Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/f37203-f172-459f-8315-82f25ac6887f/1/5iMpnuR7T2EtuQoU-V5AdnrgZlc.mft
File: 5iMpnuR7T2EtuQoU-V5AdnrgZlc.mft (raw, json)
Hash identifier: MtXzIqwVImhzUHV6v+PXIopPcPHb/kiH29dCO1bMvVg=
Subject key identifier: 07:D3:93:27:D1:3D:D0:8F:C6:6F:9C:89:BE:D2:EE:F0:2A:89:64:38
Authority key identifier: E6:23:29:9E:E4:7B:4F:61:2D:B9:0A:14:F9:5E:40:76:7A:E0:66:57
Certificate issuer: /CN=e623299ee47b4f612db90a14f95e40767ae06657
Certificate serial: 019CAD224700FF54492F8F001CA88EBE048E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5iMpnuR7T2EtuQoU-V5AdnrgZlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/f37203-f172-459f-8315-82f25ac6887f/1/5iMpnuR7T2EtuQoU-V5AdnrgZlc.mft
Manifest number: 14D8
Signing time: Mon 02 Mar 2026 06:00:30 +0000
Manifest this update: Mon 02 Mar 2026 06:00:30 +0000
Manifest next update: Tue 03 Mar 2026 06:00:30 +0000
Files and hashes: 1: 5iMpnuR7T2EtuQoU-V5AdnrgZlc.crl (hash: pMbhegouw9+R551P/28Xp90LpkUI4mV7a0v7KCl0mpM=)
2: kVVy-YWr30S0GSdgLLy6UhLp1JQ.roa (hash: MLFi2OYZr+v/54OGb70/05XIuu/GA7oMfXFZI0ZBmD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/f37203-f172-459f-8315-82f25ac6887f/1/5iMpnuR7T2EtuQoU-V5AdnrgZlc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/f37203-f172-459f-8315-82f25ac6887f/1/5iMpnuR7T2EtuQoU-V5AdnrgZlc.mft
rsync://rpki.ripe.net/repository/DEFAULT/5iMpnuR7T2EtuQoU-V5AdnrgZlc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:47:00:ff:54:49:2f:8f:00:1c:a8:8e:be:04:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e623299ee47b4f612db90a14f95e40767ae06657
Validity
Not Before: Mar 2 06:00:30 2026 GMT
Not After : Mar 3 06:00:30 2026 GMT
Subject: CN=07d39327d13dd08fc66f9c89bed2eef02a896438
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:42:54:56:43:62:c0:f1:38:54:81:33:57:97:
ee:29:6a:2c:77:20:75:fa:51:15:96:52:7c:f4:b1:
19:c5:e5:35:c7:6b:2e:4e:24:50:11:4e:94:3c:91:
f2:66:ab:fe:9d:09:df:9d:46:cc:8b:e6:6c:f4:b3:
07:b7:34:67:10:47:14:fe:8b:33:17:52:d8:38:d4:
79:5d:17:14:17:77:6c:ff:81:47:f3:4f:30:d2:75:
19:83:b9:29:e9:27:f9:68:61:aa:c3:13:ea:74:b1:
70:a9:a1:79:25:18:50:13:a9:7c:d4:4f:88:56:1b:
c7:40:95:00:70:04:7e:a6:e6:19:78:48:77:5d:e2:
3c:86:c1:ef:1a:ff:c4:a5:86:27:2f:b3:26:c0:a2:
ab:9a:e1:5c:ef:3b:55:cd:22:ef:a6:bb:5e:1b:a2:
9b:5f:f7:d9:bb:62:1b:96:07:16:6f:d3:9f:e5:3a:
85:fe:8d:33:ce:e1:7c:4a:7d:3e:5d:67:b2:48:b5:
fa:95:9f:5b:49:36:6f:ae:d6:d6:2a:54:10:1c:69:
ff:d4:cb:95:fd:91:45:70:f0:59:a2:4e:4d:c0:5e:
4a:bc:3a:46:19:48:8a:05:bd:8e:1d:47:c9:21:22:
41:94:53:b4:49:49:ed:8e:9d:48:98:d9:f7:9d:a7:
8b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:D3:93:27:D1:3D:D0:8F:C6:6F:9C:89:BE:D2:EE:F0:2A:89:64:38
X509v3 Authority Key Identifier:
keyid:E6:23:29:9E:E4:7B:4F:61:2D:B9:0A:14:F9:5E:40:76:7A:E0:66:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5iMpnuR7T2EtuQoU-V5AdnrgZlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/f37203-f172-459f-8315-82f25ac6887f/1/5iMpnuR7T2EtuQoU-V5AdnrgZlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/f37203-f172-459f-8315-82f25ac6887f/1/5iMpnuR7T2EtuQoU-V5AdnrgZlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:48:38:c9:d4:6d:01:c2:b9:d1:95:39:68:d3:04:34:d9:a9:
58:3c:c3:c9:a1:1d:1a:90:55:ef:db:25:8c:17:0c:94:5a:f4:
58:e1:f8:81:f3:bc:6e:9a:89:c6:24:75:40:13:ca:0d:ee:04:
a7:ab:00:e0:bf:f9:f2:61:10:01:e2:26:d6:52:84:2b:f4:d6:
a6:e5:31:0b:a9:99:cd:ae:b9:99:2b:63:b3:c6:c7:47:70:47:
d9:a3:86:f5:eb:eb:b0:8e:98:e7:77:1f:9a:de:9d:1d:b2:44:
0f:dd:da:63:e7:08:20:33:fd:48:6c:45:ac:f8:d0:db:58:4a:
c2:2e:00:77:a4:32:18:49:1d:73:ac:c7:64:b9:ec:ab:3a:70:
cd:c2:b4:36:f0:99:70:63:ce:65:a5:a8:a7:dc:48:45:20:18:
b9:b7:95:88:04:69:87:d9:92:de:4c:94:85:a8:ac:1c:b2:c5:
c4:a5:ff:c3:24:8e:ec:cd:ab:36:29:3c:4c:3c:5c:25:65:91:
5e:26:61:30:a3:20:8f:85:71:8a:9c:44:90:4a:1d:f5:a5:48:
da:30:9b:c6:5a:68:f2:70:71:65:96:73:db:32:b9:32:50:70:
dc:3f:bb:3f:c5:d7:cc:23:49:74:10:9a:eb:82:d0:35:ce:53:
d4:9e:e8:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:32:52 2026 by rpki-client