Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/e62e0c-25eb-4c95-8002-87f1cf73a43a/1/5nwRRdGFVGmO3ZnXzRmc08ArKhU.mft
File: 5nwRRdGFVGmO3ZnXzRmc08ArKhU.mft (raw, json)
Hash identifier: 8qO/HZxGAQvi9HWeTPOdKoCoUDISs8yaHunxipPjUd0=
Subject key identifier: 74:E4:C5:9A:88:D7:D6:5F:46:08:53:38:A2:75:B8:0B:A2:45:68:22
Authority key identifier: E6:7C:11:45:D1:85:54:69:8E:DD:99:D7:CD:19:9C:D3:C0:2B:2A:15
Certificate issuer: /CN=e67c1145d18554698edd99d7cd199cd3c02b2a15
Certificate serial: 019CA9EBC809AC2EBCC10F7E7B3462209298
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5nwRRdGFVGmO3ZnXzRmc08ArKhU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/e62e0c-25eb-4c95-8002-87f1cf73a43a/1/5nwRRdGFVGmO3ZnXzRmc08ArKhU.mft
Manifest number: 1309
Signing time: Sun 01 Mar 2026 15:02:07 +0000
Manifest this update: Sun 01 Mar 2026 15:02:07 +0000
Manifest next update: Mon 02 Mar 2026 15:02:07 +0000
Files and hashes: 1: 5nwRRdGFVGmO3ZnXzRmc08ArKhU.crl (hash: CrF3Zz/1t7hQH2v7cyqeyOfw3JKKkQvW4ZofpFqXHDk=)
2: j0KfrHF7U_ersUCrBx0wIYyU1mg.roa (hash: YJlkOTIzqTwvJH6suym0S6Opx86SQJy3UvFlMQtx2RI=)
3: kJQjUgrsTkI9sNO65hRDTSRGiT8.roa (hash: lI+jSO9Op8f4ZB2mDkA1WTwA0uM7OvPByGs3tSZRjRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/e62e0c-25eb-4c95-8002-87f1cf73a43a/1/5nwRRdGFVGmO3ZnXzRmc08ArKhU.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/e62e0c-25eb-4c95-8002-87f1cf73a43a/1/5nwRRdGFVGmO3ZnXzRmc08ArKhU.mft
rsync://rpki.ripe.net/repository/DEFAULT/5nwRRdGFVGmO3ZnXzRmc08ArKhU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:eb:c8:09:ac:2e:bc:c1:0f:7e:7b:34:62:20:92:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e67c1145d18554698edd99d7cd199cd3c02b2a15
Validity
Not Before: Mar 1 15:02:07 2026 GMT
Not After : Mar 2 15:02:07 2026 GMT
Subject: CN=74e4c59a88d7d65f46085338a275b80ba2456822
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:a9:2e:0e:48:4c:48:56:a3:b6:03:a4:16:1e:
5f:19:01:d2:0f:85:1b:27:b5:7d:3b:8f:38:d2:47:
36:40:c8:ca:94:e2:4c:47:3e:ec:9a:b4:c6:8e:1d:
f3:51:4c:bd:58:71:38:fd:97:44:45:fa:6e:90:3b:
ef:d7:cb:81:a7:46:23:a7:b8:9a:b0:28:47:56:0b:
07:5d:f8:d9:5b:f9:68:bf:31:14:e0:59:a0:11:e1:
be:c9:15:4d:dd:c9:c3:9c:2b:f9:e1:49:f1:1a:3f:
50:ce:71:8f:be:a9:c8:dc:c1:a6:c3:38:83:51:65:
4b:25:fa:de:3f:ad:8d:2b:2e:37:b7:6b:c4:d3:4f:
fa:c4:9f:8e:82:d6:89:29:d6:6b:83:86:0f:3e:28:
e7:3e:3c:ca:80:bb:e4:44:89:c1:e1:f2:4d:49:f7:
6f:64:2d:01:d3:3b:2c:84:6f:b1:78:69:de:a9:b7:
db:4a:0e:66:47:23:30:e4:ab:37:37:4c:91:c8:b6:
19:c7:e2:6a:6a:72:ab:c1:8b:77:4a:c9:d4:9b:52:
f4:84:1a:60:02:2d:c2:ff:93:1c:fd:5d:d7:38:20:
d7:9e:e5:e1:1b:0d:59:67:6f:0f:46:a3:df:be:37:
c7:91:3b:dc:ec:61:14:54:f3:33:f6:5d:ee:54:b4:
b9:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:E4:C5:9A:88:D7:D6:5F:46:08:53:38:A2:75:B8:0B:A2:45:68:22
X509v3 Authority Key Identifier:
keyid:E6:7C:11:45:D1:85:54:69:8E:DD:99:D7:CD:19:9C:D3:C0:2B:2A:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5nwRRdGFVGmO3ZnXzRmc08ArKhU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/e62e0c-25eb-4c95-8002-87f1cf73a43a/1/5nwRRdGFVGmO3ZnXzRmc08ArKhU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/e62e0c-25eb-4c95-8002-87f1cf73a43a/1/5nwRRdGFVGmO3ZnXzRmc08ArKhU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:97:4b:2c:8f:b5:24:ed:a9:a6:e6:ee:c7:0a:64:11:ec:fa:
1f:0f:a0:55:a2:3d:fa:82:01:6d:ff:3c:15:61:af:fb:ab:a3:
f6:72:0c:24:9b:ec:df:36:2b:43:cf:f8:36:22:f3:b4:92:bc:
24:cf:40:1b:09:c9:f6:be:9e:3e:6c:5e:14:da:0e:45:7e:2a:
f7:57:ee:45:23:c1:0f:55:b1:7e:78:0b:6e:90:32:df:eb:c7:
54:a2:a0:1b:6f:b6:37:0a:05:5d:43:7f:9b:47:46:c6:7b:74:
24:d8:95:5b:7d:fd:2b:0b:36:95:2a:bd:0d:64:40:ff:58:c1:
69:3b:0f:26:9c:15:15:44:88:4c:2f:2c:5a:e1:9c:d0:58:ff:
7b:fc:da:98:20:5c:6b:34:f9:c6:5a:3d:ad:c6:96:5d:0b:fe:
fa:ac:8f:0d:41:3c:f2:df:04:65:83:57:c9:d8:91:fe:53:2b:
ee:45:ea:a9:ab:73:fa:76:31:d1:e2:da:a6:09:8c:71:05:86:
e1:0f:47:8c:a7:d4:ae:be:99:cb:33:ea:7c:1f:c6:5b:4d:71:
31:07:c9:ad:ee:14:89:17:49:1c:0b:1e:80:32:07:90:52:1f:
60:cf:ea:6e:c9:26:8c:de:ff:e7:28:37:b0:ca:b2:1c:a0:ab:
93:37:f0:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:43:33 2026 by rpki-client