Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/18b5bb-8e41-4e88-bdbe-341c63614280/1/5GZIM5avs3fl43nRYVveD9TZ7Uc.mft
File: 5GZIM5avs3fl43nRYVveD9TZ7Uc.mft (raw, json)
Hash identifier: ne/a1QCNpiwP2QhrDmv174qgL8cISnrF9Dfg5edLd9A=
Subject key identifier: 49:B9:A1:2B:40:24:70:BF:C5:9D:43:41:C3:63:50:82:48:6B:C8:06
Authority key identifier: E4:66:48:33:96:AF:B3:77:E5:E3:79:D1:61:5B:DE:0F:D4:D9:ED:47
Certificate issuer: /CN=e466483396afb377e5e379d1615bde0fd4d9ed47
Certificate serial: 019D39AEEE3C91B44548BB2F2CE4096A58BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5GZIM5avs3fl43nRYVveD9TZ7Uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/18b5bb-8e41-4e88-bdbe-341c63614280/1/5GZIM5avs3fl43nRYVveD9TZ7Uc.mft
Manifest number: 0F88
Signing time: Sun 29 Mar 2026 13:00:58 +0000
Manifest this update: Sun 29 Mar 2026 13:00:58 +0000
Manifest next update: Mon 30 Mar 2026 13:00:58 +0000
Files and hashes: 1: 5GZIM5avs3fl43nRYVveD9TZ7Uc.crl (hash: +Wf1zvr0t83d+c/r2TWKXZQpzCSgU7NGy0fdZnSDd5M=)
2: hNYIQ5HHhINGm0B4xE-M57SIxF0.roa (hash: FqszJttjAhJJ6gXeV7wcVvhxNzpQaBx6Ggtmu08rd0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/18b5bb-8e41-4e88-bdbe-341c63614280/1/5GZIM5avs3fl43nRYVveD9TZ7Uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/18b5bb-8e41-4e88-bdbe-341c63614280/1/5GZIM5avs3fl43nRYVveD9TZ7Uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/5GZIM5avs3fl43nRYVveD9TZ7Uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:ee:3c:91:b4:45:48:bb:2f:2c:e4:09:6a:58:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e466483396afb377e5e379d1615bde0fd4d9ed47
Validity
Not Before: Mar 29 13:00:58 2026 GMT
Not After : Mar 30 13:00:58 2026 GMT
Subject: CN=49b9a12b402470bfc59d4341c3635082486bc806
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f5:d1:04:5a:b8:1b:50:77:00:93:08:e9:85:
92:f4:12:06:8c:0c:5f:ea:ba:6b:29:f2:fd:80:23:
c7:c8:06:0c:3d:c0:a0:7a:22:f9:d7:6b:9f:83:14:
a9:fa:25:f7:05:a2:e8:2c:f8:88:b3:fb:d3:2f:fa:
3d:a4:fb:ba:ed:0a:e2:2e:7c:09:5f:d1:52:07:ea:
f2:6a:90:87:f8:82:48:d0:2d:c0:26:24:34:9f:fe:
03:1c:92:83:9f:e8:f8:4a:48:b9:d4:dd:fc:9e:56:
01:40:9c:1d:58:68:5b:6a:98:86:21:91:68:34:fa:
f9:c9:4d:97:68:d7:26:69:94:19:84:6c:19:f3:b8:
ae:ac:94:79:1b:eb:df:a5:e4:79:88:de:44:a0:8e:
07:74:33:70:1e:e9:31:69:ac:95:1a:90:a2:36:8f:
c4:21:69:92:bd:8e:0b:72:bb:14:f2:a4:c9:29:98:
3f:cf:af:08:67:3a:e7:77:56:1d:d0:b1:fe:a4:1b:
d4:0e:d9:14:3e:35:d3:48:48:8c:e2:9c:da:82:ed:
c7:03:a5:22:15:ac:93:b1:d0:76:ff:00:4b:9a:9f:
a0:93:22:c8:42:ea:c2:94:55:4c:96:d9:61:3e:39:
5f:a5:23:bf:8d:1c:89:9d:ba:16:cc:4d:fb:c3:2b:
a3:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:B9:A1:2B:40:24:70:BF:C5:9D:43:41:C3:63:50:82:48:6B:C8:06
X509v3 Authority Key Identifier:
keyid:E4:66:48:33:96:AF:B3:77:E5:E3:79:D1:61:5B:DE:0F:D4:D9:ED:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5GZIM5avs3fl43nRYVveD9TZ7Uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/18b5bb-8e41-4e88-bdbe-341c63614280/1/5GZIM5avs3fl43nRYVveD9TZ7Uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/18b5bb-8e41-4e88-bdbe-341c63614280/1/5GZIM5avs3fl43nRYVveD9TZ7Uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:d8:cb:08:4c:5e:2e:74:94:16:d5:ec:c7:90:65:a3:59:94:
f7:5a:9c:4f:68:7a:5c:96:ad:d2:6d:60:8c:7e:55:db:db:be:
c4:58:7c:08:39:a0:3b:61:fa:95:74:e9:d4:bf:90:d2:ee:5e:
73:0e:cd:d6:fc:8a:a5:16:46:fd:3a:c1:e2:0c:7a:48:9d:37:
50:b6:d1:43:a9:d8:26:f7:0e:d6:f2:1e:74:23:59:65:ec:7a:
d7:f6:88:a3:78:bb:06:2b:6c:84:1d:1a:c0:63:e6:7f:7e:67:
46:4d:97:5d:5c:3e:74:4f:19:38:83:2c:8c:cd:6b:a6:4c:04:
a1:c5:d5:9d:4d:9d:c9:90:f7:0a:ce:d2:33:0c:f4:c4:99:a8:
65:b7:04:9a:00:0e:7d:e7:18:13:55:54:2d:dc:1b:a0:b5:9f:
b0:40:f5:0f:6f:2e:e1:e8:d7:34:5d:69:82:6a:28:a5:43:03:
0c:7a:3d:7a:e9:3b:a8:b4:09:0b:34:88:3e:bf:5e:61:17:d4:
e0:b4:c0:1f:44:d7:2b:e4:0d:77:bc:f5:9f:2e:8e:ba:98:c6:
30:ce:ab:b8:40:63:05:30:dd:d7:c3:da:d8:3a:28:bf:56:66:
79:65:2a:dc:cc:a2:75:d2:6d:f2:8a:da:c4:ba:1a:e7:12:d0:
7a:60:0f:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:54:44 2026 by rpki-client