Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/5PUXQd8Tb5OJJU795Lqa3PsN5r8.mft
File: 5PUXQd8Tb5OJJU795Lqa3PsN5r8.mft (raw, json)
Hash identifier: o7r0cFARKeQrfIu/N7CdyRsBx59L3i2FduwfzBKPqb0=
Subject key identifier: C9:66:80:BD:0B:8F:B8:01:63:35:9D:B4:02:FE:E4:1B:F8:D0:59:40
Authority key identifier: E4:F5:17:41:DF:13:6F:93:89:25:4E:FD:E4:BA:9A:DC:FB:0D:E6:BF
Certificate issuer: /CN=e4f51741df136f9389254efde4ba9adcfb0de6bf
Certificate serial: 019CABD9228D0142EBE3BCE21F67843052EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5PUXQd8Tb5OJJU795Lqa3PsN5r8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/5PUXQd8Tb5OJJU795Lqa3PsN5r8.mft
Manifest number: 08D2
Signing time: Mon 02 Mar 2026 00:00:59 +0000
Manifest this update: Mon 02 Mar 2026 00:00:59 +0000
Manifest next update: Tue 03 Mar 2026 00:00:59 +0000
Files and hashes: 1: 5PUXQd8Tb5OJJU795Lqa3PsN5r8.crl (hash: wVr6iGVePAf2WX+zGBwrXfEYj+iO9c7HFoNMlc8a5WE=)
2: eTB20vbuw0ColRTbhpUzLeqy0n0.roa (hash: KC01L3zZWRaOvr8WRrIfqvZndCj/RMYJlTwl8jE/MI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/5PUXQd8Tb5OJJU795Lqa3PsN5r8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/5PUXQd8Tb5OJJU795Lqa3PsN5r8.mft
rsync://rpki.ripe.net/repository/DEFAULT/5PUXQd8Tb5OJJU795Lqa3PsN5r8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:22:8d:01:42:eb:e3:bc:e2:1f:67:84:30:52:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4f51741df136f9389254efde4ba9adcfb0de6bf
Validity
Not Before: Mar 2 00:00:59 2026 GMT
Not After : Mar 3 00:00:59 2026 GMT
Subject: CN=c96680bd0b8fb80163359db402fee41bf8d05940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:1d:5c:ae:e9:80:98:68:2e:50:54:65:95:81:
70:53:ee:fb:41:ba:00:0c:c7:d0:06:a3:6d:a9:29:
27:5b:f3:99:d6:92:a9:95:83:5e:37:48:1a:d6:bc:
1d:d8:cc:98:3f:95:52:a0:6a:eb:71:19:e0:9c:0a:
e7:7a:f3:ae:ef:4f:2c:1d:73:ff:7c:a0:ce:80:5f:
b4:31:d0:5b:5f:7a:dd:fa:f0:f7:cf:63:54:f0:8b:
35:51:29:b2:9f:b3:fd:f0:84:4e:bd:67:67:f4:7c:
e5:3b:83:be:6c:b7:f7:80:e4:2e:49:fd:de:60:af:
29:0d:11:ca:7c:2d:72:a0:81:0d:1c:95:af:f4:3d:
76:69:71:20:e2:cc:ad:96:82:88:e8:53:94:77:df:
18:50:d2:54:cc:f5:5c:73:5e:78:46:18:fc:5f:c6:
2c:83:19:de:f3:cb:39:72:85:97:f2:d7:7a:95:07:
7f:55:ee:03:d2:71:22:1c:6e:0d:c3:61:81:f0:53:
56:15:6a:69:e4:f9:bd:5c:35:28:0a:d6:ea:d2:56:
60:6e:53:da:c4:fe:ec:55:ec:d7:73:61:ce:4e:d0:
16:ed:d3:29:3f:0d:f0:41:23:b3:e9:cc:d7:4c:58:
7e:af:8d:bb:5b:3e:7d:e4:98:3d:ef:42:c4:2d:7a:
9f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:66:80:BD:0B:8F:B8:01:63:35:9D:B4:02:FE:E4:1B:F8:D0:59:40
X509v3 Authority Key Identifier:
keyid:E4:F5:17:41:DF:13:6F:93:89:25:4E:FD:E4:BA:9A:DC:FB:0D:E6:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5PUXQd8Tb5OJJU795Lqa3PsN5r8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/5PUXQd8Tb5OJJU795Lqa3PsN5r8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/5PUXQd8Tb5OJJU795Lqa3PsN5r8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:be:53:c4:cd:9d:a1:ff:18:2a:27:da:1a:df:1c:b0:c9:4a:
20:1d:ea:1e:03:e5:bb:77:e9:9a:b1:9f:81:e4:02:ca:4b:6f:
c6:c6:b0:58:82:63:08:c8:27:ee:ce:72:1a:54:ba:86:e9:5f:
c2:ec:85:1c:7c:10:43:17:0c:b1:70:a1:8a:2b:3b:60:77:1e:
2c:60:e9:ac:3f:12:0f:54:22:71:2e:89:c2:ae:1f:92:d1:66:
99:8f:5d:d8:a4:5c:e3:d9:e7:c6:82:0b:7c:7e:d3:31:f4:65:
09:d7:f2:d6:b7:41:bc:b1:81:8b:97:90:82:74:0b:b0:63:39:
01:2f:b5:88:9e:cc:80:40:b3:e8:2e:e2:54:59:d4:ca:7e:bd:
5f:cb:6f:f5:7c:77:a8:bd:6c:94:6b:c9:e9:c5:13:e2:f6:21:
db:9d:e8:cd:ea:fd:82:96:06:09:54:13:f0:29:ab:b7:3a:cb:
26:7c:30:d5:2a:dc:3d:b4:64:18:19:53:51:b9:24:c1:7e:90:
3c:0c:3c:6b:a1:7c:fc:a1:e8:cf:93:ab:8f:fe:54:90:28:8f:
4b:72:96:5a:d6:fc:8d:b3:ab:25:91:a6:6e:38:3f:c4:30:be:
7c:f9:60:c0:5f:b9:e0:61:6b:ae:25:c3:bd:b4:f1:77:bf:c2:
49:d8:3a:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:57:59 2026 by rpki-client