Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/42a193-b30b-403f-befe-3245450d3742/1/5SrPy9efIyxdcqVQvExm8REHoOI.mft
File: 5SrPy9efIyxdcqVQvExm8REHoOI.mft (raw, json)
Hash identifier: m+C0hsnkr9Ir7eYMlXA3tNi2edtAsv7W2AmqHcDg1Mk=
Subject key identifier: 62:71:F3:2A:19:D9:2B:DE:D3:C4:C7:1B:90:B1:48:06:5C:FB:74:54
Authority key identifier: E5:2A:CF:CB:D7:9F:23:2C:5D:72:A5:50:BC:4C:66:F1:11:07:A0:E2
Certificate issuer: /CN=e52acfcbd79f232c5d72a550bc4c66f11107a0e2
Certificate serial: 019CAC0FAE338E6FE9CB5606CFDC8C7CD6DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5SrPy9efIyxdcqVQvExm8REHoOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/42a193-b30b-403f-befe-3245450d3742/1/5SrPy9efIyxdcqVQvExm8REHoOI.mft
Manifest number: 0564
Signing time: Mon 02 Mar 2026 01:00:34 +0000
Manifest this update: Mon 02 Mar 2026 01:00:34 +0000
Manifest next update: Tue 03 Mar 2026 01:00:34 +0000
Files and hashes: 1: 5SrPy9efIyxdcqVQvExm8REHoOI.crl (hash: qSKeVWehBfnTnDqMplhWpE777TPtCcZAmw2Zx6POTDs=)
2: 7nDTBpJtA6TLPMoPs4MSzkiJ0QU.roa (hash: PkhpqveqXdmcBclNcQ/UeHObmG1C5glRWKTIYCRgTRk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/42a193-b30b-403f-befe-3245450d3742/1/5SrPy9efIyxdcqVQvExm8REHoOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/42a193-b30b-403f-befe-3245450d3742/1/5SrPy9efIyxdcqVQvExm8REHoOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5SrPy9efIyxdcqVQvExm8REHoOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:ae:33:8e:6f:e9:cb:56:06:cf:dc:8c:7c:d6:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e52acfcbd79f232c5d72a550bc4c66f11107a0e2
Validity
Not Before: Mar 2 01:00:34 2026 GMT
Not After : Mar 3 01:00:34 2026 GMT
Subject: CN=6271f32a19d92bded3c4c71b90b148065cfb7454
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8f:1e:39:aa:ac:82:a1:9e:64:78:b2:25:e1:
e0:14:18:ea:93:8c:ef:1d:ce:c5:53:9f:4a:e6:8a:
90:4c:b0:21:a3:6c:2a:8f:07:05:01:89:0a:81:9a:
8e:6c:c5:d3:26:b6:e2:3a:ea:a5:3f:fa:7d:72:94:
59:65:75:63:a5:c7:60:b0:83:5c:6e:1a:fd:8c:d4:
a9:54:e9:35:af:25:74:bf:bd:61:89:5c:2a:78:13:
17:00:38:6a:37:14:77:5c:6b:ec:01:60:0c:3c:0a:
ba:d0:9d:f4:16:08:86:47:fd:1a:37:81:9d:3a:da:
d1:fc:26:b0:34:f3:20:92:d8:83:60:3f:89:61:73:
79:37:e0:3c:05:2b:5e:79:5c:35:f3:02:d0:c9:f2:
86:a6:cd:5f:12:83:8e:5a:5d:4d:44:39:91:e8:e0:
ab:92:96:d6:4f:89:e2:b2:ff:db:7a:be:3e:1e:4b:
dc:79:7e:54:ea:7f:2c:d3:a0:81:8f:5b:30:e2:1b:
11:50:71:f7:c4:7e:1b:74:d1:cb:2b:81:e9:bd:3f:
71:fb:cb:63:98:9f:ac:34:0a:cc:b3:e3:31:48:6f:
79:ac:f0:f8:df:cd:28:a6:c8:43:2c:c1:b5:ce:a7:
02:51:37:56:54:51:26:37:3d:0d:41:4c:7c:8d:fa:
90:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:71:F3:2A:19:D9:2B:DE:D3:C4:C7:1B:90:B1:48:06:5C:FB:74:54
X509v3 Authority Key Identifier:
keyid:E5:2A:CF:CB:D7:9F:23:2C:5D:72:A5:50:BC:4C:66:F1:11:07:A0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5SrPy9efIyxdcqVQvExm8REHoOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/42a193-b30b-403f-befe-3245450d3742/1/5SrPy9efIyxdcqVQvExm8REHoOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/42a193-b30b-403f-befe-3245450d3742/1/5SrPy9efIyxdcqVQvExm8REHoOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:e0:a5:6c:d9:6d:8f:46:f8:50:d9:1a:0e:fd:a0:6a:73:05:
a7:2a:3f:c6:db:1e:c1:36:2f:1c:8f:5c:b4:79:ca:bb:61:aa:
c8:cb:13:c8:b3:96:2c:05:51:4d:79:d4:a8:7f:54:80:59:bf:
3f:9a:9e:c9:f3:f0:97:76:1e:64:2a:50:7b:22:76:0e:b1:7d:
43:aa:30:43:a1:63:6e:58:bc:d3:24:ec:d1:3c:b4:ee:be:c6:
51:02:c8:e0:dd:19:e2:0c:29:41:c5:61:bb:5b:bf:23:4e:00:
8b:14:a8:fe:1a:06:a4:1d:2c:12:33:d6:2a:61:99:b0:4f:5a:
8c:27:f4:e6:d6:0b:9f:53:11:30:b0:36:0a:d9:0c:f3:13:31:
7b:b0:2a:f3:69:72:5a:3a:06:d2:b1:bb:4a:a3:de:ad:37:ac:
f3:9c:39:c3:16:fb:f3:07:e3:38:ee:2f:b9:a4:63:23:42:3e:
08:8a:26:24:6a:a6:10:48:5f:5b:2b:c1:8e:e4:f1:49:23:af:
13:58:ed:ad:20:bc:1d:8d:74:bd:40:9d:98:91:d6:7f:94:c6:
19:ba:5a:57:79:3e:ff:ef:4a:b7:e8:03:b8:a3:5d:10:bb:45:
e7:01:10:98:e3:26:10:ef:02:0f:1c:93:d0:78:a8:a0:3f:78:
99:59:ed:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:16:45 2026 by rpki-client