Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/036380-7fbe-4444-84d9-5cd004d6e366/1/5hbHsgGVYH8nsT2I-Svx0Os45g8.mft
File: 5hbHsgGVYH8nsT2I-Svx0Os45g8.mft (raw, json)
Hash identifier: ftR8yROgd9l2iR4RyOb1MEwPlbLI+K+WEVme+NMyIQc=
Subject key identifier: 0F:C9:4C:C4:0D:4D:CA:AF:97:16:F7:F6:62:24:62:E7:AA:A9:16:9C
Authority key identifier: E6:16:C7:B2:01:95:60:7F:27:B1:3D:88:F9:2B:F1:D0:EB:38:E6:0F
Certificate issuer: /CN=e616c7b20195607f27b13d88f92bf1d0eb38e60f
Certificate serial: 019CAE35EC90458137742891F7FCFD979D16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5hbHsgGVYH8nsT2I-Svx0Os45g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/036380-7fbe-4444-84d9-5cd004d6e366/1/5hbHsgGVYH8nsT2I-Svx0Os45g8.mft
Manifest number: 02FC
Signing time: Mon 02 Mar 2026 11:01:35 +0000
Manifest this update: Mon 02 Mar 2026 11:01:35 +0000
Manifest next update: Tue 03 Mar 2026 11:01:35 +0000
Files and hashes: 1: 5hbHsgGVYH8nsT2I-Svx0Os45g8.crl (hash: d8PYN5H2N6mb9Qhrvi8Xvrv0ivLBXTfNqoFgSX8cbYk=)
2: 72Y0w9pV82pI3wLwx96KwjAs5oU.roa (hash: c5hQXuvcKRBmbu9AlA38sraM6CQffUtGwob8NZ7WzZo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/036380-7fbe-4444-84d9-5cd004d6e366/1/5hbHsgGVYH8nsT2I-Svx0Os45g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/036380-7fbe-4444-84d9-5cd004d6e366/1/5hbHsgGVYH8nsT2I-Svx0Os45g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/5hbHsgGVYH8nsT2I-Svx0Os45g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 11:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:ec:90:45:81:37:74:28:91:f7:fc:fd:97:9d:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e616c7b20195607f27b13d88f92bf1d0eb38e60f
Validity
Not Before: Mar 2 11:01:35 2026 GMT
Not After : Mar 3 11:01:35 2026 GMT
Subject: CN=0fc94cc40d4dcaaf9716f7f6622462e7aaa9169c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:03:b0:36:c6:e8:a6:62:fb:00:e0:11:05:71:
94:51:ae:80:1f:43:21:b1:d6:15:04:70:85:55:f1:
f8:a1:e5:42:a9:ba:41:95:bc:6b:cf:e5:fc:30:21:
03:96:6b:60:c6:4b:fb:66:df:16:33:47:40:cc:11:
1f:21:42:9d:dd:e5:9b:07:e2:03:29:76:21:7c:16:
a3:92:d1:e2:b1:90:1e:80:bb:36:7d:9c:b2:8c:40:
c5:a1:7f:30:32:9e:58:f0:18:31:51:e6:05:ce:05:
6f:44:10:d8:8a:e0:61:df:9f:62:49:0e:35:b3:eb:
be:3d:36:e0:a5:6c:82:c3:70:19:46:a9:af:da:95:
02:60:c9:32:71:5f:35:37:dd:14:e2:ad:92:c5:00:
25:78:b9:a7:ca:1c:53:34:c6:2c:54:c6:15:e6:fc:
47:c4:a1:61:14:6e:c7:07:8f:b5:e6:d8:fe:80:1d:
0a:ca:e0:8d:82:3c:ae:ab:8f:2e:c7:6b:e1:6b:e7:
f6:f6:51:bc:f6:82:ae:26:ca:c6:00:f7:37:53:f5:
fa:73:b5:0e:8e:48:ce:e6:6f:d6:14:77:0d:22:d0:
ef:e5:e8:87:4e:f8:c6:2e:d9:8c:11:63:30:88:8b:
f4:a1:46:7a:8c:d1:c6:ae:ad:e6:b5:81:d9:95:94:
c1:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:C9:4C:C4:0D:4D:CA:AF:97:16:F7:F6:62:24:62:E7:AA:A9:16:9C
X509v3 Authority Key Identifier:
keyid:E6:16:C7:B2:01:95:60:7F:27:B1:3D:88:F9:2B:F1:D0:EB:38:E6:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hbHsgGVYH8nsT2I-Svx0Os45g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/036380-7fbe-4444-84d9-5cd004d6e366/1/5hbHsgGVYH8nsT2I-Svx0Os45g8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/036380-7fbe-4444-84d9-5cd004d6e366/1/5hbHsgGVYH8nsT2I-Svx0Os45g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:8d:19:a3:24:01:42:26:76:66:26:47:66:d0:85:13:0f:8b:
4c:d3:b1:6e:36:64:d7:ff:c0:4c:51:c8:f5:9a:44:5b:f0:f4:
f5:f4:a5:4d:3d:bf:ab:91:1a:13:87:c9:04:43:e0:d4:ad:1d:
bb:9f:77:07:58:91:b3:97:e2:29:f8:51:ab:be:0f:12:84:3d:
98:61:b3:b9:c9:46:3d:73:36:47:28:37:a0:fc:01:1f:d2:f3:
cc:66:92:2c:1b:95:05:d2:ae:17:77:af:d6:17:4a:01:ca:96:
c2:f4:ad:1c:83:ad:16:61:bc:cc:de:b2:c3:7f:3c:ef:75:29:
53:1f:f3:d4:cd:79:fb:d5:94:bc:6c:7d:65:82:49:dd:35:30:
d7:59:17:ac:23:35:f7:1b:16:ca:79:46:92:42:9a:7b:e0:1f:
fc:c9:14:09:bc:2c:a4:83:7a:50:86:f3:67:43:4f:a9:41:ee:
80:1e:e1:8a:bc:42:68:3d:27:ea:e1:5f:97:29:ad:cd:5b:70:
ca:9a:c7:2b:4c:69:f3:ca:5c:63:be:e2:40:1b:4e:be:da:77:
98:44:1a:71:cb:2f:2e:17:df:7a:43:15:b9:7f:da:4a:20:8b:
16:27:84:6a:3b:79:e1:79:91:fa:71:8d:bf:dd:d6:b3:99:82:
cf:2d:12:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:36:49 2026 by rpki-client