Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/ad3797-3346-478f-9e9d-a89f959be204/1/5vgk5Lxc2BiG7CS14VJm6V-N35M.mft
File: 5vgk5Lxc2BiG7CS14VJm6V-N35M.mft (raw, json)
Hash identifier: 6ovOQdIMIzGfwPed/vocwHTIyLXI5rEryJzvGHwTFMg=
Subject key identifier: 8E:82:1B:C0:77:BD:21:7B:91:D5:FA:8F:E6:34:0C:98:3C:32:E9:E8
Authority key identifier: E6:F8:24:E4:BC:5C:D8:18:86:EC:24:B5:E1:52:66:E9:5F:8D:DF:93
Certificate issuer: /CN=e6f824e4bc5cd81886ec24b5e15266e95f8ddf93
Certificate serial: 019CAB33F96F6E62BF2B2C9CE199EEF46627
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5vgk5Lxc2BiG7CS14VJm6V-N35M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/ad3797-3346-478f-9e9d-a89f959be204/1/5vgk5Lxc2BiG7CS14VJm6V-N35M.mft
Manifest number: 0DBB
Signing time: Sun 01 Mar 2026 21:00:35 +0000
Manifest this update: Sun 01 Mar 2026 21:00:35 +0000
Manifest next update: Mon 02 Mar 2026 21:00:35 +0000
Files and hashes: 1: 5vgk5Lxc2BiG7CS14VJm6V-N35M.crl (hash: O7uKLf1p9zXoNEs+7WNFioelYmVCbzVTspbYVtZ3yC8=)
2: X5xasRCAPW_8AqrOyyfOnavLV3w.roa (hash: MKvIXTaUYcBmqhG/1QMaETUtrI13kI75foPOMSHT8WU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/ad3797-3346-478f-9e9d-a89f959be204/1/5vgk5Lxc2BiG7CS14VJm6V-N35M.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/ad3797-3346-478f-9e9d-a89f959be204/1/5vgk5Lxc2BiG7CS14VJm6V-N35M.mft
rsync://rpki.ripe.net/repository/DEFAULT/5vgk5Lxc2BiG7CS14VJm6V-N35M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:33:f9:6f:6e:62:bf:2b:2c:9c:e1:99:ee:f4:66:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6f824e4bc5cd81886ec24b5e15266e95f8ddf93
Validity
Not Before: Mar 1 21:00:35 2026 GMT
Not After : Mar 2 21:00:35 2026 GMT
Subject: CN=8e821bc077bd217b91d5fa8fe6340c983c32e9e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:68:d5:67:a2:50:69:d5:69:13:07:98:e8:e0:
17:7a:55:52:a7:f5:97:7d:c7:9f:e1:1e:74:e7:26:
c9:3b:b9:75:82:26:91:48:1c:6d:02:83:dd:8f:dd:
49:1a:b0:ea:2b:07:4c:5f:67:e9:2b:90:fd:81:29:
4b:a6:d0:b9:a1:66:a0:9e:dc:ce:bf:d3:1b:b3:cf:
be:9d:78:64:64:1c:50:47:22:52:83:d8:89:4d:dd:
5b:9a:59:77:56:cb:24:9c:45:ab:0c:7c:ef:f3:d9:
11:2b:d7:66:a9:ef:04:03:57:c8:b0:95:6e:75:66:
86:50:ee:3e:2f:ca:26:78:79:fd:20:5a:12:46:6e:
0c:40:bd:0c:cf:1e:99:38:db:8f:63:c6:4d:d2:53:
72:9b:e5:40:b3:d0:78:8b:b3:5a:cf:92:df:75:f8:
6c:4b:10:e3:0a:f8:1e:73:67:74:04:3d:ad:34:6d:
58:31:13:59:be:ee:bb:7b:e6:b1:03:29:a1:f8:2f:
b0:66:39:e4:17:6b:e1:42:ec:9f:14:3d:af:f3:e6:
66:b9:0a:3e:02:1f:8a:d2:a2:00:47:10:ac:3b:ec:
20:8b:a1:71:7f:09:15:c1:a1:41:b2:05:fe:87:4a:
25:f6:07:ad:da:86:32:93:eb:19:eb:1e:7f:92:a9:
62:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:82:1B:C0:77:BD:21:7B:91:D5:FA:8F:E6:34:0C:98:3C:32:E9:E8
X509v3 Authority Key Identifier:
keyid:E6:F8:24:E4:BC:5C:D8:18:86:EC:24:B5:E1:52:66:E9:5F:8D:DF:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5vgk5Lxc2BiG7CS14VJm6V-N35M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ad3797-3346-478f-9e9d-a89f959be204/1/5vgk5Lxc2BiG7CS14VJm6V-N35M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ad3797-3346-478f-9e9d-a89f959be204/1/5vgk5Lxc2BiG7CS14VJm6V-N35M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:8e:73:33:d7:f4:16:52:c6:a2:fe:f7:c7:0a:bc:07:c6:5e:
1f:a8:19:ac:b8:92:8a:d9:34:e2:30:22:3b:77:56:97:bb:06:
6c:dd:f1:03:05:3f:94:eb:66:99:4a:6d:90:f0:1b:6c:17:4b:
59:b5:a8:24:6a:24:3f:fe:4a:a9:24:3b:85:a5:18:d8:13:32:
a9:b5:f1:ea:0c:1a:77:dc:e8:bf:f0:57:7e:4f:7a:58:56:d3:
86:fa:e4:ec:7f:14:af:5e:c7:27:94:29:b1:c3:6a:32:70:2e:
d7:77:55:bc:b9:a1:cc:33:db:25:60:5d:c4:d1:f7:c0:63:56:
79:9b:7a:75:16:53:18:8a:47:bd:33:6b:2e:65:7d:96:2b:86:
0d:31:06:15:61:db:27:c3:e2:2e:3c:66:d9:d1:4a:e0:ae:a1:
c5:a7:0b:0e:b3:5a:58:a3:80:a3:be:9b:80:d2:db:ce:95:93:
b4:55:d4:22:a8:c2:72:25:b8:c8:8c:fc:47:36:5d:c0:89:c0:
f8:1a:db:21:fe:83:23:2a:4e:c7:2a:4c:4a:ef:ea:b7:71:17:
83:28:a8:26:c1:89:4e:e1:20:93:c4:10:b2:e1:94:31:61:07:
bc:3e:93:6d:98:20:d4:ad:af:c1:2d:5c:e0:08:d8:25:a6:83:
a3:26:67:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:27:06 2026 by rpki-client