Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/34fe2e-26d6-455d-8778-f905a83bd389/1/5Icdjywm6nGuXBPIRUp70xhxkYQ.mft
File: 5Icdjywm6nGuXBPIRUp70xhxkYQ.mft (raw, json)
Hash identifier: FsZmy9j+0KMs1+WllgkcXD2EKIkjpVilDxkBh6ZI3fs=
Subject key identifier: 13:07:3C:98:06:60:A7:FE:24:BF:8D:C1:47:C2:87:C5:85:7A:E7:3C
Authority key identifier: E4:87:1D:8F:2C:26:EA:71:AE:5C:13:C8:45:4A:7B:D3:18:71:91:84
Certificate issuer: /CN=e4871d8f2c26ea71ae5c13c8454a7bd318719184
Certificate serial: 019CACB50D61DA52F5D633FA038CCAE2EC78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Icdjywm6nGuXBPIRUp70xhxkYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/34fe2e-26d6-455d-8778-f905a83bd389/1/5Icdjywm6nGuXBPIRUp70xhxkYQ.mft
Manifest number: 0FC7
Signing time: Mon 02 Mar 2026 04:01:12 +0000
Manifest this update: Mon 02 Mar 2026 04:01:12 +0000
Manifest next update: Tue 03 Mar 2026 04:01:12 +0000
Files and hashes: 1: 5Icdjywm6nGuXBPIRUp70xhxkYQ.crl (hash: 3x8tM7GWMdV1GpxekZuSTVikn98xx2ilxkPIY+wADuM=)
2: YLE2vfufVk24cZ6EDNv6jxuRqZw.roa (hash: 2hYWPZD7mmq1gTXaTHqa1lUO8cR3/QhledO7Dbv5su4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/34fe2e-26d6-455d-8778-f905a83bd389/1/5Icdjywm6nGuXBPIRUp70xhxkYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/34fe2e-26d6-455d-8778-f905a83bd389/1/5Icdjywm6nGuXBPIRUp70xhxkYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Icdjywm6nGuXBPIRUp70xhxkYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 04:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:0d:61:da:52:f5:d6:33:fa:03:8c:ca:e2:ec:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4871d8f2c26ea71ae5c13c8454a7bd318719184
Validity
Not Before: Mar 2 04:01:12 2026 GMT
Not After : Mar 3 04:01:12 2026 GMT
Subject: CN=13073c980660a7fe24bf8dc147c287c5857ae73c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:4a:6b:fb:eb:fb:2a:77:a1:a7:8a:45:0e:62:
75:6b:28:e2:f2:55:df:a4:14:e1:49:b7:25:46:a4:
70:91:64:a0:b7:58:b3:e7:fb:9f:f6:14:d9:cc:bf:
ac:14:85:74:59:cf:d8:34:82:ce:e5:1b:7b:33:63:
87:60:e4:18:d8:95:0f:4d:8f:af:65:2f:9f:ea:41:
e7:c5:4b:16:cd:44:5e:d7:c3:fe:96:7c:62:e2:d7:
e9:08:36:28:a7:87:ad:b1:9c:bd:a1:c6:9b:db:6a:
ce:db:41:e3:de:b5:d4:dd:86:a1:42:fa:21:96:9b:
a3:c8:b7:d9:9f:43:32:52:b8:1c:80:70:12:de:09:
1c:9e:52:a8:dc:65:ea:13:be:fe:1b:22:e3:26:cb:
26:85:3e:56:16:25:fa:8f:8c:10:99:94:8d:de:4d:
38:a9:59:a1:49:43:26:5c:0a:dc:51:fc:c7:a4:f3:
0a:10:a4:41:4d:08:fe:80:e7:c0:4d:83:9d:dc:42:
18:17:52:88:8f:c8:4d:65:7c:3c:c5:82:77:ec:29:
66:5e:cc:ea:88:df:2b:a1:cf:27:a8:fa:6c:4e:c2:
5e:c5:06:3d:e4:d9:5b:35:e9:fb:18:fa:59:90:aa:
42:2c:06:a1:1b:f8:59:77:8f:18:0c:23:52:d2:bb:
00:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:07:3C:98:06:60:A7:FE:24:BF:8D:C1:47:C2:87:C5:85:7A:E7:3C
X509v3 Authority Key Identifier:
keyid:E4:87:1D:8F:2C:26:EA:71:AE:5C:13:C8:45:4A:7B:D3:18:71:91:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Icdjywm6nGuXBPIRUp70xhxkYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/34fe2e-26d6-455d-8778-f905a83bd389/1/5Icdjywm6nGuXBPIRUp70xhxkYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/34fe2e-26d6-455d-8778-f905a83bd389/1/5Icdjywm6nGuXBPIRUp70xhxkYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:36:d1:b1:b2:4e:e7:a8:e7:4a:82:63:c4:12:88:4e:eb:f6:
ae:51:c9:05:c9:d3:c0:00:89:e2:b1:76:47:33:c9:99:e5:85:
7e:9c:8a:8a:46:5d:24:a4:0b:af:68:0f:f5:2a:21:06:fc:e8:
77:0a:28:82:03:9b:00:fb:64:c6:db:8d:ca:f7:f8:cf:3e:bb:
9b:d4:5d:59:26:25:01:6d:38:37:a6:7f:1d:ca:78:b1:8c:71:
f8:0e:80:7b:4c:76:8a:c6:b3:07:18:46:ca:c5:22:90:41:5f:
26:91:07:b6:42:f4:d4:4d:a3:a1:78:83:ad:df:0d:b8:5c:47:
0d:32:ec:3d:1e:42:b3:5d:72:84:cd:62:ab:20:af:5a:b0:14:
22:c5:ba:c9:ab:63:89:c7:89:f8:c2:9b:cf:3d:24:9c:5f:e1:
4e:6d:30:fa:89:fe:e4:10:9f:68:3d:e3:15:27:60:ad:d5:e1:
7c:9e:79:d9:f9:56:17:23:90:81:6b:d5:79:83:7c:d4:6b:cc:
7d:8c:00:1b:9e:1f:89:68:de:4b:c2:69:de:80:39:9f:15:8e:
3b:a2:8c:d8:ca:bd:9f:33:54:81:8a:65:56:38:a4:7b:ae:ac:
b3:bc:45:69:8f:08:38:26:b9:80:f1:7a:9b:8c:20:76:c2:4d:
d6:ee:70:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:53:52 2026 by rpki-client