Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.mft
File: 5lAiAKbmP3Y5etuU39g0wRaAm58.mft (raw, json)
Hash identifier: 2BgYwH2wwpHZsOPrglpQKCu3U7swe/GgTDTL2Bp31Gk=
Subject key identifier: A7:1A:A0:32:97:9E:DF:41:08:54:C7:DD:E5:53:B2:64:53:7C:CE:A1
Authority key identifier: E6:50:22:00:A6:E6:3F:76:39:7A:DB:94:DF:D8:34:C1:16:80:9B:9F
Certificate issuer: /CN=e6502200a6e63f76397adb94dfd834c116809b9f
Certificate serial: 019CAB349C1F6BD6D43EAE9C6A3ABABF81AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5lAiAKbmP3Y5etuU39g0wRaAm58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.mft
Manifest number: 0ED3
Signing time: Sun 01 Mar 2026 21:01:17 +0000
Manifest this update: Sun 01 Mar 2026 21:01:17 +0000
Manifest next update: Mon 02 Mar 2026 21:01:17 +0000
Files and hashes: 1: 5lAiAKbmP3Y5etuU39g0wRaAm58.crl (hash: PUq6lwRGhPCqjpMcoOpHPKPQOMVHekQfIqJWpO6pptk=)
2: VbpHqTm4InVPfeEhfG1houFen0s.roa (hash: mGh4WVGrOaH38U0K8XkAxbYr95lc2nJQTlFAMtTdwzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.mft
rsync://rpki.ripe.net/repository/DEFAULT/5lAiAKbmP3Y5etuU39g0wRaAm58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:9c:1f:6b:d6:d4:3e:ae:9c:6a:3a:ba:bf:81:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6502200a6e63f76397adb94dfd834c116809b9f
Validity
Not Before: Mar 1 21:01:17 2026 GMT
Not After : Mar 2 21:01:17 2026 GMT
Subject: CN=a71aa032979edf410854c7dde553b264537ccea1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:60:cd:6e:74:5c:9b:72:79:eb:77:8f:39:e5:
ac:5f:a9:31:cb:1f:01:bc:2f:bc:aa:94:2e:a2:14:
97:9d:76:e0:a7:12:51:45:ed:b6:d1:f4:8e:03:0d:
cc:24:3d:a4:90:b8:e2:fe:28:f0:a6:76:83:cd:3a:
c1:62:8b:db:4c:7e:2c:1e:af:99:00:98:2d:38:6b:
29:f6:7f:74:9f:14:77:44:be:d1:15:ab:50:a5:cd:
7a:b5:85:1a:fb:e9:b3:8c:ef:de:55:7e:3c:47:6e:
55:ef:dc:70:f5:58:4a:85:1c:84:42:34:49:f0:cb:
0e:d6:6d:2a:9c:bd:b3:1b:05:fd:38:7a:a3:84:13:
5e:8a:b5:7b:54:3c:1c:63:7c:24:33:9f:56:dd:91:
74:f6:47:4e:78:d1:a4:94:e3:50:1c:16:00:7d:ad:
cf:90:3a:f6:94:ad:09:2b:55:af:d5:3e:4a:55:bc:
c0:ba:79:58:6a:99:59:14:5a:d6:ba:6a:e0:21:e7:
d4:5c:87:ba:a1:96:b6:9e:45:68:43:d6:c5:eb:2d:
bb:95:c8:ba:35:11:6e:b3:86:33:8e:19:91:d4:0b:
d7:02:64:68:fd:95:07:09:63:f7:54:42:0c:37:ee:
4a:61:86:d3:bb:6d:25:b5:11:94:97:76:11:b4:0a:
e1:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:1A:A0:32:97:9E:DF:41:08:54:C7:DD:E5:53:B2:64:53:7C:CE:A1
X509v3 Authority Key Identifier:
keyid:E6:50:22:00:A6:E6:3F:76:39:7A:DB:94:DF:D8:34:C1:16:80:9B:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5lAiAKbmP3Y5etuU39g0wRaAm58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:89:b4:38:81:9e:a1:7a:f0:1c:25:50:76:de:f6:93:50:83:
85:31:19:ac:b5:46:84:2d:62:d6:26:69:43:cb:24:74:dd:08:
41:9e:e8:cf:bd:7a:c6:8c:5c:a5:66:4e:30:73:a6:e7:74:21:
4c:41:80:ee:55:ad:20:93:00:8c:86:57:25:c3:b2:3d:e3:ba:
61:f5:94:45:d2:4d:c3:84:9f:3f:c8:ed:48:d2:9e:7a:ea:02:
b2:fd:10:9c:36:cf:5f:89:31:cf:98:8d:ac:d9:8d:63:7e:b9:
b9:3a:35:ed:4e:b1:a1:ca:43:9e:ab:47:fd:75:85:44:29:d2:
c4:e4:74:4a:cc:f9:ea:af:bd:a2:fa:03:3a:90:bf:87:3e:a2:
1a:07:ac:d9:26:52:8a:d7:e6:76:5d:dc:7c:4f:4d:31:78:fe:
0f:fc:60:73:19:32:88:23:53:e0:e9:14:3a:79:7e:33:68:11:
50:48:8d:04:be:b2:7e:6c:4d:01:2e:da:f8:4a:4e:2c:0a:36:
5a:e2:03:fe:37:75:90:8d:f4:07:4b:ef:35:f0:37:14:39:d7:
71:ff:3f:22:5e:73:97:a4:17:f5:23:ad:73:69:f4:e9:94:1f:
de:e0:75:6d:1e:b7:cc:cd:32:27:be:e2:86:8a:ba:44:54:d2:
5a:db:2a:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:46:16 2026 by rpki-client