Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.mft
File: 5kaCrbAjjMdy0cW0mGx6M5hjZKA.mft (raw, json)
Hash identifier: ZCGaX89jWwUZniW3v75lR/Z8HN3KJNH7G+ht1mh0R30=
Subject key identifier: 91:BA:2C:D1:C5:35:E4:00:6B:9C:7C:50:AD:6A:CF:32:59:14:53:68
Authority key identifier: E6:46:82:AD:B0:23:8C:C7:72:D1:C5:B4:98:6C:7A:33:98:63:64:A0
Certificate issuer: /CN=e64682adb0238cc772d1c5b4986c7a33986364a0
Certificate serial: 019CAE35D210371949535695FF0809E0C66C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5kaCrbAjjMdy0cW0mGx6M5hjZKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.mft
Manifest number: 184A
Signing time: Mon 02 Mar 2026 11:01:28 +0000
Manifest this update: Mon 02 Mar 2026 11:01:28 +0000
Manifest next update: Tue 03 Mar 2026 11:01:28 +0000
Files and hashes: 1: 5kaCrbAjjMdy0cW0mGx6M5hjZKA.crl (hash: ug1u8c8hkjzEhYEzJ+jFhXhpELOAL9ftEeYY80m0qeE=)
2: e2x_8PpcIHOJJPXsPBjrkhlkVvo.roa (hash: QXzcET22GY2j2zVB7MrhPNOcYIzpk5pDfm9vuuXWqYk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5kaCrbAjjMdy0cW0mGx6M5hjZKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:d2:10:37:19:49:53:56:95:ff:08:09:e0:c6:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e64682adb0238cc772d1c5b4986c7a33986364a0
Validity
Not Before: Mar 2 11:01:28 2026 GMT
Not After : Mar 3 11:01:28 2026 GMT
Subject: CN=91ba2cd1c535e4006b9c7c50ad6acf3259145368
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:3f:5d:e2:c8:f3:1e:aa:f1:93:63:50:f2:67:
a9:75:9b:ab:9c:e9:4c:05:ce:e2:2f:da:9a:c9:ca:
c4:11:00:e6:01:94:7f:02:b1:f2:e5:bf:f5:2c:0c:
4d:5e:dd:04:5a:62:f0:1e:4f:15:7d:b8:01:76:1d:
4d:67:c2:60:3b:3f:9c:fa:53:9d:ed:c8:28:1e:30:
d8:95:17:ae:39:85:d0:54:f0:86:1d:97:07:16:ab:
9c:10:b4:90:03:36:64:79:f5:b3:d7:e2:ca:9d:e7:
8b:cd:a1:47:c5:cf:2a:3a:2f:6a:5c:a9:8f:4d:8c:
88:24:9d:42:7d:90:42:53:7a:ec:6c:8c:2d:d7:75:
a9:f5:c2:08:b5:ec:62:f7:61:f4:29:e2:f2:80:3c:
a6:ed:e4:08:0d:30:51:47:c3:79:20:ee:75:85:6e:
df:47:92:72:fb:c7:19:1b:1c:dd:db:c3:78:93:c2:
ec:4c:1f:45:19:c4:83:9d:e5:8b:b0:f5:c2:9a:2c:
94:fe:86:bd:ac:9f:0c:f5:6b:db:b0:a2:0a:a2:d4:
dc:e7:55:e9:01:37:a8:fa:50:13:91:40:17:d3:4b:
45:99:6e:57:71:8a:b1:7a:c5:4b:c1:96:c2:5a:1a:
02:7d:1d:57:45:89:d1:8f:f8:73:d9:1b:d9:c9:10:
90:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:BA:2C:D1:C5:35:E4:00:6B:9C:7C:50:AD:6A:CF:32:59:14:53:68
X509v3 Authority Key Identifier:
keyid:E6:46:82:AD:B0:23:8C:C7:72:D1:C5:B4:98:6C:7A:33:98:63:64:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5kaCrbAjjMdy0cW0mGx6M5hjZKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:fb:76:23:c8:53:06:0a:5f:9e:a7:f4:9c:46:a8:06:1d:a9:
09:79:e7:b2:dc:4a:7c:92:d5:b7:a1:9a:e0:90:28:15:d8:5f:
27:56:3e:e2:a8:c4:d3:6e:f3:98:61:c6:81:77:3a:ee:d5:b2:
8c:fc:b6:99:14:84:ca:5e:68:0d:be:06:51:d3:d4:ab:52:2c:
bf:85:4a:60:d7:f4:0e:d3:b7:09:22:15:17:1f:b7:32:61:4c:
34:9b:91:6e:06:9b:38:d1:96:e7:50:09:d7:e0:6c:5a:af:bc:
71:14:a3:f3:23:04:f4:83:ac:2d:19:ef:1f:6d:3e:4c:76:e6:
59:82:99:aa:2b:bb:96:85:6f:62:ab:c7:b4:f7:c1:3a:4a:b5:
43:85:c2:0b:80:11:f5:7f:d0:d6:0c:f7:e7:d5:b2:86:3b:5d:
8e:f7:ea:ac:16:77:eb:55:5e:84:c4:0e:a7:5d:f6:7c:2c:66:
14:5a:a5:fe:78:fb:55:c4:10:4e:19:9d:ca:b3:54:92:16:b9:
9c:a5:a9:43:1f:2a:40:c1:48:d0:34:13:70:7f:28:4f:3e:e5:
e0:28:d0:17:4f:64:da:ff:10:e2:0a:10:93:6d:63:88:73:03:
2a:b4:75:9b:4d:2a:a0:26:a3:5f:f9:14:82:78:d0:ff:c7:79:
0c:e3:7e:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:48:36 2026 by rpki-client