Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/5oBHj67Itn3f7OY1fPJc8sodhdA.mft
File: 5oBHj67Itn3f7OY1fPJc8sodhdA.mft (raw, json)
Hash identifier: W36rG/fjYilBBHkBoBozzcEwoYgll6waEO429m/luHg=
Subject key identifier: 36:86:9E:CF:38:B4:E1:D7:43:17:C3:85:8F:50:85:C4:44:1E:71:93
Authority key identifier: E6:80:47:8F:AE:C8:B6:7D:DF:EC:E6:35:7C:F2:5C:F2:CA:1D:85:D0
Certificate issuer: /CN=e680478faec8b67ddfece6357cf25cf2ca1d85d0
Certificate serial: 019CABD9DC738B23265120D15494CB94E36F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5oBHj67Itn3f7OY1fPJc8sodhdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/5oBHj67Itn3f7OY1fPJc8sodhdA.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 00:01:47 +0000
Manifest this update: Mon 02 Mar 2026 00:01:47 +0000
Manifest next update: Tue 03 Mar 2026 00:01:47 +0000
Files and hashes: 1: 5oBHj67Itn3f7OY1fPJc8sodhdA.crl (hash: 7/3gAJZKUsKgBRsnaLl+AhVvb4kGMH/lch5FIQMM11w=)
2: ymGU-blAl3Eiudw-0pPU5E8cWuM.roa (hash: sR3zp4LyEopkmIvV+/IzzZmry6sELnZ6ai0YOhaDCBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/5oBHj67Itn3f7OY1fPJc8sodhdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/5oBHj67Itn3f7OY1fPJc8sodhdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5oBHj67Itn3f7OY1fPJc8sodhdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:dc:73:8b:23:26:51:20:d1:54:94:cb:94:e3:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e680478faec8b67ddfece6357cf25cf2ca1d85d0
Validity
Not Before: Mar 2 00:01:47 2026 GMT
Not After : Mar 3 00:01:47 2026 GMT
Subject: CN=36869ecf38b4e1d74317c3858f5085c4441e7193
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:97:e9:4f:da:5c:ad:0f:cf:4a:81:5a:77:6c:
75:b9:f1:a6:ff:a1:65:4f:2c:41:99:14:78:09:3a:
e2:c5:1e:55:8f:e4:9e:d9:8f:4b:92:62:e0:31:52:
c6:d1:a2:67:af:e9:71:85:2a:fe:97:3c:f8:77:c3:
19:32:7b:62:53:cb:a7:7a:cb:e5:28:46:82:7c:45:
90:4e:c0:02:6d:ce:3d:c2:d9:0c:e7:a2:c2:d8:8b:
92:7f:04:3b:6f:6d:ea:b0:20:2e:55:17:ef:3b:7d:
0d:51:19:e0:3f:82:8e:79:a5:64:f4:00:3f:a9:21:
3b:61:a5:b7:b6:96:af:a3:19:00:f0:55:4b:e2:43:
0f:e5:82:db:6e:1a:28:2b:50:09:bf:42:10:e3:ca:
8a:6c:57:2c:47:89:79:60:33:bb:c9:b9:f8:1e:d4:
f8:7d:5d:dc:61:6a:77:6b:3f:8e:71:a9:90:63:30:
dd:81:93:2d:ec:1b:cb:90:37:68:19:30:91:70:5b:
f7:04:6f:a5:4f:4c:91:0f:46:ae:16:43:4c:9c:cd:
7a:1e:13:df:64:17:c4:6d:38:74:f4:34:ae:ea:24:
f4:b8:59:7c:ed:ca:a8:a6:58:3e:ae:dd:25:dd:8a:
41:43:81:3c:a2:0d:99:e8:45:a3:91:3c:75:83:c7:
d8:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:86:9E:CF:38:B4:E1:D7:43:17:C3:85:8F:50:85:C4:44:1E:71:93
X509v3 Authority Key Identifier:
keyid:E6:80:47:8F:AE:C8:B6:7D:DF:EC:E6:35:7C:F2:5C:F2:CA:1D:85:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5oBHj67Itn3f7OY1fPJc8sodhdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/5oBHj67Itn3f7OY1fPJc8sodhdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/5oBHj67Itn3f7OY1fPJc8sodhdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:db:07:db:8b:23:13:57:ef:04:d4:82:38:72:2a:71:7d:e5:
e6:29:b4:ff:1c:c8:bb:a8:d9:cc:d4:ba:90:9f:39:0e:f6:ee:
17:12:f9:08:2e:54:e3:57:3e:35:be:34:d4:c6:1a:93:aa:cf:
5d:37:a4:59:6d:59:ac:7e:40:f8:79:dc:a8:03:1e:99:d1:f9:
6c:62:00:2f:78:99:90:35:d4:f7:aa:2e:29:e9:97:42:e7:45:
47:7d:a1:57:ee:f7:b2:4f:58:fe:56:5d:27:7e:14:2b:c0:b5:
a7:dc:d0:d6:83:67:37:17:b5:b7:8f:10:53:fd:99:99:12:41:
d7:e7:b0:21:77:57:a5:c2:c1:8c:22:2b:a5:db:df:f0:56:20:
50:10:58:6b:54:91:42:0a:35:07:b7:3d:2b:64:95:b1:bc:41:
0c:29:30:83:96:47:99:63:31:5a:84:4b:61:28:19:58:55:4e:
f2:67:23:35:a2:b2:57:49:ba:2c:04:99:bb:9c:fc:3a:ae:54:
33:54:05:81:f2:ee:e8:59:f2:a9:0b:3d:74:aa:14:94:af:69:
00:3d:5e:73:60:fa:b6:b8:bb:c3:ad:ca:19:2b:69:72:01:d1:
9c:86:0d:72:df:85:a7:6e:31:70:d8:ba:57:0d:ac:6f:ab:0a:
35:12:83:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:36:40 2026 by rpki-client