Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/5c949fM57nd9p0khCpbs7Za38uc.mft
File: 5c949fM57nd9p0khCpbs7Za38uc.mft (raw, json)
Hash identifier: lKOD96A1ZZp0TaWHvsAxvyO7otF9deKzPA8T/NBR4n8=
Subject key identifier: 77:9D:3C:5F:E5:02:78:EA:8B:D9:33:04:35:CF:B3:27:55:2B:20:88
Authority key identifier: E5:CF:78:F5:F3:39:EE:77:7D:A7:49:21:0A:96:EC:ED:96:B7:F2:E7
Certificate issuer: /CN=e5cf78f5f339ee777da749210a96eced96b7f2e7
Certificate serial: 019CAA58FC81C6FACDB50144E24CBB4466D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5c949fM57nd9p0khCpbs7Za38uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/5c949fM57nd9p0khCpbs7Za38uc.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 17:01:24 +0000
Manifest this update: Sun 01 Mar 2026 17:01:24 +0000
Manifest next update: Mon 02 Mar 2026 17:01:24 +0000
Files and hashes: 1: 3MgBeBik8U9z4rsKZn1-j_MeR28.roa (hash: Gwe+UNs1EWrBxp855Kdh43FiD7zP/RqH6MQJ/cKKklc=)
2: 5c949fM57nd9p0khCpbs7Za38uc.crl (hash: fWKa+/hVVYhK1jDa6GdTJJpmFuOh0G+Myr7gE26h1IE=)
3: Xyw_X4GzbwozPV7bmdhreFXRSgQ.roa (hash: bf34zgz/96MaGcKXCeZJRm7nCxKcToEP6ozueo2hqgk=)
4: w0ihDXGfTZCgkEenDCg532cQiaA.roa (hash: FD0rcoCr63ClMKaKqYqlIdIfUuQ7pv+xZCDIgLRthGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/5c949fM57nd9p0khCpbs7Za38uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/5c949fM57nd9p0khCpbs7Za38uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/5c949fM57nd9p0khCpbs7Za38uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:fc:81:c6:fa:cd:b5:01:44:e2:4c:bb:44:66:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5cf78f5f339ee777da749210a96eced96b7f2e7
Validity
Not Before: Mar 1 17:01:24 2026 GMT
Not After : Mar 2 17:01:24 2026 GMT
Subject: CN=779d3c5fe50278ea8bd9330435cfb327552b2088
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:15:d1:3d:ff:c6:25:48:53:02:4b:ef:1c:35:
bd:21:2a:2e:05:4b:a9:9a:0b:0b:7b:a9:66:f8:45:
73:90:3c:f9:76:fd:e5:c8:fe:49:40:04:92:67:e1:
bb:82:c6:ee:bd:bb:cb:4b:a1:1f:68:e7:4f:02:18:
35:e3:21:4e:d2:e6:ec:ca:a9:38:cb:b1:a7:e3:a7:
1e:a5:bf:fa:75:fd:96:38:ea:2b:d0:43:4c:c4:60:
9d:e0:f5:0d:6a:48:e0:42:91:81:7f:fd:de:40:b6:
53:46:8e:ca:29:57:21:ec:41:06:44:e0:97:38:c2:
2b:d9:f0:d6:0c:13:78:34:07:b1:0f:f3:94:ce:d7:
70:20:3b:3e:64:c3:b4:bc:ef:0e:a2:4e:43:64:ba:
9d:df:ca:33:5b:1d:7a:af:de:81:57:42:9d:d8:de:
db:cb:e7:57:2a:38:7a:33:32:9e:19:6b:50:d0:99:
ce:9a:1e:e8:62:43:82:1e:17:a4:23:4d:14:5b:a6:
48:e3:eb:59:bb:05:dd:56:44:6b:92:16:32:f0:d9:
59:ea:96:56:10:4e:e1:58:1d:45:09:e9:a2:0a:15:
dc:6f:55:d4:82:b8:89:74:2e:3c:eb:3c:c2:e4:cc:
aa:62:da:85:60:fe:bf:e4:e1:4c:59:eb:e5:12:bc:
85:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:9D:3C:5F:E5:02:78:EA:8B:D9:33:04:35:CF:B3:27:55:2B:20:88
X509v3 Authority Key Identifier:
keyid:E5:CF:78:F5:F3:39:EE:77:7D:A7:49:21:0A:96:EC:ED:96:B7:F2:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c949fM57nd9p0khCpbs7Za38uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/5c949fM57nd9p0khCpbs7Za38uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/5c949fM57nd9p0khCpbs7Za38uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:d6:99:07:b6:4a:75:36:ae:c0:04:07:be:45:f8:36:d9:a5:
9b:39:68:3b:ee:57:3c:05:67:7a:37:d3:05:35:ef:f7:e1:61:
d1:28:d4:c4:91:ba:67:b9:2e:70:c8:2e:f3:0b:ac:d7:f0:fc:
f4:f1:98:bb:fd:60:e8:19:a2:67:7d:79:ba:b9:48:96:1b:c5:
a4:e4:cf:8d:3b:7c:94:35:47:cf:9d:4b:b2:48:eb:65:c6:67:
1c:77:c8:d7:de:37:93:25:ec:67:bf:66:28:e1:fe:b5:f8:8a:
cc:0c:89:7e:91:ea:18:07:cd:16:24:ac:46:62:96:55:e1:d5:
ae:fa:bc:f0:db:b3:85:51:95:a0:4b:98:49:3a:98:e9:63:5f:
6e:5b:cb:92:09:c5:0e:23:f3:b8:d5:2d:a0:e9:8e:ad:8d:98:
32:58:c1:e3:7b:f0:14:36:4a:bd:1f:f5:8e:58:f3:cd:cc:98:
3f:3d:9d:8e:f1:8b:66:17:46:ce:32:58:96:37:4c:52:a3:85:
86:c7:e6:57:73:5d:cb:a5:9f:5b:15:e5:de:be:90:67:81:0a:
41:18:85:e2:33:1b:68:75:8e:a6:f5:db:0f:d3:a3:f4:58:b6:
f7:95:52:24:c7:f4:01:89:ba:87:13:f9:af:fc:b8:59:f3:af:
be:71:dc:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:26:44 2026 by rpki-client