Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/050d7f-8455-465f-b239-c32d10c7ea1f/1/5J1E2IEnX8osC2s_fs7i0iIUb9I.mft
File: 5J1E2IEnX8osC2s_fs7i0iIUb9I.mft (raw, json)
Hash identifier: qlaTIJllTiIph4tkly6AR71yUpW7iQMKVzoHzTLSjU8=
Subject key identifier: D8:03:07:0E:E7:42:7C:D7:69:DD:97:EC:91:DD:38:D1:A1:EA:40:E4
Authority key identifier: E4:9D:44:D8:81:27:5F:CA:2C:0B:6B:3F:7E:CE:E2:D2:22:14:6F:D2
Certificate issuer: /CN=e49d44d881275fca2c0b6b3f7ecee2d222146fd2
Certificate serial: 019CAA8FA1A662654AD54A4DCFC7831E1785
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5J1E2IEnX8osC2s_fs7i0iIUb9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/050d7f-8455-465f-b239-c32d10c7ea1f/1/5J1E2IEnX8osC2s_fs7i0iIUb9I.mft
Manifest number: 156F
Signing time: Sun 01 Mar 2026 18:01:05 +0000
Manifest this update: Sun 01 Mar 2026 18:01:05 +0000
Manifest next update: Mon 02 Mar 2026 18:01:05 +0000
Files and hashes: 1: 5J1E2IEnX8osC2s_fs7i0iIUb9I.crl (hash: UVSIGxeh8ZhT/ToDCNKII8b3RFPhhbRGu4JKT9XGK+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/050d7f-8455-465f-b239-c32d10c7ea1f/1/5J1E2IEnX8osC2s_fs7i0iIUb9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/050d7f-8455-465f-b239-c32d10c7ea1f/1/5J1E2IEnX8osC2s_fs7i0iIUb9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/5J1E2IEnX8osC2s_fs7i0iIUb9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:a1:a6:62:65:4a:d5:4a:4d:cf:c7:83:1e:17:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e49d44d881275fca2c0b6b3f7ecee2d222146fd2
Validity
Not Before: Mar 1 18:01:05 2026 GMT
Not After : Mar 2 18:01:05 2026 GMT
Subject: CN=d803070ee7427cd769dd97ec91dd38d1a1ea40e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ae:0c:76:2c:a7:85:3c:65:df:f1:87:5a:38:
d0:1e:d4:c6:76:42:4c:a6:93:b0:32:f1:04:6e:3f:
4f:29:9f:b4:51:6c:cd:7a:0c:c1:be:65:80:f9:c8:
8a:63:0a:f2:96:cd:4a:94:9b:10:fc:b3:f9:f9:30:
c2:2c:c1:b0:37:1f:80:95:6b:8b:d7:6d:ad:9e:c3:
eb:4f:a5:7c:15:cb:e2:f6:85:07:5d:72:cf:77:d9:
ed:a2:c7:ec:0e:90:82:3d:fe:82:1c:1c:30:fb:1d:
00:5a:34:c0:9d:6b:65:64:fb:3f:c6:69:c5:ba:07:
ad:ce:10:b5:eb:8a:f1:b9:09:82:0c:75:27:74:95:
26:b0:c3:71:3d:64:94:40:b1:68:c2:6d:ec:a9:1e:
44:65:b6:1f:75:6e:92:d1:41:24:f6:4f:b2:63:2e:
13:63:3d:c5:2e:f8:fd:83:d1:4c:e7:36:21:fb:5b:
52:10:bc:19:fa:a9:b6:5b:0e:60:97:7c:bf:06:88:
5b:5e:75:7a:09:33:00:bd:b9:ef:af:ee:85:84:12:
4a:64:19:37:3a:ac:49:45:c7:0f:e5:ec:20:11:e4:
b2:bf:1b:9d:78:39:ac:0a:4a:cf:bb:46:8e:b6:7c:
9c:d8:fe:06:32:d0:4d:4d:3d:7c:55:be:cb:33:bb:
7a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:03:07:0E:E7:42:7C:D7:69:DD:97:EC:91:DD:38:D1:A1:EA:40:E4
X509v3 Authority Key Identifier:
keyid:E4:9D:44:D8:81:27:5F:CA:2C:0B:6B:3F:7E:CE:E2:D2:22:14:6F:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5J1E2IEnX8osC2s_fs7i0iIUb9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/050d7f-8455-465f-b239-c32d10c7ea1f/1/5J1E2IEnX8osC2s_fs7i0iIUb9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/050d7f-8455-465f-b239-c32d10c7ea1f/1/5J1E2IEnX8osC2s_fs7i0iIUb9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:e4:32:b0:cb:dd:c8:bd:fc:f4:f8:43:d8:83:1c:1a:80:29:
3f:49:48:29:eb:f6:26:c7:a7:4e:6c:4e:ad:8f:e8:18:7f:90:
aa:de:3e:81:e1:c1:f2:d4:6a:52:af:7d:55:58:2c:14:3e:ff:
e0:da:36:3e:db:43:c9:d1:4a:11:78:65:b5:1b:a7:a0:86:39:
f5:4b:a8:4c:6c:c7:fb:aa:4b:0d:f3:e7:87:83:a8:ba:52:59:
ef:ba:9f:0c:89:b5:41:bf:75:6e:d9:e4:9b:45:cd:3e:77:c6:
25:78:d4:3a:7f:b6:39:89:76:95:38:2e:f5:99:10:44:16:23:
b9:ba:c9:84:1b:29:d0:74:78:5c:1c:ec:2e:f4:c9:d6:55:24:
0e:4f:c6:fd:21:56:f7:72:4e:57:6d:01:2e:6d:60:b3:e7:e9:
80:e4:d1:81:26:ec:db:67:d0:0e:5c:dc:f8:5f:50:22:f2:21:
ee:de:18:bb:cd:17:7a:73:30:f6:24:92:f1:f4:84:ce:10:b5:
b8:e3:1d:2e:30:82:0b:19:60:07:bb:3f:03:3e:85:d7:63:cc:
a4:6f:6d:90:69:90:61:b5:96:82:cf:b0:78:66:f8:4e:50:19:
43:22:8f:7c:f5:93:5f:37:4a:ee:d5:41:1e:e1:50:91:78:f0:
9e:6c:6d:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:26:42 2026 by rpki-client