Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/9ef60a-73ee-40e1-9006-c0b3b0f54beb/1/5GWsyQgJ77RczaJQoQV2GElLhus.mft
File: 5GWsyQgJ77RczaJQoQV2GElLhus.mft (raw, json)
Hash identifier: 9mMDfA9O0i1+x3zzY+sphwNfFEIPetwvUkDeUs/JaL0=
Subject key identifier: 23:FB:D3:87:77:0E:56:E0:51:09:8A:31:DD:F2:3F:F8:87:52:79:A2
Authority key identifier: E4:65:AC:C9:08:09:EF:B4:5C:CD:A2:50:A1:05:76:18:49:4B:86:EB
Certificate issuer: /CN=e465acc90809efb45ccda250a1057618494b86eb
Certificate serial: 019D39E5CC93A361C51126129B6342D3E336
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5GWsyQgJ77RczaJQoQV2GElLhus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/9ef60a-73ee-40e1-9006-c0b3b0f54beb/1/5GWsyQgJ77RczaJQoQV2GElLhus.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 14:00:54 +0000
Manifest this update: Sun 29 Mar 2026 14:00:54 +0000
Manifest next update: Mon 30 Mar 2026 14:00:54 +0000
Files and hashes: 1: 2SzXHkxCLVLxwqT1VXOIbH7zS1U.roa (hash: aCYVx/y4t8hASeqhW625AjPBxOCwC/8c0JG862QvXD0=)
2: 5GWsyQgJ77RczaJQoQV2GElLhus.crl (hash: ZI4kMHf7AmWlrzvGPAY827Ph7avwP6rTZNPZ2FM10Qw=)
3: xprnXzLHdgCC1ErposCq6vG3jPU.roa (hash: yXNFomv+hurOUmhTIqZgZ4hQnilyhZpNY276iiDrBf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/9ef60a-73ee-40e1-9006-c0b3b0f54beb/1/5GWsyQgJ77RczaJQoQV2GElLhus.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/9ef60a-73ee-40e1-9006-c0b3b0f54beb/1/5GWsyQgJ77RczaJQoQV2GElLhus.mft
rsync://rpki.ripe.net/repository/DEFAULT/5GWsyQgJ77RczaJQoQV2GElLhus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:cc:93:a3:61:c5:11:26:12:9b:63:42:d3:e3:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e465acc90809efb45ccda250a1057618494b86eb
Validity
Not Before: Mar 29 14:00:54 2026 GMT
Not After : Mar 30 14:00:54 2026 GMT
Subject: CN=23fbd387770e56e051098a31ddf23ff8875279a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f2:64:d2:ab:a9:2a:61:27:34:fb:20:37:23:
27:25:69:31:da:36:b7:67:62:c8:77:08:0f:a8:c2:
9a:52:d7:45:ce:15:ba:f7:1e:b7:61:55:fa:36:2c:
3a:ca:36:a5:0d:52:8f:06:ce:4e:e4:5f:fa:e8:c0:
96:08:56:6b:24:6a:69:c4:7c:ff:db:af:89:c6:4f:
95:0d:3f:bf:b2:7d:13:6c:62:4c:b2:64:ca:b8:6d:
91:15:ef:2d:e7:fc:dd:95:42:a4:8d:80:74:12:10:
4c:9e:16:ed:df:c5:64:ed:58:f4:84:a4:05:ba:2c:
4a:89:34:84:b7:7a:41:8d:72:f1:6e:22:0a:cf:e6:
94:34:f4:aa:a6:73:c6:cf:7a:51:25:0a:20:c8:c1:
3f:a8:b0:7a:69:e6:97:f9:66:8f:24:55:c0:d0:af:
d8:6b:c8:9e:ee:27:f8:f6:8b:56:bd:1e:1b:fd:b9:
27:9d:50:8c:01:df:f3:ad:9d:96:91:fe:b2:5c:5f:
c2:c4:9b:f8:9a:7c:28:a9:f4:63:8a:0b:ba:0a:22:
53:27:3d:3e:48:25:c1:79:d4:2f:f7:04:93:c1:6e:
b1:f7:d4:88:4f:cf:09:95:c0:12:02:e7:a0:18:de:
59:eb:1a:2a:8d:33:42:f3:ff:11:96:44:d4:3d:24:
6c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:FB:D3:87:77:0E:56:E0:51:09:8A:31:DD:F2:3F:F8:87:52:79:A2
X509v3 Authority Key Identifier:
keyid:E4:65:AC:C9:08:09:EF:B4:5C:CD:A2:50:A1:05:76:18:49:4B:86:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5GWsyQgJ77RczaJQoQV2GElLhus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/9ef60a-73ee-40e1-9006-c0b3b0f54beb/1/5GWsyQgJ77RczaJQoQV2GElLhus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/9ef60a-73ee-40e1-9006-c0b3b0f54beb/1/5GWsyQgJ77RczaJQoQV2GElLhus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:b7:3b:98:aa:ca:8e:3e:90:ca:66:b4:c6:df:c8:ac:c0:46:
34:60:63:e0:93:5e:ce:62:ea:f6:c6:14:03:d1:74:a3:71:2a:
11:38:30:56:98:e2:bf:8a:d4:79:b0:10:03:e1:58:1b:7f:71:
55:0e:3b:f7:be:3d:10:6e:a7:a1:5c:e5:c0:55:c4:82:97:89:
f0:89:09:04:fa:99:ec:12:ac:97:36:06:71:69:db:f9:71:a3:
21:8a:99:07:77:50:3a:6b:dc:42:c2:62:be:71:32:29:13:ea:
34:a5:92:1c:04:81:45:4b:6c:f0:ad:7f:e9:3d:7d:02:c8:bf:
50:81:20:17:d2:58:2f:11:55:6b:fb:be:1f:88:b8:ee:fc:cc:
75:0f:88:12:00:b1:a4:e8:1d:55:24:0d:92:d6:bd:5c:5a:1d:
eb:40:48:22:2f:08:ac:d5:27:d4:bd:30:1d:da:3f:26:d2:05:
d4:24:e0:8a:d2:9e:65:20:9f:e8:70:0a:72:a1:98:c8:bd:c1:
16:ec:05:4c:94:af:80:7e:0d:de:32:5c:95:68:fd:6a:93:ea:
e4:c6:0a:8a:02:0e:7d:7c:54:f4:47:ef:0f:64:31:0d:b0:5f:
ed:d1:7a:96:86:a3:4d:57:40:55:c5:24:3c:94:b0:8a:19:f0:
78:66:27:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:51:34 2026 by rpki-client