Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/5snUihjDwNLk5jp7g4haeWd1WCY.mft
File: 5snUihjDwNLk5jp7g4haeWd1WCY.mft (raw, json)
Hash identifier: bpgULA2g0x3hODkmntF89/jhrDhkJ+41sYNLMDcrxKk=
Subject key identifier: 9A:41:0E:E4:67:A7:7D:5F:D4:7E:9E:75:61:79:66:87:93:C9:9D:CB
Authority key identifier: E6:C9:D4:8A:18:C3:C0:D2:E4:E6:3A:7B:83:88:5A:79:67:75:58:26
Certificate issuer: /CN=e6c9d48a18c3c0d2e4e63a7b83885a7967755826
Certificate serial: 019CAC0FE0BBA67100221E724FC039DF174D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5snUihjDwNLk5jp7g4haeWd1WCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/5snUihjDwNLk5jp7g4haeWd1WCY.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 01:00:47 +0000
Manifest this update: Mon 02 Mar 2026 01:00:47 +0000
Manifest next update: Tue 03 Mar 2026 01:00:47 +0000
Files and hashes: 1: 5snUihjDwNLk5jp7g4haeWd1WCY.crl (hash: pSnUgTtn7qLrJIG/hmvNpmTWcG64olRwZdbvZ+Fv0es=)
2: xTcMswF38ZE38tgLMYO-vbYGTRk.roa (hash: PD9c4dxb1fJ5/IhIPAC6oOP7byhN52l5phW+HJUN+kg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/5snUihjDwNLk5jp7g4haeWd1WCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/5snUihjDwNLk5jp7g4haeWd1WCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/5snUihjDwNLk5jp7g4haeWd1WCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:e0:bb:a6:71:00:22:1e:72:4f:c0:39:df:17:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6c9d48a18c3c0d2e4e63a7b83885a7967755826
Validity
Not Before: Mar 2 01:00:47 2026 GMT
Not After : Mar 3 01:00:47 2026 GMT
Subject: CN=9a410ee467a77d5fd47e9e756179668793c99dcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ee:04:e3:b5:52:14:be:5e:9e:f8:44:13:be:
6a:91:0b:69:b1:c7:a3:13:15:d1:29:2b:d5:66:90:
b5:d5:77:ff:68:65:ba:02:09:ea:03:f7:9c:8e:e4:
9d:de:70:ab:2d:33:41:5a:0b:16:e5:ce:90:13:40:
39:53:d7:88:1a:71:08:49:d5:a9:41:76:8f:f5:9f:
ce:71:79:d5:03:26:c9:52:16:f3:5a:75:14:2b:8b:
74:01:41:69:04:27:4c:9a:f3:80:5a:c5:7e:41:0d:
4d:d3:21:41:53:84:13:87:64:66:42:50:40:4f:ff:
1a:a8:06:ee:a5:da:de:4b:91:00:e2:77:0e:95:f3:
33:55:03:f2:03:89:c7:b2:a6:83:44:9c:78:70:21:
d3:d9:d7:6e:60:ee:7e:d6:0e:a8:38:3a:cb:bc:8f:
52:dd:81:bc:59:c9:92:34:0e:c9:23:72:7b:63:df:
f2:0e:4b:86:4d:11:59:68:96:20:a7:23:4e:49:f4:
ba:fd:a7:54:67:dd:7b:35:f1:a1:58:71:a7:5b:87:
7c:fb:c2:0c:04:47:4c:9c:da:bc:2b:3c:d3:5e:5f:
ac:c8:6e:44:a3:80:9b:80:b4:0e:0f:36:47:21:56:
6c:39:43:0d:43:e2:f6:8e:35:d7:fd:f4:18:37:7a:
0e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:41:0E:E4:67:A7:7D:5F:D4:7E:9E:75:61:79:66:87:93:C9:9D:CB
X509v3 Authority Key Identifier:
keyid:E6:C9:D4:8A:18:C3:C0:D2:E4:E6:3A:7B:83:88:5A:79:67:75:58:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5snUihjDwNLk5jp7g4haeWd1WCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/5snUihjDwNLk5jp7g4haeWd1WCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/5snUihjDwNLk5jp7g4haeWd1WCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:58:60:38:f0:87:37:a7:1a:71:1d:2d:12:22:09:23:55:f2:
f2:e0:ca:e1:16:51:f3:7e:d7:52:d4:f2:cd:40:ad:df:da:e2:
79:02:67:b3:73:ec:d2:82:6c:f2:83:60:28:9a:65:f7:72:4d:
0f:17:cd:94:66:cd:f1:62:d1:ed:0a:f3:e7:76:6c:64:91:e8:
4a:8f:03:de:64:81:66:a9:40:8d:e1:d4:11:88:81:3f:dd:e4:
1a:e9:af:6c:27:62:a7:b0:cf:f7:c7:a3:1d:9f:0c:eb:da:8f:
b9:da:c5:d5:bb:30:a2:06:0f:b6:95:35:c2:73:0c:9c:ad:dc:
2a:9d:9f:7d:bd:e5:e4:22:2d:b4:41:28:84:32:b7:25:d6:5a:
20:d4:51:90:f4:3a:7c:58:db:29:b1:0f:f4:00:04:0f:79:6d:
71:e6:3a:0d:fc:24:90:42:a0:e0:43:b2:08:37:66:e9:50:2a:
b2:3f:b4:51:ec:3e:29:77:c0:94:64:0e:cd:3b:82:66:51:f8:
32:2c:a0:b2:4f:68:57:45:5d:f6:ec:8b:07:0b:6a:43:d0:87:
3e:39:83:31:89:30:86:b1:96:1b:43:10:c5:59:97:c6:0e:74:
05:06:57:65:d1:0e:ec:b3:6e:98:37:e9:ab:d4:9b:54:0f:e4:
58:92:ec:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:47:47 2026 by rpki-client