Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.mft
File: 5KcU_8WYsVZHu6_ixkYKh-r7z5c.mft (raw, json)
Hash identifier: YhBd0TQz7u0xQ9NQlQ/Gu3c7wRihZpBdXZDWsIvoN8U=
Subject key identifier: ED:23:43:72:B4:5E:83:56:6F:B6:AA:93:65:D0:03:79:D3:49:A0:CE
Authority key identifier: E4:A7:14:FF:C5:98:B1:56:47:BB:AF:E2:C6:46:0A:87:EA:FB:CF:97
Certificate issuer: /CN=e4a714ffc598b15647bbafe2c6460a87eafbcf97
Certificate serial: 019CAE3584289AE6C284DCEDE879122AB001
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5KcU_8WYsVZHu6_ixkYKh-r7z5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.mft
Manifest number: 1328
Signing time: Mon 02 Mar 2026 11:01:08 +0000
Manifest this update: Mon 02 Mar 2026 11:01:08 +0000
Manifest next update: Tue 03 Mar 2026 11:01:08 +0000
Files and hashes: 1: 5KcU_8WYsVZHu6_ixkYKh-r7z5c.crl (hash: DjLvS+iKm3jO3khTbd4Z8YIfrLfhzX1PqXwTv4HJOhc=)
2: IFreR7G3pVUxUHJmvWKSmdyyxV4.roa (hash: 1l0It7YxkUDUXasb2TijXHU9KlO973Zbw1AspnDQIIE=)
3: XvO3KugGyIUqy8DdZrWXqALiZv8.roa (hash: yUk7+RcCJLoQMsjAjhgKG5a6qMpWaeW1ZTTyneRurSc=)
4: ceyOuOPjIFLM94nq_gIZQX5eqOk.roa (hash: vIPUa1tUzFrPLIwsoGGabQ0ECJy+Q9gJ/RWv+H6Fq+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/5KcU_8WYsVZHu6_ixkYKh-r7z5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 11:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:84:28:9a:e6:c2:84:dc:ed:e8:79:12:2a:b0:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4a714ffc598b15647bbafe2c6460a87eafbcf97
Validity
Not Before: Mar 2 11:01:08 2026 GMT
Not After : Mar 3 11:01:08 2026 GMT
Subject: CN=ed234372b45e83566fb6aa9365d00379d349a0ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:5b:1c:e5:df:eb:25:ab:f1:3d:95:a5:3e:fc:
38:c3:47:d6:16:fd:ec:b0:2a:ca:66:ba:73:5c:f6:
1b:f2:25:b5:86:3b:99:d3:2e:a7:92:b7:54:62:da:
2d:e0:3e:2f:cc:14:f7:76:3f:d1:df:be:5e:bf:9f:
0b:51:a2:68:07:14:ba:fc:43:57:38:0a:64:72:fc:
53:d6:2c:8d:b5:e5:4b:10:69:2a:d6:58:91:93:06:
30:62:89:cc:2c:d3:f3:95:a2:58:34:13:76:6c:c5:
fe:9f:24:98:94:2d:fc:75:69:a7:8b:3e:88:53:8a:
04:ca:ac:6c:02:47:62:a1:f2:02:e8:96:60:f2:7e:
d3:8f:26:7b:22:d7:0a:8a:5f:28:ab:e7:b8:a7:1f:
e6:44:b9:b6:72:33:80:82:3e:82:7a:c2:22:02:15:
f3:9b:03:1e:2a:c5:bf:92:13:3c:17:17:c7:f5:48:
0b:c1:90:fd:2e:73:ae:38:40:17:09:b2:dc:18:6d:
29:ff:4d:9d:ec:af:42:b3:14:02:4d:05:33:59:86:
99:50:e0:29:04:ea:51:54:a8:b4:2f:a6:55:e2:f3:
92:da:23:cf:0e:22:35:fd:f1:b3:58:0b:de:8d:1a:
28:a8:fc:36:1a:2b:03:79:c8:41:77:50:d5:de:a8:
1a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:23:43:72:B4:5E:83:56:6F:B6:AA:93:65:D0:03:79:D3:49:A0:CE
X509v3 Authority Key Identifier:
keyid:E4:A7:14:FF:C5:98:B1:56:47:BB:AF:E2:C6:46:0A:87:EA:FB:CF:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5KcU_8WYsVZHu6_ixkYKh-r7z5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:1c:8f:c7:4b:2c:13:1a:af:63:93:5f:8e:ac:08:98:56:04:
0f:55:2d:09:75:5b:a5:12:11:e0:e5:56:b4:57:97:8d:43:81:
31:9b:a6:91:66:74:62:27:65:4f:62:00:33:cc:59:ca:ea:a8:
a8:58:da:67:c0:10:1d:00:1c:cf:38:26:0e:64:3d:ab:0f:eb:
d1:19:fc:e2:89:a4:c3:df:38:0b:64:e3:34:6d:ad:43:be:a3:
b8:1f:e3:74:91:60:15:19:fa:8a:f7:52:ca:67:c7:da:91:db:
79:fb:19:1d:3c:d1:d5:12:71:2a:ad:bf:09:19:a8:04:97:46:
83:64:94:67:17:44:6f:f0:e5:93:fe:9d:66:9a:e6:da:00:f2:
e4:31:51:4e:29:3d:d0:1e:94:52:27:e1:45:00:0c:b7:cd:f8:
95:41:2e:f1:9f:a4:b5:c5:b6:30:e7:11:df:d2:ce:13:1a:5b:
b4:6e:31:35:ac:fe:7a:64:3b:fb:a8:7b:c5:1f:2c:06:c2:db:
94:29:69:17:aa:0a:56:db:3b:9b:e8:8c:8e:93:c2:1a:70:b7:
1c:f0:2a:c4:38:e2:ec:fc:05:f6:52:05:10:9a:39:ba:0a:b3:
4d:d7:74:53:f1:b2:85:d5:f8:e6:d8:66:a0:1c:3f:8d:cf:f6:
53:fe:cb:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:51:12 2026 by rpki-client