Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/83c00e-f414-489d-9470-c693249651d5/1/5PFY7_xrOIKiWQweaQasoQjhjsI.mft
File: 5PFY7_xrOIKiWQweaQasoQjhjsI.mft (raw, json)
Hash identifier: Q6reQR+df1vwx8m68gtZ/gO8g6n9Ba1FXx89OAGUGHQ=
Subject key identifier: 57:71:4A:C8:49:A4:B6:1B:E3:8E:3C:F8:85:F8:F5:3E:73:E2:FA:5E
Authority key identifier: E4:F1:58:EF:FC:6B:38:82:A2:59:0C:1E:69:06:AC:A1:08:E1:8E:C2
Certificate issuer: /CN=e4f158effc6b3882a2590c1e6906aca108e18ec2
Certificate serial: 019CAE6BE30E53DCE12A91BB739AEBA04D55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5PFY7_xrOIKiWQweaQasoQjhjsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/83c00e-f414-489d-9470-c693249651d5/1/5PFY7_xrOIKiWQweaQasoQjhjsI.mft
Manifest number: 0E4F
Signing time: Mon 02 Mar 2026 12:00:31 +0000
Manifest this update: Mon 02 Mar 2026 12:00:31 +0000
Manifest next update: Tue 03 Mar 2026 12:00:31 +0000
Files and hashes: 1: 5PFY7_xrOIKiWQweaQasoQjhjsI.crl (hash: PehcbIO9wIrVs8tV6vSnwOHRCIaTvWp8ROeAQMACMv8=)
2: FWnshijOb2oWucJC3yydoFuicl8.roa (hash: 2lTRHLJOIG5W8kGboAw1P9Vclv6xoLbOBwTEH/U1Buo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/83c00e-f414-489d-9470-c693249651d5/1/5PFY7_xrOIKiWQweaQasoQjhjsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/83c00e-f414-489d-9470-c693249651d5/1/5PFY7_xrOIKiWQweaQasoQjhjsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5PFY7_xrOIKiWQweaQasoQjhjsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 12:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:6b:e3:0e:53:dc:e1:2a:91:bb:73:9a:eb:a0:4d:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4f158effc6b3882a2590c1e6906aca108e18ec2
Validity
Not Before: Mar 2 12:00:31 2026 GMT
Not After : Mar 3 12:00:31 2026 GMT
Subject: CN=57714ac849a4b61be38e3cf885f8f53e73e2fa5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:78:4e:16:e9:56:cf:b5:a0:d6:5b:27:22:b1:
f3:95:5a:dc:a3:03:45:c3:fa:cb:d2:4a:37:16:39:
f1:0f:ef:4c:20:b9:f7:89:f3:68:a5:f7:8c:97:81:
fb:c8:03:9f:9a:76:14:db:03:ed:74:0c:1f:96:ac:
aa:44:3d:65:ef:2b:bd:6d:f6:1a:9d:95:7b:4a:0e:
0f:83:21:30:da:3c:43:3a:42:99:e0:9b:9c:36:76:
4f:2c:4d:7d:ec:2a:25:27:5a:d5:8d:94:bc:23:d6:
11:f0:cf:d0:37:bf:37:d0:a8:0c:d3:b2:6e:b6:b1:
10:ee:4f:ed:37:ed:fc:c5:b3:57:78:7e:bf:70:c9:
a1:30:e3:07:30:02:8f:e3:f3:a0:33:8f:53:87:f5:
5c:73:01:07:1a:cc:7d:1d:cd:f8:d7:c1:83:24:32:
e7:9d:01:6c:05:29:f3:50:ea:18:f7:7b:32:f2:db:
6e:39:ea:22:89:36:b7:b5:12:df:0a:5f:53:c2:10:
f3:ab:d9:46:cf:39:b8:30:f7:2b:a1:64:07:67:50:
e0:2b:c4:25:7d:21:fb:fc:e1:92:d2:81:32:74:fc:
64:ef:d8:16:75:9f:d0:d5:4f:10:bd:5e:b9:e1:50:
1f:b0:09:d9:42:5b:ab:0f:01:a2:af:70:c4:5c:3d:
84:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:71:4A:C8:49:A4:B6:1B:E3:8E:3C:F8:85:F8:F5:3E:73:E2:FA:5E
X509v3 Authority Key Identifier:
keyid:E4:F1:58:EF:FC:6B:38:82:A2:59:0C:1E:69:06:AC:A1:08:E1:8E:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5PFY7_xrOIKiWQweaQasoQjhjsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/83c00e-f414-489d-9470-c693249651d5/1/5PFY7_xrOIKiWQweaQasoQjhjsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/83c00e-f414-489d-9470-c693249651d5/1/5PFY7_xrOIKiWQweaQasoQjhjsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:dc:e0:65:65:63:5d:31:70:08:e4:6a:15:bb:5f:e4:8a:da:
8e:9e:8d:c3:55:48:de:41:a5:d0:b7:aa:7a:ba:ce:01:34:45:
d3:78:1c:26:06:90:63:24:63:cc:d3:45:46:a9:f2:94:f6:69:
22:05:b3:1a:4b:38:9f:ba:ba:47:7c:42:e0:47:67:8d:13:44:
9e:41:f2:71:49:2b:5e:44:0c:cd:f2:67:ae:a3:ed:32:b9:19:
d1:52:ec:f5:e6:c1:46:05:a8:0d:ea:99:9d:42:8d:a7:41:80:
13:14:d6:fd:71:ae:01:47:ad:52:7d:39:33:69:78:ed:7f:3b:
e8:88:c5:96:eb:dc:34:4f:44:b0:1c:e2:4b:ed:21:91:dc:9b:
5b:be:8b:e4:6d:f7:9c:fe:ef:8d:b3:c2:c4:8a:d6:89:bc:cf:
cf:a0:f2:9e:e9:3a:79:c0:91:37:ef:b7:c5:b3:ce:2f:21:43:
a5:b5:4f:89:c1:c0:99:2a:9f:bf:58:f5:5b:30:e6:43:ee:3c:
73:c3:15:6d:be:38:bb:cb:84:20:db:75:3e:78:a0:31:ad:fc:
b7:de:5f:98:6e:e6:b7:16:64:76:d5:55:8d:36:07:27:39:7f:
4c:16:b7:30:9b:86:86:b4:a7:cf:88:01:0b:e1:12:5d:4a:83:
db:6a:20:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:30:31 2026 by rpki-client