Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/ab5fdc-9d6b-4675-9a13-9d185f738211/1/5D8j1ok3SUKI38x6Dv4f50ogNuE.mft
File: 5D8j1ok3SUKI38x6Dv4f50ogNuE.mft (raw, json)
Hash identifier: bcNTmSkkaBoA6yA89F7tDt5NdvH6zHluJV2AlZTGkUY=
Subject key identifier: 34:9D:A5:14:B7:82:FA:54:85:B0:B3:C6:0A:0A:A3:DD:61:27:8B:79
Authority key identifier: E4:3F:23:D6:89:37:49:42:88:DF:CC:7A:0E:FE:1F:E7:4A:20:36:E1
Certificate issuer: /CN=e43f23d68937494288dfcc7a0efe1fe74a2036e1
Certificate serial: 019CAC7E20109F9DCAD047073FDC9D5FC423
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5D8j1ok3SUKI38x6Dv4f50ogNuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/ab5fdc-9d6b-4675-9a13-9d185f738211/1/5D8j1ok3SUKI38x6Dv4f50ogNuE.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 03:01:12 +0000
Manifest this update: Mon 02 Mar 2026 03:01:12 +0000
Manifest next update: Tue 03 Mar 2026 03:01:12 +0000
Files and hashes: 1: 5D8j1ok3SUKI38x6Dv4f50ogNuE.crl (hash: z9BVDdFt/on/QvjBNPGqIpS0EsGE8tfbVA6YFLF6Hd0=)
2: Ir27xg9dLc2jCmst038CD7aSTUE.roa (hash: oSA2uezGmOSkDFovORRhwQlbzwF4ltfNZW/lvc676ZY=)
3: WDTYJfU4GmC_Z6SmZBDA6liuL48.roa (hash: FJHas3EZqiie/GgKCvyAh7bXL6nc+V2NXzO+Cw5KyLA=)
4: pwYTinLuDu67XvmsuR-F4t51_KA.roa (hash: eNI+YaNU/hzM1s49lx5C1dDOoIT3b4beF5vq3z+7/TI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/ab5fdc-9d6b-4675-9a13-9d185f738211/1/5D8j1ok3SUKI38x6Dv4f50ogNuE.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/ab5fdc-9d6b-4675-9a13-9d185f738211/1/5D8j1ok3SUKI38x6Dv4f50ogNuE.mft
rsync://rpki.ripe.net/repository/DEFAULT/5D8j1ok3SUKI38x6Dv4f50ogNuE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:20:10:9f:9d:ca:d0:47:07:3f:dc:9d:5f:c4:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e43f23d68937494288dfcc7a0efe1fe74a2036e1
Validity
Not Before: Mar 2 03:01:12 2026 GMT
Not After : Mar 3 03:01:12 2026 GMT
Subject: CN=349da514b782fa5485b0b3c60a0aa3dd61278b79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:97:37:34:a0:67:39:28:16:ae:7a:0a:a7:97:
44:7e:e4:12:4b:39:ca:79:ca:c7:83:5e:e1:43:1c:
bc:db:85:ca:b2:0e:93:10:9a:50:48:e7:b7:1d:73:
65:e9:73:c5:0b:e8:ff:62:95:0e:cb:19:c6:1a:fb:
be:dc:d0:97:76:49:14:d7:7f:45:42:76:ad:6d:fa:
6f:d0:6c:8e:da:39:70:d7:f9:3b:86:6d:2f:03:a8:
31:fe:3c:4b:e3:66:ee:44:58:e8:86:b0:61:ef:16:
13:68:07:11:3c:ba:4a:56:5e:6c:90:f0:ad:cc:7d:
0c:29:1b:22:30:47:be:d4:69:4e:4f:54:14:1a:48:
a4:58:9f:d1:53:81:73:ea:f7:76:06:e0:52:63:40:
78:52:43:33:64:ff:a9:17:6b:bb:7e:20:e5:96:2a:
a5:57:0e:54:5f:19:9f:b3:ff:36:4b:a3:fd:6d:1d:
ad:71:23:72:d0:fb:e5:05:f4:6a:0b:6c:b2:46:94:
83:af:8c:75:1d:99:c0:4b:20:40:b8:fb:b7:84:de:
96:7f:bc:95:1a:0e:d8:3a:ab:5d:2f:a2:9f:f4:44:
b1:c9:ac:a0:9d:98:5b:ce:1a:fa:e3:cb:3e:82:7d:
90:48:44:cb:9c:14:41:ee:2a:56:1c:cc:b1:f7:59:
aa:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:9D:A5:14:B7:82:FA:54:85:B0:B3:C6:0A:0A:A3:DD:61:27:8B:79
X509v3 Authority Key Identifier:
keyid:E4:3F:23:D6:89:37:49:42:88:DF:CC:7A:0E:FE:1F:E7:4A:20:36:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5D8j1ok3SUKI38x6Dv4f50ogNuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ab5fdc-9d6b-4675-9a13-9d185f738211/1/5D8j1ok3SUKI38x6Dv4f50ogNuE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ab5fdc-9d6b-4675-9a13-9d185f738211/1/5D8j1ok3SUKI38x6Dv4f50ogNuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:d0:18:31:8b:6a:83:08:bd:5f:44:05:0f:b0:0f:94:d2:14:
5d:06:44:83:ed:ed:77:36:e6:14:31:e9:58:08:51:1a:85:46:
00:a8:6e:6f:fa:0b:4c:cb:04:a6:dd:9f:7d:74:11:af:a1:c3:
ce:98:2c:50:19:3e:e1:ee:57:62:85:5f:44:03:13:fc:dc:78:
ae:c3:d3:3d:15:13:e0:0e:8b:6b:e5:15:3a:90:2b:f1:97:c2:
8f:43:27:88:64:c9:0a:c6:3d:fd:77:30:5e:7e:bb:bd:ef:6e:
95:71:07:94:09:0d:50:70:c7:5e:61:7f:dc:96:e1:88:de:69:
43:d4:d7:f6:2a:1e:6b:ad:18:60:f9:c0:89:a6:46:f9:e0:6b:
01:f8:52:04:53:40:81:f0:42:e0:8c:55:a7:4f:39:c7:83:fb:
e9:93:40:13:06:56:66:49:61:e2:00:f1:82:8d:d5:ca:68:04:
2e:c6:7e:6c:de:a2:77:d9:94:50:dc:0f:cc:03:a5:ac:7d:66:
9d:6f:51:b3:e3:1c:60:a5:1d:0f:27:8a:42:95:51:17:4c:20:
36:04:88:7a:7a:2f:f2:1e:f3:a5:b9:6d:33:01:0b:8e:39:06:
e1:35:5c:2f:0d:22:d9:ca:5b:30:4d:d7:5f:b0:23:95:12:cc:
51:ff:01:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:33:36 2026 by rpki-client