Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/d211c2-6ca9-4803-96b3-2e194ac1ad6f/1/r-us3hVZeiga4rspMG3E2m3Pt14.mft
File: r-us3hVZeiga4rspMG3E2m3Pt14.mft (raw, json)
Hash identifier: nM8K3UXBRZojnakXG2ggVlsGD81baFsLfJp5ExzNNdQ=
Subject key identifier: A9:19:07:70:5A:0E:0F:0C:E3:96:7B:1D:81:EE:65:12:61:4B:14:6F
Authority key identifier: AF:EB:AC:DE:15:59:7A:28:1A:E2:BB:29:30:6D:C4:DA:6D:CF:B7:5E
Certificate issuer: /CN=afebacde15597a281ae2bb29306dc4da6dcfb75e
Certificate serial: 019CA8D860D4866A7CC781933890F82E787B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-us3hVZeiga4rspMG3E2m3Pt14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/d211c2-6ca9-4803-96b3-2e194ac1ad6f/1/r-us3hVZeiga4rspMG3E2m3Pt14.mft
Manifest number: 5A
Signing time: Sun 01 Mar 2026 10:01:18 +0000
Manifest this update: Sun 01 Mar 2026 10:01:18 +0000
Manifest next update: Mon 02 Mar 2026 10:01:18 +0000
Files and hashes: 1: jdSx0T-sdrzr500OOr7Atdy3Z4E.asa (hash: nbjDNb/jtcCfwpceFtypmGiC8RlKHHL0LGrtqS6ZCo8=)
2: r-us3hVZeiga4rspMG3E2m3Pt14.crl (hash: OYcuuSGdCnhUqmUwN+BJtO9+asD540mzywjkTIlh2Zs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/d211c2-6ca9-4803-96b3-2e194ac1ad6f/1/r-us3hVZeiga4rspMG3E2m3Pt14.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/d211c2-6ca9-4803-96b3-2e194ac1ad6f/1/r-us3hVZeiga4rspMG3E2m3Pt14.mft
rsync://rpki.ripe.net/repository/DEFAULT/r-us3hVZeiga4rspMG3E2m3Pt14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a8:d8:60:d4:86:6a:7c:c7:81:93:38:90:f8:2e:78:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afebacde15597a281ae2bb29306dc4da6dcfb75e
Validity
Not Before: Mar 1 10:01:18 2026 GMT
Not After : Mar 2 10:01:18 2026 GMT
Subject: CN=a91907705a0e0f0ce3967b1d81ee6512614b146f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:86:c6:7c:c8:a8:ab:80:a9:e3:68:af:f9:be:
52:89:5e:2f:e4:b0:4f:c6:b9:00:2e:3c:1e:79:94:
aa:45:ac:d0:e4:2c:6c:01:77:30:fe:92:39:88:c1:
21:18:15:b3:58:bd:64:f9:d3:8b:44:8e:24:a0:d6:
7b:29:8c:aa:64:67:6e:9c:c4:a6:76:51:e8:aa:38:
8e:f2:40:15:f9:6d:49:a5:04:6f:3c:15:66:0d:64:
53:f8:da:90:99:e0:00:dc:72:89:dc:cd:2f:0a:d9:
5d:c2:e5:56:8e:02:73:d4:36:67:6f:5f:c9:53:92:
4d:f1:79:06:ac:85:f4:b8:d5:bf:6f:28:ad:94:13:
eb:e8:52:28:33:d6:82:b9:0f:57:e7:08:2c:ed:ee:
8c:20:53:a1:62:e8:82:ae:ba:55:ff:bc:7b:21:8c:
87:f6:cc:b8:70:5f:52:2c:3c:1b:fd:73:46:48:dc:
05:c9:c6:5c:10:8f:4a:1b:fa:b6:1d:e5:8d:43:4b:
d9:03:a3:e9:4b:f3:ad:34:b3:c5:5d:b6:31:72:a8:
0b:ec:b1:86:88:a2:3b:01:36:a3:39:ea:e4:88:44:
22:42:7f:f5:1b:91:ab:90:2a:e6:90:ab:c5:b1:69:
4f:26:fa:4b:8d:1c:f5:de:df:9c:ca:f5:01:fb:d3:
4d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:19:07:70:5A:0E:0F:0C:E3:96:7B:1D:81:EE:65:12:61:4B:14:6F
X509v3 Authority Key Identifier:
keyid:AF:EB:AC:DE:15:59:7A:28:1A:E2:BB:29:30:6D:C4:DA:6D:CF:B7:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-us3hVZeiga4rspMG3E2m3Pt14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d211c2-6ca9-4803-96b3-2e194ac1ad6f/1/r-us3hVZeiga4rspMG3E2m3Pt14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d211c2-6ca9-4803-96b3-2e194ac1ad6f/1/r-us3hVZeiga4rspMG3E2m3Pt14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:0d:e0:86:31:35:62:b8:02:64:a7:08:96:2b:62:45:2c:3f:
4f:06:43:69:a9:94:7f:12:6f:1d:1f:e7:e2:32:7a:6a:34:a3:
b9:fa:e6:07:40:c5:ea:75:84:9e:da:79:96:26:9a:a1:6c:7c:
4d:cb:eb:b7:9a:be:7d:53:87:b6:46:41:4c:dd:8e:5f:ee:be:
07:29:46:72:fd:21:0f:98:b8:55:f9:7a:e0:7e:36:80:de:26:
89:8b:53:8d:71:3c:81:c8:74:c9:c4:76:a6:3d:4e:61:9c:5e:
e2:98:dc:74:fd:06:0a:fa:d8:9a:f1:49:73:9d:8e:84:9f:10:
b9:c7:dd:6e:9b:df:f1:9f:ad:d9:8c:70:d1:54:e5:6d:cc:ba:
36:ff:df:05:75:3e:43:ca:af:93:61:14:5f:dd:67:02:78:73:
c0:ff:21:3f:66:c0:64:59:37:e4:91:d3:f0:ec:88:6f:28:7d:
da:bd:7b:12:30:42:fd:54:3c:18:12:4d:9b:65:46:dc:57:4a:
2c:2c:60:67:5e:06:5b:af:ca:6e:d0:49:4d:77:3f:b5:19:d6:
0f:8f:15:c2:11:58:0d:1d:e6:23:e2:9c:b2:73:85:fb:04:66:
cd:d8:76:ec:35:58:1f:61:78:06:1b:3a:95:73:53:6a:f6:12:
22:9c:61:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:23:28 2026 by rpki-client