Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/29de46-c2e9-48fb-92d4-b7a564afb04b/1/5WzVePQvjeBnI2dnxs_CusvBbgU.mft
File: 5WzVePQvjeBnI2dnxs_CusvBbgU.mft (raw, json)
Hash identifier: SNQQGBgpm2McL0KqmBnillyJFFXRp/wb9zR9eLqdKns=
Subject key identifier: 33:9C:08:50:79:5A:BD:F9:44:C9:0F:C2:9C:DC:F4:68:C1:76:BC:0C
Authority key identifier: E5:6C:D5:78:F4:2F:8D:E0:67:23:67:67:C6:CF:C2:BA:CB:C1:6E:05
Certificate issuer: /CN=e56cd578f42f8de067236767c6cfc2bacbc16e05
Certificate serial: 019CA97CC1FF98FB21C03DEDB12E1BF270F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5WzVePQvjeBnI2dnxs_CusvBbgU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/29de46-c2e9-48fb-92d4-b7a564afb04b/1/5WzVePQvjeBnI2dnxs_CusvBbgU.mft
Manifest number: 17C3
Signing time: Sun 01 Mar 2026 13:00:51 +0000
Manifest this update: Sun 01 Mar 2026 13:00:51 +0000
Manifest next update: Mon 02 Mar 2026 13:00:51 +0000
Files and hashes: 1: 5WzVePQvjeBnI2dnxs_CusvBbgU.crl (hash: Gc6kl+hajjuebKVaT5mFdxroRQl+Hc+1eEeqab4KxLM=)
2: _xb7dLIH6IMlpZq1SYlWl6nvqS4.roa (hash: oZ1UVmQ5z1c0zOrIXMtPyJxvit0yakzMpq+pTeT+fvI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/29de46-c2e9-48fb-92d4-b7a564afb04b/1/5WzVePQvjeBnI2dnxs_CusvBbgU.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/29de46-c2e9-48fb-92d4-b7a564afb04b/1/5WzVePQvjeBnI2dnxs_CusvBbgU.mft
rsync://rpki.ripe.net/repository/DEFAULT/5WzVePQvjeBnI2dnxs_CusvBbgU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 13:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:7c:c1:ff:98:fb:21:c0:3d:ed:b1:2e:1b:f2:70:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e56cd578f42f8de067236767c6cfc2bacbc16e05
Validity
Not Before: Mar 1 13:00:51 2026 GMT
Not After : Mar 2 13:00:51 2026 GMT
Subject: CN=339c0850795abdf944c90fc29cdcf468c176bc0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0a:1c:4f:07:d9:67:e0:00:d5:6b:15:53:b6:
74:fa:19:8b:29:d5:de:b7:9e:e2:42:fe:56:aa:3b:
9e:ac:0f:8e:be:ad:c3:c8:81:ed:f1:bb:3b:2d:37:
40:fe:d1:b6:2c:fb:48:7b:45:40:88:78:f6:c1:c9:
4b:fa:6f:07:30:0b:98:e8:b8:94:47:64:60:cf:a6:
77:cc:d1:17:11:62:54:85:cb:84:44:f1:40:03:13:
05:47:cd:4c:5b:ef:01:46:e5:15:8c:c2:91:90:bb:
f3:2f:1a:49:31:05:af:2d:19:de:c1:36:c3:1e:8c:
30:da:7d:d3:02:0e:8c:ec:c6:a8:34:84:7c:32:dc:
e7:d6:52:ad:35:ea:c7:00:10:a6:79:b1:81:67:e4:
97:9c:40:2a:26:20:81:68:2c:0e:89:71:e1:9a:d4:
83:f5:68:74:13:75:cc:b7:2a:c0:e8:62:18:7e:5b:
e5:a2:bb:31:86:b5:56:9c:ff:7c:bd:3f:5a:87:5c:
64:f0:79:5a:d8:c9:59:17:d9:6d:5f:a0:63:28:fb:
13:22:39:b8:7d:6e:8c:af:bd:97:a7:6b:eb:85:8c:
25:e6:02:40:69:dd:b4:53:3f:39:65:10:a4:2c:e2:
7f:9d:59:ee:5e:70:83:b8:cb:ab:19:49:75:50:c8:
4e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:9C:08:50:79:5A:BD:F9:44:C9:0F:C2:9C:DC:F4:68:C1:76:BC:0C
X509v3 Authority Key Identifier:
keyid:E5:6C:D5:78:F4:2F:8D:E0:67:23:67:67:C6:CF:C2:BA:CB:C1:6E:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5WzVePQvjeBnI2dnxs_CusvBbgU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/29de46-c2e9-48fb-92d4-b7a564afb04b/1/5WzVePQvjeBnI2dnxs_CusvBbgU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/29de46-c2e9-48fb-92d4-b7a564afb04b/1/5WzVePQvjeBnI2dnxs_CusvBbgU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:f8:21:52:ec:0f:ac:13:ac:2a:ed:b7:24:ea:b3:72:25:7c:
19:03:c4:45:48:3d:59:c1:48:ac:5f:af:f5:72:6b:a0:2f:a8:
7b:17:12:5e:a9:bb:72:e6:2d:14:45:3e:94:1a:2d:fc:fd:5e:
8a:3f:5a:8d:34:4f:be:53:a2:14:7b:78:e6:e6:42:60:6f:30:
e6:ab:b3:eb:b1:1d:00:5b:40:23:6d:99:0b:d2:41:62:25:c8:
c7:7c:77:ad:86:c6:2b:bd:63:36:91:44:03:dd:93:f0:83:02:
29:44:43:08:8b:82:8d:e6:49:b7:7f:2e:f0:d9:cd:51:bc:e3:
dd:97:8c:29:1e:24:09:89:b3:3e:27:77:1c:44:9e:bb:07:d3:
00:39:52:f5:d0:c9:05:d7:26:48:83:37:c6:97:a0:ef:0c:49:
27:35:54:1e:7f:f4:be:50:c4:ac:78:99:19:cc:de:89:ef:2e:
1a:1d:29:51:f1:a5:93:59:76:98:bf:fc:d2:0f:38:b7:cb:03:
f0:73:47:f0:49:4b:f8:59:3b:80:3a:9e:1d:e3:fd:85:fc:b5:
09:92:63:21:01:28:43:02:7d:dd:f1:0f:95:8b:c2:70:74:ae:
33:a4:b7:3e:aa:1f:1c:d1:bd:95:51:79:27:4e:aa:c9:73:90:
7b:e8:3a:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:58:48 2026 by rpki-client