Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.mft
File: 5sLg0_3CFaOJxwQ8paGga-LFWO8.mft (raw, json)
Hash identifier: ycOI39vBqCoxr4Cb9x5xE6K7uAyq+C2+8rOFviJ2pbI=
Subject key identifier: E6:F2:E0:71:97:D4:06:7F:F6:DF:45:8C:A2:6B:06:AC:34:81:A9:FC
Authority key identifier: E6:C2:E0:D3:FD:C2:15:A3:89:C7:04:3C:A5:A1:A0:6B:E2:C5:58:EF
Certificate issuer: /CN=e6c2e0d3fdc215a389c7043ca5a1a06be2c558ef
Certificate serial: 019CACEBC6A48BF3620545F6F389D7E8D943
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5sLg0_3CFaOJxwQ8paGga-LFWO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.mft
Manifest number: 0AFB
Signing time: Mon 02 Mar 2026 05:00:58 +0000
Manifest this update: Mon 02 Mar 2026 05:00:58 +0000
Manifest next update: Tue 03 Mar 2026 05:00:58 +0000
Files and hashes: 1: 5sLg0_3CFaOJxwQ8paGga-LFWO8.crl (hash: PldcMwDtEMw2NdYD2n8dLrMrwCJpLPyITJW7fYJZkKg=)
2: Mt6QRqdp_WrVkpOaF9FYfafU_u0.roa (hash: JbXZMjWgYdLf0n3lOW4EokZ/+GnyNpMVp+hSo+2kfOU=)
3: dAQCpkChDXivo83BdGELDocTtqk.roa (hash: mZTjMOwz5EP4FW7lbGwFeLhUXKrB721JuRQlVI85W/o=)
4: mhM6I7wL_0dpX-c9Bjn2cXjwD30.roa (hash: sj8SfZTxRtzV3SDjhpPFegvK0EBP3hd2bfneJn45Gsk=)
5: n3vDiE1r5CPV-Kn2A_mpngA-za8.roa (hash: iNr9SnNJNjSupRbLQuu8OWEwivQhXnMqZVhQB/JR6g8=)
6: ohbKePXamXXPoWhEA80w3vW0W64.roa (hash: WchU4jIcRGIq8VSZ7wgyxWpSYmpMduybSatF0MFZlUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/5sLg0_3CFaOJxwQ8paGga-LFWO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 05:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:c6:a4:8b:f3:62:05:45:f6:f3:89:d7:e8:d9:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6c2e0d3fdc215a389c7043ca5a1a06be2c558ef
Validity
Not Before: Mar 2 05:00:58 2026 GMT
Not After : Mar 3 05:00:58 2026 GMT
Subject: CN=e6f2e07197d4067ff6df458ca26b06ac3481a9fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a7:02:dc:53:fa:bf:8a:93:a9:73:98:0f:84:
e6:43:05:a0:91:7a:79:b5:06:6d:36:f6:6e:42:f0:
c0:ce:bb:fd:ff:cb:df:fd:c9:9e:45:44:26:af:bd:
e2:af:37:5b:87:64:0b:0e:41:fb:bd:92:dd:c1:0e:
30:61:49:3d:59:c3:40:1c:80:ff:77:f0:94:20:09:
53:cd:c0:23:5f:a7:f1:9f:b4:fe:d4:e5:26:a0:32:
2b:83:a0:8d:c3:82:11:65:0b:6d:45:c1:01:5b:5a:
e8:d7:d4:90:31:a8:23:d7:d0:7d:0a:f9:b0:03:7e:
b7:72:73:72:ea:bb:e4:49:5e:27:35:04:82:85:ba:
8b:dd:2a:39:87:23:bd:c8:f2:93:a0:04:e9:e2:a0:
34:da:bb:0c:b5:1e:d4:58:aa:f6:33:bb:a8:06:fa:
68:ff:ac:b9:bc:41:95:84:a2:da:9b:91:9a:8a:0f:
1a:4d:c0:0c:94:ed:35:92:2e:8e:d7:80:27:12:2d:
a9:bc:9d:bc:4b:43:f8:fa:ff:90:e4:b7:cf:58:21:
a3:87:4f:9b:37:12:9d:cb:83:1d:e7:21:54:df:d3:
5e:bd:0a:cd:f2:ed:83:bb:f6:3a:71:f9:21:23:a8:
50:63:4d:11:4f:99:eb:68:ad:d7:ae:f9:e1:c1:f2:
dc:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:F2:E0:71:97:D4:06:7F:F6:DF:45:8C:A2:6B:06:AC:34:81:A9:FC
X509v3 Authority Key Identifier:
keyid:E6:C2:E0:D3:FD:C2:15:A3:89:C7:04:3C:A5:A1:A0:6B:E2:C5:58:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5sLg0_3CFaOJxwQ8paGga-LFWO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:0f:e7:7f:a0:ad:5b:83:ec:2c:9a:af:88:e2:fb:87:fe:24:
79:8f:a9:be:97:4a:d0:5c:c9:87:6c:74:4c:b9:1f:76:28:00:
0d:f3:02:de:31:99:d4:75:1e:6c:ea:a8:39:00:bd:85:8c:79:
d9:d6:87:b7:df:f5:80:d2:21:bb:68:c6:18:d5:71:3b:c3:99:
03:f3:bb:17:ed:a0:2e:5b:bc:a1:b2:08:11:13:b4:59:ca:3b:
80:89:b2:82:17:b1:f0:0d:92:8b:00:82:52:62:86:03:36:92:
99:a8:df:61:91:66:1b:9c:e8:87:d3:22:c8:cd:b5:0f:56:f0:
8f:a3:56:1d:c2:d1:ed:4b:8f:7e:ec:98:61:63:63:57:a0:46:
19:d0:ed:6e:fa:e9:f2:12:ab:0f:a0:90:c1:21:a4:6d:cf:ab:
7d:66:fa:8d:59:11:a5:b5:9c:b7:7c:4f:00:1c:2a:b7:0b:43:
42:d8:5d:e3:54:93:79:15:5c:30:46:8e:75:5a:e0:14:a0:28:
74:12:f6:d2:43:83:b7:eb:1d:6c:20:0d:77:01:7f:55:bb:9a:
cd:78:51:49:7d:2a:55:5c:a5:2d:e8:e9:1b:fe:48:11:b7:14:
23:00:4a:49:56:09:0b:0a:57:b0:90:6f:d8:6a:ac:96:a5:14:
74:ba:7d:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:38:38 2026 by rpki-client