Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/2c5af2-0937-4f40-88e0-1104841d374e/1/R5di6I2PZ_rUqgWaG4tG-kzHqJM.mft
File: R5di6I2PZ_rUqgWaG4tG-kzHqJM.mft (raw, json)
Hash identifier: IGd9kT1k9guIWaWyt9R+15LPgTVJ+fKuoTG/TldR+8A=
Subject key identifier: 6B:49:CA:EE:02:7A:68:B5:3E:3F:D6:79:DB:2A:61:D9:E5:0E:D1:58
Authority key identifier: 47:97:62:E8:8D:8F:67:FA:D4:AA:05:9A:1B:8B:46:FA:4C:C7:A8:93
Certificate issuer: /CN=479762e88d8f67fad4aa059a1b8b46fa4cc7a893
Certificate serial: 019CAE35312B35C85A20180E6E69586E5E58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R5di6I2PZ_rUqgWaG4tG-kzHqJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/2c5af2-0937-4f40-88e0-1104841d374e/1/R5di6I2PZ_rUqgWaG4tG-kzHqJM.mft
Manifest number: 1294
Signing time: Mon 02 Mar 2026 11:00:47 +0000
Manifest this update: Mon 02 Mar 2026 11:00:47 +0000
Manifest next update: Tue 03 Mar 2026 11:00:47 +0000
Files and hashes: 1: DpOMCYeoEFCfPd4BCOC7ze9jGAQ.roa (hash: OOgXzfysjVkL+7heZlt7KwaUVEvk1p9KU0fRwZotWCk=)
2: R5di6I2PZ_rUqgWaG4tG-kzHqJM.crl (hash: 85UydE2zjtgPYtUlOPlM9IMWHOL3YRxqGL+K0Uz9sMg=)
3: X_ToRWHY2cWSKfb50-DFaa8o0oM.roa (hash: SzgSGTl4m6DpdjK/TPbLIKkkCLRq126cbU6uLGRTydk=)
4: XuSlumrwrkZbRH5BoN1dVcCYWOY.roa (hash: VIFbEGJSRhE0l9Itky/zbl7aHo5M6a4eOekzZMGZzxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/2c5af2-0937-4f40-88e0-1104841d374e/1/R5di6I2PZ_rUqgWaG4tG-kzHqJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/2c5af2-0937-4f40-88e0-1104841d374e/1/R5di6I2PZ_rUqgWaG4tG-kzHqJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/R5di6I2PZ_rUqgWaG4tG-kzHqJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 11:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:31:2b:35:c8:5a:20:18:0e:6e:69:58:6e:5e:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=479762e88d8f67fad4aa059a1b8b46fa4cc7a893
Validity
Not Before: Mar 2 11:00:47 2026 GMT
Not After : Mar 3 11:00:47 2026 GMT
Subject: CN=6b49caee027a68b53e3fd679db2a61d9e50ed158
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d6:7a:37:d3:89:71:02:3b:0c:f8:0c:1e:4a:
39:4b:0b:cf:fb:02:9c:0a:bd:25:db:4e:12:9e:e1:
4c:d5:81:94:d1:5b:66:ff:c2:5e:62:1d:d4:d2:a7:
ab:cd:1b:cd:b4:c5:52:3b:e2:5f:77:f4:be:82:90:
e8:d1:a5:92:0b:08:f7:d9:c8:7d:21:b5:69:70:2e:
c6:60:d3:02:b3:dc:b1:32:fe:6d:95:f0:ec:42:0b:
71:c5:ce:29:6a:b1:ee:19:d5:61:81:b1:5e:93:83:
62:cc:2e:e0:d9:df:49:b9:04:83:99:1b:3f:05:35:
c5:18:89:d2:af:81:e0:55:ed:dc:0f:ce:19:ee:53:
f6:9d:b7:fb:28:69:d6:df:0a:8e:7d:5e:53:4b:39:
3a:7a:e4:96:6e:b3:d7:56:cc:fb:31:06:bc:86:53:
b7:c7:c2:59:95:d7:11:dc:fd:c5:52:b6:7b:72:0e:
19:c5:ee:50:6a:03:84:aa:9b:f0:eb:3f:ba:a9:62:
28:2f:2e:0d:b8:1c:09:50:b8:b2:55:5e:22:21:d0:
c1:b7:00:4d:0d:d2:d3:dc:29:77:f9:72:29:29:00:
76:94:e1:8e:ab:bb:a0:3c:5c:84:9c:8b:a4:a9:2c:
3b:0d:05:8e:6d:43:e5:fc:71:94:a4:e5:8a:24:d0:
af:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:49:CA:EE:02:7A:68:B5:3E:3F:D6:79:DB:2A:61:D9:E5:0E:D1:58
X509v3 Authority Key Identifier:
keyid:47:97:62:E8:8D:8F:67:FA:D4:AA:05:9A:1B:8B:46:FA:4C:C7:A8:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R5di6I2PZ_rUqgWaG4tG-kzHqJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/2c5af2-0937-4f40-88e0-1104841d374e/1/R5di6I2PZ_rUqgWaG4tG-kzHqJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/2c5af2-0937-4f40-88e0-1104841d374e/1/R5di6I2PZ_rUqgWaG4tG-kzHqJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:2b:91:02:18:8d:c7:aa:57:07:26:5a:a6:f0:8b:30:12:d4:
ae:75:14:a4:38:ed:db:ea:29:42:09:dd:46:7d:61:ce:40:b0:
f7:95:23:89:80:82:00:bc:8f:39:0a:eb:c0:7f:d3:3a:61:d7:
2e:97:e2:bf:ce:d6:81:43:b9:03:89:e2:5c:ec:21:96:23:fc:
60:d0:88:53:c9:ee:ef:c8:2e:37:1d:70:ef:c4:50:32:2b:35:
57:86:11:5d:61:73:da:38:30:5e:fe:25:0c:80:a3:b4:d7:49:
6d:a2:80:7f:24:e0:97:86:b4:a6:5a:71:c1:3d:aa:b6:44:33:
9c:fe:63:d2:8a:c4:e0:3b:7a:41:58:a2:38:72:98:b0:69:62:
2d:22:a7:33:b4:9c:74:c4:57:10:07:64:ee:38:da:bc:a3:92:
09:7a:18:81:6f:63:03:18:48:30:96:d4:93:32:cd:1a:af:cb:
82:25:e5:e1:01:8e:21:5c:f5:5a:84:bd:f8:73:47:ee:b4:56:
bc:50:9b:0a:85:43:5f:17:60:63:36:ab:c7:db:13:34:0e:68:
aa:a8:d9:6d:6e:fa:cc:92:57:57:8e:4c:c3:99:62:b0:77:68:
c2:ea:39:7c:ba:9d:45:aa:d1:6e:85:3e:39:18:56:6a:15:7f:
b2:19:70:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:45:20 2026 by rpki-client