Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/804322-6f8a-44bb-892c-0c417eff4720/1/5_X6RuHGsFy_7JdpIQyxUUer4jE.mft
File: 5_X6RuHGsFy_7JdpIQyxUUer4jE.mft (raw, json)
Hash identifier: YKEpMAcGd2fS9sQKT3vW/7LHr7LhtVKTMJ8T1xBvbdo=
Subject key identifier: 43:C7:90:8C:BF:B7:7F:1C:CE:DC:BD:52:FF:23:4E:6F:A6:E2:C1:D0
Authority key identifier: E7:F5:FA:46:E1:C6:B0:5C:BF:EC:97:69:21:0C:B1:51:47:AB:E2:31
Certificate issuer: /CN=e7f5fa46e1c6b05cbfec9769210cb15147abe231
Certificate serial: 019CAB6BAC55965B2635E04A185A3C24B713
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_X6RuHGsFy_7JdpIQyxUUer4jE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/804322-6f8a-44bb-892c-0c417eff4720/1/5_X6RuHGsFy_7JdpIQyxUUer4jE.mft
Manifest number: 17D4
Signing time: Sun 01 Mar 2026 22:01:26 +0000
Manifest this update: Sun 01 Mar 2026 22:01:26 +0000
Manifest next update: Mon 02 Mar 2026 22:01:26 +0000
Files and hashes: 1: 5_X6RuHGsFy_7JdpIQyxUUer4jE.crl (hash: 2O+nM3UeDuDM3X5tXzd/rffLC8LvQD13BuC24l7lcbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/804322-6f8a-44bb-892c-0c417eff4720/1/5_X6RuHGsFy_7JdpIQyxUUer4jE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/804322-6f8a-44bb-892c-0c417eff4720/1/5_X6RuHGsFy_7JdpIQyxUUer4jE.mft
rsync://rpki.ripe.net/repository/DEFAULT/5_X6RuHGsFy_7JdpIQyxUUer4jE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:ac:55:96:5b:26:35:e0:4a:18:5a:3c:24:b7:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7f5fa46e1c6b05cbfec9769210cb15147abe231
Validity
Not Before: Mar 1 22:01:26 2026 GMT
Not After : Mar 2 22:01:26 2026 GMT
Subject: CN=43c7908cbfb77f1ccedcbd52ff234e6fa6e2c1d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:cf:80:a9:71:24:89:1a:30:e4:14:a6:a1:46:
05:92:c9:4a:7b:29:72:a4:b0:51:d5:1c:72:a1:47:
e0:19:46:10:3a:7e:d8:11:46:aa:3c:bb:8b:f7:21:
45:fe:71:62:3d:2f:c2:76:63:d3:90:94:fe:4f:e0:
b4:38:03:96:e7:61:14:3f:a5:ec:6d:c0:45:92:87:
ee:e7:ca:bc:da:eb:7b:f4:8c:3f:5d:f0:31:28:c8:
2a:54:69:9f:93:9c:7e:a9:0b:4f:89:89:10:51:55:
4a:8b:12:74:2f:b2:91:9d:87:2b:89:bc:8f:b5:4d:
f9:58:d5:c9:db:69:93:b6:d0:a2:64:f6:bc:e9:b3:
fc:9e:ce:80:04:55:74:eb:e9:0f:22:9f:60:2d:f9:
d5:2d:a9:ad:e8:73:48:e1:b2:8c:a7:a1:cb:03:22:
3c:93:12:23:7c:53:8f:d0:60:53:af:57:c8:88:b5:
9a:7a:e6:59:72:73:46:9c:73:4a:a6:8c:15:d8:f5:
2e:1b:a6:9f:35:49:f0:9f:a3:56:2f:7c:01:0e:d6:
fa:62:6e:8f:c5:82:bc:b5:2d:0e:8c:b1:5d:ec:01:
f4:bd:04:72:44:4a:6c:04:83:e4:c7:08:22:55:6d:
99:2d:9e:5d:51:12:c9:b7:ab:ed:79:69:2d:e9:78:
62:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:C7:90:8C:BF:B7:7F:1C:CE:DC:BD:52:FF:23:4E:6F:A6:E2:C1:D0
X509v3 Authority Key Identifier:
keyid:E7:F5:FA:46:E1:C6:B0:5C:BF:EC:97:69:21:0C:B1:51:47:AB:E2:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_X6RuHGsFy_7JdpIQyxUUer4jE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/804322-6f8a-44bb-892c-0c417eff4720/1/5_X6RuHGsFy_7JdpIQyxUUer4jE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/804322-6f8a-44bb-892c-0c417eff4720/1/5_X6RuHGsFy_7JdpIQyxUUer4jE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:fc:e7:79:83:26:04:a0:38:75:5f:af:67:fc:84:86:17:54:
81:c0:51:c4:5e:62:d0:f0:e6:cc:0f:68:bb:de:a8:d1:ad:8e:
42:db:5f:13:d9:b1:88:08:c8:21:b3:15:00:a4:6d:0b:05:29:
6b:22:49:0f:4c:a1:23:50:db:5b:e9:cd:bf:73:ef:1b:1c:7e:
27:4a:41:13:03:ac:98:f5:ea:82:82:22:03:7a:5d:4f:30:f7:
a6:a2:37:fa:67:a4:f5:0b:5e:74:9f:c2:05:1a:ac:45:c3:21:
b0:38:27:a2:c6:35:75:e9:84:cf:1b:42:df:28:ea:b1:2c:c9:
b9:6b:4b:f6:a4:03:0a:f8:40:78:35:97:89:64:e0:07:8f:38:
40:c2:ec:22:62:d3:2c:d7:83:12:17:a5:3c:1b:bb:e5:e9:e3:
95:37:16:0b:24:66:8a:05:e1:fe:2d:1c:11:7d:ca:38:98:08:
c4:4b:33:8b:38:4f:50:96:5f:e3:89:66:48:9a:20:e1:0a:e3:
d4:12:29:b4:c1:31:64:3d:6f:52:1a:d6:9e:80:db:1e:1b:96:
3f:73:54:48:7e:26:b5:8b:7c:c7:b6:dc:64:b5:a4:32:9d:a9:
0b:30:46:c0:36:49:da:d9:57:fa:e1:18:3e:3f:0a:5d:f1:90:
7d:b5:f9:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:38:21 2026 by rpki-client