Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/2fc007-361d-4f47-aaf7-484d843e6de3/1/B5602MZfOntFTKKl5fZAlOnYi9M.mft
File: B5602MZfOntFTKKl5fZAlOnYi9M.mft (raw, json)
Hash identifier: qiyTGpHAeLggRc6KSSqK2ORYIc+PTPnM+t7CwFNPgrY=
Subject key identifier: E0:53:FF:3B:14:1F:41:BB:3C:E9:E2:C2:4C:C2:86:97:36:71:45:2E
Authority key identifier: 07:9E:B4:D8:C6:5F:3A:7B:45:4C:A2:A5:E5:F6:40:94:E9:D8:8B:D3
Certificate issuer: /CN=079eb4d8c65f3a7b454ca2a5e5f64094e9d88bd3
Certificate serial: 019CA9EB5E5A88F8AAC5FA0A2E688BDE167E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B5602MZfOntFTKKl5fZAlOnYi9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/2fc007-361d-4f47-aaf7-484d843e6de3/1/B5602MZfOntFTKKl5fZAlOnYi9M.mft
Manifest number: 1849
Signing time: Sun 01 Mar 2026 15:01:40 +0000
Manifest this update: Sun 01 Mar 2026 15:01:40 +0000
Manifest next update: Mon 02 Mar 2026 15:01:40 +0000
Files and hashes: 1: B5602MZfOntFTKKl5fZAlOnYi9M.crl (hash: CVzh4OLZ470ZA1dRqaDkAGFcu/xXQq1kQiaNEdn+l3A=)
2: UG82JYjOL5Jql3nxWvN-Xh4Nr4A.roa (hash: 05+0vfIPDLVFjVB3L2D7iJWPXu6x5fdq82fKXp61A0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/2fc007-361d-4f47-aaf7-484d843e6de3/1/B5602MZfOntFTKKl5fZAlOnYi9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/2fc007-361d-4f47-aaf7-484d843e6de3/1/B5602MZfOntFTKKl5fZAlOnYi9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/B5602MZfOntFTKKl5fZAlOnYi9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:eb:5e:5a:88:f8:aa:c5:fa:0a:2e:68:8b:de:16:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=079eb4d8c65f3a7b454ca2a5e5f64094e9d88bd3
Validity
Not Before: Mar 1 15:01:40 2026 GMT
Not After : Mar 2 15:01:40 2026 GMT
Subject: CN=e053ff3b141f41bb3ce9e2c24cc286973671452e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:9a:39:a1:38:a3:32:3f:aa:cc:9c:a8:1f:ba:
c1:bd:d3:b8:92:11:d9:63:7a:72:a6:12:78:71:a5:
d3:49:66:b8:fd:64:79:8b:16:84:c7:a5:65:30:24:
93:ba:16:c3:68:1a:9b:cc:36:6d:8b:8c:08:25:b3:
a2:a8:da:00:35:51:26:00:86:d7:6a:22:33:f4:cd:
06:64:b4:56:1f:e3:4d:d4:3b:fd:75:e8:d3:57:99:
2a:66:5f:6b:52:71:19:95:4b:b8:b8:18:35:f6:69:
27:ad:74:38:24:9b:7a:b6:78:ed:30:cd:3d:e9:f9:
b7:0c:7e:e8:fb:5c:d5:87:60:7b:fa:3e:25:2a:4e:
83:29:9d:af:d4:da:3c:c1:59:78:1f:f6:e3:89:72:
95:5f:2e:61:ef:5f:94:0e:30:bc:75:6c:32:b6:11:
aa:e9:03:ea:91:92:ab:97:6b:f2:3a:2f:76:64:9f:
e3:f8:47:d3:b9:97:15:1d:fb:73:12:cd:5d:0d:af:
55:8b:8d:c5:10:e3:4f:ae:1c:cd:2b:95:28:f0:23:
49:ca:27:f5:f6:97:e0:a4:22:73:13:36:81:ae:cd:
26:33:cd:13:bd:78:ff:59:34:c5:f8:09:84:42:9f:
3b:c4:b7:8b:e1:91:7d:66:cf:8b:28:42:34:1c:6e:
e5:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:53:FF:3B:14:1F:41:BB:3C:E9:E2:C2:4C:C2:86:97:36:71:45:2E
X509v3 Authority Key Identifier:
keyid:07:9E:B4:D8:C6:5F:3A:7B:45:4C:A2:A5:E5:F6:40:94:E9:D8:8B:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B5602MZfOntFTKKl5fZAlOnYi9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2fc007-361d-4f47-aaf7-484d843e6de3/1/B5602MZfOntFTKKl5fZAlOnYi9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2fc007-361d-4f47-aaf7-484d843e6de3/1/B5602MZfOntFTKKl5fZAlOnYi9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:45:a1:4a:97:df:ce:d9:14:6b:90:94:9e:4a:be:bd:fe:c3:
aa:b3:82:dc:f9:d7:4a:56:2a:ab:99:21:7c:18:3c:27:9f:1d:
a8:2c:29:ac:3f:e3:5e:ee:ec:d3:c6:bb:8d:ea:08:49:41:bb:
8f:e1:55:96:5b:78:79:30:39:e2:ef:04:24:04:d7:57:a3:48:
39:01:c7:f4:c2:14:f5:a3:d6:1c:95:8d:54:48:ab:73:e9:d6:
11:8d:b7:ae:be:86:6b:13:93:b8:6e:dc:62:ac:db:41:dc:86:
db:10:71:c7:a9:56:c1:17:15:74:4e:36:09:4c:3a:80:e8:20:
a6:81:89:af:07:8c:a6:b0:4d:92:f9:40:9b:b6:62:ea:38:d4:
95:13:fb:2b:c4:64:3e:97:3f:65:41:b1:e7:53:d0:16:06:d9:
07:1b:e5:16:64:8a:e6:ed:6d:21:b7:21:79:24:d6:cb:db:27:
7f:4f:e6:ba:ea:05:e3:79:82:45:03:cb:ef:c7:e9:cb:06:17:
94:e2:e4:3e:bc:74:92:9d:9b:e2:76:09:e2:07:0b:1c:91:ba:
9d:38:b4:ab:97:2a:1b:66:40:a8:74:16:49:df:bc:55:2b:29:
05:38:f1:3a:6e:b1:48:fe:f8:b9:c4:6c:2b:f3:9a:90:24:f1:
0c:64:25:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:52:05 2026 by rpki-client