Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/5XRVuKiwV21vlPfgFPazTVqmxNc.mft
File: 5XRVuKiwV21vlPfgFPazTVqmxNc.mft (raw, json)
Hash identifier: i41v3R8MSWChZb9O5YGdXxTCUsvYx7d95tr4SDDE0H8=
Subject key identifier: 97:A9:2A:3D:1B:5E:73:76:79:80:49:3C:59:61:69:E6:60:9E:FC:95
Authority key identifier: E5:74:55:B8:A8:B0:57:6D:6F:94:F7:E0:14:F6:B3:4D:5A:A6:C4:D7
Certificate issuer: /CN=e57455b8a8b0576d6f94f7e014f6b34d5aa6c4d7
Certificate serial: 019CA86A65F53CFD7541DD912F86F3EDB0E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5XRVuKiwV21vlPfgFPazTVqmxNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/5XRVuKiwV21vlPfgFPazTVqmxNc.mft
Manifest number: 04FF
Signing time: Sun 01 Mar 2026 08:01:10 +0000
Manifest this update: Sun 01 Mar 2026 08:01:10 +0000
Manifest next update: Mon 02 Mar 2026 08:01:10 +0000
Files and hashes: 1: 5XRVuKiwV21vlPfgFPazTVqmxNc.crl (hash: c7o4kX4IaWUFWK0mRCA+HR5l3jsujrjlIZagKEMiWqQ=)
2: Gki0ECoPAysMOyKXl5MRgDPOl8U.asa (hash: E0R2O9JvpmCh8PA1gKVXhP81+K3nRGm/rwyvvFQeeqI=)
3: NPoJ48rOlMylXSV9suu4vTiIJd8.roa (hash: aQKCUY2SNtZbLIRkM+mjutTaN8ryl5E8Zuu6G5SpnXw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/5XRVuKiwV21vlPfgFPazTVqmxNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/5XRVuKiwV21vlPfgFPazTVqmxNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/5XRVuKiwV21vlPfgFPazTVqmxNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a8:6a:65:f5:3c:fd:75:41:dd:91:2f:86:f3:ed:b0:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e57455b8a8b0576d6f94f7e014f6b34d5aa6c4d7
Validity
Not Before: Mar 1 08:01:10 2026 GMT
Not After : Mar 2 08:01:10 2026 GMT
Subject: CN=97a92a3d1b5e73767980493c596169e6609efc95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8c:7e:a9:cc:f7:c8:17:2c:b8:fb:28:ae:f6:
71:33:dd:31:cb:19:a7:ac:20:53:42:93:66:f9:f2:
db:1c:57:5b:b5:5d:6f:ad:4e:62:17:12:16:e5:e7:
42:d8:38:f1:ed:41:b3:fa:c2:87:58:3b:16:c9:65:
01:6c:f8:0d:af:6b:0f:0d:e8:65:12:ef:35:71:44:
67:17:bb:b3:96:56:30:ab:88:34:b8:56:cc:76:6b:
8d:3f:87:72:66:bf:a5:a7:52:02:51:d6:36:32:41:
04:f4:de:b7:be:19:fb:a7:68:25:38:1b:58:7e:0d:
b5:36:c1:32:77:f6:98:5f:73:eb:b3:6c:cd:5b:ff:
2a:b0:7d:d0:65:98:d9:ff:41:1f:65:39:34:b7:27:
96:40:03:ca:1b:9e:d8:e3:54:72:fb:d7:ec:19:9e:
5a:3f:96:66:39:d7:c1:36:7a:4b:e8:0b:c7:7a:ef:
61:d7:7d:23:15:4d:e7:74:ea:a5:b3:23:57:2d:d7:
c8:e1:a4:75:7e:e2:7f:74:8c:88:de:5c:94:31:dc:
37:cf:15:57:49:35:1a:79:8d:11:18:5a:96:a2:8c:
21:e3:e6:94:d4:f2:e0:99:88:67:f1:12:76:a7:36:
a5:65:df:f2:a8:2c:13:b9:5e:f0:5d:36:8c:5e:19:
0c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:A9:2A:3D:1B:5E:73:76:79:80:49:3C:59:61:69:E6:60:9E:FC:95
X509v3 Authority Key Identifier:
keyid:E5:74:55:B8:A8:B0:57:6D:6F:94:F7:E0:14:F6:B3:4D:5A:A6:C4:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5XRVuKiwV21vlPfgFPazTVqmxNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/5XRVuKiwV21vlPfgFPazTVqmxNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/5XRVuKiwV21vlPfgFPazTVqmxNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:b0:73:94:27:3b:0a:5b:79:d8:16:05:97:d6:66:e3:a5:a5:
96:75:e2:47:17:a2:ce:99:0a:da:e6:23:e4:d2:f7:d7:59:37:
72:65:9b:ea:37:23:be:16:62:0e:af:89:d1:e9:56:8b:ac:06:
15:c2:1f:56:af:f2:b6:be:62:39:86:10:a9:66:f5:2f:a9:3c:
8b:9e:cc:c2:b1:8b:4f:32:5d:4a:2d:f4:eb:2f:ee:9b:07:62:
29:a6:97:5e:9a:d3:6a:42:2c:0c:58:4f:7c:4c:ad:e3:bd:ae:
d0:38:29:26:d7:06:b1:b5:af:dd:43:10:02:70:37:14:00:dd:
24:57:80:4e:63:38:20:12:49:a1:e1:f2:8b:c8:4a:3b:4c:28:
c5:29:f8:dc:75:c0:b6:fe:ce:31:82:0b:b6:5f:0c:e8:7a:ed:
a1:42:7c:11:7a:29:8f:34:07:ce:82:16:a4:46:a3:31:c8:ad:
11:6b:00:87:9c:e4:20:7a:56:ae:3d:13:81:c2:16:c9:fc:59:
97:a4:54:41:d5:21:b4:c3:bb:2d:71:66:1e:2e:d4:39:63:ec:
fd:49:0e:95:b6:cc:db:9c:61:c6:fc:55:62:46:9a:ca:e4:03:
29:08:4c:e8:22:5b:c8:5e:59:99:27:68:9e:f0:45:7e:b9:20:
6f:51:f5:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:32:05 2026 by rpki-client