Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/508321-2dfa-4253-a3cb-2f926510ffbf/1/5gFfHiAENZyudla5aK2ypUpDTx4.mft
File: 5gFfHiAENZyudla5aK2ypUpDTx4.mft (raw, json)
Hash identifier: 5db+xXGaf6WScbrBpnJ3Li2uQOaLA83g1QDbKuZKE2M=
Subject key identifier: 37:0C:E1:83:6D:D6:4E:A3:27:77:0E:A2:A6:FE:97:79:32:BB:3E:58
Authority key identifier: E6:01:5F:1E:20:04:35:9C:AE:76:56:B9:68:AD:B2:A5:4A:43:4F:1E
Certificate issuer: /CN=e6015f1e2004359cae7656b968adb2a54a434f1e
Certificate serial: 019D37C101E496A87F2C350CA46BE63BE5AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5gFfHiAENZyudla5aK2ypUpDTx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/508321-2dfa-4253-a3cb-2f926510ffbf/1/5gFfHiAENZyudla5aK2ypUpDTx4.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 04:01:28 +0000
Manifest this update: Sun 29 Mar 2026 04:01:28 +0000
Manifest next update: Mon 30 Mar 2026 04:01:28 +0000
Files and hashes: 1: 5gFfHiAENZyudla5aK2ypUpDTx4.crl (hash: RMs83vzUz/mThp3CoALS5PjOu6gBAaWKLplN3nsxRrw=)
2: gNOVMDvtvsuQYQ-kPKrR7O_nyMk.roa (hash: wGDnNcGTA78hmdHu6y6oulR3cEsAnWv+5REEurYIAmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/508321-2dfa-4253-a3cb-2f926510ffbf/1/5gFfHiAENZyudla5aK2ypUpDTx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/508321-2dfa-4253-a3cb-2f926510ffbf/1/5gFfHiAENZyudla5aK2ypUpDTx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/5gFfHiAENZyudla5aK2ypUpDTx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c1:01:e4:96:a8:7f:2c:35:0c:a4:6b:e6:3b:e5:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6015f1e2004359cae7656b968adb2a54a434f1e
Validity
Not Before: Mar 29 04:01:28 2026 GMT
Not After : Mar 30 04:01:28 2026 GMT
Subject: CN=370ce1836dd64ea327770ea2a6fe977932bb3e58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ae:b7:59:d2:8e:3c:78:31:7b:41:58:24:cc:
21:67:48:e7:4d:c2:cb:b8:86:8d:c3:6a:6b:9d:1e:
d4:45:df:79:a0:94:47:b0:06:c9:2c:c4:de:d9:4b:
3a:74:69:73:e4:d7:72:80:09:75:2b:d1:ba:6b:53:
44:71:a8:62:f9:36:7e:c0:b8:10:99:c3:44:5d:18:
7e:d5:d1:7d:d3:30:ed:aa:3e:7b:9d:1f:34:60:b8:
7c:f2:56:26:9f:6c:0a:a7:40:e8:bd:75:6f:f8:89:
16:01:53:51:5b:3f:96:34:87:f9:eb:7e:7c:8b:40:
0c:76:ff:f0:aa:de:64:d8:8c:31:29:77:64:79:a0:
38:a9:22:d7:ac:59:08:7f:80:a7:f0:c2:91:be:59:
06:32:47:ed:46:48:1d:a4:e0:da:fe:23:98:7d:3f:
4f:ae:81:49:74:c6:e5:23:b9:2c:46:33:87:f3:21:
85:91:03:e1:b4:66:fb:b9:bb:cb:6b:77:b5:a0:38:
69:4a:27:b4:c1:cf:a4:ad:6a:e5:6d:de:01:01:7e:
38:64:f9:c9:40:01:e4:a1:39:6d:28:75:4c:cb:5b:
8d:4e:82:1d:10:c0:b6:13:ce:56:9a:93:bc:67:23:
58:72:11:ee:90:a1:8f:a5:d6:4e:04:cd:d5:f6:bc:
1a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:0C:E1:83:6D:D6:4E:A3:27:77:0E:A2:A6:FE:97:79:32:BB:3E:58
X509v3 Authority Key Identifier:
keyid:E6:01:5F:1E:20:04:35:9C:AE:76:56:B9:68:AD:B2:A5:4A:43:4F:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5gFfHiAENZyudla5aK2ypUpDTx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/508321-2dfa-4253-a3cb-2f926510ffbf/1/5gFfHiAENZyudla5aK2ypUpDTx4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/508321-2dfa-4253-a3cb-2f926510ffbf/1/5gFfHiAENZyudla5aK2ypUpDTx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:e6:32:66:85:c3:f2:ef:9d:ac:d8:1a:cf:8c:f5:3b:e4:5d:
d4:28:6e:ee:42:89:f2:8b:b7:8a:a1:b1:28:1e:5c:52:d8:85:
af:0d:96:32:7f:cf:88:5b:01:a9:e7:44:fb:de:2f:86:ae:76:
01:9b:2f:a7:ba:f0:b4:1d:3b:ef:df:fc:e9:7a:55:a6:44:f3:
2f:9f:a4:b8:cb:e7:0c:e7:04:2b:47:5e:21:cb:c6:70:2c:c2:
9c:84:aa:1c:17:ea:55:25:85:0a:bb:77:00:08:c9:d2:89:5f:
26:a8:ff:03:3a:e9:21:63:3f:5e:a0:2a:5d:38:95:60:a7:bb:
da:a3:62:ec:1b:c2:28:77:2b:eb:79:f3:d1:ed:5b:bc:5f:8c:
09:59:43:f0:f9:bb:a0:5b:ab:f6:7f:21:37:53:da:16:ae:41:
4a:4d:cb:fb:a0:d3:89:86:80:89:8b:16:05:a1:dd:bc:72:4f:
ba:09:02:3e:c0:57:ba:48:b0:87:51:0f:fe:dc:fa:af:78:3d:
2a:fa:25:bc:01:9a:f4:2b:6c:8b:35:4f:49:b8:0c:ac:7c:9f:
32:a9:7e:f6:83:2d:87:cd:a9:a8:15:81:5c:30:c5:5e:d4:70:
13:fc:cd:57:c2:0a:a8:98:5d:d5:f4:6e:54:bc:3c:61:81:e1:
ab:9e:3c:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:52 2026 by rpki-client