Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.mft
File: 5m53Jv9ToTyAzLyk1dOU5Oiu9UI.mft (raw, json)
Hash identifier: 4grd8F6oe0kt7hlc2MkBWWvqufB1lZ+cBSwyidzJHk4=
Subject key identifier: E4:1F:54:CE:E0:A4:29:DE:00:C8:00:4D:37:E1:89:4F:7F:76:A7:E5
Authority key identifier: E6:6E:77:26:FF:53:A1:3C:80:CC:BC:A4:D5:D3:94:E4:E8:AE:F5:42
Certificate issuer: /CN=e66e7726ff53a13c80ccbca4d5d394e4e8aef542
Certificate serial: 019CAA21B023A8E4B4741EB3BB5A77947ED1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.mft
Manifest number: 12B6
Signing time: Sun 01 Mar 2026 16:01:00 +0000
Manifest this update: Sun 01 Mar 2026 16:01:00 +0000
Manifest next update: Mon 02 Mar 2026 16:01:00 +0000
Files and hashes: 1: 5m53Jv9ToTyAzLyk1dOU5Oiu9UI.crl (hash: 8G0RB1gqcVQS+AII0G29gjtUL72G4Yny2i33V4sTHTQ=)
2: Bl6ecBYyvP74akh6LYMNk-UPmww.roa (hash: WdzzNwRANJ0xSBXtIJYAS4hehtEEYmmyefLmgeY2F3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 16:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:b0:23:a8:e4:b4:74:1e:b3:bb:5a:77:94:7e:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e66e7726ff53a13c80ccbca4d5d394e4e8aef542
Validity
Not Before: Mar 1 16:01:00 2026 GMT
Not After : Mar 2 16:01:00 2026 GMT
Subject: CN=e41f54cee0a429de00c8004d37e1894f7f76a7e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:19:32:5d:05:4e:f8:76:b1:f5:ed:bd:97:bf:
33:5d:f3:41:81:20:7c:11:ea:ef:ec:25:8e:20:aa:
48:03:3b:cf:08:55:be:fb:00:89:5e:35:9c:25:dd:
af:77:23:82:61:5e:ea:ab:25:3d:28:5d:ef:29:9c:
e5:ec:49:be:27:07:f8:b1:11:c9:a9:b4:2e:9d:40:
eb:5e:ac:27:f3:17:7b:14:a1:07:29:22:86:e3:a8:
72:ca:d2:46:83:b9:9e:58:a0:17:16:65:91:7c:49:
0d:ac:0f:a5:08:8e:51:72:b8:e5:a6:eb:32:c8:48:
7f:50:db:eb:ce:1f:a3:78:6f:13:e3:fc:78:8b:29:
f9:cc:a4:a0:2a:c5:84:68:10:c3:19:42:18:96:8d:
be:06:e8:68:29:0d:b7:33:2a:58:07:65:45:64:c3:
36:b3:2a:68:b4:c6:15:76:d4:4a:ea:14:c3:44:a1:
9d:5b:67:62:06:11:95:fa:db:da:6d:7a:72:55:1f:
c9:76:7f:d3:a2:86:3d:12:33:12:ee:66:86:ca:af:
af:89:32:03:19:ba:72:cd:1f:c2:bd:93:a2:20:45:
4d:56:23:ed:f3:39:47:b3:0b:4f:dd:b6:83:c5:71:
d6:3f:db:ed:1d:ff:10:38:4a:6d:a3:ae:8e:5e:63:
2e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:1F:54:CE:E0:A4:29:DE:00:C8:00:4D:37:E1:89:4F:7F:76:A7:E5
X509v3 Authority Key Identifier:
keyid:E6:6E:77:26:FF:53:A1:3C:80:CC:BC:A4:D5:D3:94:E4:E8:AE:F5:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:86:dc:6d:0c:47:6a:0c:7b:86:4b:a6:44:24:cb:a0:e1:b2:
41:0d:f4:99:7f:4f:c8:a7:d0:a1:93:14:5c:da:64:1e:af:68:
cf:4d:83:49:98:80:d9:fe:9d:40:fd:c5:24:f8:b9:61:ae:dd:
d7:61:6b:d4:81:84:47:c6:8e:84:7a:e1:a0:1f:00:d5:40:ce:
dd:e4:35:66:3a:74:5f:63:29:f2:7c:42:8a:30:a7:9a:8a:41:
04:44:9f:a7:c1:32:95:bd:cd:7c:09:02:03:4c:ae:2f:c7:da:
5a:41:0d:00:cc:e5:2b:d7:33:31:3e:a1:2e:cd:ad:4f:0b:d2:
e2:b0:1c:68:3d:d0:9f:e7:2d:5a:7e:af:ae:f8:f6:19:9f:0a:
c3:6a:c8:6f:68:24:46:33:fc:79:60:c1:f1:79:93:86:51:fb:
e7:d4:78:38:6e:f8:90:3f:fb:3f:04:36:a0:65:7d:f2:71:45:
0b:b3:4e:4f:7e:3d:1d:c6:08:8e:36:30:1b:e0:ba:09:f8:d5:
15:be:5e:f2:e2:80:3e:ef:a3:91:3e:1a:8c:85:c1:f9:a1:f9:
81:5f:bf:6f:e8:6f:ce:6d:3c:d4:e2:17:06:98:ed:98:e4:a9:
5d:3b:73:4b:af:35:e3:f8:d0:7d:da:63:f0:3a:37:77:bb:a2:
12:f8:0a:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:47:57 2026 by rpki-client