Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/897092-0750-4d96-b32f-5f205236de1f/1/5NJxw_qQOlkP31SJlEnmmPLpxjI.mft
File: 5NJxw_qQOlkP31SJlEnmmPLpxjI.mft (raw, json)
Hash identifier: 7ol1lvYsBV0TV7kye5im2VicPfggegdZS0CIqzzTw14=
Subject key identifier: 2B:37:B6:92:79:39:50:D8:26:19:97:8D:25:E5:59:56:7C:16:EB:43
Authority key identifier: E4:D2:71:C3:FA:90:3A:59:0F:DF:54:89:94:49:E6:98:F2:E9:C6:32
Certificate issuer: /CN=e4d271c3fa903a590fdf54899449e698f2e9c632
Certificate serial: 019CAA582D18385BA045DA650EF956CD5B2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5NJxw_qQOlkP31SJlEnmmPLpxjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/897092-0750-4d96-b32f-5f205236de1f/1/5NJxw_qQOlkP31SJlEnmmPLpxjI.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 17:00:31 +0000
Manifest this update: Sun 01 Mar 2026 17:00:31 +0000
Manifest next update: Mon 02 Mar 2026 17:00:31 +0000
Files and hashes: 1: 5NJxw_qQOlkP31SJlEnmmPLpxjI.crl (hash: YsFg1v9TDBpY9CBBdNK0dBGtwZwEmUaC+WB6jzLv28w=)
2: 9ODgGDzFJ29sZbO5Y0-xsyNjK4c.roa (hash: OkUtbla+KQC+6tAPqsg9uxnsiQTpUI77ifjU89ybPE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/897092-0750-4d96-b32f-5f205236de1f/1/5NJxw_qQOlkP31SJlEnmmPLpxjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/897092-0750-4d96-b32f-5f205236de1f/1/5NJxw_qQOlkP31SJlEnmmPLpxjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5NJxw_qQOlkP31SJlEnmmPLpxjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:2d:18:38:5b:a0:45:da:65:0e:f9:56:cd:5b:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4d271c3fa903a590fdf54899449e698f2e9c632
Validity
Not Before: Mar 1 17:00:31 2026 GMT
Not After : Mar 2 17:00:31 2026 GMT
Subject: CN=2b37b692793950d82619978d25e559567c16eb43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:27:c8:a9:dc:36:e0:75:96:87:42:ee:42:d8:
8c:e8:79:8b:7f:09:ae:77:27:98:83:ce:1c:a0:5c:
74:82:7a:ee:83:40:85:ca:3f:ef:db:2a:f8:e3:32:
34:8a:ea:87:93:5b:60:67:a3:37:e2:15:9d:e1:8d:
ab:5a:a7:1f:02:ea:3f:ba:e5:eb:94:0e:09:81:f7:
2b:45:34:8e:b8:40:1b:ef:e3:70:d6:79:0c:85:32:
76:e9:85:1a:35:cd:c4:19:cb:80:b1:62:fd:e3:7c:
a1:7a:b7:32:cb:90:f2:36:2b:fc:5e:93:db:b9:01:
25:b7:9e:0e:b8:50:a3:2a:4c:cd:a5:ef:f1:5f:1a:
34:9b:1c:7a:e2:78:f2:95:fa:78:a0:cb:fe:98:bd:
13:41:fe:b0:5a:b6:25:f2:17:22:af:e5:94:1a:90:
53:7f:10:fc:b6:ae:56:5a:06:ea:ec:98:06:b9:d8:
ec:2b:5d:64:2c:56:e1:6c:a4:98:3f:53:2b:53:19:
90:f6:c7:02:bb:58:cc:49:3f:df:7b:55:10:c6:d8:
0a:50:ba:a0:3e:ee:cd:2e:4e:b5:6a:3e:e1:57:08:
02:a5:1c:4f:9d:5f:cb:a1:92:d1:26:2c:f4:8f:6b:
75:39:63:2f:61:43:9b:21:d0:77:b4:58:26:19:e7:
85:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:37:B6:92:79:39:50:D8:26:19:97:8D:25:E5:59:56:7C:16:EB:43
X509v3 Authority Key Identifier:
keyid:E4:D2:71:C3:FA:90:3A:59:0F:DF:54:89:94:49:E6:98:F2:E9:C6:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5NJxw_qQOlkP31SJlEnmmPLpxjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/897092-0750-4d96-b32f-5f205236de1f/1/5NJxw_qQOlkP31SJlEnmmPLpxjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/897092-0750-4d96-b32f-5f205236de1f/1/5NJxw_qQOlkP31SJlEnmmPLpxjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:7a:00:43:c0:3d:4f:c1:02:08:83:d5:a4:29:53:0a:07:b2:
1e:ad:38:8c:52:9b:f0:84:19:a5:7a:54:b8:d3:15:9c:3b:b8:
7f:d5:81:9a:78:36:95:74:2c:ba:11:8a:fa:8c:6c:9a:99:26:
e9:eb:0e:9b:6c:45:41:03:58:ef:2c:8a:1a:dd:20:a1:ce:40:
b6:05:58:6c:04:3f:02:f9:7c:0f:be:4d:f5:16:80:1f:18:50:
5d:46:65:1a:76:bd:13:61:fe:09:71:fd:7a:1d:de:ea:48:e7:
e7:92:d0:d6:7a:ba:fd:65:45:62:6d:d2:0a:02:f9:8d:bb:64:
7b:08:f7:72:9f:65:cc:49:cd:ad:49:e8:e3:2e:e3:f5:47:55:
53:bf:99:7f:ac:28:77:1a:dc:d0:7f:8b:1b:ed:8c:23:3d:1c:
ab:07:93:d6:68:05:35:fe:ab:ed:cc:2f:82:e8:12:0d:8b:5a:
3d:15:8d:a6:09:d7:77:be:c1:ba:d1:99:4b:d8:2c:30:a5:2c:
29:d2:67:5f:e9:a9:82:e5:8b:a0:07:e1:c4:f3:d7:24:a7:b5:
65:4a:ea:64:e4:48:fc:48:de:30:e1:c9:f5:7c:f3:8f:95:e0:
f2:92:40:e2:6f:ee:3f:10:93:cc:89:2b:88:7a:0e:1a:08:fa:
6b:76:9a:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:53:15 2026 by rpki-client