Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/334c56-2e69-4da2-b01d-030802641c67/1/5D-RsCFSiCv5YF12vqQhqgvU5ig.mft
File: 5D-RsCFSiCv5YF12vqQhqgvU5ig.mft (raw, json)
Hash identifier: ySEuLHUtgNvnnfY23hQ+MpBArRJJjybpGlpvoc6lZOI=
Subject key identifier: 94:6B:9D:9D:21:88:A9:CA:AF:11:72:B9:CF:78:13:EC:7F:75:F2:4D
Authority key identifier: E4:3F:91:B0:21:52:88:2B:F9:60:5D:76:BE:A4:21:AA:0B:D4:E6:28
Certificate issuer: /CN=e43f91b02152882bf9605d76bea421aa0bd4e628
Certificate serial: 019CABD9045ADB9744B39BDEC4A37EC9A2B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5D-RsCFSiCv5YF12vqQhqgvU5ig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/334c56-2e69-4da2-b01d-030802641c67/1/5D-RsCFSiCv5YF12vqQhqgvU5ig.mft
Manifest number: 0E35
Signing time: Mon 02 Mar 2026 00:00:52 +0000
Manifest this update: Mon 02 Mar 2026 00:00:52 +0000
Manifest next update: Tue 03 Mar 2026 00:00:52 +0000
Files and hashes: 1: 5D-RsCFSiCv5YF12vqQhqgvU5ig.crl (hash: EZAW1ZFNy32zmM5wvTWazqFb+WKiCP8MaCk2CHBaXy4=)
2: mFHqDso79bnSGrudnucQz5R41Oo.roa (hash: xaP9Kn1Lx08lI3zRt9f0iOZYpubw0vPg4T0MZuTFXEQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/334c56-2e69-4da2-b01d-030802641c67/1/5D-RsCFSiCv5YF12vqQhqgvU5ig.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/334c56-2e69-4da2-b01d-030802641c67/1/5D-RsCFSiCv5YF12vqQhqgvU5ig.mft
rsync://rpki.ripe.net/repository/DEFAULT/5D-RsCFSiCv5YF12vqQhqgvU5ig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:04:5a:db:97:44:b3:9b:de:c4:a3:7e:c9:a2:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e43f91b02152882bf9605d76bea421aa0bd4e628
Validity
Not Before: Mar 2 00:00:52 2026 GMT
Not After : Mar 3 00:00:52 2026 GMT
Subject: CN=946b9d9d2188a9caaf1172b9cf7813ec7f75f24d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3b:fd:57:96:71:53:cf:58:33:b3:f8:e2:20:
00:76:14:a1:c2:30:fd:1a:ce:5a:03:5d:8c:14:f4:
2e:df:b0:bd:93:9a:b8:58:9e:4d:48:b7:15:62:69:
06:e4:ba:aa:61:7c:4c:93:c3:85:e0:94:35:21:a7:
c5:4e:1c:65:a0:e6:68:3e:b6:8d:00:2e:bf:e6:b5:
b6:e8:be:d4:1c:db:98:c9:f7:02:02:0b:4f:99:09:
39:51:7c:c2:b7:c2:a2:83:b1:cb:74:a0:01:4b:c6:
a0:1c:ec:ed:35:a5:bc:d3:da:fb:82:68:b1:19:6d:
2a:ca:e6:a1:50:fc:0f:dd:6f:55:88:1d:3a:d3:46:
1a:6e:c1:f5:23:bb:20:d2:ab:bf:52:ef:39:37:4e:
f9:c6:c0:06:c5:e8:37:9c:50:72:e9:2e:eb:f7:97:
ce:c1:c4:10:99:0e:1f:fe:22:09:54:b4:ba:fc:7d:
92:94:8f:a9:69:99:f5:40:0e:be:e6:34:88:53:07:
b5:31:6d:d1:18:e4:42:fa:eb:e9:83:0b:57:66:c5:
ab:be:6a:05:f7:83:5a:c3:20:84:56:1f:65:dc:25:
87:2e:24:62:b4:e1:ac:92:58:f1:76:af:75:55:12:
ba:9f:fa:71:73:1d:46:f9:ac:b0:a8:b7:db:d9:cd:
bb:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:6B:9D:9D:21:88:A9:CA:AF:11:72:B9:CF:78:13:EC:7F:75:F2:4D
X509v3 Authority Key Identifier:
keyid:E4:3F:91:B0:21:52:88:2B:F9:60:5D:76:BE:A4:21:AA:0B:D4:E6:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5D-RsCFSiCv5YF12vqQhqgvU5ig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/334c56-2e69-4da2-b01d-030802641c67/1/5D-RsCFSiCv5YF12vqQhqgvU5ig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/334c56-2e69-4da2-b01d-030802641c67/1/5D-RsCFSiCv5YF12vqQhqgvU5ig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:8c:93:93:49:73:7a:5f:d9:d7:02:32:50:d8:b9:99:c3:62:
b9:9b:37:b7:bb:93:31:e3:58:ea:e7:0d:47:35:9e:85:df:10:
19:1f:cf:fb:ce:f8:2b:46:e3:c5:1d:09:83:7e:cb:e2:f0:af:
c0:0d:39:bf:2d:9c:0e:65:0d:53:45:00:a7:33:7a:41:71:0f:
22:ec:2b:50:b2:4b:0b:ad:3b:b8:59:06:2f:be:46:e5:e5:4d:
84:04:e2:cf:2d:b3:80:f8:bd:d9:b9:de:ff:4d:eb:ba:53:35:
c3:42:35:c4:94:54:80:86:ee:71:38:2f:eb:92:0c:6d:04:8d:
0f:96:c2:07:03:2c:d4:cf:7f:a5:d6:db:c8:4a:1a:35:92:cf:
7c:dd:bc:85:ce:79:e6:e9:a6:45:3c:6a:ab:ff:13:55:cd:49:
cb:46:13:ff:5b:ae:d4:03:eb:3a:7d:55:c9:89:a8:1c:42:db:
54:7b:b6:da:28:d7:b9:e2:64:fd:fc:82:d9:77:16:43:51:72:
bd:38:4a:4d:0f:76:06:35:8d:a6:23:28:59:3c:91:fd:55:37:
9b:e9:d1:71:29:03:9c:42:fe:e7:17:4e:1a:63:b3:66:87:f9:
f4:30:db:02:da:fe:a5:1c:b7:62:f9:d6:1e:8a:a9:d8:95:16:
d3:c6:4b:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:24:41 2026 by rpki-client