Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/15cb51-4cea-45e3-a760-0371d4b4547a/1/5AsW02mtJ87YVJlGUyjwlbFV9DE.mft
File: 5AsW02mtJ87YVJlGUyjwlbFV9DE.mft (raw, json)
Hash identifier: Vm/4NkUL3yH2d00gZ+GbpAcsuydK4ymgLLshkjGVmwI=
Subject key identifier: A2:BC:E4:63:7E:A5:A4:72:69:E6:8A:CE:30:23:46:0F:A9:54:9D:67
Authority key identifier: E4:0B:16:D3:69:AD:27:CE:D8:54:99:46:53:28:F0:95:B1:55:F4:31
Certificate issuer: /CN=e40b16d369ad27ced85499465328f095b155f431
Certificate serial: 019D13B4C67916DAFECB74B326D184E5D782
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5AsW02mtJ87YVJlGUyjwlbFV9DE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/15cb51-4cea-45e3-a760-0371d4b4547a/1/5AsW02mtJ87YVJlGUyjwlbFV9DE.mft
Manifest number: C4
Signing time: Sun 22 Mar 2026 04:01:47 +0000
Manifest this update: Sun 22 Mar 2026 04:01:47 +0000
Manifest next update: Mon 23 Mar 2026 04:01:47 +0000
Files and hashes: 1: 5AsW02mtJ87YVJlGUyjwlbFV9DE.crl (hash: oTrwyIilN3xhsvAL9sOsVCiSAT0FNjFQDVQuEyVmF4Y=)
2: XIHqllXiQ75dwiTpm0BLVs13ydc.roa (hash: rq4fzIyxgD0rSmb8ZDZH7Qipo9yBXOQk9IG67zBkkr8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/15cb51-4cea-45e3-a760-0371d4b4547a/1/5AsW02mtJ87YVJlGUyjwlbFV9DE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/15cb51-4cea-45e3-a760-0371d4b4547a/1/5AsW02mtJ87YVJlGUyjwlbFV9DE.mft
rsync://rpki.ripe.net/repository/DEFAULT/5AsW02mtJ87YVJlGUyjwlbFV9DE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 23 Mar 2026 04:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:13:b4:c6:79:16:da:fe:cb:74:b3:26:d1:84:e5:d7:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e40b16d369ad27ced85499465328f095b155f431
Validity
Not Before: Mar 22 04:01:47 2026 GMT
Not After : Mar 23 04:01:47 2026 GMT
Subject: CN=a2bce4637ea5a47269e68ace3023460fa9549d67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:2b:ff:6b:98:26:cb:14:f7:06:15:f0:55:49:
a3:4b:f0:74:f1:18:29:65:c6:77:08:8d:12:53:3d:
e8:27:e0:0c:f3:55:7d:13:59:83:59:77:ad:e1:81:
2f:d5:48:0d:b6:64:5e:69:72:f3:cf:c8:78:58:15:
f3:45:28:78:76:65:f3:59:4c:50:25:2c:fb:65:b7:
e5:6c:44:da:df:6d:9b:e4:b9:9f:6d:be:90:b4:60:
7d:8b:f9:16:be:fe:af:2f:70:5d:5f:e9:63:f9:c9:
ba:71:74:28:5a:82:83:ab:33:8a:0c:8a:d1:fb:81:
9c:70:88:97:b5:77:59:39:43:3f:97:35:5b:1c:58:
8d:b2:92:49:13:1f:78:4d:e4:1c:3f:79:6e:60:4e:
ed:88:f5:e6:18:89:48:52:16:40:63:0a:b8:6f:27:
52:27:15:fe:dd:fb:8e:7e:f2:a4:ed:70:a7:0b:26:
0f:66:3f:e3:9d:7b:c8:da:89:20:4f:73:17:e5:00:
48:a0:55:31:ba:aa:5c:f9:d8:90:f2:d2:6a:3b:c6:
bb:03:f5:e9:3a:d8:e8:0d:75:88:14:d4:cc:64:7c:
33:82:79:a6:72:ac:24:86:18:f8:c4:c7:67:00:c9:
80:bb:75:52:83:c7:ed:6c:50:d7:69:6e:94:d6:93:
10:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:BC:E4:63:7E:A5:A4:72:69:E6:8A:CE:30:23:46:0F:A9:54:9D:67
X509v3 Authority Key Identifier:
keyid:E4:0B:16:D3:69:AD:27:CE:D8:54:99:46:53:28:F0:95:B1:55:F4:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5AsW02mtJ87YVJlGUyjwlbFV9DE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/15cb51-4cea-45e3-a760-0371d4b4547a/1/5AsW02mtJ87YVJlGUyjwlbFV9DE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/15cb51-4cea-45e3-a760-0371d4b4547a/1/5AsW02mtJ87YVJlGUyjwlbFV9DE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:0c:5a:b7:16:01:69:6d:13:ad:fb:cc:62:c0:24:44:53:11:
6d:92:16:30:b9:0c:f9:a0:9c:8c:0e:1c:1f:00:9c:ef:19:cd:
61:46:5f:7f:8f:db:d3:a8:8b:77:c1:0c:a7:6e:88:8d:f0:58:
f9:c7:1d:88:46:1a:b3:34:df:9d:3a:83:09:7f:62:1f:9b:bc:
d9:1e:29:f7:63:b9:b7:22:7e:e1:37:2a:40:2c:bd:97:ca:96:
f8:56:4f:3c:72:55:e5:8b:73:ca:b2:1d:a7:49:72:6a:b9:01:
3a:59:02:9f:7b:89:d5:40:fd:b1:d9:dd:67:df:0b:42:81:d8:
73:ad:89:d0:06:3f:aa:ae:2d:9a:5a:b6:31:56:34:15:63:45:
7e:46:51:c8:5e:18:fc:64:25:72:1a:28:7e:04:57:fd:60:7a:
fa:16:bc:69:0f:08:0c:24:f0:c5:9f:4d:95:6e:93:a9:3b:cd:
c7:0b:44:3a:03:4d:9d:eb:0a:1f:17:3b:77:ce:c0:95:7b:07:
9c:79:68:e3:da:24:45:f4:7e:1e:88:b3:9b:64:8a:9f:3f:3f:
61:32:80:83:34:dc:13:95:b1:68:7d:72:e2:b8:01:4b:36:82:
4d:3a:0a:0f:80:8d:02:00:10:31:e3:b9:31:cd:4c:79:34:90:
ad:85:84:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 22 13:37:22 2026 by rpki-client