Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/795098-a2f0-4733-9709-e6eb919d7a02/1/5I2jNbByU21Y5rfN9M2xZEW8vDM.mft
File: 5I2jNbByU21Y5rfN9M2xZEW8vDM.mft (raw, json)
Hash identifier: plMvl3VLgviI37bs5ryAbnY3391B7hEjhAJIsqUc/Oo=
Subject key identifier: 23:D7:A3:D8:39:7B:D0:9A:84:01:C1:84:B1:99:1A:1B:C6:FC:91:E0
Authority key identifier: E4:8D:A3:35:B0:72:53:6D:58:E6:B7:CD:F4:CD:B1:64:45:BC:BC:33
Certificate issuer: /CN=e48da335b072536d58e6b7cdf4cdb16445bcbc33
Certificate serial: 019CADC7D6DA91419517FA0E74487BFB7EF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5I2jNbByU21Y5rfN9M2xZEW8vDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/795098-a2f0-4733-9709-e6eb919d7a02/1/5I2jNbByU21Y5rfN9M2xZEW8vDM.mft
Manifest number: 0908
Signing time: Mon 02 Mar 2026 09:01:20 +0000
Manifest this update: Mon 02 Mar 2026 09:01:20 +0000
Manifest next update: Tue 03 Mar 2026 09:01:20 +0000
Files and hashes: 1: 5I2jNbByU21Y5rfN9M2xZEW8vDM.crl (hash: 6vam49l8hXmi3kGYpgtz3uacJTNet0SmZGQke8ANTY0=)
2: Kk4LDgdB-B800f9u3tWCJ7yc42M.roa (hash: NS3W/PHz2/PR1iY3gv8q+ys5JQiUE/3iGtRiW45w9jQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/795098-a2f0-4733-9709-e6eb919d7a02/1/5I2jNbByU21Y5rfN9M2xZEW8vDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/795098-a2f0-4733-9709-e6eb919d7a02/1/5I2jNbByU21Y5rfN9M2xZEW8vDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/5I2jNbByU21Y5rfN9M2xZEW8vDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:d6:da:91:41:95:17:fa:0e:74:48:7b:fb:7e:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e48da335b072536d58e6b7cdf4cdb16445bcbc33
Validity
Not Before: Mar 2 09:01:20 2026 GMT
Not After : Mar 3 09:01:20 2026 GMT
Subject: CN=23d7a3d8397bd09a8401c184b1991a1bc6fc91e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:ac:af:33:ee:04:a7:d7:bd:d2:3e:3e:e0:fe:
88:d8:60:da:12:81:76:51:89:44:ca:1a:89:47:ba:
e8:3e:b0:ee:b2:37:76:25:04:77:a6:9e:42:64:c4:
e3:6a:ef:9d:ee:a4:30:23:60:5c:92:ac:43:57:8b:
d0:43:30:13:52:f1:01:f5:d2:50:12:14:37:7d:b7:
c8:00:b9:db:74:ae:9c:e8:20:bb:5a:46:4e:fe:e7:
a4:55:74:e4:41:34:44:5c:f5:6f:a0:20:2f:43:ba:
67:56:5d:09:ce:52:e0:d4:15:89:60:0e:df:f0:ee:
c2:89:a3:65:df:0b:97:9a:30:16:4a:a2:c4:23:2c:
be:f1:09:2e:2a:a6:79:c9:98:37:34:e8:dd:63:40:
e3:29:7b:a6:70:35:6e:ec:5c:36:0a:ff:72:3b:2b:
4c:4a:81:e1:80:ef:5a:b5:00:c5:b5:29:f0:93:65:
a1:cc:1b:00:f5:f4:e2:9a:73:e9:76:18:14:24:3a:
be:30:38:b5:55:c6:f1:c3:77:1e:b1:83:7c:49:11:
ac:f4:ee:cc:fb:1a:a1:a5:f0:bb:60:74:58:0b:dd:
f9:6a:32:18:9e:83:ad:35:ee:8e:66:59:8a:a4:14:
2a:89:c9:69:9e:60:93:2f:09:0f:f6:02:6f:5d:8b:
08:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:D7:A3:D8:39:7B:D0:9A:84:01:C1:84:B1:99:1A:1B:C6:FC:91:E0
X509v3 Authority Key Identifier:
keyid:E4:8D:A3:35:B0:72:53:6D:58:E6:B7:CD:F4:CD:B1:64:45:BC:BC:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5I2jNbByU21Y5rfN9M2xZEW8vDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/795098-a2f0-4733-9709-e6eb919d7a02/1/5I2jNbByU21Y5rfN9M2xZEW8vDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/795098-a2f0-4733-9709-e6eb919d7a02/1/5I2jNbByU21Y5rfN9M2xZEW8vDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:d3:2f:fa:e3:7f:e5:8c:97:d1:11:b3:ed:ca:ba:55:9f:58:
d6:f7:3c:ea:61:a6:06:a6:46:9f:36:75:59:f1:05:2d:80:3b:
5b:04:70:b5:96:cf:5d:8a:9b:c8:63:d2:15:2a:40:c0:35:d3:
c0:86:67:cd:5b:52:81:f1:11:ba:58:5a:9e:92:2e:c6:49:ad:
aa:bf:bb:42:3e:4a:d2:26:3c:9b:fc:a5:3b:01:47:11:ca:64:
8e:6a:17:6a:6a:dc:80:21:f0:de:3f:9a:66:bc:e8:16:19:86:
d3:90:90:2f:49:65:df:34:1d:48:02:30:b6:d7:e1:a9:95:56:
e8:46:be:11:17:e5:c9:81:57:23:50:27:ca:7a:e2:23:9c:86:
1a:d9:fd:af:ac:54:ad:46:da:ab:0b:09:69:ed:80:99:95:8f:
01:8b:e7:46:9b:33:0b:b9:7f:c4:87:4c:93:4b:eb:0f:b7:ff:
c0:86:12:38:8b:7e:2e:b0:45:7e:55:e7:25:ca:3b:34:db:c9:
ee:08:66:59:fb:0b:82:9c:41:69:da:e1:b4:9b:f7:8b:d0:ad:
b1:53:a8:96:96:ea:3f:f2:6d:0b:c3:ea:bb:bb:be:c1:a6:94:
78:e0:5c:03:1e:d1:ac:85:d7:f4:de:c1:62:e4:aa:cc:45:2d:
23:05:ce:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:54:21 2026 by rpki-client