Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/5PUXQd8Tb5OJJU795Lqa3PsN5r8.mft
File: 5PUXQd8Tb5OJJU795Lqa3PsN5r8.mft (raw, json)
Hash identifier: JF/DcNYQzQGs2JCrX0IY0TpcZFj7lHU0/Jel/yqf9QU=
Subject key identifier: 49:DC:54:04:66:DF:F2:69:51:B0:E7:90:6D:9A:EA:53:3A:76:26:0F
Authority key identifier: E4:F5:17:41:DF:13:6F:93:89:25:4E:FD:E4:BA:9A:DC:FB:0D:E6:BF
Certificate issuer: /CN=e4f51741df136f9389254efde4ba9adcfb0de6bf
Certificate serial: 019CADC7F67A5FFAC342439550233E73F7FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5PUXQd8Tb5OJJU795Lqa3PsN5r8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/5PUXQd8Tb5OJJU795Lqa3PsN5r8.mft
Manifest number: 08D3
Signing time: Mon 02 Mar 2026 09:01:28 +0000
Manifest this update: Mon 02 Mar 2026 09:01:28 +0000
Manifest next update: Tue 03 Mar 2026 09:01:28 +0000
Files and hashes: 1: 5PUXQd8Tb5OJJU795Lqa3PsN5r8.crl (hash: nCxSKSox7rKt+LyzPXsCBDtPZjzzo6zTXEaB5X/PeUs=)
2: eTB20vbuw0ColRTbhpUzLeqy0n0.roa (hash: KC01L3zZWRaOvr8WRrIfqvZndCj/RMYJlTwl8jE/MI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/5PUXQd8Tb5OJJU795Lqa3PsN5r8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/5PUXQd8Tb5OJJU795Lqa3PsN5r8.mft
rsync://rpki.ripe.net/repository/DEFAULT/5PUXQd8Tb5OJJU795Lqa3PsN5r8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:f6:7a:5f:fa:c3:42:43:95:50:23:3e:73:f7:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4f51741df136f9389254efde4ba9adcfb0de6bf
Validity
Not Before: Mar 2 09:01:28 2026 GMT
Not After : Mar 3 09:01:28 2026 GMT
Subject: CN=49dc540466dff26951b0e7906d9aea533a76260f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:a4:87:a7:14:e7:84:d5:2e:50:65:67:ed:d9:
d7:f8:5d:84:0c:f0:50:92:c2:72:ce:9d:b2:b9:20:
8f:a5:08:6b:53:f5:27:dd:9b:02:02:e2:61:2e:47:
a3:16:b1:96:8c:9b:88:83:5d:32:33:4a:4f:8e:2d:
2e:b2:48:63:84:0e:8f:5c:9f:67:0a:17:42:bb:ec:
c3:f6:c1:02:a7:48:c0:fc:1a:63:fe:40:b2:32:1c:
71:83:fd:56:40:64:8b:07:88:81:79:56:ae:dc:c4:
b8:35:de:87:16:e4:f9:9e:2c:47:48:66:31:99:e8:
e5:f2:c2:1f:e0:0c:32:25:61:36:94:33:6e:10:21:
fc:69:f0:79:62:4f:72:d3:e2:01:91:5f:c3:2e:63:
e4:aa:a2:b9:fa:20:0c:b4:8c:09:fc:24:61:1d:02:
6b:d1:fc:8d:da:aa:f2:12:40:67:4b:68:55:22:a5:
58:ab:39:2a:7d:85:26:2e:07:6f:e8:ec:06:62:63:
d5:00:0e:4d:ad:1f:f2:a3:8e:a7:f0:06:5f:9f:ba:
f5:32:fd:27:16:e8:5c:55:dc:51:1e:44:83:bf:dc:
be:db:71:79:b8:0f:bf:98:d1:90:3d:a6:67:bc:42:
81:20:b8:98:ad:18:da:f5:2b:c3:ec:bf:97:0f:a8:
a0:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:DC:54:04:66:DF:F2:69:51:B0:E7:90:6D:9A:EA:53:3A:76:26:0F
X509v3 Authority Key Identifier:
keyid:E4:F5:17:41:DF:13:6F:93:89:25:4E:FD:E4:BA:9A:DC:FB:0D:E6:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5PUXQd8Tb5OJJU795Lqa3PsN5r8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/5PUXQd8Tb5OJJU795Lqa3PsN5r8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/5PUXQd8Tb5OJJU795Lqa3PsN5r8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:b0:dd:3b:ea:a9:3f:0b:ef:13:ea:2b:85:38:d7:37:3d:d4:
fb:a9:2b:b4:78:ba:e5:e1:fc:07:99:2c:d4:f0:65:37:8d:b7:
7e:63:94:1f:ba:3f:c1:c0:9c:4e:38:ad:da:f1:65:fb:ea:9b:
63:1a:a5:2d:9a:b0:52:c3:9f:22:c6:c4:b9:ba:bf:61:4c:20:
fb:55:c6:35:c8:a2:20:36:3c:7d:72:37:12:44:a8:86:ec:d1:
a5:07:5b:f2:9b:b4:27:29:d5:46:b8:5b:5c:48:ee:bc:55:de:
8b:ba:66:31:a0:eb:66:a0:58:57:70:53:f0:c2:30:44:4e:8d:
be:c1:04:92:76:46:86:56:dd:a1:4b:7b:ef:9a:39:7e:ad:84:
04:15:3c:c6:35:2f:32:62:18:6c:13:1e:8d:6c:8a:2e:81:ab:
14:b3:e7:a9:43:ae:39:5b:86:82:3c:15:c4:7a:d4:fa:bd:46:
6d:dd:89:45:08:a6:07:8d:df:93:89:83:0a:18:2e:b9:66:5c:
ac:21:b9:a5:75:ba:08:20:11:5e:c1:34:01:c9:19:f3:50:ad:
05:27:65:0c:27:f9:41:a5:44:f1:33:64:41:c3:28:db:09:a4:
01:00:dd:63:1d:15:71:44:07:cd:8d:eb:73:b8:c2:d5:5a:7e:
de:4f:d9:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:50:10 2026 by rpki-client