Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/c4f437-def7-49c7-bf0b-ba06429f42f5/1/tHRnMbQxArluui3l04w9zShLj-Y.mft
File: tHRnMbQxArluui3l04w9zShLj-Y.mft (raw, json)
Hash identifier: cinSOCmzFOABtEvOGtCVuFoBf0KpY7tQnui7LM1K8AU=
Subject key identifier: DC:70:22:62:68:12:08:46:3B:9D:91:20:6C:B5:46:D9:92:4C:64:1E
Authority key identifier: B4:74:67:31:B4:31:02:B9:6E:BA:2D:E5:D3:8C:3D:CD:28:4B:8F:E6
Certificate issuer: /CN=b4746731b43102b96eba2de5d38c3dcd284b8fe6
Certificate serial: 019CABA1CDCE02D08F53D5C130D2141312B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tHRnMbQxArluui3l04w9zShLj-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/c4f437-def7-49c7-bf0b-ba06429f42f5/1/tHRnMbQxArluui3l04w9zShLj-Y.mft
Manifest number: 5E
Signing time: Sun 01 Mar 2026 23:00:33 +0000
Manifest this update: Sun 01 Mar 2026 23:00:33 +0000
Manifest next update: Mon 02 Mar 2026 23:00:33 +0000
Files and hashes: 1: fpHEmukzCf8sEZN1-1ROK3M58Hg.roa (hash: VqNpGMHhla64QbrRVajda2AOnqhRXGh5QpCi8IhSSCc=)
2: tHRnMbQxArluui3l04w9zShLj-Y.crl (hash: scb6i3dzKHcWg50A/y4Jz7VyKuVq1qpN0Xtz2c3P4rY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/c4f437-def7-49c7-bf0b-ba06429f42f5/1/tHRnMbQxArluui3l04w9zShLj-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/c4f437-def7-49c7-bf0b-ba06429f42f5/1/tHRnMbQxArluui3l04w9zShLj-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/tHRnMbQxArluui3l04w9zShLj-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:cd:ce:02:d0:8f:53:d5:c1:30:d2:14:13:12:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4746731b43102b96eba2de5d38c3dcd284b8fe6
Validity
Not Before: Mar 1 23:00:33 2026 GMT
Not After : Mar 2 23:00:33 2026 GMT
Subject: CN=dc702262681208463b9d91206cb546d9924c641e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5d:d6:12:5b:f8:ef:8b:33:c0:bf:ef:c3:3f:
e3:0d:39:31:b5:af:67:78:8d:aa:6e:d8:03:c6:e6:
23:5b:44:de:bf:0a:6c:8b:82:33:c5:74:68:98:85:
86:70:79:ff:18:ed:5a:e3:c7:88:7a:a0:ac:02:e8:
c6:a6:9c:ae:d9:33:e6:ae:b4:b4:1b:74:39:8b:cc:
4f:ae:e1:08:8e:01:00:f5:e5:85:02:fd:44:0c:ef:
41:66:81:e3:ea:22:c6:fc:ce:7c:13:9a:51:78:a9:
85:68:bc:ef:d9:1c:c4:8e:c3:cd:42:ae:ac:24:56:
bf:76:c4:67:3a:88:ce:02:07:8c:95:9c:c9:01:15:
c6:6c:f4:4c:b5:a6:6a:c9:77:91:54:b1:38:72:10:
c4:07:9b:e9:f8:fb:31:7b:27:e1:94:39:68:b5:ad:
ea:e3:df:6b:e8:b8:0e:6b:4e:4d:dd:05:e0:e7:b8:
d4:36:27:64:3e:a9:1b:5a:1d:bb:85:d2:57:59:78:
fc:cd:93:54:24:88:5f:f4:af:47:4c:ac:58:7d:43:
9d:b5:30:d1:97:d8:d3:a0:8f:97:01:a4:44:26:8c:
20:47:16:25:63:fc:22:c1:38:00:10:db:02:fe:c8:
6d:0a:19:47:13:41:87:b4:92:3c:78:b9:b7:44:8d:
63:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:70:22:62:68:12:08:46:3B:9D:91:20:6C:B5:46:D9:92:4C:64:1E
X509v3 Authority Key Identifier:
keyid:B4:74:67:31:B4:31:02:B9:6E:BA:2D:E5:D3:8C:3D:CD:28:4B:8F:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tHRnMbQxArluui3l04w9zShLj-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c4f437-def7-49c7-bf0b-ba06429f42f5/1/tHRnMbQxArluui3l04w9zShLj-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c4f437-def7-49c7-bf0b-ba06429f42f5/1/tHRnMbQxArluui3l04w9zShLj-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:81:65:7d:06:50:c0:30:94:d9:aa:95:ef:38:64:76:17:e0:
4c:ab:aa:f3:4e:e5:3e:65:2e:6c:b2:c9:b3:e8:bf:03:ae:4b:
2a:08:96:b2:5d:57:1d:60:3c:04:19:ef:ac:73:22:75:d5:50:
39:4e:34:02:28:2d:99:47:0d:70:35:da:0b:02:67:1d:5e:f4:
d3:26:54:a8:38:3f:de:3a:f3:60:2b:c6:d9:bd:99:cd:cc:8c:
2b:67:21:c5:38:fa:74:ae:e2:9c:e1:10:ae:b0:2c:f0:0c:94:
6b:89:07:1f:83:a9:30:a0:32:9a:c2:64:ab:4e:7a:8b:8e:74:
cd:e0:33:0f:5c:99:77:32:f3:bd:0f:78:0d:02:50:97:d5:f9:
a3:2e:de:e5:d4:6a:8f:94:f6:63:39:e9:e3:dd:8c:60:a5:55:
6d:9d:9f:f8:ef:79:0d:ed:40:62:82:67:7a:17:f4:43:a4:a1:
11:30:58:8a:95:d2:4f:fd:e4:52:71:e7:82:fd:7e:c3:ab:83:
b4:e0:80:94:85:84:6f:f7:66:11:dc:23:5c:01:cd:09:b5:56:
c4:6f:95:06:18:79:4b:79:11:9e:de:6b:9e:9c:ed:e7:1d:1b:
8a:cd:c6:82:c8:ad:a5:cf:a9:02:25:87:eb:87:c2:eb:75:53:
36:7e:6c:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:47:40 2026 by rpki-client