Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/e7b70d-6001-428b-add0-37c210bab7a0/1/5KpTP0dfB59zX-sZRoTBjVrqYy8.mft
File: 5KpTP0dfB59zX-sZRoTBjVrqYy8.mft (raw, json)
Hash identifier: DEBX7192UY/wfoo7m1nXGsRorVBbLOTpT3TBjFf/OKo=
Subject key identifier: 1D:80:39:F9:C0:16:D0:32:85:50:20:E0:E9:35:E4:A0:D0:5D:13:45
Authority key identifier: E4:AA:53:3F:47:5F:07:9F:73:5F:EB:19:46:84:C1:8D:5A:EA:63:2F
Certificate issuer: /CN=e4aa533f475f079f735feb194684c18d5aea632f
Certificate serial: 019CADC740A998AFDF5D62527A2DD538D7F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5KpTP0dfB59zX-sZRoTBjVrqYy8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/e7b70d-6001-428b-add0-37c210bab7a0/1/5KpTP0dfB59zX-sZRoTBjVrqYy8.mft
Manifest number: 60
Signing time: Mon 02 Mar 2026 09:00:42 +0000
Manifest this update: Mon 02 Mar 2026 09:00:42 +0000
Manifest next update: Tue 03 Mar 2026 09:00:42 +0000
Files and hashes: 1: 5KpTP0dfB59zX-sZRoTBjVrqYy8.crl (hash: axP6gg+P6YzAzYHESuzmXesGQPDAB2ZJ4DxrWLYZoic=)
2: a2gamHaBwEzpT1CSDGHEmtwoaQA.roa (hash: Bd+1bTMu0PVOG6jw2K3AGQhoYyVntE65fkDtSywP1hU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/e7b70d-6001-428b-add0-37c210bab7a0/1/5KpTP0dfB59zX-sZRoTBjVrqYy8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/e7b70d-6001-428b-add0-37c210bab7a0/1/5KpTP0dfB59zX-sZRoTBjVrqYy8.mft
rsync://rpki.ripe.net/repository/DEFAULT/5KpTP0dfB59zX-sZRoTBjVrqYy8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:40:a9:98:af:df:5d:62:52:7a:2d:d5:38:d7:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4aa533f475f079f735feb194684c18d5aea632f
Validity
Not Before: Mar 2 09:00:42 2026 GMT
Not After : Mar 3 09:00:42 2026 GMT
Subject: CN=1d8039f9c016d032855020e0e935e4a0d05d1345
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b1:cd:4e:7a:33:13:12:c2:48:5c:bc:27:fc:
e8:25:41:f9:cf:93:db:c7:e9:0d:33:00:3c:11:b9:
3f:15:47:d7:0f:69:d0:24:95:f8:d3:6b:0e:94:d0:
65:73:ae:99:25:80:8b:8c:d5:3a:52:ff:a0:67:cb:
63:5d:60:ee:ae:f7:c9:bc:fd:eb:30:ff:68:b8:8a:
09:7e:75:7b:df:f3:04:23:9f:ba:6e:ab:d8:09:85:
5b:17:a7:8f:16:70:25:6f:b8:1e:cc:d1:b9:8b:67:
46:a7:72:ba:f6:c4:c6:26:da:79:55:ad:3b:5a:5f:
df:a4:41:64:c1:ec:26:b1:a8:1c:bb:16:d0:33:17:
ef:4d:f0:8c:a2:6f:d5:72:da:8a:2d:7f:a6:c4:57:
f5:d1:c0:2b:ab:17:38:03:c0:7d:06:da:f1:0b:9a:
d2:3a:53:d0:c2:11:c9:b6:43:77:02:b4:6d:3e:e3:
10:39:50:18:53:41:f8:84:40:e6:27:b0:cc:2d:6a:
a6:e1:65:d1:47:a8:a1:22:37:fb:9d:d7:98:35:b9:
64:61:a4:b6:83:85:04:e0:8c:a6:b1:77:54:b3:7e:
83:e2:55:96:19:02:3c:18:b1:41:3e:a3:8c:2d:eb:
3f:66:ec:53:56:2a:d0:72:03:73:40:66:0c:ad:80:
f0:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:80:39:F9:C0:16:D0:32:85:50:20:E0:E9:35:E4:A0:D0:5D:13:45
X509v3 Authority Key Identifier:
keyid:E4:AA:53:3F:47:5F:07:9F:73:5F:EB:19:46:84:C1:8D:5A:EA:63:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5KpTP0dfB59zX-sZRoTBjVrqYy8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e7b70d-6001-428b-add0-37c210bab7a0/1/5KpTP0dfB59zX-sZRoTBjVrqYy8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e7b70d-6001-428b-add0-37c210bab7a0/1/5KpTP0dfB59zX-sZRoTBjVrqYy8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:79:f9:c4:a1:c1:97:0b:ce:77:57:54:51:cc:04:10:37:58:
c4:c4:7d:7c:fe:80:9c:34:3b:31:fc:0c:a7:b8:08:a4:56:b0:
74:a1:01:43:f9:65:f9:65:0b:b7:e9:66:fc:53:df:c0:15:88:
ab:d9:2a:d8:3b:b3:ec:06:ea:10:fe:d0:18:09:ad:54:b1:00:
4e:9c:65:d6:f3:fd:a0:51:19:ae:d7:a8:dd:80:63:16:89:3b:
3c:cd:a9:16:66:c9:29:d2:db:34:7b:2c:a4:a2:db:7a:bb:c7:
a0:3b:f6:ce:f5:23:53:22:3c:06:9a:a1:7b:8c:a1:6a:07:08:
ef:c3:fb:b5:2d:07:81:f8:3b:6d:59:2c:c1:ea:9d:a1:37:b0:
14:de:9b:1d:7c:b9:3b:15:d4:1d:95:57:b4:2c:75:3b:9a:0b:
67:70:11:33:fd:a8:82:cd:d5:54:bf:db:f9:96:1f:9a:64:78:
1d:69:13:75:97:50:82:a6:a4:11:e6:9b:5b:83:80:ab:6c:0a:
ab:ac:fa:77:a3:24:e5:55:a5:a3:14:18:81:75:9d:71:89:86:
05:12:b7:8f:f8:d8:d5:3a:51:87:30:a1:82:93:8c:04:e0:02:
b1:80:34:f4:2d:0c:64:da:3b:a9:a9:53:b7:60:00:9b:8b:1b:
4c:03:80:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:04:22 2026 by rpki-client