Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/734e0c-786e-4631-a923-e8b8fcc41e85/1/5gBk3PcZ7YmZ2nkvb7_D_pvHCJg.mft
File: 5gBk3PcZ7YmZ2nkvb7_D_pvHCJg.mft (raw, json)
Hash identifier: 7K92FxTceN0E+f62G+D4P5NAcL0tJ2lnzVTpBPoO3EI=
Subject key identifier: 07:0E:E4:26:35:FD:D2:0A:DE:E3:F4:51:AA:F1:A2:78:09:C4:7B:8C
Authority key identifier: E6:00:64:DC:F7:19:ED:89:99:DA:79:2F:6F:BF:C3:FE:9B:C7:08:98
Certificate issuer: /CN=e60064dcf719ed8999da792f6fbfc3fe9bc70898
Certificate serial: 019CAC0FAD31697F2259BDFDCAFCECE740D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5gBk3PcZ7YmZ2nkvb7_D_pvHCJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/734e0c-786e-4631-a923-e8b8fcc41e85/1/5gBk3PcZ7YmZ2nkvb7_D_pvHCJg.mft
Manifest number: 1845
Signing time: Mon 02 Mar 2026 01:00:34 +0000
Manifest this update: Mon 02 Mar 2026 01:00:34 +0000
Manifest next update: Tue 03 Mar 2026 01:00:34 +0000
Files and hashes: 1: 1-pJL_RqO1YmMrkb8oqu5jkasDqw.roa (hash: tXskn9qxJGgIuj8H/bglOap8ueKyjcb9VQBsaau/B14=)
2: 5gBk3PcZ7YmZ2nkvb7_D_pvHCJg.crl (hash: 8MGCSKP6dM8NUE6uUB1dnk+3Ep/GuBx2OPq6+N3UNsg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/734e0c-786e-4631-a923-e8b8fcc41e85/1/5gBk3PcZ7YmZ2nkvb7_D_pvHCJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/734e0c-786e-4631-a923-e8b8fcc41e85/1/5gBk3PcZ7YmZ2nkvb7_D_pvHCJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/5gBk3PcZ7YmZ2nkvb7_D_pvHCJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:ad:31:69:7f:22:59:bd:fd:ca:fc:ec:e7:40:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e60064dcf719ed8999da792f6fbfc3fe9bc70898
Validity
Not Before: Mar 2 01:00:34 2026 GMT
Not After : Mar 3 01:00:34 2026 GMT
Subject: CN=070ee42635fdd20adee3f451aaf1a27809c47b8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:69:f0:5c:3b:69:60:32:88:c3:cc:fd:af:b3:
68:96:33:91:79:87:b1:fa:48:15:ab:21:32:e8:77:
91:2c:fd:38:d5:3f:9e:2a:7e:5b:00:d7:76:34:7b:
67:ba:ad:ac:bf:0d:0b:63:7b:1f:aa:e2:31:81:ac:
c7:07:f1:58:32:f7:30:6d:ff:45:d3:63:cc:6b:a2:
ae:e8:d9:86:f7:c2:7a:50:b1:99:b1:40:34:28:dc:
7a:e6:c0:99:5d:96:b7:97:99:fa:53:40:0a:95:0f:
22:76:b5:4f:7c:34:80:e9:44:cf:09:ff:d2:83:57:
a4:c9:30:48:f3:a3:bd:ac:0c:97:f6:61:11:95:ea:
e0:3c:f4:9c:55:c3:82:bb:e1:5e:16:ac:5c:74:5e:
55:bd:bc:26:65:6b:ae:d9:1d:b1:c2:be:a2:ff:9a:
31:aa:3f:f3:88:5d:f8:0e:6b:5d:94:86:5a:31:23:
97:97:d6:62:bb:7e:50:5c:33:4d:e3:87:f2:23:fa:
a7:1b:fe:ba:3e:a1:e9:ff:a0:91:4f:cb:fc:5d:b5:
63:0f:e9:8a:dd:b3:7d:e7:66:01:4e:a7:7f:ef:6b:
63:9b:59:5e:51:94:5c:f3:b3:b2:0a:35:b8:e3:8f:
7a:8a:5c:34:17:d2:3d:d1:04:00:05:2f:7e:cf:c9:
12:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:0E:E4:26:35:FD:D2:0A:DE:E3:F4:51:AA:F1:A2:78:09:C4:7B:8C
X509v3 Authority Key Identifier:
keyid:E6:00:64:DC:F7:19:ED:89:99:DA:79:2F:6F:BF:C3:FE:9B:C7:08:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5gBk3PcZ7YmZ2nkvb7_D_pvHCJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/734e0c-786e-4631-a923-e8b8fcc41e85/1/5gBk3PcZ7YmZ2nkvb7_D_pvHCJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/734e0c-786e-4631-a923-e8b8fcc41e85/1/5gBk3PcZ7YmZ2nkvb7_D_pvHCJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:c2:5c:21:31:87:f3:d1:21:dc:18:0d:49:22:41:63:05:23:
fd:c4:ff:81:2a:7f:70:54:dc:ad:57:c7:c1:11:0f:f5:57:9c:
ab:c3:1b:0c:38:31:b2:2b:ae:c5:31:91:0f:09:91:56:fa:e8:
12:32:1c:a2:c5:0f:e2:46:c0:3d:0a:69:3c:9b:6f:50:7b:b4:
46:8e:4f:b1:67:c0:0a:eb:40:c3:e1:22:d2:a0:4e:ad:f0:a7:
19:8b:16:75:eb:33:67:cb:d2:14:5d:e3:d9:54:9f:89:ab:80:
ca:05:ad:05:7b:c8:30:da:c4:18:27:46:ed:c5:43:4a:7c:0b:
19:9b:95:16:0e:ad:f8:40:38:f1:a6:b3:49:33:41:f6:b8:fc:
be:5b:ca:be:4b:f9:e3:cd:35:dd:99:fd:bf:65:b4:4b:4a:59:
4c:b9:69:a5:15:e8:23:e5:99:f6:f6:d3:43:60:82:02:27:fd:
6f:ce:2d:7e:f7:3b:a2:96:50:8b:73:30:1d:d8:91:b9:07:9d:
7f:86:d5:b1:17:73:f1:b3:64:7d:c3:65:31:20:c7:d4:fc:15:
71:ac:88:71:7f:52:cf:3f:45:16:e6:8e:17:16:ac:10:e1:65:
82:07:e5:51:b5:ad:ae:e9:80:14:29:a4:0a:6f:3c:3e:1a:e9:
be:87:6e:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:36:38 2026 by rpki-client