Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/d66af3-28b5-42eb-ad01-95d53b531545/1/5NU8R_Id1mUrZ_70lclP39FSjOs.mft
File: 5NU8R_Id1mUrZ_70lclP39FSjOs.mft (raw, json)
Hash identifier: ULv86evTGdXNiBWOCS52lsQrrgZLbMeQJB50oWARfng=
Subject key identifier: 2A:42:DE:71:56:D6:C0:32:9A:B5:FC:52:8D:1E:8B:70:BC:41:EE:2C
Authority key identifier: E4:D5:3C:47:F2:1D:D6:65:2B:67:FE:F4:95:C9:4F:DF:D1:52:8C:EB
Certificate issuer: /CN=e4d53c47f21dd6652b67fef495c94fdfd1528ceb
Certificate serial: 019CACEB610049D754B02442B8C79C0A7288
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5NU8R_Id1mUrZ_70lclP39FSjOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/d66af3-28b5-42eb-ad01-95d53b531545/1/5NU8R_Id1mUrZ_70lclP39FSjOs.mft
Manifest number: 01F1
Signing time: Mon 02 Mar 2026 05:00:32 +0000
Manifest this update: Mon 02 Mar 2026 05:00:32 +0000
Manifest next update: Tue 03 Mar 2026 05:00:32 +0000
Files and hashes: 1: 5NU8R_Id1mUrZ_70lclP39FSjOs.crl (hash: Zc6csLZjJkrQxrlbnS0xaB0AGckdk1lWbJaS08S8grc=)
2: DGLs36BU_cILxHYLxiJQIBEtMJI.roa (hash: qUohKLi8iKm8w87fsK66S0pB8JkDeoGnUD+Ll8azgYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/d66af3-28b5-42eb-ad01-95d53b531545/1/5NU8R_Id1mUrZ_70lclP39FSjOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/d66af3-28b5-42eb-ad01-95d53b531545/1/5NU8R_Id1mUrZ_70lclP39FSjOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/5NU8R_Id1mUrZ_70lclP39FSjOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 05:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:61:00:49:d7:54:b0:24:42:b8:c7:9c:0a:72:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4d53c47f21dd6652b67fef495c94fdfd1528ceb
Validity
Not Before: Mar 2 05:00:32 2026 GMT
Not After : Mar 3 05:00:32 2026 GMT
Subject: CN=2a42de7156d6c0329ab5fc528d1e8b70bc41ee2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:fd:73:06:0c:97:b2:5a:2a:b0:a5:63:72:58:
7b:b5:08:f3:32:c0:d0:00:86:35:5e:23:ff:ea:27:
dd:fc:c3:f7:fe:ac:7a:c3:34:ed:d3:bc:1d:38:45:
da:20:e8:4a:09:92:64:3e:e0:d8:d5:d3:81:f0:b0:
ec:2c:ef:4f:a7:09:ab:a9:a8:4c:86:e4:f1:93:5a:
27:e0:b8:ea:2a:bc:67:9c:49:61:11:5b:be:63:e8:
2a:f9:3a:93:ac:95:08:2c:ef:51:0c:22:17:b9:1c:
89:7f:4a:50:cd:a4:77:e7:da:07:bf:08:35:4b:93:
cd:f5:d2:e1:2d:1b:15:7d:a4:0c:a4:f9:2b:16:8f:
84:81:1c:cf:3f:0d:99:c2:09:6f:63:9d:ad:be:d8:
db:de:ee:57:a4:3d:0e:36:23:56:5e:6f:54:65:23:
d2:f5:a1:11:3f:35:06:7f:a2:a5:2b:80:78:e2:1d:
06:9f:45:49:2c:fb:66:24:0d:0b:a0:24:0f:84:8b:
c4:1d:96:5a:63:3c:40:eb:9c:7e:4a:cf:97:52:9d:
88:29:fa:07:e4:0d:95:76:eb:6a:51:fd:4f:aa:2a:
6b:5e:eb:94:b5:00:40:24:23:00:3d:45:ec:96:9f:
ed:d4:dd:7f:5b:50:70:f5:e2:1a:ff:4a:23:4f:1d:
e1:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:42:DE:71:56:D6:C0:32:9A:B5:FC:52:8D:1E:8B:70:BC:41:EE:2C
X509v3 Authority Key Identifier:
keyid:E4:D5:3C:47:F2:1D:D6:65:2B:67:FE:F4:95:C9:4F:DF:D1:52:8C:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5NU8R_Id1mUrZ_70lclP39FSjOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/d66af3-28b5-42eb-ad01-95d53b531545/1/5NU8R_Id1mUrZ_70lclP39FSjOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/d66af3-28b5-42eb-ad01-95d53b531545/1/5NU8R_Id1mUrZ_70lclP39FSjOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:d1:67:3e:b4:d7:33:24:56:a2:fd:34:b9:f5:16:a4:7e:30:
f1:31:7c:1b:cb:f8:8b:a1:c2:8e:aa:f0:f5:b7:0e:94:87:b8:
3e:a9:1f:1c:cd:9e:c2:48:8d:68:3f:33:b5:c6:5c:45:dc:d4:
53:cf:56:0d:79:0e:f0:32:09:50:78:21:fd:b5:f4:67:37:a7:
a7:d8:58:4f:d6:8d:ac:c5:e1:cf:96:69:da:97:82:a4:05:03:
06:11:7e:cd:4a:c3:a0:29:2f:0d:7c:3c:f0:82:be:13:fc:84:
13:99:0f:07:b0:ce:81:6c:c5:20:c3:b6:e1:77:04:d9:68:47:
65:08:e9:d3:0b:8c:1f:86:8b:24:e7:b2:f8:06:e0:b8:e1:68:
28:4f:28:66:9c:e2:5d:62:a1:d9:67:e8:66:95:dc:f2:f3:cb:
c7:df:3e:08:68:46:b1:17:7b:d4:9e:bf:6b:cd:fc:0f:f3:b0:
3b:2d:9c:47:83:83:dc:fc:db:f8:c2:76:40:5a:57:89:c2:59:
a7:ae:18:59:62:0c:af:68:ab:fd:63:a3:ff:94:02:89:82:98:
51:df:62:ac:8f:df:5a:d5:69:51:20:4d:cc:3f:97:0b:5d:14:
6f:66:a7:ec:88:ee:af:d9:46:d4:4e:30:b3:fd:42:ae:d6:86:
b9:ac:ab:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:27:57 2026 by rpki-client