Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/226018-0e06-435e-abfd-f5ffee1720c1/1/5QxErpgedJLTuiHihHIIAYA5jWQ.mft
File: 5QxErpgedJLTuiHihHIIAYA5jWQ.mft (raw, json)
Hash identifier: r0HKNb6FumRAJ57xk/Qba9KzxDDJQ/xeTA4h1jXjv1k=
Subject key identifier: 7D:08:91:DC:B8:1F:02:9D:C3:2C:1F:75:5C:D2:85:D5:40:E0:5B:09
Authority key identifier: E5:0C:44:AE:98:1E:74:92:D3:BA:21:E2:84:72:08:01:80:39:8D:64
Certificate issuer: /CN=e50c44ae981e7492d3ba21e28472080180398d64
Certificate serial: 019CAD59CF28A3FE22E79BA8B4551D0AD8E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5QxErpgedJLTuiHihHIIAYA5jWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/226018-0e06-435e-abfd-f5ffee1720c1/1/5QxErpgedJLTuiHihHIIAYA5jWQ.mft
Manifest number: 1846
Signing time: Mon 02 Mar 2026 07:01:09 +0000
Manifest this update: Mon 02 Mar 2026 07:01:09 +0000
Manifest next update: Tue 03 Mar 2026 07:01:09 +0000
Files and hashes: 1: 5QxErpgedJLTuiHihHIIAYA5jWQ.crl (hash: Bc+aQ8Q/l6V6gqwMQw3uyD1E8AMjzJSde3prS5/0d9E=)
2: e69PQnEzusQYZ-DbIlnf2eJlsBE.roa (hash: 4zZYbNl+2JdQefSGJOQxcNxDZWIZe2qXFHWTtyVsmQU=)
3: glYko7Sp1JLcpRtPgtRJtpgechE.roa (hash: I3eBEUtzH+51u13OfXKNVDxOVZpjsrqrlvg0BT9d+Dc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/226018-0e06-435e-abfd-f5ffee1720c1/1/5QxErpgedJLTuiHihHIIAYA5jWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/226018-0e06-435e-abfd-f5ffee1720c1/1/5QxErpgedJLTuiHihHIIAYA5jWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5QxErpgedJLTuiHihHIIAYA5jWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:cf:28:a3:fe:22:e7:9b:a8:b4:55:1d:0a:d8:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e50c44ae981e7492d3ba21e28472080180398d64
Validity
Not Before: Mar 2 07:01:09 2026 GMT
Not After : Mar 3 07:01:09 2026 GMT
Subject: CN=7d0891dcb81f029dc32c1f755cd285d540e05b09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:01:3a:e3:be:71:fc:86:4f:35:cb:13:64:a3:
d6:08:00:05:66:9d:05:25:3e:86:b2:f3:60:53:74:
63:f7:75:62:fb:69:a6:dc:10:63:7c:fc:2a:91:87:
25:2f:d5:fd:f9:66:5b:84:da:09:ff:29:e0:e1:2d:
98:33:05:76:b9:66:a4:e1:fb:5b:13:28:68:e9:73:
ed:e7:e4:a1:39:f5:f8:d8:10:95:0a:52:a7:09:6d:
47:54:79:39:82:ff:dc:35:39:34:9d:f5:e7:7c:d7:
8a:6b:51:26:bb:31:38:0c:74:1c:d6:d0:68:c0:be:
24:c3:57:1a:43:84:87:39:ed:b0:9b:aa:e0:61:96:
dd:07:a9:6e:9a:61:5a:de:b7:c0:a7:d6:a9:88:71:
12:80:43:f9:98:20:a9:62:f2:d6:b0:95:70:e0:32:
e4:ff:16:e9:6f:1a:cd:ef:50:5d:3b:80:8f:7b:ff:
78:0b:f2:dd:d6:fd:8e:ab:cc:1f:8e:0a:4d:c3:da:
40:dc:d2:e1:23:a4:19:19:72:a5:f0:a6:55:2c:37:
a6:81:33:18:a5:7c:d5:fc:1f:15:92:a4:ad:a5:ab:
25:f0:5f:bd:59:97:48:c9:0a:c9:f9:35:98:e1:4e:
17:f6:07:ca:de:9e:f4:33:3e:73:11:6f:fc:68:48:
ae:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:08:91:DC:B8:1F:02:9D:C3:2C:1F:75:5C:D2:85:D5:40:E0:5B:09
X509v3 Authority Key Identifier:
keyid:E5:0C:44:AE:98:1E:74:92:D3:BA:21:E2:84:72:08:01:80:39:8D:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5QxErpgedJLTuiHihHIIAYA5jWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/226018-0e06-435e-abfd-f5ffee1720c1/1/5QxErpgedJLTuiHihHIIAYA5jWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/226018-0e06-435e-abfd-f5ffee1720c1/1/5QxErpgedJLTuiHihHIIAYA5jWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:61:04:22:ca:9e:8b:21:68:ba:01:e6:9e:b7:2a:23:15:f6:
9c:28:3a:b7:d9:c7:91:70:9d:60:9c:cb:e2:ef:06:e3:dc:0d:
f1:d1:71:0a:e4:be:e2:d4:ee:77:98:21:74:00:38:d0:bd:ed:
25:78:fe:89:aa:37:98:15:c2:08:38:af:ff:7f:c4:be:04:03:
61:c7:06:e9:e0:2e:fe:80:a7:27:9d:7e:ed:2b:c5:06:0b:ff:
2d:64:14:f6:69:cd:6d:f0:83:59:b9:e9:0a:f8:16:bb:7d:24:
b3:3d:3c:26:4c:66:9a:c3:7a:41:7e:b8:fc:b9:8a:f6:78:48:
46:40:55:90:d5:f0:9f:45:42:58:38:57:77:47:4c:fa:f7:14:
eb:9a:01:63:29:80:f8:2b:01:e4:5a:ed:e3:6c:d6:ec:e6:a4:
04:a9:80:15:b5:b3:b9:83:2e:3a:98:fa:a8:a5:00:bf:5c:31:
a6:79:04:fd:25:26:e3:9b:fb:7a:25:42:d4:9e:c1:04:fa:71:
8b:89:2a:8b:72:a2:ea:01:11:f0:75:31:74:23:d5:3a:97:06:
e5:b1:32:65:08:98:1f:1d:48:30:98:3f:fe:10:85:4d:74:ad:
97:9a:3b:08:1d:dd:ca:04:a2:5d:25:cd:50:9e:b6:91:23:36:
34:83:4c:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:47:36 2026 by rpki-client