Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/9b674c-3657-4c25-9953-3f7040997682/1/5iNO09jKltxRjTXB58kr6_z2zk0.mft
File: 5iNO09jKltxRjTXB58kr6_z2zk0.mft (raw, json)
Hash identifier: ECYN82sFrlYym8aqKdlZ/Z20YYiKLJJs5nNLcyvLn0E=
Subject key identifier: 78:C1:BC:A6:D3:94:5A:DF:B8:2A:FF:EA:B8:68:22:B5:7B:FF:AB:CC
Authority key identifier: E6:23:4E:D3:D8:CA:96:DC:51:8D:35:C1:E7:C9:2B:EB:FC:F6:CE:4D
Certificate issuer: /CN=e6234ed3d8ca96dc518d35c1e7c92bebfcf6ce4d
Certificate serial: 019CADFE0F4D89888B69DEEAAE3B86D01279
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5iNO09jKltxRjTXB58kr6_z2zk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/9b674c-3657-4c25-9953-3f7040997682/1/5iNO09jKltxRjTXB58kr6_z2zk0.mft
Manifest number: 17D7
Signing time: Mon 02 Mar 2026 10:00:34 +0000
Manifest this update: Mon 02 Mar 2026 10:00:34 +0000
Manifest next update: Tue 03 Mar 2026 10:00:34 +0000
Files and hashes: 1: 1-Q3xDZfzQc6tV29ExEVxZMLhErU.roa (hash: RiGnAtuoBY0MDLXEEdvsOwo9zTH9zl0+GNo+JIs/bog=)
2: 5iNO09jKltxRjTXB58kr6_z2zk0.crl (hash: D0dgZfCUpfWkGe1MjdUBkL2Jh0sef/7CeBQvmfVL0f4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/9b674c-3657-4c25-9953-3f7040997682/1/5iNO09jKltxRjTXB58kr6_z2zk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/9b674c-3657-4c25-9953-3f7040997682/1/5iNO09jKltxRjTXB58kr6_z2zk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/5iNO09jKltxRjTXB58kr6_z2zk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 10:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:0f:4d:89:88:8b:69:de:ea:ae:3b:86:d0:12:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6234ed3d8ca96dc518d35c1e7c92bebfcf6ce4d
Validity
Not Before: Mar 2 10:00:34 2026 GMT
Not After : Mar 3 10:00:34 2026 GMT
Subject: CN=78c1bca6d3945adfb82affeab86822b57bffabcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d9:ef:21:49:42:b1:92:08:fe:45:fb:de:6a:
1a:0b:40:d8:96:52:5c:4f:f5:94:86:78:8c:ef:77:
30:1c:f0:88:ac:e7:c2:11:b8:ab:e4:14:1a:11:d7:
ee:d3:04:f8:c0:2d:28:71:3f:45:e5:3d:c7:93:f0:
96:43:ba:4c:85:39:9e:9f:f0:80:b1:25:23:38:c5:
7c:49:bb:d1:98:da:04:11:78:00:0d:54:a6:9c:e7:
74:14:42:1b:0d:40:cf:fc:f6:92:92:f6:bd:22:14:
57:3f:8c:97:3d:a9:ce:d4:d9:8e:01:49:23:a8:15:
01:33:89:ec:8a:07:0a:b2:2b:35:c5:b7:cd:2f:d6:
8f:9c:15:5d:53:25:0d:67:ca:66:3d:1e:fa:e4:54:
04:5c:19:00:0c:c3:94:98:4d:85:0a:19:3b:4b:19:
7c:57:82:3d:99:4f:49:a7:3d:22:60:11:4f:9b:cc:
48:b5:ea:1f:ac:25:82:3c:16:41:bf:98:fc:8c:9f:
9b:7f:8a:f5:26:a6:e2:b5:28:0c:8e:55:a1:d3:58:
16:81:41:54:60:0a:62:4d:e9:77:35:cd:f3:28:4d:
3c:1f:7c:48:3e:17:d4:61:84:4c:54:07:fe:2f:67:
e3:94:e3:27:db:57:2e:bb:cd:f6:f8:c2:c7:16:be:
ca:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:C1:BC:A6:D3:94:5A:DF:B8:2A:FF:EA:B8:68:22:B5:7B:FF:AB:CC
X509v3 Authority Key Identifier:
keyid:E6:23:4E:D3:D8:CA:96:DC:51:8D:35:C1:E7:C9:2B:EB:FC:F6:CE:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5iNO09jKltxRjTXB58kr6_z2zk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/9b674c-3657-4c25-9953-3f7040997682/1/5iNO09jKltxRjTXB58kr6_z2zk0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/9b674c-3657-4c25-9953-3f7040997682/1/5iNO09jKltxRjTXB58kr6_z2zk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:6b:eb:b5:d0:56:d8:f5:9f:c9:0d:ad:61:5e:10:ff:30:21:
75:3a:08:50:0d:03:66:de:99:e2:b4:0c:e2:f7:69:e3:a1:16:
f7:93:bb:0f:5b:e5:c2:24:36:62:f2:41:70:0a:05:f4:5e:b0:
47:ca:4f:77:d4:c7:19:15:22:50:fc:da:c6:3d:ef:dc:be:8c:
48:fa:c3:fb:ca:17:d4:eb:43:bb:ed:c3:5d:d0:19:64:d1:ea:
da:2e:a6:9e:cb:36:80:d7:25:2b:d5:81:32:ab:f1:8b:f3:12:
4b:f4:d8:df:eb:d6:c3:c4:af:bc:87:54:5e:0d:2c:0a:b8:93:
c4:1d:a3:cf:a4:81:33:67:1a:1a:c6:4b:8f:ea:87:e8:9a:d5:
eb:f0:ad:52:ed:cb:e1:cf:07:de:3d:7b:8d:7b:82:ab:47:84:
6e:bd:30:a3:f0:76:85:4c:0c:a2:54:7e:32:16:aa:fc:8a:68:
91:2a:14:ca:d7:14:89:f3:1b:c1:c4:8d:db:13:51:ee:15:c8:
db:74:88:10:51:e4:f4:e9:19:06:de:09:e3:31:db:2a:6e:e4:
c0:4a:d0:ca:a1:e1:bb:84:6d:7c:62:96:13:6b:b9:02:e6:b7:
0c:cc:3b:e5:8c:05:c5:33:f6:40:99:a4:c7:f7:b0:c0:c5:5c:
a6:ee:a5:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:58:29 2026 by rpki-client