Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.mft
File: 5hNdY5doo6Y-2cX_QK9e0B33Qcs.mft (raw, json)
Hash identifier: VPGA8X8OhQLWLwPSTxlVX3soZ8lGiCwNnW/49nau3VM=
Subject key identifier: 0D:96:42:BD:1A:28:6F:21:D0:99:49:78:6C:6B:F6:8F:75:CA:36:FE
Authority key identifier: E6:13:5D:63:97:68:A3:A6:3E:D9:C5:FF:40:AF:5E:D0:1D:F7:41:CB
Certificate issuer: /CN=e6135d639768a3a63ed9c5ff40af5ed01df741cb
Certificate serial: 019CAB340248F2176497BF69064ED6085AB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5hNdY5doo6Y-2cX_QK9e0B33Qcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.mft
Manifest number: 143F
Signing time: Sun 01 Mar 2026 21:00:38 +0000
Manifest this update: Sun 01 Mar 2026 21:00:38 +0000
Manifest next update: Mon 02 Mar 2026 21:00:38 +0000
Files and hashes: 1: 5hNdY5doo6Y-2cX_QK9e0B33Qcs.crl (hash: wrhCnaEVU5tKXtWUmoZ+E0lMQMY8/Il+/XoQ9/G3/GI=)
2: JZiy3r9PkYB8MElyL5xGJo1pVPk.roa (hash: xvNOkN38iMVfLqxF6m1PTaRdbwBZf+HM7rmKu9Qh53U=)
3: l8hfM0tA1hlOp9-gmuJ6WOfIhu0.roa (hash: IAmuOAJMto9pgwbf2c7PBZN6/VWyoBQiETP/DoJwG+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/5hNdY5doo6Y-2cX_QK9e0B33Qcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:02:48:f2:17:64:97:bf:69:06:4e:d6:08:5a:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6135d639768a3a63ed9c5ff40af5ed01df741cb
Validity
Not Before: Mar 1 21:00:38 2026 GMT
Not After : Mar 2 21:00:38 2026 GMT
Subject: CN=0d9642bd1a286f21d09949786c6bf68f75ca36fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a9:a1:a7:55:61:07:d2:07:e6:0e:c0:30:65:
76:2b:a5:82:5e:55:ed:85:85:c9:b4:ef:55:c3:46:
1a:db:bc:0e:4e:cf:1f:b1:ac:30:dd:fb:9b:2b:8e:
5d:db:b3:d9:ff:6e:be:5f:47:be:7a:d6:b0:aa:35:
f8:12:62:34:24:dc:c2:23:87:1d:ca:3b:fa:30:38:
b1:73:f5:c1:39:2b:8d:c6:b7:f9:6f:1b:80:74:c1:
3a:1a:3c:bd:27:b1:f5:5b:95:a1:ef:03:47:f8:e3:
dd:78:51:09:6a:51:02:1f:91:3f:ef:04:36:b0:bd:
1a:c8:69:c5:04:23:a9:59:a3:dc:cb:3b:af:5a:98:
bd:85:c0:95:23:89:c0:36:94:96:10:ef:4f:8c:e6:
fb:c3:7a:dc:32:b8:23:a8:e5:a7:ab:66:48:72:f4:
3c:12:ae:a2:e5:86:1d:cf:4b:2b:20:b1:af:c6:49:
3b:9c:de:08:94:78:61:29:55:fa:3e:fa:9d:a3:cd:
2e:a0:fe:21:aa:fd:80:cb:dd:37:39:a3:1c:d2:64:
d5:37:de:5f:d0:b7:fc:20:db:8c:84:91:1b:1e:ca:
7b:ea:cb:f5:ce:f1:2d:99:09:d4:7f:58:fa:6e:fe:
ba:71:03:a6:23:02:de:0f:dc:51:82:e8:d2:6d:10:
e5:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:96:42:BD:1A:28:6F:21:D0:99:49:78:6C:6B:F6:8F:75:CA:36:FE
X509v3 Authority Key Identifier:
keyid:E6:13:5D:63:97:68:A3:A6:3E:D9:C5:FF:40:AF:5E:D0:1D:F7:41:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hNdY5doo6Y-2cX_QK9e0B33Qcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:ab:0d:9f:1f:77:7a:9a:d5:0f:26:82:c4:38:d0:74:9d:9d:
4a:00:f0:48:b9:66:0b:a0:c8:3f:cc:9e:39:be:66:47:29:59:
e4:34:1e:d8:eb:bd:3d:82:c8:e5:12:05:b4:e5:c2:91:b6:0c:
37:f2:4b:77:f1:2e:13:ec:b8:2c:e5:10:f8:23:0b:09:82:dc:
f7:b8:83:13:c7:bb:46:58:c7:58:45:fb:37:86:42:4a:84:d2:
ad:ea:77:b9:48:60:8b:1f:d5:f2:27:11:f5:05:a1:f1:69:b9:
26:b9:1e:c0:86:33:bd:04:ae:fb:2c:06:a4:84:90:83:aa:d4:
3b:b3:96:fc:9f:ec:56:35:d5:19:68:6c:d4:9d:43:97:1b:fe:
aa:ab:20:0d:6e:e1:37:c5:8a:cf:34:8b:f1:77:f1:4e:3e:9d:
da:89:24:d7:d0:64:60:03:d7:ea:c8:31:92:63:c1:0d:d8:75:
11:55:63:70:fe:18:2e:46:6f:1a:23:4e:be:bf:fb:02:44:8f:
e4:7b:ce:1d:2d:49:61:d2:1d:36:93:32:83:7e:60:ea:d7:06:
95:fa:c0:ea:97:aa:37:31:99:08:3c:8f:f4:39:cd:cb:1f:fa:
ca:85:8d:ee:4a:e8:ff:3c:7f:74:77:c8:95:58:0d:bd:93:ee:
f0:a8:88:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:27:40 2026 by rpki-client