Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.mft
File: 5MzXNQiptZmF1Vl4aOOl1ex0X14.mft (raw, json)
Hash identifier: cnl227jREOIkaVniQDtRVOpQFEDlNHgRD/oUpI5bqe8=
Subject key identifier: C4:B6:E2:00:AB:D8:0C:C4:34:C5:C3:56:33:62:74:2D:70:E3:DD:B4
Authority key identifier: E4:CC:D7:35:08:A9:B5:99:85:D5:59:78:68:E3:A5:D5:EC:74:5F:5E
Certificate issuer: /CN=e4ccd73508a9b59985d5597868e3a5d5ec745f5e
Certificate serial: 019CACEBB44515B026BE6E0CF6C3A30C8A2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5MzXNQiptZmF1Vl4aOOl1ex0X14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.mft
Manifest number: 101A
Signing time: Mon 02 Mar 2026 05:00:54 +0000
Manifest this update: Mon 02 Mar 2026 05:00:54 +0000
Manifest next update: Tue 03 Mar 2026 05:00:54 +0000
Files and hashes: 1: 5MzXNQiptZmF1Vl4aOOl1ex0X14.crl (hash: 1JwIELLFJMwSrUuI7Yn33U4gkD+7vvdCW8Hg3XRlyqI=)
2: J_wTFK-Imelz3lo0EhalX7WkndE.roa (hash: LyfXf848vt7E8bU3yBHMuVskZUEoXA7JJdYXHBAJ7MY=)
3: QE-p0DolLSe1YcERFi4pB7qqbME.roa (hash: tSsxRvUgtqlAtlXCTQBKtK0rsPOfdoX05ytqnptRrgY=)
4: Y4XWS1rxbRyTsrkehJHiTfLRsBA.roa (hash: Umh1axeyy2cYjkidrczQZIziQ2tY05LzkbHNxBOVUb8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.mft
rsync://rpki.ripe.net/repository/DEFAULT/5MzXNQiptZmF1Vl4aOOl1ex0X14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:b4:45:15:b0:26:be:6e:0c:f6:c3:a3:0c:8a:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4ccd73508a9b59985d5597868e3a5d5ec745f5e
Validity
Not Before: Mar 2 05:00:54 2026 GMT
Not After : Mar 3 05:00:54 2026 GMT
Subject: CN=c4b6e200abd80cc434c5c3563362742d70e3ddb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:98:ca:00:3d:be:76:64:75:d1:79:45:b7:78:
f9:b9:5f:91:14:24:85:71:62:65:45:53:03:35:13:
9f:8b:d0:91:ca:89:f9:4a:64:1a:e5:79:70:e8:69:
1e:44:09:00:11:95:47:f8:56:e0:88:4c:a5:4d:1b:
39:ce:97:1c:6d:c4:47:0a:c2:0b:db:e2:f7:cb:2d:
31:6d:a4:f9:21:56:88:e3:43:e8:aa:30:8a:2e:e7:
87:3a:06:cd:e6:71:fc:90:db:48:3e:eb:cb:18:b0:
72:05:bb:dc:40:8f:ac:43:87:e4:5d:32:86:32:57:
15:6b:1d:81:a3:6b:92:9c:23:38:1f:6e:7a:74:45:
34:9c:e2:8a:11:a7:e4:f7:6d:25:ca:88:50:66:ad:
29:55:58:e9:2a:b0:ba:68:c5:bf:dc:1f:7b:80:64:
a3:a9:7b:9c:3e:23:e9:b6:e3:d2:38:71:1c:1c:40:
30:fe:70:87:9b:c7:89:a4:a2:87:b1:f3:99:2f:7d:
8c:35:7f:4b:12:59:a5:c8:22:df:36:75:65:41:17:
19:2b:c1:0c:b5:f4:e4:96:08:29:14:42:52:32:37:
13:b9:88:a9:8b:89:8f:4a:79:cd:28:09:21:93:d9:
71:53:79:48:c5:1c:74:86:7b:04:6f:a8:f1:f8:e0:
b0:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:B6:E2:00:AB:D8:0C:C4:34:C5:C3:56:33:62:74:2D:70:E3:DD:B4
X509v3 Authority Key Identifier:
keyid:E4:CC:D7:35:08:A9:B5:99:85:D5:59:78:68:E3:A5:D5:EC:74:5F:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5MzXNQiptZmF1Vl4aOOl1ex0X14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:96:0b:70:bd:8d:d2:e1:64:81:86:31:a7:ee:37:c8:09:48:
52:94:5a:41:bf:35:33:93:60:64:87:0c:b2:1c:e2:9c:1b:da:
cc:48:ba:d1:45:3d:32:e8:d4:e1:51:19:84:0a:61:73:e4:7e:
f0:d3:ff:5a:0c:e9:f7:13:51:e7:a2:6a:93:b6:6a:29:4f:59:
b2:9a:da:07:f7:cf:a3:ae:49:d6:ca:7c:7f:5a:55:d0:02:48:
65:67:6a:7a:c4:5b:0f:13:90:85:09:cc:af:55:78:43:db:cf:
44:a3:df:74:f5:b7:42:08:6c:8c:77:1e:6b:ab:fb:0a:82:23:
36:d2:5a:2a:5d:63:a1:72:c5:da:d8:45:b5:41:3f:72:50:b0:
2c:c3:4f:8e:25:f5:36:1e:14:4b:f0:f1:2d:94:55:85:7d:97:
cc:c1:0f:4c:72:0b:60:f4:67:ab:6d:45:c7:2f:fc:ed:29:24:
eb:18:25:41:53:1b:35:59:de:5b:4c:68:34:17:8b:5c:82:87:
ed:a5:9c:d2:c4:95:97:64:03:e3:ab:c3:8b:f3:8f:7a:72:a3:
e3:96:55:93:c7:5d:6d:fd:4b:8c:22:db:2a:d4:c0:52:e2:0c:
4b:68:18:e5:5f:9e:ac:fd:f9:91:85:a3:d6:af:71:35:12:36:
12:4c:95:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:40:28 2026 by rpki-client