Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/24cab4-0125-4383-85fa-3d388606da12/1/5ag7QLP019MfszaNr6yhGZpEmJI.mft
File: 5ag7QLP019MfszaNr6yhGZpEmJI.mft (raw, json)
Hash identifier: 1X3G7gyNM7188vSVUjonNsRGHCYzvEeevXCJD+COVa0=
Subject key identifier: 32:35:C3:EE:F8:4A:7A:5D:5D:29:45:AE:DB:B8:70:A3:71:8C:46:AF
Authority key identifier: E5:A8:3B:40:B3:F4:D7:D3:1F:B3:36:8D:AF:AC:A1:19:9A:44:98:92
Certificate issuer: /CN=e5a83b40b3f4d7d31fb3368dafaca1199a449892
Certificate serial: 019CACB5641DE3556D30C5C04A7B1FC8025C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5ag7QLP019MfszaNr6yhGZpEmJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/24cab4-0125-4383-85fa-3d388606da12/1/5ag7QLP019MfszaNr6yhGZpEmJI.mft
Manifest number: 085A
Signing time: Mon 02 Mar 2026 04:01:34 +0000
Manifest this update: Mon 02 Mar 2026 04:01:34 +0000
Manifest next update: Tue 03 Mar 2026 04:01:34 +0000
Files and hashes: 1: 5ag7QLP019MfszaNr6yhGZpEmJI.crl (hash: b9DZTja33hx2xraDfrvMH3I3FzKd2rsJjgu8ArzowoQ=)
2: 7iwbrMs-D3nTvbzBJVqEDIRq4NI.roa (hash: NOJagwW5QOv6tMhfF2OqRIEJAaU7K3GfJCIh+Pm2aDU=)
3: 8AM52ao9n7ZIIGEzs-8YgbfhwPQ.roa (hash: lYKzKODJEnnDJ+KgMuq1pi/8YZEFtPtdvl7coiYrhQE=)
4: ABvW-1VqbSDcf540tHClkzOyb9g.roa (hash: tCUTk3vplCMwsVpz24IlWs8R7PpmKQHPhX6E3iUJitU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/24cab4-0125-4383-85fa-3d388606da12/1/5ag7QLP019MfszaNr6yhGZpEmJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/24cab4-0125-4383-85fa-3d388606da12/1/5ag7QLP019MfszaNr6yhGZpEmJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5ag7QLP019MfszaNr6yhGZpEmJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 04:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:64:1d:e3:55:6d:30:c5:c0:4a:7b:1f:c8:02:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5a83b40b3f4d7d31fb3368dafaca1199a449892
Validity
Not Before: Mar 2 04:01:34 2026 GMT
Not After : Mar 3 04:01:34 2026 GMT
Subject: CN=3235c3eef84a7a5d5d2945aedbb870a3718c46af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:45:a0:fc:04:35:74:f2:6f:15:81:f5:7e:74:
7e:1c:10:00:0d:f6:3d:aa:7b:e7:b4:29:6f:ed:33:
d1:51:d6:49:21:f9:5a:9b:04:69:94:5c:b8:f2:da:
d4:4e:d2:3d:e3:6a:41:9f:d4:30:bc:26:9a:af:a3:
d9:19:ec:8c:50:24:f5:b1:c1:55:95:36:b9:b8:ac:
28:ba:00:9b:cb:fc:fc:3f:12:26:7c:64:ec:1b:77:
40:9a:dc:4f:a7:eb:90:a4:87:71:1e:56:d8:16:f1:
9d:5d:e3:59:44:1b:ad:ab:64:13:c9:0f:82:05:59:
0a:bb:db:28:84:17:97:c6:3e:f6:53:67:50:1d:4f:
6f:89:54:e4:ee:31:aa:dc:a1:13:15:d0:81:ff:05:
da:77:cf:51:8b:d8:1d:d5:74:d6:60:1a:0e:cb:88:
3d:d6:7d:7d:bc:af:08:74:f1:33:10:de:f2:5e:27:
f8:2d:88:2f:3e:06:83:0b:17:75:88:85:89:da:38:
cb:00:a6:47:75:73:b5:fd:07:97:0c:ca:75:32:8e:
57:b1:e2:85:fe:70:44:63:83:60:74:15:19:50:2f:
c7:25:62:41:ab:7d:d9:58:13:e7:73:32:92:74:3f:
44:29:5f:be:2d:b8:d3:2a:eb:3f:44:05:71:39:53:
c5:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:35:C3:EE:F8:4A:7A:5D:5D:29:45:AE:DB:B8:70:A3:71:8C:46:AF
X509v3 Authority Key Identifier:
keyid:E5:A8:3B:40:B3:F4:D7:D3:1F:B3:36:8D:AF:AC:A1:19:9A:44:98:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5ag7QLP019MfszaNr6yhGZpEmJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/24cab4-0125-4383-85fa-3d388606da12/1/5ag7QLP019MfszaNr6yhGZpEmJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/24cab4-0125-4383-85fa-3d388606da12/1/5ag7QLP019MfszaNr6yhGZpEmJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:4c:dd:b9:60:2a:21:23:25:3b:c7:2b:ff:ac:d5:1f:85:38:
06:3e:a9:bd:f5:5f:1d:a5:15:e9:f9:e4:cc:d5:9d:7c:82:99:
37:12:b7:ee:cf:3e:87:22:10:29:3c:72:cd:14:ef:16:cb:eb:
5a:0e:f0:3e:29:ff:1c:8e:58:0b:e4:de:ba:af:45:e6:19:84:
4b:c3:6b:ce:26:52:60:de:8b:11:08:3b:54:be:32:a9:9e:8c:
53:8a:c3:c0:c6:d9:73:01:be:b2:20:e1:28:cf:4e:a7:ae:af:
b2:bb:81:15:6c:2f:45:0b:15:0a:be:4b:56:58:67:58:ab:f5:
fa:65:7f:95:fc:5c:79:59:71:0e:36:59:67:f7:ae:67:11:99:
df:7e:0d:27:06:af:73:de:52:3f:a3:66:af:6a:38:fd:62:1a:
00:07:b7:f3:1b:f5:93:9b:d8:01:52:87:7c:00:e0:ba:88:9c:
02:4d:17:30:5f:f0:2f:ae:ed:bb:6d:12:ed:40:93:64:c6:c5:
1e:c6:5d:a4:c8:2a:f6:92:c8:b6:3a:ad:21:84:e9:02:1e:93:
e6:22:57:50:68:78:26:37:20:92:d4:7d:72:78:46:ff:9f:81:
1b:e9:88:d5:2e:25:90:76:01:36:b8:17:ed:b1:12:21:fb:55:
1f:64:93:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:48:54 2026 by rpki-client