Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/440877-319d-4630-a691-7991b4e4bfa2/1/5JWsuv5G7y9NbFH88jvXL2Oc_Qs.mft
File: 5JWsuv5G7y9NbFH88jvXL2Oc_Qs.mft (raw, json)
Hash identifier: fxEDk/70hCoCwaaY9y1fEOFp1ChwR+vzAskvd8Qj3Tg=
Subject key identifier: 6E:2C:F8:6E:A3:C1:BD:BD:66:DF:F0:2C:53:22:BF:02:3C:01:D7:53
Authority key identifier: E4:95:AC:BA:FE:46:EF:2F:4D:6C:51:FC:F2:3B:D7:2F:63:9C:FD:0B
Certificate issuer: /CN=e495acbafe46ef2f4d6c51fcf23bd72f639cfd0b
Certificate serial: 019CABA1FF63A5E11D643EDA9DCA20440813
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5JWsuv5G7y9NbFH88jvXL2Oc_Qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/440877-319d-4630-a691-7991b4e4bfa2/1/5JWsuv5G7y9NbFH88jvXL2Oc_Qs.mft
Manifest number: 0B00
Signing time: Sun 01 Mar 2026 23:00:46 +0000
Manifest this update: Sun 01 Mar 2026 23:00:46 +0000
Manifest next update: Mon 02 Mar 2026 23:00:46 +0000
Files and hashes: 1: 5JWsuv5G7y9NbFH88jvXL2Oc_Qs.crl (hash: pdt1GNlhNYoQV/Ln4q/+Jb/bQFNx/rBor5T4EitZF/M=)
2: o45AvLtTXWpofzL1ORN3GJy42Sw.roa (hash: Kb4YnS6qGzK3YXYEHAE784icfkL1K33dQHPHFIXS48c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/440877-319d-4630-a691-7991b4e4bfa2/1/5JWsuv5G7y9NbFH88jvXL2Oc_Qs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/440877-319d-4630-a691-7991b4e4bfa2/1/5JWsuv5G7y9NbFH88jvXL2Oc_Qs.mft
rsync://rpki.ripe.net/repository/DEFAULT/5JWsuv5G7y9NbFH88jvXL2Oc_Qs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:ff:63:a5:e1:1d:64:3e:da:9d:ca:20:44:08:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e495acbafe46ef2f4d6c51fcf23bd72f639cfd0b
Validity
Not Before: Mar 1 23:00:46 2026 GMT
Not After : Mar 2 23:00:46 2026 GMT
Subject: CN=6e2cf86ea3c1bdbd66dff02c5322bf023c01d753
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:3c:02:01:d8:74:e4:07:15:08:81:de:fa:2e:
0b:f5:dd:e9:eb:ed:0d:d0:5b:ce:61:eb:4d:41:42:
34:bd:af:ae:cd:12:60:c9:a2:28:26:af:79:7c:e8:
ac:32:79:27:db:b8:f1:16:74:1c:c4:75:01:63:83:
f6:df:dc:f7:70:dd:92:9b:de:2d:73:15:28:e3:1f:
af:a4:c5:4e:a7:a9:4c:a4:5b:c4:42:1f:80:ee:ec:
dc:76:18:f3:d9:72:e6:76:55:db:74:cc:1d:a3:dd:
71:5a:dc:d9:d9:84:dc:50:05:e0:f5:f3:15:37:68:
d3:b1:74:6d:9a:80:b6:e0:43:77:dd:bb:b9:bb:20:
05:34:de:64:72:f1:e7:38:38:21:a8:85:cc:3f:10:
b8:91:2d:9c:d2:3c:12:a9:1f:54:27:86:ec:a1:79:
50:91:f1:29:c0:b5:21:8a:d4:7d:61:6c:36:7d:64:
b5:46:58:ee:ea:d1:f0:66:7c:7a:98:8b:d7:f3:40:
ee:06:cd:7f:76:be:32:b2:88:22:7b:3a:aa:21:e3:
7f:42:e3:40:38:bd:b9:02:f5:9b:48:a7:fa:c0:2c:
3d:88:ab:0e:20:ed:d6:96:94:6c:3f:4b:e8:c8:aa:
fa:04:a8:3d:aa:26:3f:31:cc:c4:25:50:74:1c:a5:
b0:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:2C:F8:6E:A3:C1:BD:BD:66:DF:F0:2C:53:22:BF:02:3C:01:D7:53
X509v3 Authority Key Identifier:
keyid:E4:95:AC:BA:FE:46:EF:2F:4D:6C:51:FC:F2:3B:D7:2F:63:9C:FD:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5JWsuv5G7y9NbFH88jvXL2Oc_Qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/440877-319d-4630-a691-7991b4e4bfa2/1/5JWsuv5G7y9NbFH88jvXL2Oc_Qs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/440877-319d-4630-a691-7991b4e4bfa2/1/5JWsuv5G7y9NbFH88jvXL2Oc_Qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:bc:c2:37:a7:17:bb:5a:f5:4d:b9:76:51:11:51:e3:5b:26:
91:e5:2b:d2:4f:1b:40:95:fa:3a:0d:fd:a9:0f:09:1f:89:fe:
e5:84:4e:e6:ae:df:52:c7:3e:72:58:25:b5:e4:d5:fd:4d:56:
ea:57:79:54:51:7e:b6:32:b3:ae:13:c2:37:43:74:a1:27:36:
50:96:b4:eb:97:ec:1a:fa:a6:09:78:1e:4b:5f:16:f2:0e:51:
02:36:ac:d4:c1:39:a1:39:7f:4d:9c:36:de:06:ac:a8:ca:1d:
7d:ee:e9:5c:d6:79:a4:bb:28:63:f9:79:00:6b:6c:1b:14:e4:
b0:88:e4:d6:0b:13:f6:d8:8c:26:fd:0f:c3:3e:61:ae:51:b2:
61:c7:e6:55:4b:dd:d8:0e:53:38:60:0f:37:af:d4:86:35:62:
71:48:46:e6:c8:b7:a4:f1:c5:7a:6d:b3:13:f0:22:ef:56:fd:
ca:cb:9f:81:b0:6d:20:6c:44:d3:de:e7:71:e5:02:07:c3:dd:
2c:ca:cb:53:52:05:e5:e2:63:58:50:2a:37:a1:d2:16:bf:b0:
46:62:93:99:43:4f:c0:79:f1:f6:3a:05:d9:5e:e6:36:a4:4b:
98:63:93:ae:73:fd:9e:e8:ff:f9:dd:d2:6f:a3:bd:d9:3e:83:
25:e5:69:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:21:32 2026 by rpki-client