Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/68bff6-7b2c-4ecf-8006-ed14af6db888/1/5oaWVQmmScUIq4q3L3JXvvNfeTA.mft
File: 5oaWVQmmScUIq4q3L3JXvvNfeTA.mft (raw, json)
Hash identifier: wBJMTBuyrIzywIHFa7yJgsUfH6/KKdzV98NqfyF6doY=
Subject key identifier: 41:B7:84:DA:CC:6D:D1:B4:9D:CB:12:13:4B:59:C7:FF:BA:E2:E9:A2
Authority key identifier: E6:86:96:55:09:A6:49:C5:08:AB:8A:B7:2F:72:57:BE:F3:5F:79:30
Certificate issuer: /CN=e686965509a649c508ab8ab72f7257bef35f7930
Certificate serial: 019CAF10E89D4DDF34914FB07757C952FBEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5oaWVQmmScUIq4q3L3JXvvNfeTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/68bff6-7b2c-4ecf-8006-ed14af6db888/1/5oaWVQmmScUIq4q3L3JXvvNfeTA.mft
Manifest number: D1
Signing time: Mon 02 Mar 2026 15:00:46 +0000
Manifest this update: Mon 02 Mar 2026 15:00:46 +0000
Manifest next update: Tue 03 Mar 2026 15:00:46 +0000
Files and hashes: 1: 5oaWVQmmScUIq4q3L3JXvvNfeTA.crl (hash: 7wyPurut2N7oZD0Su3UoNM8yM27hCcd57HOmgxJUxMg=)
2: HW91ceRJgWG3iZvp7l-CZ4g114o.roa (hash: DJW7zDRRrxF8a0KLlMx4QW/WpXaZuql+x/3IqGrDfJE=)
3: MHca-Spbwu4KckiWw0Dq8WRDlXI.roa (hash: 1Fh8PbvTtxhEEhmRRroTAZu9epm44Y5y/MNbSvWf+o8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/68bff6-7b2c-4ecf-8006-ed14af6db888/1/5oaWVQmmScUIq4q3L3JXvvNfeTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/68bff6-7b2c-4ecf-8006-ed14af6db888/1/5oaWVQmmScUIq4q3L3JXvvNfeTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5oaWVQmmScUIq4q3L3JXvvNfeTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:10:e8:9d:4d:df:34:91:4f:b0:77:57:c9:52:fb:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e686965509a649c508ab8ab72f7257bef35f7930
Validity
Not Before: Mar 2 15:00:46 2026 GMT
Not After : Mar 3 15:00:46 2026 GMT
Subject: CN=41b784dacc6dd1b49dcb12134b59c7ffbae2e9a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f9:1d:26:34:78:55:c4:94:05:e2:9a:43:fa:
e3:ca:b7:3c:f7:b9:32:5d:a8:b6:e5:7e:cc:84:82:
75:eb:d5:f4:22:65:a2:57:55:dd:f6:74:0e:5e:a9:
af:79:da:09:fd:56:53:45:7b:1e:be:d5:a8:aa:eb:
84:9c:a6:8e:7e:ec:93:cc:27:b8:50:8c:a0:3b:48:
8a:81:73:b6:f6:41:c0:70:33:6d:5d:1f:13:6b:11:
6b:58:8e:8d:aa:d9:f8:8b:49:15:ad:51:45:95:86:
db:bc:0c:b8:d6:eb:d0:37:bb:bc:31:9a:50:db:de:
fe:22:42:5f:c8:5a:76:f0:09:04:d6:e8:ee:59:f9:
4a:da:ef:d4:08:39:e6:59:51:ae:58:c2:f1:5e:af:
ea:1e:da:a9:34:60:e8:5d:8e:22:f4:e6:af:06:f4:
b9:c1:62:02:72:0e:80:96:b9:d3:40:f9:01:84:a1:
6d:e8:12:ad:1d:78:af:ac:4f:4c:dc:12:6e:e8:c0:
e9:2e:a7:09:de:3a:45:69:37:b3:9c:0d:42:a0:0e:
3b:a2:32:8a:41:b3:aa:cd:17:f2:71:62:5d:46:ec:
04:67:ad:e4:74:a9:82:ba:ca:ed:34:7d:75:41:0c:
45:cb:95:ac:a9:93:21:31:7e:33:35:a4:14:04:ec:
86:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:B7:84:DA:CC:6D:D1:B4:9D:CB:12:13:4B:59:C7:FF:BA:E2:E9:A2
X509v3 Authority Key Identifier:
keyid:E6:86:96:55:09:A6:49:C5:08:AB:8A:B7:2F:72:57:BE:F3:5F:79:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5oaWVQmmScUIq4q3L3JXvvNfeTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/68bff6-7b2c-4ecf-8006-ed14af6db888/1/5oaWVQmmScUIq4q3L3JXvvNfeTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/68bff6-7b2c-4ecf-8006-ed14af6db888/1/5oaWVQmmScUIq4q3L3JXvvNfeTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:86:42:29:df:07:86:93:ed:75:ab:bd:9b:2f:b6:f5:45:65:
a6:74:40:15:72:1c:9f:69:9f:ec:f1:48:16:a2:3b:73:e2:ac:
8d:be:88:2b:c6:0b:62:06:82:78:76:f8:88:06:6b:b5:1f:ed:
b1:d0:ba:f3:15:92:ce:8e:09:ad:10:4f:60:8e:ea:c1:06:56:
ce:5f:85:11:95:a8:2b:f1:1e:84:84:3a:01:86:70:a5:e5:1e:
17:d6:a6:27:97:95:7d:e4:a8:13:a3:5d:d5:65:0d:bf:e3:14:
92:cf:05:87:5d:88:6b:1f:b1:13:eb:0a:47:b1:d0:01:8d:34:
71:ad:b1:2f:6e:dc:7f:04:dc:a9:9d:84:81:97:2a:84:f0:56:
fb:31:c3:72:cb:2a:36:55:a3:d1:dc:d1:a6:b0:b3:58:fe:7d:
b1:1d:50:f3:0a:4c:4c:27:a4:ca:b9:6d:51:bf:23:18:de:47:
5b:60:4f:88:47:a0:35:e6:e3:21:ba:42:b6:9c:6b:ac:d8:3a:
62:94:92:37:e5:ab:9b:30:76:bf:8a:bf:1d:cc:68:16:2b:66:
77:29:5c:ba:11:68:6a:3a:15:f8:be:e4:8e:80:25:6f:98:2e:
0f:c5:5d:e2:32:7a:8f:61:f4:32:2d:64:e1:ff:e4:49:a2:e8:
09:9f:f4:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:11:15 2026 by rpki-client