Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/da3406-04f9-47b0-a119-b88afef13367/1/_5m8PRSR-CJfiBFk9ZMUS3olyOs.mft
File: _5m8PRSR-CJfiBFk9ZMUS3olyOs.mft (raw, json)
Hash identifier: +VAnpc+VXh9S+SFDlfRP9LsetsRbzpot74lFILfeeiA=
Subject key identifier: 18:EC:59:F1:8A:DE:FF:95:66:F2:7D:9B:13:56:3C:55:23:04:1C:7B
Authority key identifier: FF:99:BC:3D:14:91:F8:22:5F:88:11:64:F5:93:14:4B:7A:25:C8:EB
Certificate issuer: /CN=ff99bc3d1491f8225f881164f593144b7a25c8eb
Certificate serial: 019CAAC60745FEB5F6A3EB8428BFE45DAC82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_5m8PRSR-CJfiBFk9ZMUS3olyOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/da3406-04f9-47b0-a119-b88afef13367/1/_5m8PRSR-CJfiBFk9ZMUS3olyOs.mft
Manifest number: 1218
Signing time: Sun 01 Mar 2026 19:00:30 +0000
Manifest this update: Sun 01 Mar 2026 19:00:30 +0000
Manifest next update: Mon 02 Mar 2026 19:00:30 +0000
Files and hashes: 1: 04FSpzq4m-1XB6Xit5U77C8a4zQ.roa (hash: mIEzNAi8bCdeISsLWc2pP3wecbIvm3THnuOD2ckxOcM=)
2: _5m8PRSR-CJfiBFk9ZMUS3olyOs.crl (hash: xLiJaa076beMXhAeYylI1Haebvc7aFH2cgYR9z/3oYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/da3406-04f9-47b0-a119-b88afef13367/1/_5m8PRSR-CJfiBFk9ZMUS3olyOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/da3406-04f9-47b0-a119-b88afef13367/1/_5m8PRSR-CJfiBFk9ZMUS3olyOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_5m8PRSR-CJfiBFk9ZMUS3olyOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:07:45:fe:b5:f6:a3:eb:84:28:bf:e4:5d:ac:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff99bc3d1491f8225f881164f593144b7a25c8eb
Validity
Not Before: Mar 1 19:00:30 2026 GMT
Not After : Mar 2 19:00:30 2026 GMT
Subject: CN=18ec59f18adeff9566f27d9b13563c5523041c7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:af:33:78:b5:61:fb:c5:98:b9:c8:da:79:69:
43:87:dc:e1:0c:15:98:4c:74:76:5a:80:c5:5a:e4:
3f:99:31:7a:57:b3:d8:14:0d:ed:01:3e:09:00:a9:
04:02:ec:42:65:52:b1:8f:1f:10:25:3a:40:7a:f5:
e1:56:24:69:6a:05:ac:e6:f9:26:62:63:1f:ff:b6:
af:b8:ff:17:a1:41:e6:82:45:41:78:65:9b:3d:39:
ce:e0:08:48:1d:f9:f4:4c:42:da:e9:ad:32:8b:17:
74:45:50:e0:4e:a6:c4:32:aa:f7:cb:f7:c7:6a:54:
a9:9f:f3:d2:75:08:97:e0:b6:09:7f:8d:07:9a:ed:
0c:dc:4f:91:db:c6:e7:5f:b0:24:2a:23:0d:0d:53:
5f:9d:21:13:98:62:de:ec:26:be:87:c5:d3:11:b6:
1b:83:1e:8d:c1:83:8e:ec:08:7a:e5:da:91:f3:74:
54:f6:ad:b6:fd:5c:81:16:4e:4d:af:54:80:fb:a9:
42:e1:47:9d:75:52:fc:a2:6c:2a:48:5a:e0:03:87:
a5:84:cd:d3:5d:63:c7:4c:b6:a3:90:16:4e:83:c0:
8c:c9:73:31:53:70:42:b9:72:7d:ec:9a:36:9e:8e:
6a:d4:57:2d:e7:b6:ed:32:96:af:d2:41:66:af:01:
ca:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:EC:59:F1:8A:DE:FF:95:66:F2:7D:9B:13:56:3C:55:23:04:1C:7B
X509v3 Authority Key Identifier:
keyid:FF:99:BC:3D:14:91:F8:22:5F:88:11:64:F5:93:14:4B:7A:25:C8:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_5m8PRSR-CJfiBFk9ZMUS3olyOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/da3406-04f9-47b0-a119-b88afef13367/1/_5m8PRSR-CJfiBFk9ZMUS3olyOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/da3406-04f9-47b0-a119-b88afef13367/1/_5m8PRSR-CJfiBFk9ZMUS3olyOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:31:68:90:52:80:0c:c6:84:6a:23:b4:df:de:19:cd:b8:55:
01:75:90:94:49:8c:f4:c9:63:34:39:10:df:a5:54:7e:ea:87:
01:e7:4b:f9:59:5d:5e:61:00:76:d5:3e:72:47:9e:1c:63:8c:
27:82:74:e9:88:37:f6:56:14:51:5c:b8:e6:68:09:a7:6f:44:
cb:5a:3e:b7:c1:d8:7e:37:57:3d:98:3a:72:6b:eb:2b:6f:29:
c1:b3:40:e8:6d:3a:81:36:94:ba:e8:5f:ce:35:df:b4:c1:07:
2d:bf:c8:bc:82:d2:d2:22:06:3a:c4:be:3a:e9:f9:08:ef:25:
4b:50:0d:80:28:9c:c7:2d:39:6d:d6:6b:bb:0c:47:d3:ee:a7:
3e:22:f5:f1:2f:c9:95:0f:33:5e:0b:57:d2:a8:97:18:c8:a4:
e9:04:f3:b1:fe:75:5e:ea:17:77:97:4e:b9:7b:e9:79:9e:21:
b0:69:9d:57:17:30:da:e7:8b:74:e1:33:7d:4a:5e:51:a4:bf:
cc:af:6d:49:c8:3c:b1:b4:5c:bb:3b:b2:09:96:99:ca:92:f9:
bc:d9:f2:8a:33:f5:75:ac:30:43:c1:cb:eb:99:83:97:c5:76:
47:d4:50:e3:0b:76:d6:55:19:ec:10:ef:da:28:21:50:fb:5b:
45:86:75:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:04:02 2026 by rpki-client