Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/4799f6-765f-4ad2-8c43-1c5b1012d2c3/1/5x1wnYsYTFpQyUMdzK9km8hoRwQ.mft
File: 5x1wnYsYTFpQyUMdzK9km8hoRwQ.mft (raw, json)
Hash identifier: lbMGsEQCei+ksjcOPFea468yT7PH3Y4JAkWivAzEsgU=
Subject key identifier: 2D:84:6E:AB:2E:44:67:EE:A1:46:3F:19:EA:87:99:06:BB:5F:84:3D
Authority key identifier: E7:1D:70:9D:8B:18:4C:5A:50:C9:43:1D:CC:AF:64:9B:C8:68:47:04
Certificate issuer: /CN=e71d709d8b184c5a50c9431dccaf649bc8684704
Certificate serial: 019CAD909818FE61AD824209220DF8B75C4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5x1wnYsYTFpQyUMdzK9km8hoRwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/4799f6-765f-4ad2-8c43-1c5b1012d2c3/1/5x1wnYsYTFpQyUMdzK9km8hoRwQ.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 08:01:00 +0000
Manifest this update: Mon 02 Mar 2026 08:01:00 +0000
Manifest next update: Tue 03 Mar 2026 08:01:00 +0000
Files and hashes: 1: 5x1wnYsYTFpQyUMdzK9km8hoRwQ.crl (hash: SwgmMEnzso1Ukc/RyGo0MU6BoJm2+7/er2gp2FQx+9A=)
2: cPmuXHtpdWHOv_IohN-yvdSZh00.roa (hash: uWWYQC9FttyGHNgD7wIoeeDy1sX/WMjKSFeXWzNylw8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/4799f6-765f-4ad2-8c43-1c5b1012d2c3/1/5x1wnYsYTFpQyUMdzK9km8hoRwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/4799f6-765f-4ad2-8c43-1c5b1012d2c3/1/5x1wnYsYTFpQyUMdzK9km8hoRwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5x1wnYsYTFpQyUMdzK9km8hoRwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:98:18:fe:61:ad:82:42:09:22:0d:f8:b7:5c:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e71d709d8b184c5a50c9431dccaf649bc8684704
Validity
Not Before: Mar 2 08:01:00 2026 GMT
Not After : Mar 3 08:01:00 2026 GMT
Subject: CN=2d846eab2e4467eea1463f19ea879906bb5f843d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:07:be:2c:e2:18:08:3d:2b:db:bb:5d:9c:d7:
86:60:fd:ab:a5:db:d8:d6:41:c7:80:d6:6c:00:4f:
89:16:69:c2:40:87:8e:a4:59:c7:a3:87:8f:c0:dd:
d8:20:6d:69:5d:0a:66:a1:f2:c0:88:4f:cc:68:4b:
58:dc:06:9b:44:56:fd:c6:f0:b5:b3:73:3b:a5:2d:
28:ec:c7:1d:97:a7:99:0c:06:be:76:a2:48:5b:b2:
b6:98:fc:12:9b:10:70:eb:77:bc:f1:3c:d9:e3:4c:
87:21:0e:46:c1:aa:47:4c:3c:d1:2e:64:2b:a2:35:
de:d7:04:a4:5a:a0:01:a0:ec:42:76:64:91:6a:03:
f9:14:ce:31:fe:d7:fe:f7:a8:66:ad:5c:93:a7:bf:
72:0a:78:ef:06:6c:f2:9c:ae:ed:4f:12:27:2f:eb:
e8:6c:23:58:51:cc:ab:6f:51:cd:05:d4:a0:ff:66:
3e:c0:23:cc:00:7b:c5:11:6e:c7:5c:8b:b0:1c:f8:
66:14:d0:5f:ed:da:4f:d4:dc:4f:25:6c:6e:6c:4e:
b2:bf:b5:30:3b:66:6d:81:8e:a9:16:29:1a:24:95:
cf:7b:ee:ea:38:02:e4:0a:a9:c2:17:23:22:9d:a6:
35:6a:e0:6c:fc:bb:60:4f:b8:77:d4:03:e0:94:2b:
2e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:84:6E:AB:2E:44:67:EE:A1:46:3F:19:EA:87:99:06:BB:5F:84:3D
X509v3 Authority Key Identifier:
keyid:E7:1D:70:9D:8B:18:4C:5A:50:C9:43:1D:CC:AF:64:9B:C8:68:47:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5x1wnYsYTFpQyUMdzK9km8hoRwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4799f6-765f-4ad2-8c43-1c5b1012d2c3/1/5x1wnYsYTFpQyUMdzK9km8hoRwQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4799f6-765f-4ad2-8c43-1c5b1012d2c3/1/5x1wnYsYTFpQyUMdzK9km8hoRwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:f5:8e:76:3f:50:19:ba:0f:69:cf:4a:1f:f3:c8:05:4c:95:
8a:e5:d2:24:64:7e:df:bc:66:98:0b:f6:11:0d:36:49:09:60:
ce:dd:65:8f:38:18:d3:c9:8e:92:ff:33:20:1b:2d:49:f4:6c:
ad:13:b0:4a:9b:0c:61:29:c4:30:27:94:93:16:2c:5e:29:90:
56:bf:e2:b8:0c:36:af:d8:49:75:3d:1d:4d:d0:be:45:f0:23:
c1:89:60:3e:40:68:f3:a1:57:0c:c5:ee:d9:24:68:76:bf:8c:
36:e7:56:e1:5c:b8:2b:98:89:e0:9f:8f:66:78:34:76:f0:58:
a9:1b:d0:db:1c:e0:97:7c:10:d3:15:f4:9e:32:6a:7b:b2:d7:
28:bf:b2:e5:d8:f1:f9:e8:9d:aa:73:f1:3a:01:d3:ee:0e:bd:
25:11:7d:e5:54:60:c3:44:76:0e:91:11:78:ca:a0:d1:0a:ab:
16:a5:0d:d4:07:ec:41:a9:c9:11:23:64:6e:e0:74:7a:2d:be:
4a:5f:d4:e8:2d:73:ab:c9:4e:d5:0b:24:f3:df:8f:ff:96:c0:
8e:40:ed:d1:a0:bf:82:b2:01:a8:70:cd:f2:42:5d:57:29:6e:
f9:22:37:28:27:d3:40:34:e9:3b:ab:a5:ed:fc:bd:ad:e5:d7:
8c:75:0f:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:13:53 2026 by rpki-client