Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.mft
File: 5Gfb5qx1WpBjw2CxUl6ET9Kle5M.mft (raw, json)
Hash identifier: VMeMFinWuijyG4sjtcmuShG3HjsagYpKPM5S8ZPrKp0=
Subject key identifier: 47:63:2D:10:9A:B7:39:F6:75:79:7D:15:A5:ED:7E:38:D7:B4:C8:79
Authority key identifier: E4:67:DB:E6:AC:75:5A:90:63:C3:60:B1:52:5E:84:4F:D2:A5:7B:93
Certificate issuer: /CN=e467dbe6ac755a9063c360b1525e844fd2a57b93
Certificate serial: 019CABA21EE139DEF8F1AF9A8084BB9CFB9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.mft
Manifest number: 0C36
Signing time: Sun 01 Mar 2026 23:00:54 +0000
Manifest this update: Sun 01 Mar 2026 23:00:54 +0000
Manifest next update: Mon 02 Mar 2026 23:00:54 +0000
Files and hashes: 1: 4GxbIuH661wSAuRQff8xB62kOr8.roa (hash: 6Ggl9o0/dEzCv20oHVldt8BKrvybom3vgPN0XshsfwI=)
2: 5Gfb5qx1WpBjw2CxUl6ET9Kle5M.crl (hash: zolMepMHe7CmGN7gwZlBXIAL/Gtu4E5XzU7WmHE7Huc=)
3: LB1iluIm_5YolIXGM1SSD3ekV9E.roa (hash: cqW0TcvZRqAF5iPp1DQLv1tr7B8xMD8GEmBQO/JGsBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:1e:e1:39:de:f8:f1:af:9a:80:84:bb:9c:fb:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e467dbe6ac755a9063c360b1525e844fd2a57b93
Validity
Not Before: Mar 1 23:00:54 2026 GMT
Not After : Mar 2 23:00:54 2026 GMT
Subject: CN=47632d109ab739f675797d15a5ed7e38d7b4c879
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a7:0a:d8:ca:3a:1e:29:57:39:3f:38:47:3e:
4d:71:37:36:a2:c7:2f:0d:df:d1:9b:8b:b0:0d:84:
9d:da:84:d2:17:e9:2c:da:c3:f3:b3:9e:63:6c:cd:
bd:d4:c8:20:17:e3:2f:5b:54:af:56:c1:16:e2:03:
67:c9:15:08:d3:49:2a:34:e3:5a:34:1c:80:50:44:
50:02:b6:f6:c4:96:73:7c:68:a9:7b:a8:d9:56:a5:
82:56:cc:7a:b4:8a:e8:3b:a0:8c:88:33:37:8a:de:
1a:c5:33:d3:e2:08:81:0a:67:98:28:ed:51:8d:cc:
7b:6a:f8:df:f0:c8:f6:c7:6e:13:2d:c2:43:f7:9d:
15:9b:4b:5b:31:1a:9f:87:92:09:c6:3f:45:26:69:
a5:20:d5:25:ba:69:89:bf:b9:14:0c:d8:a5:74:2d:
64:df:f6:71:9d:ca:0e:03:6e:e1:ad:e1:7b:be:51:
3a:45:a7:ad:b1:10:a2:57:06:c2:c0:42:d9:1f:04:
44:08:84:0d:a5:4d:6b:0a:29:7a:73:60:a7:cd:42:
00:25:00:33:be:16:43:0a:d0:a0:5c:fc:7b:02:54:
cb:71:2f:e3:10:c1:8d:49:8c:8f:c3:6a:f8:3a:cb:
de:33:3b:73:22:38:85:eb:be:3e:28:a1:dc:74:95:
88:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:63:2D:10:9A:B7:39:F6:75:79:7D:15:A5:ED:7E:38:D7:B4:C8:79
X509v3 Authority Key Identifier:
keyid:E4:67:DB:E6:AC:75:5A:90:63:C3:60:B1:52:5E:84:4F:D2:A5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:74:cb:5c:fc:a3:24:b2:b7:55:6f:30:46:f9:0e:af:a4:ff:
03:47:3b:ac:22:62:96:5f:b3:a1:04:4e:70:e3:d9:77:75:c5:
3f:4f:1b:47:62:c5:63:91:a6:1d:c2:b0:4d:98:c3:1c:20:43:
03:ae:27:bc:eb:1e:bb:54:4d:0a:22:36:70:f4:e1:2f:30:d4:
61:e7:0a:1e:8a:26:77:f5:91:65:a4:9a:34:07:0c:34:78:20:
0c:b6:c6:6e:24:92:98:c9:07:a3:e0:ce:9d:f4:34:c5:4c:02:
44:8b:3b:4e:07:0c:29:6b:10:4d:13:0b:07:f9:89:3a:2c:c1:
b4:2c:ef:10:2b:c9:b6:53:a4:e5:cb:66:74:7f:a1:b6:a5:46:
a1:f1:9a:3a:f4:fe:7f:87:e8:89:cb:66:27:ae:6d:5e:88:d7:
cf:b2:77:85:eb:77:29:c2:e6:0c:63:93:76:07:fb:1e:78:be:
a7:41:ed:76:2b:2c:f3:1f:40:1e:ee:0e:1b:cd:a2:8f:a3:c8:
e7:bf:a5:4d:2a:d2:44:a9:24:9e:1c:7c:c4:b2:43:44:98:92:
73:ae:0a:9b:02:58:58:aa:02:eb:30:cc:88:04:8a:c6:07:a1:
15:26:c9:9d:63:2b:09:19:e0:0a:85:86:6b:03:09:4a:23:4d:
45:85:32:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:12:42 2026 by rpki-client