Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.mft
File: 5pXPs2_lofOEzHeK4pmsq4HCe_o.mft (raw, json)
Hash identifier: bM4VSy9A1S5OchQNc0b7Nz744op5yD40Sl9c6KgfNSE=
Subject key identifier: 74:EB:31:55:95:68:C6:C7:1C:4D:AD:4D:A3:48:45:78:DE:02:1C:05
Authority key identifier: E6:95:CF:B3:6F:E5:A1:F3:84:CC:77:8A:E2:99:AC:AB:81:C2:7B:FA
Certificate issuer: /CN=e695cfb36fe5a1f384cc778ae299acab81c27bfa
Certificate serial: 019D38D3210B9B928B0EE6EC0D666D60A499
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5pXPs2_lofOEzHeK4pmsq4HCe_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 09:00:53 +0000
Manifest this update: Sun 29 Mar 2026 09:00:53 +0000
Manifest next update: Mon 30 Mar 2026 09:00:53 +0000
Files and hashes: 1: 5pXPs2_lofOEzHeK4pmsq4HCe_o.crl (hash: eUnQ10Tu7DEAmDN2P0zreHVL9YOzj02PnpoIKFXV6Og=)
2: 9qcdE1YL_0C1S_ezPi6pVwjYL6k.roa (hash: 80AxotVMmTswcUF86l52EV4BdZQ++5u2AKVAcyeWhsQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/5pXPs2_lofOEzHeK4pmsq4HCe_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:21:0b:9b:92:8b:0e:e6:ec:0d:66:6d:60:a4:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e695cfb36fe5a1f384cc778ae299acab81c27bfa
Validity
Not Before: Mar 29 09:00:53 2026 GMT
Not After : Mar 30 09:00:53 2026 GMT
Subject: CN=74eb31559568c6c71c4dad4da3484578de021c05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f1:b5:c9:3e:ef:ad:04:c2:49:ad:b6:3b:6d:
f9:65:76:a1:4b:83:d3:61:36:bc:96:58:36:99:0c:
bb:e4:bf:98:33:f7:d5:8a:7a:df:40:58:9f:1a:4f:
e4:cb:e2:95:c7:9d:ba:fc:13:df:5f:05:0d:a1:20:
5a:7f:9b:a0:e4:32:7e:e7:46:78:c9:6e:70:37:62:
46:ce:9e:0e:34:e6:fb:5e:aa:e6:52:f0:b7:eb:f2:
4d:b2:d0:77:a9:9e:99:13:fc:f9:65:a7:06:5b:33:
fb:1a:16:ee:75:1a:b5:6f:78:2c:f1:dc:52:b8:63:
ab:1a:d0:04:a5:b2:5a:22:36:1a:e0:a7:fb:2a:a6:
d8:2f:ca:e7:33:ec:c1:3a:17:f9:96:99:42:24:8d:
3d:58:ef:2e:2e:ca:1c:21:51:d5:19:d4:97:bd:eb:
04:9d:86:8d:51:bc:48:ce:84:30:d9:f8:01:79:4b:
78:0f:63:83:72:8e:9c:8a:a9:ca:2e:0b:86:32:8b:
d3:4b:04:f2:52:56:e9:e7:06:72:7e:0e:ff:df:0f:
de:ba:b4:89:c0:0b:a9:75:69:97:2e:fb:b0:56:33:
65:d6:dc:33:1e:44:24:ae:74:69:cd:08:da:34:31:
1f:70:76:d2:54:c7:e5:c1:9a:53:3e:e9:0d:13:46:
cf:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:EB:31:55:95:68:C6:C7:1C:4D:AD:4D:A3:48:45:78:DE:02:1C:05
X509v3 Authority Key Identifier:
keyid:E6:95:CF:B3:6F:E5:A1:F3:84:CC:77:8A:E2:99:AC:AB:81:C2:7B:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5pXPs2_lofOEzHeK4pmsq4HCe_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:41:93:d9:bc:bc:f7:70:cf:43:f8:fb:51:f9:ca:54:82:e7:
48:2c:84:a7:e0:c4:40:db:c1:10:79:c1:0a:ff:0b:67:73:a2:
34:5c:1f:d3:12:2c:33:06:d8:59:22:27:e6:37:60:34:ad:d4:
48:17:92:15:6b:d1:f2:88:9a:d4:39:af:f3:96:d4:bf:28:1f:
1a:44:bb:ee:28:85:95:5b:80:96:97:5b:0e:60:83:f4:2e:07:
cc:1d:2c:c8:57:6c:84:b2:cc:6c:13:8c:38:c6:2b:0e:13:1b:
b6:37:fd:ed:eb:dd:0e:8a:15:c6:62:73:25:4f:69:9a:f5:ad:
12:36:1e:ad:fa:cd:f9:98:39:84:e6:ff:55:4b:8a:1e:22:aa:
bd:4e:45:d2:a6:f5:5c:9f:50:b7:cc:56:e7:be:ff:47:29:2d:
4e:fb:59:d0:4a:ed:74:33:6f:e3:ef:83:9d:aa:e2:cb:4d:49:
80:78:1c:2c:72:a2:51:d2:8c:be:8d:40:3e:c9:65:bf:72:b3:
cf:90:57:a6:19:09:3a:3a:2c:09:99:d7:52:e8:7e:ac:96:55:
04:61:af:08:b8:d3:d5:c2:ad:fa:06:ee:d7:04:b8:00:21:f3:
8e:10:0c:56:2a:4a:78:b5:63:15:5a:ee:25:95:06:f2:f9:b3:
f7:6b:3d:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:51 2026 by rpki-client