Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/060cea-e920-40de-90da-8d49ebcae9b3/1/5gSc-H3Y8f1MgCS1psnqlPF7b70.mft
File: 5gSc-H3Y8f1MgCS1psnqlPF7b70.mft (raw, json)
Hash identifier: vVrZrcAq9tZrS4FcTD6v1i8iD6HPHAZszDG45SZr+s8=
Subject key identifier: CF:27:46:06:A1:48:43:6E:E8:CA:04:67:46:2D:B8:E3:2A:D3:4B:5A
Authority key identifier: E6:04:9C:F8:7D:D8:F1:FD:4C:80:24:B5:A6:C9:EA:94:F1:7B:6F:BD
Certificate issuer: /CN=e6049cf87dd8f1fd4c8024b5a6c9ea94f17b6fbd
Certificate serial: 019CABA217A97023215B62B2A7E7626E676E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5gSc-H3Y8f1MgCS1psnqlPF7b70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/060cea-e920-40de-90da-8d49ebcae9b3/1/5gSc-H3Y8f1MgCS1psnqlPF7b70.mft
Manifest number: 17DA
Signing time: Sun 01 Mar 2026 23:00:52 +0000
Manifest this update: Sun 01 Mar 2026 23:00:52 +0000
Manifest next update: Mon 02 Mar 2026 23:00:52 +0000
Files and hashes: 1: 5gSc-H3Y8f1MgCS1psnqlPF7b70.crl (hash: RN0XanzJvEfQgm9kNYjRCbdHkpP29LNYi0/IvQvYMeU=)
2: t2FHnnEHf_6TSghs3_z2wcfp-bA.roa (hash: 91+RIg0AqSl330cDSTT6P3HSGmorFbL8LnE7d4GsH5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/060cea-e920-40de-90da-8d49ebcae9b3/1/5gSc-H3Y8f1MgCS1psnqlPF7b70.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/060cea-e920-40de-90da-8d49ebcae9b3/1/5gSc-H3Y8f1MgCS1psnqlPF7b70.mft
rsync://rpki.ripe.net/repository/DEFAULT/5gSc-H3Y8f1MgCS1psnqlPF7b70.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:17:a9:70:23:21:5b:62:b2:a7:e7:62:6e:67:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6049cf87dd8f1fd4c8024b5a6c9ea94f17b6fbd
Validity
Not Before: Mar 1 23:00:52 2026 GMT
Not After : Mar 2 23:00:52 2026 GMT
Subject: CN=cf274606a148436ee8ca0467462db8e32ad34b5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:d0:3d:cb:1c:a1:11:59:58:9c:1b:b0:25:1a:
24:cc:56:2b:0e:74:b0:84:3e:84:18:f6:f8:9f:bb:
55:16:06:bc:a6:25:ff:38:e8:8c:5e:92:e6:20:b7:
f6:00:33:e3:ff:04:af:3d:ff:31:a8:74:5c:bc:79:
0f:fd:3e:14:9a:49:65:7b:66:79:cc:1b:84:64:40:
8e:4b:9d:66:f9:79:5b:36:97:93:2c:6c:f0:e4:48:
14:48:4d:40:23:9f:b3:40:3c:1f:a6:23:58:70:21:
32:34:0a:bf:3f:91:01:f6:fb:e9:f1:ae:d5:da:d2:
a4:22:a8:8e:58:8b:8a:cc:bd:f0:a1:e3:23:79:18:
8a:a7:31:9c:40:3b:92:6d:d4:32:8e:df:3c:f7:ad:
d0:e8:9c:2d:ea:82:6c:41:33:0e:d9:d8:52:df:40:
2c:fe:80:c2:00:65:50:d7:91:71:78:97:b8:7c:df:
2a:e1:4e:4d:43:75:6a:7d:e3:b0:57:8c:f3:b3:c8:
9f:34:5f:c3:2d:fd:fd:da:8e:25:5b:15:cd:51:c7:
0f:62:a1:45:27:8e:1f:97:3d:e1:05:73:89:45:fe:
48:d7:a3:08:02:00:97:fb:6e:af:a8:f0:66:54:c2:
a5:d4:5e:1b:8d:33:7e:f8:a3:d4:8d:8e:72:25:1b:
91:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:27:46:06:A1:48:43:6E:E8:CA:04:67:46:2D:B8:E3:2A:D3:4B:5A
X509v3 Authority Key Identifier:
keyid:E6:04:9C:F8:7D:D8:F1:FD:4C:80:24:B5:A6:C9:EA:94:F1:7B:6F:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5gSc-H3Y8f1MgCS1psnqlPF7b70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/060cea-e920-40de-90da-8d49ebcae9b3/1/5gSc-H3Y8f1MgCS1psnqlPF7b70.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/060cea-e920-40de-90da-8d49ebcae9b3/1/5gSc-H3Y8f1MgCS1psnqlPF7b70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:1a:9b:bd:fa:30:38:be:27:c4:78:cd:3d:0c:e8:e1:87:d7:
5a:18:5a:2b:18:11:1a:55:b8:ed:7a:d7:72:51:97:4d:39:14:
f6:33:f5:b5:42:79:78:c0:d4:4a:b4:65:72:1f:7b:11:ce:6d:
e9:21:9d:0a:82:c2:52:8f:38:c8:8f:b0:38:72:93:5e:5d:8a:
98:d1:bd:b2:7d:fb:0d:34:29:1d:93:4a:b3:1b:4c:d2:32:bb:
05:40:d5:c6:1d:9d:32:1a:0d:90:4d:3e:f0:0b:b4:54:cb:2d:
f6:3c:61:e9:62:21:6f:bd:a9:cc:d5:db:b2:5b:50:fa:7f:63:
00:98:bb:75:99:fe:aa:19:cf:7c:03:72:50:c4:ca:ed:70:73:
9d:6e:65:a0:dd:e9:80:0e:34:b8:a7:f8:38:62:ec:04:0a:ee:
bd:9c:83:d4:f4:cc:f5:e5:2a:a9:34:85:94:48:9a:2b:f4:35:
a9:c3:ae:83:88:be:19:d7:35:99:41:d2:94:04:cc:5f:84:24:
9a:00:99:35:3c:3a:11:4a:d1:c5:f4:7d:c2:d7:f2:d9:f2:08:
69:56:06:75:6a:04:95:93:1a:c4:10:30:0c:ae:5b:4e:d4:57:
d4:43:ab:55:15:89:87:e3:93:f9:d7:ba:a0:fc:8a:90:c5:cc:
03:ce:1f:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:50:51 2026 by rpki-client