Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/bc57ff-ab1b-4651-95b4-ddd7bf93d356/1/5z3xVch6WQrB5ThUTPM1bk_IF0g.mft
File: 5z3xVch6WQrB5ThUTPM1bk_IF0g.mft (raw, json)
Hash identifier: 7pu5hZzHTD7vtZjAt3HS9NmBd5kaL/pS+Go1rDaLgQc=
Subject key identifier: D4:08:DC:34:C9:D2:6B:8C:B4:C8:FE:6B:C6:0C:69:4D:F4:9C:A4:01
Authority key identifier: E7:3D:F1:55:C8:7A:59:0A:C1:E5:38:54:4C:F3:35:6E:4F:C8:17:48
Certificate issuer: /CN=e73df155c87a590ac1e538544cf3356e4fc81748
Certificate serial: 019D389BF92EF80215362D03B1E9F428789F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5z3xVch6WQrB5ThUTPM1bk_IF0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/bc57ff-ab1b-4651-95b4-ddd7bf93d356/1/5z3xVch6WQrB5ThUTPM1bk_IF0g.mft
Manifest number: 1831
Signing time: Sun 29 Mar 2026 08:00:39 +0000
Manifest this update: Sun 29 Mar 2026 08:00:39 +0000
Manifest next update: Mon 30 Mar 2026 08:00:39 +0000
Files and hashes: 1: 5z3xVch6WQrB5ThUTPM1bk_IF0g.crl (hash: USjQAdTSy9XNG+2nmUfdijoKmvcYdp8yuCkGJIJtecs=)
2: zL-LWx-Rz7OMaI1EPMJkxLg31_M.roa (hash: cgNfkZmen0X8xi6X3N5ufjIJZAx+Um78IAgsseJM+y8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/bc57ff-ab1b-4651-95b4-ddd7bf93d356/1/5z3xVch6WQrB5ThUTPM1bk_IF0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/bc57ff-ab1b-4651-95b4-ddd7bf93d356/1/5z3xVch6WQrB5ThUTPM1bk_IF0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/5z3xVch6WQrB5ThUTPM1bk_IF0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:f9:2e:f8:02:15:36:2d:03:b1:e9:f4:28:78:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e73df155c87a590ac1e538544cf3356e4fc81748
Validity
Not Before: Mar 29 08:00:39 2026 GMT
Not After : Mar 30 08:00:39 2026 GMT
Subject: CN=d408dc34c9d26b8cb4c8fe6bc60c694df49ca401
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:41:0e:93:7a:51:cf:7c:37:30:9b:44:e9:e1:
96:78:be:ad:c6:ba:93:2c:be:fb:c4:25:d2:f5:39:
04:b4:69:14:52:63:23:d9:29:65:02:89:75:b0:6d:
94:f5:86:72:e7:b0:f0:09:59:9d:32:1f:cb:23:5a:
3e:42:e6:2c:76:5a:8d:cd:f4:18:aa:3b:92:29:e8:
06:ae:45:ce:2f:f2:a5:9f:c0:7a:05:dd:60:ad:a5:
a8:af:a8:76:a6:80:27:dc:e3:8c:15:59:27:46:5f:
45:94:a4:31:94:81:4e:a3:d2:54:6c:75:d1:af:e4:
09:31:49:5c:10:f0:01:b5:2a:be:dc:ea:ee:85:65:
5d:e8:87:1a:0a:49:5f:c1:e7:3e:a7:21:aa:89:65:
95:0d:44:ab:28:bc:42:af:48:43:ec:c7:1a:d7:09:
80:5a:85:db:99:e9:3c:99:f5:4b:47:d4:9d:4f:41:
c3:29:9e:5d:e3:fc:07:a7:c8:3a:28:c4:4c:08:8e:
9a:aa:9b:e8:3d:65:c5:23:6a:2e:c4:9c:9a:98:89:
4e:d5:82:0e:a3:50:cf:21:12:d8:5e:1b:e2:c6:96:
de:0b:15:b1:50:0a:9a:95:1c:0b:8e:47:db:5e:d7:
2c:6f:dc:e1:90:42:f6:89:03:0e:db:b9:fd:7b:ab:
80:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:08:DC:34:C9:D2:6B:8C:B4:C8:FE:6B:C6:0C:69:4D:F4:9C:A4:01
X509v3 Authority Key Identifier:
keyid:E7:3D:F1:55:C8:7A:59:0A:C1:E5:38:54:4C:F3:35:6E:4F:C8:17:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5z3xVch6WQrB5ThUTPM1bk_IF0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/bc57ff-ab1b-4651-95b4-ddd7bf93d356/1/5z3xVch6WQrB5ThUTPM1bk_IF0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/bc57ff-ab1b-4651-95b4-ddd7bf93d356/1/5z3xVch6WQrB5ThUTPM1bk_IF0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:92:4a:46:e3:f8:bc:8c:14:ba:cb:84:d7:60:fd:cd:31:f0:
1d:3b:70:fe:21:26:78:64:da:46:14:a9:bd:80:d3:bd:c6:09:
e0:cb:06:ed:9d:c5:ba:c8:d5:18:5c:f3:bc:8f:92:52:c6:74:
96:4b:f5:7d:35:88:72:d3:8c:98:46:7d:2d:96:4a:57:a9:fe:
aa:3e:b9:a9:c1:45:9d:20:fa:43:3e:30:11:4a:3b:f6:73:02:
b3:7d:ab:7e:7f:bd:4d:ee:44:fd:61:0b:c5:c0:ed:2a:a2:6c:
b8:40:28:48:59:e0:79:d2:d9:15:96:c8:6a:58:b7:ed:56:a2:
e1:30:04:45:10:8a:66:7a:7a:ae:b7:58:05:f7:3c:fc:ce:ce:
29:42:28:bd:70:d0:d2:99:c1:4d:92:2c:f8:ff:b5:cf:f6:8f:
26:93:aa:38:6a:6b:25:ac:9d:ed:2c:84:88:2f:e0:56:d7:97:
16:cd:98:b1:e4:1f:82:f7:26:2f:a9:06:81:f9:36:5a:71:c8:
f6:90:03:b1:ba:06:6c:c2:7f:25:61:98:2f:19:80:8f:d3:ba:
38:e1:ed:b9:7d:25:6f:3b:7c:74:b9:dc:e9:33:8d:7f:b8:6c:
a9:46:9f:64:b2:68:9e:2f:e5:aa:b7:ec:f8:00:1f:f3:16:e5:
2c:2e:44:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:04:29 2026 by rpki-client