Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.mft
File: 5eaQaKix-3-geVuvm7OrhslORvw.mft (raw, json)
Hash identifier: NrFJj2QvrUOrw6G7aNzAoN0t7Z+isTllB6lTp7AbVb8=
Subject key identifier: B4:D9:18:6A:6B:95:58:0E:AC:87:82:15:9D:7B:9A:F4:86:11:4B:9D
Authority key identifier: E5:E6:90:68:A8:B1:FB:7F:A0:79:5B:AF:9B:B3:AB:86:C9:4E:46:FC
Certificate issuer: /CN=e5e69068a8b1fb7fa0795baf9bb3ab86c94e46fc
Certificate serial: 019D38D2AE1A5D62A3BA04EF02428EB36480
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5eaQaKix-3-geVuvm7OrhslORvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.mft
Manifest number: 1541
Signing time: Sun 29 Mar 2026 09:00:24 +0000
Manifest this update: Sun 29 Mar 2026 09:00:24 +0000
Manifest next update: Mon 30 Mar 2026 09:00:24 +0000
Files and hashes: 1: 5eaQaKix-3-geVuvm7OrhslORvw.crl (hash: JiwZQhAInB540f1Pjo8PnY5PIg+uSrvyPuVVUHepnzQ=)
2: CBtJzFMoigMYechG5k_lhWICkAA.roa (hash: 6qcOp5zAWvjz4mUxBNJFQHjpgjjuwwz7xV3uMQfNfLc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5eaQaKix-3-geVuvm7OrhslORvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:ae:1a:5d:62:a3:ba:04:ef:02:42:8e:b3:64:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5e69068a8b1fb7fa0795baf9bb3ab86c94e46fc
Validity
Not Before: Mar 29 09:00:24 2026 GMT
Not After : Mar 30 09:00:24 2026 GMT
Subject: CN=b4d9186a6b95580eac8782159d7b9af486114b9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d8:94:01:3b:28:18:83:df:e5:de:06:68:d8:
bc:94:0f:53:85:9a:93:be:66:d9:d2:04:af:46:e6:
7b:8c:b9:90:89:fe:87:5a:2c:19:a5:08:4e:96:4d:
3e:d2:25:68:1c:f0:b2:a1:79:d3:da:0e:b0:5f:f4:
bf:b1:f4:44:8e:3c:c1:3a:34:c6:1b:ab:bc:7f:46:
84:01:ab:54:8f:6a:9b:18:bc:13:86:be:d5:c2:41:
4d:02:4c:5d:0e:54:25:4c:cf:f0:f3:55:1c:0a:2c:
30:ea:4b:8e:9e:17:cf:a6:3a:39:91:53:52:75:af:
42:9f:6e:56:9d:32:45:39:6b:97:30:13:f8:ab:be:
37:04:66:69:c8:09:e2:dd:a5:d1:3d:80:2c:67:4a:
e4:08:3f:69:7d:9d:0c:a6:c2:30:2a:22:87:a2:ee:
15:52:71:cb:3c:64:33:7a:ce:7b:54:2d:df:71:d7:
e1:50:d6:99:e1:2d:1b:56:8c:d0:7c:2a:af:b8:03:
7b:a9:cf:ef:b3:14:af:fe:1b:f7:6f:4f:8a:59:6c:
7e:5e:f8:d5:4b:d4:4a:d2:9b:b2:c2:09:47:cf:91:
47:fd:70:1b:53:69:a3:90:f3:09:7c:5b:4b:08:16:
9c:c4:64:fe:e2:4d:ea:aa:b0:1e:0c:87:3b:6c:b8:
65:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:D9:18:6A:6B:95:58:0E:AC:87:82:15:9D:7B:9A:F4:86:11:4B:9D
X509v3 Authority Key Identifier:
keyid:E5:E6:90:68:A8:B1:FB:7F:A0:79:5B:AF:9B:B3:AB:86:C9:4E:46:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5eaQaKix-3-geVuvm7OrhslORvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:f7:eb:82:ff:9a:18:68:bc:76:de:3a:ae:38:a4:11:08:32:
7d:e6:5a:78:9f:28:94:db:8a:27:9e:71:d1:1e:8d:f8:32:f8:
e3:8a:95:9f:10:8a:6a:75:15:7e:ff:e7:b6:b8:89:56:d6:a4:
13:38:d0:09:95:e9:9b:06:58:3d:bb:98:95:52:9b:07:b4:f5:
81:d9:67:93:2f:81:53:cf:56:4a:12:bb:e9:3f:02:52:70:0c:
93:a6:4c:67:19:75:56:1e:75:cc:eb:ff:68:5e:ed:66:1d:98:
21:b9:57:45:d9:8c:21:53:fd:3c:39:96:5c:2e:24:a6:fc:f2:
aa:8f:47:97:1a:55:a8:2b:4e:0b:3d:4c:e6:0e:09:ed:cd:24:
e9:f8:25:ac:18:aa:15:4e:3e:65:43:4b:fa:97:fb:bf:a2:2b:
08:3f:f5:2f:01:2d:f4:a7:0c:7c:94:2d:c6:3d:79:66:a1:67:
9f:f3:bf:28:bb:cf:08:2f:52:3e:eb:db:78:b0:2a:24:4d:e0:
26:02:ea:ff:b1:15:7a:47:86:95:ab:73:09:1a:90:32:5a:41:
bb:e3:f7:d1:6d:45:fb:8a:81:ec:8d:d8:71:76:6e:46:da:06:
0d:45:8f:7d:54:81:2b:68:65:6d:eb:3b:0e:e8:35:16:eb:7e:
63:b3:50:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:35 2026 by rpki-client