Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/dd5032-94b9-43f5-9dbb-782cf71c82cc/1/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.mft
File: 5uJXUmf_gy2Xnjjdrz3WdCAWLNo.mft (raw, json)
Hash identifier: pox0oSv9dZP/cYZsLwgs3SN85bjdtPt1DsEtfpW2S8E=
Subject key identifier: DE:83:27:57:60:05:F7:05:E7:64:A9:0E:75:C3:FE:23:B8:6A:25:5D
Authority key identifier: E6:E2:57:52:67:FF:83:2D:97:9E:38:DD:AF:3D:D6:74:20:16:2C:DA
Certificate issuer: /CN=e6e2575267ff832d979e38ddaf3dd67420162cda
Certificate serial: 019D3752A8A0A7D8D79CF4B0104B9B681BBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/dd5032-94b9-43f5-9dbb-782cf71c82cc/1/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.mft
Manifest number: 04A4
Signing time: Sun 29 Mar 2026 02:00:56 +0000
Manifest this update: Sun 29 Mar 2026 02:00:56 +0000
Manifest next update: Mon 30 Mar 2026 02:00:56 +0000
Files and hashes: 1: 5uJXUmf_gy2Xnjjdrz3WdCAWLNo.crl (hash: 0AIrFbt9a1Jl4F11UCtghkxYZ7rwmr+dXd9UsPSnqx4=)
2: EYjq5PTntQ_pzWKcs1u7ceeGxQY.roa (hash: V6IVhgWxUM0HbEed6VcScjqL3JGVYEaJss+a2Pf1dk0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/dd5032-94b9-43f5-9dbb-782cf71c82cc/1/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/dd5032-94b9-43f5-9dbb-782cf71c82cc/1/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:a8:a0:a7:d8:d7:9c:f4:b0:10:4b:9b:68:1b:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6e2575267ff832d979e38ddaf3dd67420162cda
Validity
Not Before: Mar 29 02:00:56 2026 GMT
Not After : Mar 30 02:00:56 2026 GMT
Subject: CN=de8327576005f705e764a90e75c3fe23b86a255d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:fb:24:92:b0:57:7a:98:ab:d8:41:af:b5:bc:
8b:fa:60:42:ac:3a:70:83:23:28:a0:d8:5c:e6:a4:
cc:58:82:2e:30:6e:48:ee:ae:64:fe:75:c5:e8:18:
04:5f:35:5c:2a:de:cf:e0:93:f7:08:ee:a9:d5:ab:
a0:3c:e4:a2:2f:40:a1:bd:97:93:b7:aa:7f:c8:45:
58:c6:6f:cc:5a:bd:8f:64:14:70:e0:28:91:86:1b:
8c:61:da:73:87:3f:19:9a:ba:14:98:1a:dc:23:aa:
b8:2f:2d:e2:c6:ca:fa:c7:a5:62:dd:17:07:1d:5d:
88:59:87:63:f7:fd:b8:e0:36:36:50:c8:ee:37:27:
d1:f4:16:71:54:3d:7c:21:50:92:25:50:a7:05:ae:
93:7f:36:55:fd:cf:75:6a:e5:2b:12:87:99:8e:9d:
9d:70:dc:e9:22:28:06:f9:4b:69:fc:3d:71:ad:45:
ae:4e:8f:4d:08:15:e9:15:69:30:92:ef:f8:97:84:
c8:75:34:e3:83:15:0a:c5:bf:01:46:36:7e:18:4f:
e8:de:ff:4c:e2:3d:48:71:3e:8e:c7:bf:a9:02:6c:
b1:f7:18:f0:6a:fa:38:db:54:78:8c:b9:2e:4f:5e:
ef:8c:da:94:04:b8:3a:69:98:e3:22:f0:f3:ea:83:
4c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:83:27:57:60:05:F7:05:E7:64:A9:0E:75:C3:FE:23:B8:6A:25:5D
X509v3 Authority Key Identifier:
keyid:E6:E2:57:52:67:FF:83:2D:97:9E:38:DD:AF:3D:D6:74:20:16:2C:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/dd5032-94b9-43f5-9dbb-782cf71c82cc/1/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/dd5032-94b9-43f5-9dbb-782cf71c82cc/1/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:91:65:5d:e9:b4:c7:45:58:8d:83:fe:eb:8f:d4:d4:54:56:
1b:21:d6:63:6c:81:28:7f:1e:07:d6:5e:16:1d:c2:b8:34:86:
b0:ca:10:31:12:8c:45:ab:34:f8:8e:d0:61:78:98:38:ab:96:
e7:32:ec:9c:ee:5e:43:c9:bf:26:03:6a:a1:94:fd:0d:6f:12:
20:b8:cb:79:87:2a:6f:62:dd:cf:78:7e:68:d4:0f:ca:10:12:
de:e2:53:57:4d:16:90:36:49:67:d8:3d:e6:67:97:d5:69:dd:
9d:bb:a1:cb:c9:0a:da:b8:55:5c:ee:2a:ae:53:88:ea:c2:76:
32:0a:0a:d0:e0:45:10:28:d2:45:cd:ad:3b:35:9e:63:c5:5f:
26:34:1b:da:df:bc:c0:20:1b:02:8a:82:eb:4f:8e:c8:4d:32:
12:7a:e5:a7:b7:18:ee:f5:88:96:3c:0e:8b:ff:58:d0:26:74:
81:db:e4:cf:44:6a:ce:fa:af:9c:bb:44:62:25:b6:7d:72:06:
25:98:5d:8b:3c:14:71:5c:c9:ba:cf:ca:c5:ca:68:12:6a:56:
33:20:8f:37:6e:e0:c9:ab:2d:55:23:de:1b:d7:3c:c5:98:e9:
0d:04:a6:9c:7e:1a:2c:fc:93:97:03:2d:df:99:41:9c:ef:31:
65:e6:53:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:18 2026 by rpki-client