Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/5xhRIOejuWK5_-Sr7RbQqjoyBRg.mft
File: 5xhRIOejuWK5_-Sr7RbQqjoyBRg.mft (raw, json)
Hash identifier: 9HLcwr0ScHhYEq6L4Y6v7/x0oLtmQVTDdisp6JJ7Xps=
Subject key identifier: 99:D3:83:9D:E2:E7:67:71:20:56:C1:D1:D8:42:79:39:98:00:D2:74
Authority key identifier: E7:18:51:20:E7:A3:B9:62:B9:FF:E4:AB:ED:16:D0:AA:3A:32:05:18
Certificate issuer: /CN=e7185120e7a3b962b9ffe4abed16d0aa3a320518
Certificate serial: 019CADC78AEA126895E0A2747FD67DA644EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5xhRIOejuWK5_-Sr7RbQqjoyBRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/5xhRIOejuWK5_-Sr7RbQqjoyBRg.mft
Manifest number: 121B
Signing time: Mon 02 Mar 2026 09:01:01 +0000
Manifest this update: Mon 02 Mar 2026 09:01:01 +0000
Manifest next update: Tue 03 Mar 2026 09:01:01 +0000
Files and hashes: 1: 5xhRIOejuWK5_-Sr7RbQqjoyBRg.crl (hash: MVF1rJcUtcHnh7wsO3UkDkEE1GpTqfdAg+ZRukMdGQE=)
2: yKWW9KUUcuSOBUZmFNhXRUNBXdk.roa (hash: BmUfImdK1cFMPb6WqiazHO8FeAIX1xO92EWzQ8s2qXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/5xhRIOejuWK5_-Sr7RbQqjoyBRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/5xhRIOejuWK5_-Sr7RbQqjoyBRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/5xhRIOejuWK5_-Sr7RbQqjoyBRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:8a:ea:12:68:95:e0:a2:74:7f:d6:7d:a6:44:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7185120e7a3b962b9ffe4abed16d0aa3a320518
Validity
Not Before: Mar 2 09:01:01 2026 GMT
Not After : Mar 3 09:01:01 2026 GMT
Subject: CN=99d3839de2e767712056c1d1d84279399800d274
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:83:d6:52:49:13:fd:5f:d4:49:96:8b:30:d1:
04:1d:f9:4d:83:6c:43:77:90:da:46:c0:7a:5a:84:
54:ef:d3:e6:75:bc:84:ac:28:9c:7a:fb:31:5e:ce:
8b:d9:cc:f7:07:c4:ec:5c:75:66:36:b9:63:33:cb:
3b:2e:56:2a:95:ac:a4:2f:ed:29:80:21:71:84:f6:
ff:06:4d:b9:ea:e9:26:f8:20:35:b6:37:c6:b5:35:
ca:bc:2d:45:d9:f5:71:68:fa:c3:9e:32:2d:c9:02:
6e:e6:d4:45:04:a8:8d:a0:f6:09:22:ed:f5:ca:f3:
58:12:e2:19:cd:ae:fc:39:7b:15:db:3b:2d:bc:13:
61:04:d0:02:dd:9e:52:06:0c:ee:b9:d0:b6:54:1d:
57:de:e6:19:90:c2:2d:e3:2d:d7:46:d6:0e:11:67:
80:04:02:27:ed:4b:73:2a:06:78:9b:78:c5:10:c3:
38:89:25:10:99:51:34:b0:42:9f:a7:ba:a7:65:36:
5d:5b:88:6f:65:a6:1e:d1:e9:08:30:0a:29:5c:fc:
44:66:65:51:c3:0b:4d:e8:d8:1d:64:d6:3c:f0:4e:
7e:74:1e:f6:e9:c7:8d:e2:97:c9:72:29:f6:d1:21:
35:3b:8c:76:7e:c8:c9:91:fd:a5:e0:c8:fb:86:a6:
3f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:D3:83:9D:E2:E7:67:71:20:56:C1:D1:D8:42:79:39:98:00:D2:74
X509v3 Authority Key Identifier:
keyid:E7:18:51:20:E7:A3:B9:62:B9:FF:E4:AB:ED:16:D0:AA:3A:32:05:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5xhRIOejuWK5_-Sr7RbQqjoyBRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/5xhRIOejuWK5_-Sr7RbQqjoyBRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/5xhRIOejuWK5_-Sr7RbQqjoyBRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:fa:fe:82:df:18:bd:76:55:66:20:d7:5f:7b:0c:27:ab:65:
7e:a8:e9:93:03:af:3d:c4:ed:ab:af:a7:c2:71:0a:9f:03:4c:
e2:b1:a9:f3:eb:35:46:55:b1:6c:64:26:19:1e:73:c8:2f:b3:
30:ab:b5:f3:b4:82:b6:7c:09:b6:dc:44:48:87:7e:9f:89:bd:
c7:a5:1a:d2:a0:23:0e:ab:29:12:08:36:68:e9:58:9d:52:5e:
17:b8:90:7d:1e:85:9a:79:73:26:0c:0d:4b:41:75:22:01:88:
07:2c:24:6f:1e:f1:4e:38:ef:e9:76:02:a9:2a:61:08:4c:14:
e2:48:d4:33:47:e2:89:f2:e3:d5:f8:2e:32:80:7a:eb:32:76:
80:ad:53:35:8d:34:7c:1e:19:fd:07:cf:0b:47:aa:3b:d0:28:
28:7a:d5:47:00:a0:26:45:1b:09:6f:5c:2d:ba:e2:ab:39:74:
fa:03:51:11:c7:90:19:e8:c4:08:04:b1:c1:fe:a7:f5:ce:dc:
d9:a8:34:f3:63:b9:cf:81:06:ca:05:e1:a3:45:61:c0:fa:e3:
6a:3a:35:ed:6e:58:cb:bd:ee:27:7b:26:0c:d3:b6:dc:fc:92:
52:27:19:92:c8:0f:f8:35:10:36:96:b4:e6:20:fb:7a:c5:6c:
c9:9c:f8:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:14:56 2026 by rpki-client