Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/af23c6-efec-491b-87cd-9faa62a1f178/1/5cn_8vjtDWWq0LlPgDby7hru6go.mft
File: 5cn_8vjtDWWq0LlPgDby7hru6go.mft (raw, json)
Hash identifier: x3gwqZWHSpam0gRYvw9988vOzk8N6/LvxdkQy1kEU5g=
Subject key identifier: 25:F9:26:B5:06:27:F9:B7:80:11:C5:59:A6:32:44:A4:3F:60:79:7C
Authority key identifier: E5:C9:FF:F2:F8:ED:0D:65:AA:D0:B9:4F:80:36:F2:EE:1A:EE:EA:0A
Certificate issuer: /CN=e5c9fff2f8ed0d65aad0b94f8036f2ee1aeeea0a
Certificate serial: 019CAA8F89F0C9793AA15769C64D5B5338BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5cn_8vjtDWWq0LlPgDby7hru6go.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/af23c6-efec-491b-87cd-9faa62a1f178/1/5cn_8vjtDWWq0LlPgDby7hru6go.mft
Manifest number: 168C
Signing time: Sun 01 Mar 2026 18:00:59 +0000
Manifest this update: Sun 01 Mar 2026 18:00:59 +0000
Manifest next update: Mon 02 Mar 2026 18:00:59 +0000
Files and hashes: 1: 5cn_8vjtDWWq0LlPgDby7hru6go.crl (hash: eKLGRXlh+XOlwOJ9qHYNet4B50j4kE52dCe3tbqeXNs=)
2: 660vFFGpn8clSWO6FY_HjESqHac.roa (hash: PavhF4oz19TrgmDV4DTkSyfBE4qBlY8WfjSQlelqWBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/af23c6-efec-491b-87cd-9faa62a1f178/1/5cn_8vjtDWWq0LlPgDby7hru6go.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/af23c6-efec-491b-87cd-9faa62a1f178/1/5cn_8vjtDWWq0LlPgDby7hru6go.mft
rsync://rpki.ripe.net/repository/DEFAULT/5cn_8vjtDWWq0LlPgDby7hru6go.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:89:f0:c9:79:3a:a1:57:69:c6:4d:5b:53:38:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5c9fff2f8ed0d65aad0b94f8036f2ee1aeeea0a
Validity
Not Before: Mar 1 18:00:59 2026 GMT
Not After : Mar 2 18:00:59 2026 GMT
Subject: CN=25f926b50627f9b78011c559a63244a43f60797c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:8d:c5:93:16:53:9f:26:99:88:14:e9:a4:78:
25:e3:65:44:89:85:74:d9:f0:75:57:de:c2:09:ab:
05:7c:69:bd:9b:6d:3f:aa:7d:f8:d1:41:0e:eb:82:
1a:8e:02:c5:51:f3:e9:2d:2b:11:14:bc:4c:b9:ca:
a6:95:13:5a:82:00:3b:76:45:9d:19:21:0e:5a:42:
1e:f9:f7:62:b3:de:52:2d:06:f6:e3:db:40:a3:9e:
26:4c:14:89:53:5c:e5:23:36:92:e6:f2:ed:4f:0d:
41:ad:45:a0:71:31:e4:f5:da:fe:31:35:75:e1:82:
4c:ad:14:e0:ef:32:7b:ff:b3:16:fa:34:ff:58:b1:
a1:af:75:42:d1:6b:b0:df:c0:56:49:a4:81:ba:3c:
8d:74:97:6d:7c:43:48:e6:12:17:e6:da:fc:0f:81:
ef:d5:1d:c9:38:ad:3d:84:71:30:31:e7:f1:93:31:
c1:68:2e:f8:39:15:7e:63:cc:8b:b1:41:8c:2f:a3:
67:eb:bd:bf:34:19:2b:bc:60:ec:81:9c:be:e5:82:
82:a9:9a:7b:4f:c7:5a:2e:f4:21:80:44:e9:65:9c:
58:6d:9f:5a:e6:e2:06:72:57:13:5f:54:03:d9:3e:
34:32:09:e6:59:4b:ae:da:d7:d9:2f:c1:bf:60:80:
39:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:F9:26:B5:06:27:F9:B7:80:11:C5:59:A6:32:44:A4:3F:60:79:7C
X509v3 Authority Key Identifier:
keyid:E5:C9:FF:F2:F8:ED:0D:65:AA:D0:B9:4F:80:36:F2:EE:1A:EE:EA:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5cn_8vjtDWWq0LlPgDby7hru6go.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/af23c6-efec-491b-87cd-9faa62a1f178/1/5cn_8vjtDWWq0LlPgDby7hru6go.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/af23c6-efec-491b-87cd-9faa62a1f178/1/5cn_8vjtDWWq0LlPgDby7hru6go.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:71:16:f0:56:9b:ae:70:37:23:08:75:b0:9c:8d:70:f8:64:
d9:4e:71:f0:b5:07:85:07:1d:bc:bc:a5:51:e3:65:40:8e:55:
e5:5b:60:de:72:90:87:99:ef:bc:ab:01:22:05:f7:fd:a3:90:
fa:88:46:da:36:01:91:a4:1b:71:be:a9:ac:25:d8:7d:f6:62:
b0:8b:ac:3b:de:c5:0c:be:6a:53:fd:ec:1a:b2:3b:71:39:c8:
2f:b0:44:44:bd:d9:cc:99:16:57:3a:d3:4c:46:c5:0e:f8:11:
26:b6:3d:5f:8f:a0:98:8c:86:13:eb:fe:e7:f8:ce:3d:0f:54:
09:3c:92:2a:29:55:97:d3:ca:01:12:08:6a:9e:69:d6:8b:16:
b9:4c:7c:19:62:c9:16:b7:59:13:86:12:7a:f4:1a:75:0b:fb:
ab:a1:58:58:0e:df:34:70:42:06:b9:58:96:44:a8:aa:25:44:
19:4b:00:c8:32:39:8a:1f:a8:d1:61:26:62:33:ae:50:c7:98:
d7:c4:74:2d:e0:56:8f:15:45:05:c1:8d:4b:bb:d6:5c:e3:bb:
0e:3b:fd:0e:d9:f9:32:e2:a1:35:bd:fd:71:3a:50:90:95:72:
b2:2d:66:18:33:44:fb:da:b5:2b:d9:d7:b7:d1:6b:0c:2c:23:
85:d8:fd:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:18:34 2026 by rpki-client