01:ac:0d:81:7f:8e:e4:
08:87:a5:79:f7:37:6e:49:76:f3:ae:c8:8f:d1:ac:92:92:d7:
c4:7d:86:27:57:3d:cc:ca:ba:95:09:06:10:4d:72:9c:e5:8f:
7e:30:48:81:41:50:4e:66:83:c6:bb:3a:9f:a2:09:35:27:14:
cc:a9:02:bf:7f:47:21:7a:c9:a7:07:17:44:c2:0f:db:33:84:
87:d9:4b:07:58:6b:69:02:d5:d8:ff:47:42:b3:8d:16:0e:d8:
c9:92:8a:e4:7e:70:cf:e9:4a:4e:b0:ee:07:33:e8:06:ae:92:
23:80:61:ef:2e:02:c7:2b:be:c9:67:46:a2:b3:6f:e7:18:37:
8a:5c:51:41:8d:04:d5:39:75:8b:e0:61:09:c1:50:32:4c:03:
4e:10:80:e5:90:f2:3b:0e:ad:21:7b:b2:f5:f4:49:a1:b0:b9:
bd:75:8c:d9:bd:1c:6d:1e:ba:09:20:98:bd:ff:1b:79:c9:1c:
a5:66:83:b3:9d:2e:cb:81:ad:4d:e8:f4:52:f5:da:d7:42:a8:
ba:e2:21:f2:b3:92:5e:b6:da:3e:46:ae:cc:3d:24:0d:24:7a:
b3:17:1b:b2:54:bc:9b:18:f5:f6:7a:f8:fb:4f:7e:ac:51:7a:
77:e8:72:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:27:53 2026 by rpki-client