Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/55b9d7-f703-45fe-8b63-10534c67bbb8/1/5d4N5z5zh0u8ZnOIBdNzyrgzt6U.mft
File: 5d4N5z5zh0u8ZnOIBdNzyrgzt6U.mft (raw, json)
Hash identifier: sNcmMBR11HgPT72vRrwHCKVG8heE9TWGCntkPj2BQM0=
Subject key identifier: 28:EC:FE:8E:26:97:80:DF:7A:3C:9A:A7:CB:AA:D5:DA:5A:11:A7:7B
Authority key identifier: E5:DE:0D:E7:3E:73:87:4B:BC:66:73:88:05:D3:73:CA:B8:33:B7:A5
Certificate issuer: /CN=e5de0de73e73874bbc66738805d373cab833b7a5
Certificate serial: 019CAD22A4F57CF9A8A5E250C0109AB3D729
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5d4N5z5zh0u8ZnOIBdNzyrgzt6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/55b9d7-f703-45fe-8b63-10534c67bbb8/1/5d4N5z5zh0u8ZnOIBdNzyrgzt6U.mft
Manifest number: 1800
Signing time: Mon 02 Mar 2026 06:00:54 +0000
Manifest this update: Mon 02 Mar 2026 06:00:54 +0000
Manifest next update: Tue 03 Mar 2026 06:00:54 +0000
Files and hashes: 1: 5d4N5z5zh0u8ZnOIBdNzyrgzt6U.crl (hash: 46tDsPZ0wAJEv27+9FhATUkuasCXUgivMuSqcwArTlY=)
2: mt8BxRlzzPaaJ7YP89nmlvEShOY.roa (hash: 5h7uCM+sM17krF3KDYCTkEInjz6mxypULE5ia4pGUZA=)
3: zh2lJfC9-wfMTO9Kozt8KhhvQ6k.roa (hash: rv7yBHp8N5Gh/amJUvtJbCTehW8L+CBJUllqP/PiPaA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/55b9d7-f703-45fe-8b63-10534c67bbb8/1/5d4N5z5zh0u8ZnOIBdNzyrgzt6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/55b9d7-f703-45fe-8b63-10534c67bbb8/1/5d4N5z5zh0u8ZnOIBdNzyrgzt6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/5d4N5z5zh0u8ZnOIBdNzyrgzt6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:a4:f5:7c:f9:a8:a5:e2:50:c0:10:9a:b3:d7:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5de0de73e73874bbc66738805d373cab833b7a5
Validity
Not Before: Mar 2 06:00:54 2026 GMT
Not After : Mar 3 06:00:54 2026 GMT
Subject: CN=28ecfe8e269780df7a3c9aa7cbaad5da5a11a77b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:1a:a6:73:0b:fe:0e:60:ba:b8:d0:ce:99:b8:
cc:56:d5:36:17:52:be:d0:99:7d:04:09:86:c5:14:
8a:45:0e:8b:b3:43:1e:a2:97:aa:d3:14:4f:3c:c4:
da:ec:3e:eb:e2:6b:b0:16:f7:0b:94:cf:05:b5:33:
65:57:da:f7:9e:a5:c8:aa:db:98:8e:e7:51:e3:b7:
3f:e4:05:47:6f:29:00:c0:92:54:90:89:dd:bf:93:
d8:67:26:fb:10:a4:b7:45:b7:cf:2f:b4:c9:ec:f5:
8a:00:05:12:1e:6a:b7:84:98:54:6b:26:ec:f2:73:
e6:3f:fe:c6:9a:9f:40:c9:34:63:54:f9:52:f4:2a:
f1:52:3c:8b:af:74:68:ba:49:78:e0:3f:cc:8f:6b:
51:1c:a2:96:24:fa:bb:40:ef:31:92:2f:c5:bc:6c:
f7:20:79:6a:25:50:67:d2:82:c8:39:e9:2a:d4:69:
f1:db:0a:6e:4e:0f:8e:2f:4d:6c:c5:bd:1e:43:be:
1b:af:21:5d:97:8c:b0:51:06:fa:06:aa:30:5c:80:
0b:8b:3f:a8:0f:31:f6:1f:59:06:d5:9a:1b:ea:cc:
fb:6b:a9:2a:0c:27:22:d3:89:15:e8:cd:a9:c3:51:
a3:c5:81:1c:b4:60:bf:2a:0a:7f:fa:57:b3:da:43:
24:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:EC:FE:8E:26:97:80:DF:7A:3C:9A:A7:CB:AA:D5:DA:5A:11:A7:7B
X509v3 Authority Key Identifier:
keyid:E5:DE:0D:E7:3E:73:87:4B:BC:66:73:88:05:D3:73:CA:B8:33:B7:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d4N5z5zh0u8ZnOIBdNzyrgzt6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/55b9d7-f703-45fe-8b63-10534c67bbb8/1/5d4N5z5zh0u8ZnOIBdNzyrgzt6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/55b9d7-f703-45fe-8b63-10534c67bbb8/1/5d4N5z5zh0u8ZnOIBdNzyrgzt6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:ea:67:3a:79:e3:c0:0d:fe:83:c2:2b:39:d9:61:03:10:36:
27:d2:ca:59:a0:b1:f9:14:84:db:89:4a:c0:6f:dc:6b:62:aa:
b0:4b:53:f6:00:f4:87:34:13:a1:7d:69:53:7f:83:c3:29:ae:
e0:78:40:c5:ef:6d:b5:88:19:ab:23:88:f4:ab:10:47:82:f8:
e1:d0:fa:9c:94:bc:94:9b:0e:e6:f9:44:96:5e:ee:f0:db:8d:
fe:e4:11:0c:f7:6d:33:30:ce:05:c6:a8:f4:47:32:b3:23:fb:
59:8f:1f:a5:41:52:57:19:94:f6:19:92:b8:7a:a7:f7:b8:40:
8f:5e:46:00:4c:f4:b6:9f:5e:04:e6:fb:14:df:31:d3:bb:d5:
90:04:a7:9d:4b:15:53:96:7b:c6:99:5a:2b:4d:23:fe:f6:ab:
99:63:43:f9:ad:51:65:12:80:92:89:0e:a2:e0:89:97:a7:e0:
1d:35:3c:b6:dc:b9:e1:dc:cf:7b:8d:a3:9e:d5:0e:92:98:73:
48:ea:d9:ca:8e:74:f9:67:c1:f4:29:24:f5:74:a7:6f:a8:bb:
50:f9:80:35:e6:3c:5c:74:5f:6f:43:7b:60:a6:14:6e:d9:fa:
a1:d4:81:91:af:53:65:20:1d:6a:7f:8a:f7:f9:3a:2c:63:11:
c5:1f:13:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:47:51 2026 by rpki-client