Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/7ae257-3c1a-4d1b-bd82-b9b4473208fd/1/5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.mft
File: 5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.mft (raw, json)
Hash identifier: 2oB17ws7JOUL8Fz8Iuoy4jlOE5Wt6J9axW9V2y3jyQE=
Subject key identifier: 82:42:8D:17:1D:7E:6F:7C:70:15:BC:C6:D7:9B:4D:46:64:6F:28:84
Authority key identifier: E4:DE:19:FC:EE:29:F7:F1:2E:F0:6C:60:F8:66:0E:D7:00:FE:90:B9
Certificate issuer: /CN=e4de19fcee29f7f12ef06c60f8660ed700fe90b9
Certificate serial: 019CACB4CF20C80E3AA2F9160D6D680C4CA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/7ae257-3c1a-4d1b-bd82-b9b4473208fd/1/5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 04:00:56 +0000
Manifest this update: Mon 02 Mar 2026 04:00:56 +0000
Manifest next update: Tue 03 Mar 2026 04:00:56 +0000
Files and hashes: 1: 5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.crl (hash: CQzde1J1DRAMy/CVms2dbVSeuJQ1NxRskXt12aFi0cM=)
2: IEPEUKY4ypkI5czUw-7D3lVNpYU.roa (hash: UT1ZxTsCU7M0PXyb6IAXHjMFZ0pzwPHMcsChBp8nX6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/7ae257-3c1a-4d1b-bd82-b9b4473208fd/1/5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/7ae257-3c1a-4d1b-bd82-b9b4473208fd/1/5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.mft
rsync://rpki.ripe.net/repository/DEFAULT/5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:cf:20:c8:0e:3a:a2:f9:16:0d:6d:68:0c:4c:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4de19fcee29f7f12ef06c60f8660ed700fe90b9
Validity
Not Before: Mar 2 04:00:56 2026 GMT
Not After : Mar 3 04:00:56 2026 GMT
Subject: CN=82428d171d7e6f7c7015bcc6d79b4d46646f2884
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8f:72:2a:8e:53:27:62:1c:9a:2f:0e:c7:75:
b3:59:60:8c:fd:d9:b9:07:f6:7b:47:99:5f:4c:73:
97:18:84:6c:24:00:20:7c:c0:af:b1:25:a9:75:a2:
5f:85:b4:1c:4f:e4:37:b8:19:20:2e:d1:91:5b:c2:
c2:24:ab:84:c4:a1:5d:ed:f0:3c:92:db:98:fa:6c:
26:82:02:4c:65:64:0b:56:bb:ea:24:af:e3:5c:c9:
5c:08:53:58:67:f8:5f:fc:41:db:fb:45:4c:e2:3d:
7f:90:fc:8b:60:6e:80:a2:e6:17:28:90:af:d8:b0:
fa:3d:06:c8:99:22:83:6f:2a:aa:15:a2:20:ab:08:
67:54:1e:f8:08:a1:9b:3b:d2:24:4d:8b:c1:e8:4a:
c3:df:1b:e4:0c:6b:d9:aa:3f:fe:19:b1:03:97:93:
18:b5:7f:56:f6:94:a3:6f:ad:99:e0:e4:bc:a4:30:
56:48:f4:d7:76:72:0a:05:d7:d9:fd:18:f9:77:98:
22:d3:df:66:ab:96:7e:13:2e:53:e5:f9:ca:88:30:
60:bb:13:e0:97:24:91:5a:d0:27:9b:34:24:56:21:
34:d6:4f:de:c6:27:d0:0d:b4:41:9c:bb:ad:aa:64:
f5:b8:57:2e:65:ff:56:ca:57:01:c7:da:41:ff:f4:
5f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:42:8D:17:1D:7E:6F:7C:70:15:BC:C6:D7:9B:4D:46:64:6F:28:84
X509v3 Authority Key Identifier:
keyid:E4:DE:19:FC:EE:29:F7:F1:2E:F0:6C:60:F8:66:0E:D7:00:FE:90:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/7ae257-3c1a-4d1b-bd82-b9b4473208fd/1/5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/7ae257-3c1a-4d1b-bd82-b9b4473208fd/1/5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:29:05:c6:b3:56:2a:06:46:3f:01:e8:08:8f:42:58:68:e3:
32:c3:41:81:98:93:b8:9e:93:62:91:c8:ba:d9:a7:b0:42:24:
52:60:5b:e0:08:4c:7a:27:13:f1:12:44:39:f1:57:e6:ac:fb:
53:03:48:11:3a:23:6a:f3:8d:c7:31:a1:ff:c4:6a:d8:11:f5:
43:84:d7:07:c9:90:be:ed:ab:5d:89:a0:b3:d2:9a:01:bd:a8:
a8:b6:8c:09:ca:19:b0:b8:de:0f:d8:b4:6b:a5:16:ae:73:02:
d6:a0:f2:1d:f7:68:18:97:76:e5:4c:10:37:b5:4d:e4:18:9e:
ee:06:91:a4:c2:46:35:95:92:1d:8a:32:df:9e:cd:8b:d5:fb:
9e:37:b9:59:07:12:35:c1:d7:15:73:24:fa:d0:81:28:92:24:
dd:0d:50:1a:e2:cf:d4:16:2b:84:7f:c9:d1:4d:52:07:05:83:
a0:49:31:bb:ba:f1:e2:83:f7:b7:b9:7a:92:67:41:bb:90:70:
c3:92:d7:97:74:17:3d:92:10:20:76:35:15:d6:68:2f:bc:11:
11:43:41:7a:f7:74:a2:cd:c3:1c:58:84:d3:31:a3:4c:7e:66:
0e:e5:45:44:03:5a:43:3e:57:3d:dc:73:b4:15:1a:0f:fd:6d:
fb:7a:a7:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:59:06 2026 by rpki-client