Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/841257-9d93-4918-a8ae-72ca13dfad2b/1/5yHQ6mg8xnWULAmPWcQRyGDorto.mft
File: 5yHQ6mg8xnWULAmPWcQRyGDorto.mft (raw, json)
Hash identifier: WoYJMft+vbP0/kKI1cSuIg8ZaSRqvjgfkZE4ri5OC1A=
Subject key identifier: 25:32:13:82:68:01:45:95:A2:E7:B8:42:5D:11:4E:8B:AF:74:41:AD
Authority key identifier: E7:21:D0:EA:68:3C:C6:75:94:2C:09:8F:59:C4:11:C8:60:E8:AE:DA
Certificate issuer: /CN=e721d0ea683cc675942c098f59c411c860e8aeda
Certificate serial: 019D38D344F0E702F479014EF61813027AF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5yHQ6mg8xnWULAmPWcQRyGDorto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/841257-9d93-4918-a8ae-72ca13dfad2b/1/5yHQ6mg8xnWULAmPWcQRyGDorto.mft
Manifest number: 0471
Signing time: Sun 29 Mar 2026 09:01:02 +0000
Manifest this update: Sun 29 Mar 2026 09:01:02 +0000
Manifest next update: Mon 30 Mar 2026 09:01:02 +0000
Files and hashes: 1: 5yHQ6mg8xnWULAmPWcQRyGDorto.crl (hash: 93McDDWVdmOiJYsaOH+gQwTcjdT2FVjNJ9tk4lTdcJc=)
2: STO2kom-zBw1tRgfWNcBAQ37NC8.roa (hash: a0Fmrw1wcNVYzRWWKC14G0JJl+6PihD7ZzdaxPHGENs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/841257-9d93-4918-a8ae-72ca13dfad2b/1/5yHQ6mg8xnWULAmPWcQRyGDorto.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/841257-9d93-4918-a8ae-72ca13dfad2b/1/5yHQ6mg8xnWULAmPWcQRyGDorto.mft
rsync://rpki.ripe.net/repository/DEFAULT/5yHQ6mg8xnWULAmPWcQRyGDorto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:44:f0:e7:02:f4:79:01:4e:f6:18:13:02:7a:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e721d0ea683cc675942c098f59c411c860e8aeda
Validity
Not Before: Mar 29 09:01:02 2026 GMT
Not After : Mar 30 09:01:02 2026 GMT
Subject: CN=2532138268014595a2e7b8425d114e8baf7441ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:ad:f1:05:45:6b:84:03:b3:42:20:4c:af:fb:
80:67:67:48:4a:83:fc:dc:9a:58:87:fd:d3:b2:88:
8e:8e:46:b7:d1:01:c6:45:4a:25:c6:a2:a3:ec:59:
8b:86:94:ba:d6:c4:58:8f:c4:9b:52:6f:df:fe:d0:
3f:ab:cf:f2:64:33:c8:d3:38:63:64:f9:2d:15:ea:
f8:e0:77:76:73:91:37:f9:f6:b6:52:56:32:1b:12:
f1:d6:27:68:84:51:62:a8:51:a5:82:18:94:93:3c:
e0:b6:7e:76:44:41:dd:bc:bf:5f:e3:6d:6a:8e:93:
3d:20:7f:41:91:0b:e8:96:a8:b6:fe:42:20:4c:5b:
35:8e:52:d7:df:31:1c:1b:e3:6d:3e:7e:7d:d8:f3:
27:45:a6:f6:60:52:89:07:dc:fc:b5:04:a9:3a:2b:
f0:e9:2a:13:e3:48:30:f5:54:d4:af:07:05:50:af:
7f:fb:8e:54:2d:72:d5:fd:0f:cb:80:ed:f4:d1:0c:
57:69:e4:9a:91:3f:61:4c:9a:31:fd:36:ca:29:7c:
be:ae:4e:5f:2d:1c:03:44:86:f9:84:63:7e:dc:0c:
ad:ec:7f:36:8b:1c:ed:1a:cd:53:8d:fb:01:c2:06:
71:48:f2:fb:11:74:84:42:59:e6:29:3b:2e:1e:df:
3f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:32:13:82:68:01:45:95:A2:E7:B8:42:5D:11:4E:8B:AF:74:41:AD
X509v3 Authority Key Identifier:
keyid:E7:21:D0:EA:68:3C:C6:75:94:2C:09:8F:59:C4:11:C8:60:E8:AE:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5yHQ6mg8xnWULAmPWcQRyGDorto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/841257-9d93-4918-a8ae-72ca13dfad2b/1/5yHQ6mg8xnWULAmPWcQRyGDorto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/841257-9d93-4918-a8ae-72ca13dfad2b/1/5yHQ6mg8xnWULAmPWcQRyGDorto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:e6:fb:02:7f:23:8a:ef:b7:43:f3:e4:88:2e:1f:00:a3:90:
39:e2:eb:27:4c:91:b6:89:dd:ed:16:e9:b7:16:99:9c:6e:99:
fb:5b:63:fb:ba:d0:8a:89:09:4c:d2:00:d9:c0:b3:93:6e:d8:
80:c9:81:3e:6d:78:30:1c:8a:03:2f:72:14:e1:94:82:3d:fc:
0f:f6:6d:20:ec:5b:d0:ea:5a:3c:e9:9b:59:35:d6:5c:dd:44:
51:55:2e:41:b1:a3:92:a9:71:34:b2:c1:8b:60:75:61:f3:8d:
d4:85:8a:43:64:0a:5d:32:6e:f4:f5:ee:2a:cc:81:4d:ab:af:
72:9a:43:31:2e:ba:72:c4:1e:3f:3d:49:e6:e5:d2:7f:e6:a5:
bf:c9:c0:14:21:b1:c9:70:ef:d6:da:3c:b2:ad:ac:a3:cb:03:
40:47:16:87:0c:02:14:ba:5c:f0:30:52:ff:f3:79:85:9e:c2:
f6:1f:9e:77:35:9c:b8:da:c9:c6:3a:a7:4e:06:3a:9d:b3:60:
67:18:96:29:13:15:a1:05:58:04:75:ae:ac:4d:6d:a6:b6:a4:
fd:1f:e7:d4:05:b6:f5:bf:83:9d:34:95:f1:23:96:88:8b:71:
08:d8:cf:10:71:fd:44:f6:79:92:48:fd:48:1d:77:7c:b5:22:
f7:1f:98:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:25:26 2026 by rpki-client