Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/532f41-2e3b-47eb-bed5-0e1c4ad03956/1/5wQefn0YTV261xQp42W58Kx2ylI.mft
File: 5wQefn0YTV261xQp42W58Kx2ylI.mft (raw, json)
Hash identifier: M2wKjiDrPp4TvFpKGanya1tqIQivaVH8RKWU9aPMlHg=
Subject key identifier: 71:47:F7:8C:AB:BF:D7:CE:3C:35:DB:FF:94:E6:6B:C6:98:F0:6F:84
Authority key identifier: E7:04:1E:7E:7D:18:4D:5D:BA:D7:14:29:E3:65:B9:F0:AC:76:CA:52
Certificate issuer: /CN=e7041e7e7d184d5dbad71429e365b9f0ac76ca52
Certificate serial: 019CA9B3C4BA59794875FD54DC9626752485
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5wQefn0YTV261xQp42W58Kx2ylI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/532f41-2e3b-47eb-bed5-0e1c4ad03956/1/5wQefn0YTV261xQp42W58Kx2ylI.mft
Manifest number: 0123
Signing time: Sun 01 Mar 2026 14:00:56 +0000
Manifest this update: Sun 01 Mar 2026 14:00:56 +0000
Manifest next update: Mon 02 Mar 2026 14:00:56 +0000
Files and hashes: 1: 5wQefn0YTV261xQp42W58Kx2ylI.crl (hash: zLMiEpey6i5nEbUIRNUs//bE6vfEyMDF93tLjqkgPzw=)
2: JGaj-VMF82BATvYd0lQOFLHFMc8.roa (hash: pT58jY5xAuPaGqFJHp5UHGx9TDCbSHrDu393sd5XVkQ=)
3: ng1Tkoik0468H1Ss1bWCZlgGMXA.roa (hash: syZ/2LZN01/WEB1S0lL+Wm4S4EZXka7JcoKvJG2ctoE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/532f41-2e3b-47eb-bed5-0e1c4ad03956/1/5wQefn0YTV261xQp42W58Kx2ylI.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/532f41-2e3b-47eb-bed5-0e1c4ad03956/1/5wQefn0YTV261xQp42W58Kx2ylI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5wQefn0YTV261xQp42W58Kx2ylI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:c4:ba:59:79:48:75:fd:54:dc:96:26:75:24:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7041e7e7d184d5dbad71429e365b9f0ac76ca52
Validity
Not Before: Mar 1 14:00:56 2026 GMT
Not After : Mar 2 14:00:56 2026 GMT
Subject: CN=7147f78cabbfd7ce3c35dbff94e66bc698f06f84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:59:da:ae:e2:bb:f2:3a:ad:1e:b7:e1:64:81:
6d:ac:f0:2b:c9:78:7a:1c:82:c3:f5:33:8b:f9:13:
d8:ca:e9:76:87:b4:8f:fc:90:04:58:e7:10:36:71:
4f:96:b0:fa:ef:30:53:4e:d7:05:b3:79:45:e7:dc:
70:a2:70:f0:fa:33:89:c4:18:b8:42:b1:94:24:41:
9e:4b:23:a6:11:86:eb:e2:36:ed:5e:cc:5f:6d:d7:
bf:8c:bc:f6:37:57:c2:c1:35:eb:a0:47:78:0f:f2:
e1:7e:21:5a:25:ae:67:75:78:35:c8:b0:ac:c5:b9:
6d:5f:97:4e:85:3f:80:29:1f:1c:a5:af:b8:70:74:
1f:59:4f:de:ca:77:72:0f:d1:47:0b:13:4c:71:f8:
f9:02:a3:ae:a9:bd:1a:5e:0e:31:46:94:da:a2:42:
96:e5:b2:08:e5:c6:b0:2a:6e:41:bd:57:c7:15:40:
bc:20:b7:ea:3c:d4:fd:b9:8b:87:4e:a4:c1:c7:4a:
cf:c3:96:3d:97:cb:40:dd:10:1a:5d:11:3a:73:c0:
12:77:c0:bb:a8:a8:49:8c:41:a3:0e:3d:03:93:12:
0d:44:6e:f3:b3:bf:61:11:6d:7c:c1:46:59:4e:fd:
5c:e7:0a:62:53:e1:2e:53:24:3a:14:71:03:22:06:
01:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:47:F7:8C:AB:BF:D7:CE:3C:35:DB:FF:94:E6:6B:C6:98:F0:6F:84
X509v3 Authority Key Identifier:
keyid:E7:04:1E:7E:7D:18:4D:5D:BA:D7:14:29:E3:65:B9:F0:AC:76:CA:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5wQefn0YTV261xQp42W58Kx2ylI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/532f41-2e3b-47eb-bed5-0e1c4ad03956/1/5wQefn0YTV261xQp42W58Kx2ylI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/532f41-2e3b-47eb-bed5-0e1c4ad03956/1/5wQefn0YTV261xQp42W58Kx2ylI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:a8:e7:d5:a2:67:b2:ef:53:a1:5d:7b:f1:3f:af:01:53:62:
dc:cb:2c:95:b8:2f:e4:6c:27:cf:6e:e2:79:79:a2:a0:ae:c6:
07:81:6f:b3:b8:0e:ae:be:4f:a8:69:6f:4a:8c:76:92:b3:38:
6c:0d:f8:1f:e6:79:c5:89:a1:31:f2:d4:39:f9:e8:34:2f:87:
87:c1:c0:23:d6:13:e8:29:73:df:b2:cb:e9:0d:9c:ce:b6:dd:
9d:c4:a1:34:8c:88:e3:73:46:7a:a8:a5:d5:82:4b:d1:36:76:
b3:7f:49:e1:45:6e:f4:be:2e:70:f7:e6:8f:ac:ce:ba:0e:82:
02:fe:c4:60:c9:8e:09:57:54:32:02:95:a1:d2:88:0e:4a:3f:
22:c6:4b:89:6b:96:62:da:ff:05:97:9b:80:05:9c:cc:93:ee:
1d:1e:7c:fc:1b:19:6c:f5:3c:3f:cf:ee:8e:f2:01:e4:a3:47:
6e:11:16:f8:4b:4b:5f:6b:60:01:c1:f0:49:45:5d:6c:34:fe:
bf:b3:72:7f:e3:38:98:30:ff:cb:f6:53:1a:80:be:e0:38:f1:
85:b4:d2:3a:89:97:c6:00:c8:67:c6:b6:39:bd:1b:18:17:b2:
c6:4c:a3:74:46:cb:c1:e8:1c:c1:44:d5:15:26:92:02:59:14:
bb:e4:fe:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:41:55 2026 by rpki-client