Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/d612e3-94eb-4866-b43c-e40b301401a9/1/5_4i9VHpWw8VAzxQNVLkm8phfGo.mft
File: 5_4i9VHpWw8VAzxQNVLkm8phfGo.mft (raw, json)
Hash identifier: 3d5ayfHmbEut1Zco8yBtqR/YK6DB2nwvVxrjRtTiHmI=
Subject key identifier: 5F:04:76:BC:23:BD:55:A0:39:3D:91:C0:DF:47:31:44:FD:E7:42:40
Authority key identifier: E7:FE:22:F5:51:E9:5B:0F:15:03:3C:50:35:52:E4:9B:CA:61:7C:6A
Certificate issuer: /CN=e7fe22f551e95b0f15033c503552e49bca617c6a
Certificate serial: 019CAA58EC63C6CB41AD3ED4BB560B1DB791
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_4i9VHpWw8VAzxQNVLkm8phfGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/d612e3-94eb-4866-b43c-e40b301401a9/1/5_4i9VHpWw8VAzxQNVLkm8phfGo.mft
Manifest number: 04AF
Signing time: Sun 01 Mar 2026 17:01:20 +0000
Manifest this update: Sun 01 Mar 2026 17:01:20 +0000
Manifest next update: Mon 02 Mar 2026 17:01:20 +0000
Files and hashes: 1: 5_4i9VHpWw8VAzxQNVLkm8phfGo.crl (hash: 0862iMatNalfTzNxeOOOsoquGTkoCkwkiw5TCn3lFp4=)
2: O12iTFYfdA2zCw72150Nud1E6y0.roa (hash: z5mYMpvdZLPaUzxNIg/54hb62dd6baAvlEXsN8ohQB8=)
3: _fFHLP85mXG233c_oo6_tp_deIs.roa (hash: n25U7OP6QQrrsEGd6Mi0uXlEH7hkC7fcd6BN0xsYQhk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/d612e3-94eb-4866-b43c-e40b301401a9/1/5_4i9VHpWw8VAzxQNVLkm8phfGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/d612e3-94eb-4866-b43c-e40b301401a9/1/5_4i9VHpWw8VAzxQNVLkm8phfGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5_4i9VHpWw8VAzxQNVLkm8phfGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:ec:63:c6:cb:41:ad:3e:d4:bb:56:0b:1d:b7:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7fe22f551e95b0f15033c503552e49bca617c6a
Validity
Not Before: Mar 1 17:01:20 2026 GMT
Not After : Mar 2 17:01:20 2026 GMT
Subject: CN=5f0476bc23bd55a0393d91c0df473144fde74240
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:91:f2:c7:68:1d:2e:5e:fc:e5:2e:c8:33:9a:
ca:3d:b8:95:3c:70:ad:52:d7:d2:93:3b:77:d6:5a:
de:0b:34:9d:90:06:9e:40:32:24:8e:0b:83:43:76:
f4:e8:e2:db:a3:4f:12:26:e5:10:9f:be:8b:0f:92:
68:92:21:c4:22:e0:62:60:2c:cd:ea:ab:07:84:6f:
bb:54:90:6b:2d:54:71:d6:5a:76:80:c4:0a:f9:93:
e3:fc:2e:b2:48:74:6a:73:39:d4:dc:a2:d1:93:6e:
27:29:1c:9a:8f:9b:17:7f:f7:64:17:9e:2d:d3:c2:
f7:bb:79:c8:bc:f6:27:02:de:01:c5:50:4d:82:bc:
ce:6b:97:43:22:88:6e:84:71:a6:36:f9:cb:85:06:
be:17:f1:7d:42:31:70:bf:b5:85:dc:01:a9:4a:6d:
de:55:a6:92:7f:63:71:51:6a:9c:92:0c:42:ff:32:
0e:2e:3e:57:b3:c5:39:86:9f:df:7e:c5:16:14:50:
56:3b:90:2e:ab:02:27:bb:fc:26:25:7e:63:f5:c6:
8f:00:94:b4:7d:4f:6a:78:86:06:60:10:de:8a:01:
8f:30:26:8a:47:13:66:9e:1a:5e:b7:97:8d:fa:42:
82:67:da:1e:79:63:fe:2c:d5:d5:9a:99:98:31:9e:
fb:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:04:76:BC:23:BD:55:A0:39:3D:91:C0:DF:47:31:44:FD:E7:42:40
X509v3 Authority Key Identifier:
keyid:E7:FE:22:F5:51:E9:5B:0F:15:03:3C:50:35:52:E4:9B:CA:61:7C:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_4i9VHpWw8VAzxQNVLkm8phfGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d612e3-94eb-4866-b43c-e40b301401a9/1/5_4i9VHpWw8VAzxQNVLkm8phfGo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d612e3-94eb-4866-b43c-e40b301401a9/1/5_4i9VHpWw8VAzxQNVLkm8phfGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:57:36:05:b4:47:97:4b:9a:dc:32:81:0d:bc:0b:31:9b:a7:
ba:96:0f:b8:f5:39:05:b5:dc:fb:dd:6a:97:39:96:ae:e6:b5:
85:57:56:66:4b:50:76:44:e6:cb:0d:d0:5c:b2:2d:03:a9:55:
54:e4:ed:29:88:dd:d5:1a:97:15:7a:70:42:34:6a:77:72:3a:
ba:df:57:4d:25:8d:ad:b3:68:80:28:9a:fd:eb:44:ee:8e:3d:
8d:29:b5:16:3a:79:ff:0a:ea:11:01:8d:0e:8d:7c:bf:7a:55:
ad:39:6a:9d:40:8d:d4:1c:af:d9:b7:bd:5d:ad:0c:1e:d9:17:
45:ef:2c:15:22:53:21:51:3c:ec:41:03:b8:b9:56:28:c1:c2:
18:eb:84:66:c2:6e:8c:42:0d:f5:38:0d:87:d4:2c:bc:df:05:
9c:2d:b1:b7:6f:f6:8b:a1:6a:21:5d:b0:48:73:68:c1:33:64:
74:2b:cc:5e:29:04:64:31:09:47:60:bb:06:d4:16:32:d7:b0:
f9:0a:c3:25:7f:7f:ce:88:93:d4:d9:72:c2:4b:d3:a1:2b:65:
93:e3:0a:46:16:55:e4:3e:db:c4:8d:c6:2a:bc:e5:1a:fa:b6:
24:96:6c:51:86:6c:0f:69:22:e9:cc:b5:7d:f8:8d:49:fc:92:
0b:a3:de:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:02:42 2026 by rpki-client