Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.mft
File: 5TrZtDK7g9FBxIDe54vDX_R8tyw.mft (raw, json)
Hash identifier: 1DMZhx8T3uu/gZUBpVS9EV1plhRJQTUaxlcrF/Cx/Qs=
Subject key identifier: C6:6D:DB:BA:2F:3C:6F:06:50:80:39:BC:9D:F1:E4:E2:39:19:86:37
Authority key identifier: E5:3A:D9:B4:32:BB:83:D1:41:C4:80:DE:E7:8B:C3:5F:F4:7C:B7:2C
Certificate issuer: /CN=e53ad9b432bb83d141c480dee78bc35ff47cb72c
Certificate serial: 019CAD5A541BDA7BDD61A9CF77FB93E77A0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5TrZtDK7g9FBxIDe54vDX_R8tyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 07:01:43 +0000
Manifest this update: Mon 02 Mar 2026 07:01:43 +0000
Manifest next update: Tue 03 Mar 2026 07:01:43 +0000
Files and hashes: 1: 22YItsxKYLcgNNKzIexf7AwBkoI.roa (hash: o0O379ObLu85XEWjeGzNjJwnF/cIhXVQ3F8uTxlowzs=)
2: 5TrZtDK7g9FBxIDe54vDX_R8tyw.crl (hash: GXuwHx0E9jt9Uc7oolki2DBZjNg32YhKxWY1gxDhEFw=)
3: kHScl5Ibz629FSHvZmCUNM5bVMc.roa (hash: 7czMzsVRqlDw8LwOhs7NR54XvbzvMnmeYfTf1rgt4PU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5TrZtDK7g9FBxIDe54vDX_R8tyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:5a:54:1b:da:7b:dd:61:a9:cf:77:fb:93:e7:7a:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e53ad9b432bb83d141c480dee78bc35ff47cb72c
Validity
Not Before: Mar 2 07:01:43 2026 GMT
Not After : Mar 3 07:01:43 2026 GMT
Subject: CN=c66ddbba2f3c6f06508039bc9df1e4e239198637
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:5c:cc:62:ff:5d:60:87:b4:6b:01:5f:2f:fe:
05:5c:05:e6:c7:ab:12:1d:f1:4d:3c:5d:a2:7f:2f:
70:f4:3a:a6:5c:53:82:bb:4e:61:50:4f:b0:da:c4:
64:ee:76:da:2f:ae:34:d2:1b:d0:c5:f1:80:ec:6a:
69:6f:71:e6:66:93:96:4d:96:8f:69:5a:4e:50:08:
85:14:3e:e7:7c:f1:cb:23:54:79:29:17:cb:41:04:
e4:ee:2d:4b:82:1b:e5:85:b7:d4:b3:05:a4:49:e8:
51:c1:ab:e7:54:98:6b:c2:e9:0a:35:70:3b:7b:82:
28:74:6b:f5:24:e8:00:57:7f:57:7b:4c:84:8a:56:
20:91:2e:c4:3c:a5:3c:2d:02:9b:5c:69:6c:bc:15:
e4:5f:29:9e:7d:3e:48:dc:84:32:4f:40:98:bc:c2:
88:44:41:6e:15:d4:d2:cd:5a:54:26:ad:0f:4e:d5:
bb:16:bc:7d:d0:2d:dd:ad:c2:c3:2c:73:f2:d2:0e:
bb:b1:62:71:be:64:f5:97:a1:6e:20:11:41:61:3f:
57:65:47:99:2b:00:38:08:18:79:39:ad:2b:be:c8:
7f:1c:d7:bf:f6:08:41:65:c3:2f:b3:ee:39:b7:2b:
9a:23:4c:d0:af:4e:b1:4d:7f:2c:ea:2c:e8:4f:34:
6a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:6D:DB:BA:2F:3C:6F:06:50:80:39:BC:9D:F1:E4:E2:39:19:86:37
X509v3 Authority Key Identifier:
keyid:E5:3A:D9:B4:32:BB:83:D1:41:C4:80:DE:E7:8B:C3:5F:F4:7C:B7:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5TrZtDK7g9FBxIDe54vDX_R8tyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:0c:85:25:b5:bf:74:c1:7e:48:c3:da:e2:4e:ec:51:41:b7:
dc:3e:f5:42:e6:59:fe:c6:25:77:5e:17:3a:f1:b2:92:65:6c:
ad:0e:5d:98:be:25:03:6b:a8:f5:7f:4e:5d:b3:9e:f7:5d:5e:
e8:02:78:b9:4a:b0:40:10:1f:16:ab:0a:2c:e3:3a:e9:fe:d5:
b1:57:2e:f7:c6:4c:c6:8c:47:0b:52:49:fd:f1:88:23:3d:e5:
9a:58:36:c0:61:20:7b:be:2a:79:4a:b9:ec:34:94:2e:8f:f2:
38:3f:bd:14:80:7e:36:76:54:00:22:59:eb:42:fc:90:3c:6e:
4c:91:bd:a3:89:0a:4b:28:ca:50:36:23:16:81:2c:3d:1f:39:
34:08:13:f8:b0:df:83:da:ca:a0:f5:a9:d8:fc:d3:2b:50:04:
16:f6:89:63:f1:52:09:39:ad:80:5e:ad:8a:79:b3:8b:30:f6:
1a:cc:bf:4e:e5:4c:0d:51:8a:b7:e1:99:73:ee:aa:35:85:11:
d5:d8:b9:31:51:85:33:eb:5b:9f:35:bb:f9:a7:1e:62:3a:8e:
32:60:64:fe:37:d6:45:78:34:1d:ae:b3:a8:4a:72:59:94:74:
b8:25:af:fb:f9:4d:35:c5:1c:0f:75:d5:c9:51:6b:47:00:b2:
d8:d7:a7:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:53:23 2026 by rpki-client