Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/d71269-4b56-4572-a711-d84ecb2505c4/1/5UGkwVK194bWI9hcQUZSmc3aM4k.mft
File: 5UGkwVK194bWI9hcQUZSmc3aM4k.mft (raw, json)
Hash identifier: nOww5Qxty7WzyP/sPi94KBM3kLxasyoK1byGVK6R090=
Subject key identifier: F9:F9:99:41:FC:23:8C:5C:C3:F0:1B:BE:21:7A:92:2D:7E:79:A0:6C
Authority key identifier: E5:41:A4:C1:52:B5:F7:86:D6:23:D8:5C:41:46:52:99:CD:DA:33:89
Certificate issuer: /CN=e541a4c152b5f786d623d85c41465299cdda3389
Certificate serial: 019CA9EAC942B6C797A7B283163A0A89BB92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5UGkwVK194bWI9hcQUZSmc3aM4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/d71269-4b56-4572-a711-d84ecb2505c4/1/5UGkwVK194bWI9hcQUZSmc3aM4k.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 15:01:02 +0000
Manifest this update: Sun 01 Mar 2026 15:01:02 +0000
Manifest next update: Mon 02 Mar 2026 15:01:02 +0000
Files and hashes: 1: 5UGkwVK194bWI9hcQUZSmc3aM4k.crl (hash: xRSRS+K33VAwAmqebVQq6i4ocAhPlhjiKV+qWSeRIw8=)
2: Y53-K6eCcM2LGOvi8Fn2PE_O8Hs.roa (hash: epaNlilaUn33+8n2mw835ikIL/eJJhBznXtCVWydLWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/d71269-4b56-4572-a711-d84ecb2505c4/1/5UGkwVK194bWI9hcQUZSmc3aM4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/d71269-4b56-4572-a711-d84ecb2505c4/1/5UGkwVK194bWI9hcQUZSmc3aM4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/5UGkwVK194bWI9hcQUZSmc3aM4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:ea:c9:42:b6:c7:97:a7:b2:83:16:3a:0a:89:bb:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e541a4c152b5f786d623d85c41465299cdda3389
Validity
Not Before: Mar 1 15:01:02 2026 GMT
Not After : Mar 2 15:01:02 2026 GMT
Subject: CN=f9f99941fc238c5cc3f01bbe217a922d7e79a06c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:81:18:f9:69:5e:c5:82:75:52:1a:13:c6:70:
22:c5:18:32:8f:a1:79:00:8d:14:60:5f:30:ab:c7:
e8:02:d5:08:e6:c9:80:d1:25:74:d7:b9:ce:09:06:
eb:72:0c:c0:b7:5a:1c:78:6d:dc:a9:0e:d3:15:15:
a1:ee:39:9c:da:62:85:57:5b:4b:64:d5:24:e7:67:
0e:85:af:0c:c1:b2:45:ad:c4:27:7b:07:69:a5:d9:
18:43:16:b9:2a:86:1c:8f:3c:cc:cd:88:35:1b:d3:
f6:cd:55:b4:91:22:d0:75:18:a6:5b:a1:78:b8:77:
e6:a1:53:d3:19:c5:c3:37:aa:eb:80:73:2d:a1:fe:
b0:ac:18:80:2f:e7:a8:42:2b:57:da:3e:d8:88:81:
6c:72:5a:b5:ed:f5:f7:9f:97:65:90:92:cc:12:38:
33:6c:f9:a1:17:80:f7:a4:7e:af:6d:88:3a:ae:aa:
e4:3e:a5:92:9d:a4:2c:f9:bb:b7:45:f8:7d:a7:b2:
4a:6d:fa:4a:a2:e5:55:5f:ec:0c:76:64:ca:5c:15:
31:b0:7d:13:5c:75:f3:d5:e6:2d:01:8a:15:86:cc:
3d:91:9a:1c:15:8c:23:47:69:54:fd:24:a2:08:aa:
b8:5c:7e:1f:a1:31:4e:3a:1d:5a:51:c8:ff:49:e5:
19:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:F9:99:41:FC:23:8C:5C:C3:F0:1B:BE:21:7A:92:2D:7E:79:A0:6C
X509v3 Authority Key Identifier:
keyid:E5:41:A4:C1:52:B5:F7:86:D6:23:D8:5C:41:46:52:99:CD:DA:33:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5UGkwVK194bWI9hcQUZSmc3aM4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/d71269-4b56-4572-a711-d84ecb2505c4/1/5UGkwVK194bWI9hcQUZSmc3aM4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/d71269-4b56-4572-a711-d84ecb2505c4/1/5UGkwVK194bWI9hcQUZSmc3aM4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:fb:7d:ba:02:ae:99:5c:08:92:fc:76:c3:92:4d:52:21:98:
aa:ae:9e:bd:45:6f:a4:09:4e:33:43:a6:dc:cd:85:50:f7:9d:
84:c3:8e:70:97:3d:55:5e:f9:20:8c:e3:0d:ba:1f:00:4c:ca:
10:17:57:55:61:e5:5b:30:1a:0a:24:3e:4e:c9:04:73:ef:4d:
43:18:0c:31:6a:7b:99:fe:8b:af:07:2b:f0:c4:4a:a8:2b:69:
90:01:9d:3d:c3:e0:9a:6e:16:82:4f:3d:72:33:7f:95:e7:58:
44:b5:46:45:97:a8:4d:a4:b7:a2:17:ae:a9:da:96:2a:15:2a:
67:d7:7b:88:71:1a:e8:11:10:93:1b:11:dd:85:7c:63:0b:f8:
03:13:9e:e6:fd:43:a4:37:fa:66:02:df:69:bb:27:93:20:10:
36:87:6d:e3:29:2d:80:f3:5b:01:52:20:6d:92:dd:7f:87:9e:
22:43:ae:be:7e:e5:fb:e0:d3:a7:6a:2f:3c:c0:69:31:7a:a0:
5d:24:c3:3d:be:80:7d:bc:12:a8:fb:23:8a:b9:d2:2a:68:e6:
03:d2:5d:83:2e:cf:28:d2:18:dc:69:fa:0f:36:49:ec:91:57:
09:e9:44:39:27:26:52:ac:54:c1:f2:3d:ab:73:6d:fd:ed:5b:
79:62:52:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:43:38 2026 by rpki-client