Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/6afa85-367a-4efd-a311-41172b249740/1/5nvBKzaFcW2O9lZ-IZBBlDd74eU.mft
File: 5nvBKzaFcW2O9lZ-IZBBlDd74eU.mft (raw, json)
Hash identifier: h4J6eH3hgK9/zbwY6L/6t70tkxw69lhxL69Q2RyW4bM=
Subject key identifier: C9:AE:17:F2:83:E5:BE:E7:BB:7C:8A:0F:0A:C2:42:E7:88:F5:FA:7E
Authority key identifier: E6:7B:C1:2B:36:85:71:6D:8E:F6:56:7E:21:90:41:94:37:7B:E1:E5
Certificate issuer: /CN=e67bc12b3685716d8ef6567e21904194377be1e5
Certificate serial: 019D3752B44BDAE3E73F98A1BD70F4FFFD29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5nvBKzaFcW2O9lZ-IZBBlDd74eU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/6afa85-367a-4efd-a311-41172b249740/1/5nvBKzaFcW2O9lZ-IZBBlDd74eU.mft
Manifest number: 188D
Signing time: Sun 29 Mar 2026 02:00:59 +0000
Manifest this update: Sun 29 Mar 2026 02:00:59 +0000
Manifest next update: Mon 30 Mar 2026 02:00:59 +0000
Files and hashes: 1: 5nvBKzaFcW2O9lZ-IZBBlDd74eU.crl (hash: 0A4okFqjBbkQ7Pl5OjalZo6NGGncEr48LwhatxPY8go=)
2: l26a7R_zJZToxzZfQDSNdGwONXo.roa (hash: f6mXkllCRchDTdmRlgeark5dgGsFI7jH1YE/DCr29Ms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/6afa85-367a-4efd-a311-41172b249740/1/5nvBKzaFcW2O9lZ-IZBBlDd74eU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/6afa85-367a-4efd-a311-41172b249740/1/5nvBKzaFcW2O9lZ-IZBBlDd74eU.mft
rsync://rpki.ripe.net/repository/DEFAULT/5nvBKzaFcW2O9lZ-IZBBlDd74eU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:b4:4b:da:e3:e7:3f:98:a1:bd:70:f4:ff:fd:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e67bc12b3685716d8ef6567e21904194377be1e5
Validity
Not Before: Mar 29 02:00:59 2026 GMT
Not After : Mar 30 02:00:59 2026 GMT
Subject: CN=c9ae17f283e5bee7bb7c8a0f0ac242e788f5fa7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:06:a8:f8:00:40:f1:3a:3b:f9:5d:94:a5:09:
89:10:06:f9:bf:3e:d6:05:a0:06:5a:58:27:d4:ad:
7f:0d:62:b6:d3:1c:ff:49:d6:61:6a:9d:88:13:b2:
e4:b4:7a:76:1f:95:b7:78:46:b0:3b:dd:4b:ad:bd:
c5:09:a8:74:91:6e:0a:ce:3b:f5:ee:11:c6:c7:8e:
42:b5:8c:66:02:c5:d7:3c:39:86:5f:68:10:ae:fa:
d9:38:7d:ff:71:64:c5:73:c1:3f:78:99:58:77:b8:
03:df:46:c4:43:93:b4:49:33:2c:c5:6c:d4:75:e6:
e9:fb:2e:99:11:02:b0:9e:03:94:00:08:66:3c:79:
52:73:c8:d0:ef:bb:5f:a9:af:1e:c9:ba:b9:f6:0a:
ef:4a:a7:79:d0:3c:80:bd:45:77:0b:0d:d4:a2:a9:
32:bd:40:0a:f1:86:ed:88:3c:e6:a2:ce:44:4a:52:
44:df:d8:bf:11:fc:89:97:51:e2:97:93:da:22:26:
f4:6d:0f:f7:99:08:e7:4e:6c:61:48:c0:67:7c:75:
63:d0:0f:38:b5:b1:17:ca:c6:62:97:9e:c8:3b:50:
69:05:c3:45:bb:6f:2c:b0:02:fb:c5:f2:15:c3:3d:
5f:f0:dc:a8:f5:02:5a:de:cd:2b:3d:f7:e2:c9:8d:
ce:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:AE:17:F2:83:E5:BE:E7:BB:7C:8A:0F:0A:C2:42:E7:88:F5:FA:7E
X509v3 Authority Key Identifier:
keyid:E6:7B:C1:2B:36:85:71:6D:8E:F6:56:7E:21:90:41:94:37:7B:E1:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5nvBKzaFcW2O9lZ-IZBBlDd74eU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/6afa85-367a-4efd-a311-41172b249740/1/5nvBKzaFcW2O9lZ-IZBBlDd74eU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/6afa85-367a-4efd-a311-41172b249740/1/5nvBKzaFcW2O9lZ-IZBBlDd74eU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:aa:a8:7c:7d:8e:93:dc:e4:2f:88:a9:67:d4:62:12:c9:81:
11:fd:64:ec:fc:ca:e3:8c:d8:07:f2:9f:52:ef:13:8b:e7:5d:
b8:4f:8a:3d:0a:fa:12:5d:c8:08:fd:60:88:d4:89:fb:59:82:
03:89:d4:aa:d8:72:89:30:89:50:85:85:b2:69:e3:1d:6d:11:
d2:f3:32:6a:99:df:95:0f:f0:29:42:73:b9:40:e0:3d:b4:bd:
68:28:c5:6d:71:66:50:1b:28:8a:6d:2d:78:f3:ce:d6:19:d9:
04:4a:8e:6d:8e:e4:bb:b4:65:e1:48:d3:8b:f6:5c:44:fc:e6:
f0:26:9d:6e:65:63:78:b7:27:b1:03:ef:d8:e2:2c:53:f9:d7:
45:45:e9:eb:42:f4:c2:ff:0e:e2:03:f9:b9:0c:a2:06:06:35:
ef:0e:ce:f4:b1:28:23:8c:5e:85:8a:d8:f0:50:4b:b1:bb:a1:
d6:33:83:d8:2e:e7:bb:d4:7c:9b:b5:d9:8f:dc:d7:68:81:01:
78:01:75:f0:cb:4a:3f:5e:c2:a5:2f:4f:dc:bf:5e:66:cd:57:
00:41:b2:01:7b:e9:6c:32:58:ee:21:6a:9e:5e:e1:c0:17:b8:
87:40:dc:fe:26:ab:f6:5e:bd:e1:b2:df:af:0b:03:bf:f1:1c:
f9:4b:91:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:34:49 2026 by rpki-client