Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/d125fd-c39c-4272-8cad-6c2ffb4b61e6/1/5trj7-CjZ5faQ8vVj23_mcO73Y0.mft
File: 5trj7-CjZ5faQ8vVj23_mcO73Y0.mft (raw, json)
Hash identifier: Ki7aKVUFa11TlqM+MclJNtZA/ABvSqzpMDmbVEU6L6k=
Subject key identifier: 2D:C5:20:76:3D:99:47:C8:FF:90:9E:C6:A7:E9:1A:73:00:5F:A3:60
Authority key identifier: E6:DA:E3:EF:E0:A3:67:97:DA:43:CB:D5:8F:6D:FF:99:C3:BB:DD:8D
Certificate issuer: /CN=e6dae3efe0a36797da43cbd58f6dff99c3bbdd8d
Certificate serial: 019CAA2133CA334FC90B5AFB553FCF1E6142
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5trj7-CjZ5faQ8vVj23_mcO73Y0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/d125fd-c39c-4272-8cad-6c2ffb4b61e6/1/5trj7-CjZ5faQ8vVj23_mcO73Y0.mft
Manifest number: 1845
Signing time: Sun 01 Mar 2026 16:00:28 +0000
Manifest this update: Sun 01 Mar 2026 16:00:28 +0000
Manifest next update: Mon 02 Mar 2026 16:00:28 +0000
Files and hashes: 1: 5trj7-CjZ5faQ8vVj23_mcO73Y0.crl (hash: b6zZRaiOagMbAADk31GNnpGI5hX7V79TpwDpKigHKLM=)
2: Tg_Dvwbj2a0giZ29M6thrWU6Se0.roa (hash: nS+lJMCTTSoBDgGB69Pa9qofzjkEPFjXW3VnnoLfVLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/d125fd-c39c-4272-8cad-6c2ffb4b61e6/1/5trj7-CjZ5faQ8vVj23_mcO73Y0.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/d125fd-c39c-4272-8cad-6c2ffb4b61e6/1/5trj7-CjZ5faQ8vVj23_mcO73Y0.mft
rsync://rpki.ripe.net/repository/DEFAULT/5trj7-CjZ5faQ8vVj23_mcO73Y0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 16:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:33:ca:33:4f:c9:0b:5a:fb:55:3f:cf:1e:61:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6dae3efe0a36797da43cbd58f6dff99c3bbdd8d
Validity
Not Before: Mar 1 16:00:28 2026 GMT
Not After : Mar 2 16:00:28 2026 GMT
Subject: CN=2dc520763d9947c8ff909ec6a7e91a73005fa360
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:06:90:44:b2:0f:2f:28:36:04:2a:e8:32:fa:
9c:94:fe:53:59:6d:ef:15:4f:c9:73:27:06:14:e1:
2c:54:92:94:af:69:9e:33:ac:44:ac:7d:22:6b:b1:
67:0d:c1:b4:14:3b:49:b3:71:64:e6:72:77:ee:ab:
d1:13:f5:5d:20:4d:d1:c3:bc:25:d1:4b:94:b1:b9:
b2:04:86:74:07:06:18:85:5b:b2:25:83:21:aa:40:
e2:6f:53:8d:d7:81:fa:2f:7d:b0:f1:fa:83:0e:e0:
6b:38:cd:e0:19:39:89:ef:b9:d9:46:8c:a1:1c:a0:
81:a6:f9:f6:0b:9b:53:47:e1:28:8d:d3:8f:f2:15:
6d:54:ef:02:4f:a7:9b:2c:ee:4c:68:1a:a6:08:90:
6a:9d:3e:b2:3b:0f:df:2c:0b:b7:d6:e5:ae:37:de:
e7:62:69:41:16:b3:72:95:c0:c6:26:42:87:51:6d:
d3:cb:d9:fa:93:0e:e3:13:3e:ca:1d:bc:bd:3a:2f:
23:40:27:c4:a6:56:2f:13:e4:9e:1c:c0:4d:62:4a:
46:7b:c1:ab:1c:b5:fd:b2:d5:b4:f9:a6:f9:d2:5c:
51:cf:a9:8d:1a:4f:e0:9d:73:5b:67:0d:2a:4b:a8:
c0:3d:09:10:20:9f:f1:e5:96:a5:f5:ea:c9:a0:01:
b6:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:C5:20:76:3D:99:47:C8:FF:90:9E:C6:A7:E9:1A:73:00:5F:A3:60
X509v3 Authority Key Identifier:
keyid:E6:DA:E3:EF:E0:A3:67:97:DA:43:CB:D5:8F:6D:FF:99:C3:BB:DD:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5trj7-CjZ5faQ8vVj23_mcO73Y0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/d125fd-c39c-4272-8cad-6c2ffb4b61e6/1/5trj7-CjZ5faQ8vVj23_mcO73Y0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/d125fd-c39c-4272-8cad-6c2ffb4b61e6/1/5trj7-CjZ5faQ8vVj23_mcO73Y0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:d7:3c:9b:f0:08:6f:45:3c:be:ac:d3:46:6d:e0:31:83:ad:
93:3f:bd:bb:9d:a9:11:ce:93:03:23:7b:5d:ba:39:03:aa:7f:
06:9a:48:39:d1:f2:de:39:f3:19:30:8b:a2:d8:6d:9c:c3:d8:
09:53:79:fe:47:f7:30:e6:44:e6:85:de:4a:b6:0d:19:89:40:
9c:d9:9b:85:c6:5c:a9:b6:7f:5e:d2:06:eb:02:f2:f4:e1:82:
9c:4b:08:ff:9e:a2:1b:cf:72:c8:eb:64:f3:01:73:1c:d1:b6:
e1:e1:b0:13:e4:fa:e7:c6:bc:22:d6:d6:3c:b6:4b:3a:91:10:
8d:43:ab:26:53:82:3c:d4:55:4f:f0:03:18:51:95:41:8d:19:
0a:03:c2:c3:88:eb:09:94:d7:f4:d4:a0:a0:9c:3b:7b:4d:45:
ea:f1:e9:b1:d7:e5:49:bd:b5:25:55:00:c7:e8:86:aa:d3:f4:
9a:17:0d:f3:32:87:ef:26:84:c2:53:28:5a:49:51:ff:8a:d7:
da:c9:04:cf:94:d5:03:e4:b8:56:83:44:d2:c3:37:7b:d7:7f:
17:d2:6f:c9:75:5c:c0:c6:79:b4:e9:32:5a:99:3b:d2:17:82:
02:a7:96:7e:cb:1a:64:34:c3:f3:6b:a4:01:55:aa:5e:9b:91:
96:d5:13:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:17:52 2026 by rpki-client