Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.mft
File: 5f4C8qp2xAK312oRTcdzXV-TW4g.mft (raw, json)
Hash identifier: Ix+/wjqgZmh99D7ABUy0muXE7dXRfDXOUtJbuECsljs=
Subject key identifier: 70:C8:C6:3F:B4:1D:4D:8F:90:43:D4:10:0A:35:76:5D:05:E2:DD:4F
Authority key identifier: E5:FE:02:F2:AA:76:C4:02:B7:D7:6A:11:4D:C7:73:5D:5F:93:5B:88
Certificate issuer: /CN=e5fe02f2aa76c402b7d76a114dc7735d5f935b88
Certificate serial: 019CAC46A4FC74BC38AD565922A823D82584
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5f4C8qp2xAK312oRTcdzXV-TW4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 02:00:36 +0000
Manifest this update: Mon 02 Mar 2026 02:00:36 +0000
Manifest next update: Tue 03 Mar 2026 02:00:36 +0000
Files and hashes: 1: 5f4C8qp2xAK312oRTcdzXV-TW4g.crl (hash: BDYfTn5jFWxFq8aZduQSrlFbsSWcUeX395jJ9mEfqXY=)
2: PRYnC3oeTfy-W24rdCg_1_UYkfk.roa (hash: WhAD+KHHEL29n/DvCO+VMSo/5s8yhsaBcbSWYfdk1pc=)
3: ncOjKzjAJZ0rXQZZexy9a5HthBQ.roa (hash: fH171kjhrP2+SN/YSbQ/CikCGMzhjuGR7vctJ9ttA9I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/5f4C8qp2xAK312oRTcdzXV-TW4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:a4:fc:74:bc:38:ad:56:59:22:a8:23:d8:25:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5fe02f2aa76c402b7d76a114dc7735d5f935b88
Validity
Not Before: Mar 2 02:00:36 2026 GMT
Not After : Mar 3 02:00:36 2026 GMT
Subject: CN=70c8c63fb41d4d8f9043d4100a35765d05e2dd4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7d:46:d4:f7:fe:9f:71:ac:77:5b:da:55:74:
8b:ff:7d:e6:c0:37:f6:3f:1b:91:18:a4:30:5f:ed:
f1:cb:61:09:db:43:75:90:0f:77:3e:7a:25:93:fc:
db:12:a9:12:16:bd:ac:b2:47:33:6f:f2:dd:bb:ff:
e1:f1:10:d7:35:3c:6c:0a:78:5e:b4:01:7a:15:f1:
a9:6f:28:bd:2b:4f:53:eb:44:5f:6a:23:42:e5:fb:
e4:95:98:5e:42:71:33:2a:bd:10:a3:08:16:45:eb:
8e:8f:c9:da:41:f5:86:1b:c4:0d:2e:69:c1:35:d9:
f0:78:9a:e0:bd:1e:75:22:00:f1:ae:ba:35:8e:9c:
d2:95:77:ed:92:b9:67:67:75:f9:bf:50:d4:b0:eb:
63:6d:73:5d:0e:c7:a9:2c:85:ea:5a:f1:a5:3a:6d:
4d:26:8d:c7:61:40:6e:52:f3:42:a5:36:1e:7d:cf:
6e:13:c4:7d:0b:3b:f9:c6:b9:ee:08:d8:32:4e:60:
40:9f:8a:e5:8b:55:ba:36:39:42:5e:b7:5d:ac:b2:
5f:79:1e:cd:27:ef:33:8a:55:90:b4:cd:15:be:9d:
cc:67:9d:d0:f1:44:c7:05:12:df:87:13:48:5c:e8:
df:f7:4c:84:8b:e1:7e:20:2d:79:45:6c:31:9d:f3:
a8:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:C8:C6:3F:B4:1D:4D:8F:90:43:D4:10:0A:35:76:5D:05:E2:DD:4F
X509v3 Authority Key Identifier:
keyid:E5:FE:02:F2:AA:76:C4:02:B7:D7:6A:11:4D:C7:73:5D:5F:93:5B:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f4C8qp2xAK312oRTcdzXV-TW4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:e7:2e:8b:79:97:4e:93:c2:d3:7e:4d:75:84:6b:bc:7e:83:
10:e3:b1:99:b0:76:02:20:ce:1f:67:0b:14:2a:fb:e8:f8:76:
1d:db:55:18:0a:8d:27:d5:8c:ca:6b:5c:93:7f:08:d3:9a:ce:
2c:4f:7a:62:d2:8f:5d:2b:3d:c9:30:60:f1:2e:72:93:7f:20:
fe:c3:6c:4f:66:be:13:32:99:62:79:5c:b8:5e:e4:29:8d:59:
55:c5:5f:1a:95:00:91:6d:1e:2f:f6:51:b6:c2:e8:fe:74:e2:
0a:fd:fe:67:95:92:b8:82:89:c5:18:78:24:ee:97:d3:ad:56:
f3:5d:c1:da:07:07:91:47:02:51:4e:49:2a:dd:47:25:51:9f:
1b:59:2c:c3:a2:6d:f7:85:38:bc:ad:02:5a:0c:bf:50:73:7c:
84:db:c7:83:41:c9:94:01:83:a3:0c:44:6f:62:19:9f:90:16:
3e:f8:66:fd:e5:b4:ae:a0:6c:4c:af:d3:a7:2d:60:bb:7a:63:
b0:4f:8d:3e:12:8e:57:03:ba:bb:d6:04:98:ff:c4:73:d6:39:
08:fd:86:21:ef:cf:9e:40:14:39:41:5a:ba:9a:65:74:11:af:
33:da:f9:8c:66:3f:3b:82:95:40:84:b2:9b:ff:c7:fe:f4:82:
43:69:25:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:03:23 2026 by rpki-client