Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/a17ae7-8e86-43fd-b850-c138bd1c171e/1/5XKe6JY2ujT-Vr1y51j1gq3nDlI.mft
File: 5XKe6JY2ujT-Vr1y51j1gq3nDlI.mft (raw, json)
Hash identifier: 9jhGODTikh4uMPYbrCmssjNVdKfpf0p0MuZDWvcXjzs=
Subject key identifier: 29:48:B4:1E:89:5E:8C:6A:13:6E:2A:6A:F2:69:BB:FB:E1:58:1B:95
Authority key identifier: E5:72:9E:E8:96:36:BA:34:FE:56:BD:72:E7:58:F5:82:AD:E7:0E:52
Certificate issuer: /CN=e5729ee89636ba34fe56bd72e758f582ade70e52
Certificate serial: 019D37C0F5FA4C458659766B9960E5D6FA67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5XKe6JY2ujT-Vr1y51j1gq3nDlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/a17ae7-8e86-43fd-b850-c138bd1c171e/1/5XKe6JY2ujT-Vr1y51j1gq3nDlI.mft
Manifest number: 04A2
Signing time: Sun 29 Mar 2026 04:01:25 +0000
Manifest this update: Sun 29 Mar 2026 04:01:25 +0000
Manifest next update: Mon 30 Mar 2026 04:01:25 +0000
Files and hashes: 1: 5XKe6JY2ujT-Vr1y51j1gq3nDlI.crl (hash: 8Thstol4vgwI2qHWlcR/RBSsANXKzalJxEJfKuqe7Gw=)
2: DVxcthJ5zcZ8COkBA3rotGAlLFU.roa (hash: vJnipHRerz0UttumCZypDHr2IzvHL7fPbWoqduV1jL8=)
3: iDjUHReMaiMBvtjZdmRz4HvetFg.roa (hash: jPu0BoNWhKVwiGPpdPSY4iU5CH4YO6NsUMtetTUIS9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/a17ae7-8e86-43fd-b850-c138bd1c171e/1/5XKe6JY2ujT-Vr1y51j1gq3nDlI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/a17ae7-8e86-43fd-b850-c138bd1c171e/1/5XKe6JY2ujT-Vr1y51j1gq3nDlI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5XKe6JY2ujT-Vr1y51j1gq3nDlI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:f5:fa:4c:45:86:59:76:6b:99:60:e5:d6:fa:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5729ee89636ba34fe56bd72e758f582ade70e52
Validity
Not Before: Mar 29 04:01:25 2026 GMT
Not After : Mar 30 04:01:25 2026 GMT
Subject: CN=2948b41e895e8c6a136e2a6af269bbfbe1581b95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:76:69:a0:d7:2d:d8:4f:18:41:43:48:6d:82:
23:1f:93:c2:b3:43:37:87:1b:6e:b3:cd:02:04:10:
19:f3:3f:3d:91:cf:7b:c8:6d:1e:2d:34:0d:b3:ca:
84:cf:62:3b:98:47:ea:36:9b:b6:38:45:7e:6d:1d:
39:7b:9e:6c:49:fc:dd:b1:5b:68:13:5e:2b:ba:ae:
23:25:ee:cf:a9:4c:ba:b6:a8:12:f1:dd:c0:f5:b8:
29:70:6d:88:3f:b7:b4:06:10:5f:8a:e2:eb:7c:f0:
03:40:50:f4:d9:f6:38:13:65:2c:b9:6f:22:13:88:
20:56:7b:cb:67:16:ca:a3:f2:68:15:73:ba:a8:83:
f7:4c:8c:b8:15:13:8f:99:18:ca:41:73:4d:58:33:
25:2d:94:49:a2:93:cd:e2:f1:9a:c8:65:b5:19:57:
77:18:c9:d1:17:ef:1c:f0:88:37:7b:87:be:0c:c7:
4e:58:a7:7a:7b:81:ec:63:f3:59:fa:f4:01:07:f6:
c2:65:ae:b6:c4:a4:34:61:b2:45:10:af:15:45:72:
d8:b5:6b:be:c3:6e:e0:ed:f9:70:11:c3:a7:c5:41:
24:20:d3:f6:ac:23:ae:8b:95:5c:ca:1b:0b:97:da:
65:93:6d:c0:89:03:44:47:a5:1e:51:10:3c:b9:18:
0a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:48:B4:1E:89:5E:8C:6A:13:6E:2A:6A:F2:69:BB:FB:E1:58:1B:95
X509v3 Authority Key Identifier:
keyid:E5:72:9E:E8:96:36:BA:34:FE:56:BD:72:E7:58:F5:82:AD:E7:0E:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5XKe6JY2ujT-Vr1y51j1gq3nDlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a17ae7-8e86-43fd-b850-c138bd1c171e/1/5XKe6JY2ujT-Vr1y51j1gq3nDlI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a17ae7-8e86-43fd-b850-c138bd1c171e/1/5XKe6JY2ujT-Vr1y51j1gq3nDlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:c4:f3:af:48:29:21:fd:4c:a3:e0:7e:f3:61:9c:cc:0c:89:
eb:64:81:bd:af:1a:e9:2f:04:0f:e2:ae:09:b1:76:a7:f2:63:
8b:3a:b7:55:a7:cf:b7:55:a8:77:f8:e9:fb:e2:1f:a8:60:8e:
b0:3c:fa:5f:b2:91:e6:a1:a2:b8:cc:9a:ba:84:29:bf:63:37:
5f:33:7a:f3:d9:13:41:cf:1c:07:7f:8b:ae:1c:bb:d3:a9:0f:
0c:5f:b3:d7:bd:36:dc:b7:db:71:77:d8:80:0e:04:bf:36:37:
24:a7:5e:04:8e:5b:76:c5:a3:d6:4f:01:ee:03:61:3e:0b:84:
b7:19:39:dc:5a:05:14:5a:ea:52:49:3f:c5:21:4f:95:f1:c6:
a1:29:f2:0c:25:a7:a5:52:1e:d2:2b:13:21:d1:fd:a6:92:17:
02:a7:5d:1c:8c:7e:39:92:f1:70:0f:2b:17:cc:40:aa:3f:6a:
f1:3d:d5:d9:e6:91:32:67:8c:e2:be:a1:ac:29:a0:35:06:b7:
4a:9b:0f:67:74:3d:84:07:93:60:e9:b3:2e:bb:6a:85:85:62:
34:a0:12:46:a2:b8:13:7b:c0:42:ff:85:6e:18:c3:a5:5b:df:
39:5e:cc:33:3e:2e:8b:0c:86:73:6f:e5:95:d3:36:19:75:ec:
ba:62:15:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:12:14 2026 by rpki-client