Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/ddf1e1-f07e-4bad-84a8-fe27359fd7ea/1/5F0K3ClN02bfatqIATTb0OaIzPc.mft
File: 5F0K3ClN02bfatqIATTb0OaIzPc.mft (raw, json)
Hash identifier: x3WZ6Pr0oKjPWloYcnr0lpdD6yeAYAWcdsUaItRWqrQ=
Subject key identifier: 6D:E1:69:25:46:33:7D:99:60:73:7C:10:26:66:74:03:21:6E:44:EC
Authority key identifier: E4:5D:0A:DC:29:4D:D3:66:DF:6A:DA:88:01:34:DB:D0:E6:88:CC:F7
Certificate issuer: /CN=e45d0adc294dd366df6ada880134dbd0e688ccf7
Certificate serial: 019CAB3486346757C482461CFDC88017B718
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5F0K3ClN02bfatqIATTb0OaIzPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/ddf1e1-f07e-4bad-84a8-fe27359fd7ea/1/5F0K3ClN02bfatqIATTb0OaIzPc.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 21:01:11 +0000
Manifest this update: Sun 01 Mar 2026 21:01:11 +0000
Manifest next update: Mon 02 Mar 2026 21:01:11 +0000
Files and hashes: 1: 5F0K3ClN02bfatqIATTb0OaIzPc.crl (hash: oHRGE2Mlidg5hOnlKVNwQZ4rfi6h0et0iaNRdSjy4WM=)
2: eVHX86Z5BUrMshf-zyfKQYxN0ao.roa (hash: 52NfErShygwUz/Jha+lSZaO5oAHArVutPPK1QEHMLQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/ddf1e1-f07e-4bad-84a8-fe27359fd7ea/1/5F0K3ClN02bfatqIATTb0OaIzPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/ddf1e1-f07e-4bad-84a8-fe27359fd7ea/1/5F0K3ClN02bfatqIATTb0OaIzPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/5F0K3ClN02bfatqIATTb0OaIzPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:86:34:67:57:c4:82:46:1c:fd:c8:80:17:b7:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e45d0adc294dd366df6ada880134dbd0e688ccf7
Validity
Not Before: Mar 1 21:01:11 2026 GMT
Not After : Mar 2 21:01:11 2026 GMT
Subject: CN=6de1692546337d9960737c1026667403216e44ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:d8:c9:6b:e3:17:9f:39:6e:8c:8c:09:19:18:
bd:38:cf:f0:c6:bd:74:d6:e0:d5:e6:ea:87:42:a8:
29:a2:de:32:b3:1a:e0:86:42:db:e9:53:44:1c:4b:
d8:92:05:c7:47:3c:11:5b:d4:ff:de:2f:72:d1:94:
59:44:55:b2:b0:a7:32:78:86:62:3d:af:d4:0a:2d:
5a:0a:ea:db:5d:3f:6b:c1:c0:7a:a8:f7:b3:cc:fb:
9f:a6:2b:aa:4f:df:35:30:61:04:a1:a1:37:94:9e:
f0:60:89:b1:cd:ff:35:dd:ed:28:aa:87:bb:a6:ad:
4c:2c:5d:1b:87:e4:36:5e:21:c2:9f:6b:b1:e5:bf:
02:97:81:4b:44:b8:25:43:bc:ef:68:99:8d:46:fe:
fb:45:d4:79:37:a7:ed:54:cc:b2:b4:38:6e:e9:a3:
b5:04:26:20:37:c4:8c:e5:ac:bc:7b:51:81:db:bd:
1b:44:c2:92:c7:75:6b:fb:ee:c2:11:69:46:c5:d9:
ad:4b:b6:d6:5a:7e:93:59:b7:34:be:05:7f:2e:9b:
7e:d2:da:3c:e5:de:cc:df:96:d9:1c:cd:ae:8a:a4:
3a:6b:45:e5:6c:0c:ac:38:c8:f0:9c:f2:ae:74:46:
b5:ab:02:34:9f:a4:00:c6:94:b0:53:3e:83:84:16:
47:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:E1:69:25:46:33:7D:99:60:73:7C:10:26:66:74:03:21:6E:44:EC
X509v3 Authority Key Identifier:
keyid:E4:5D:0A:DC:29:4D:D3:66:DF:6A:DA:88:01:34:DB:D0:E6:88:CC:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5F0K3ClN02bfatqIATTb0OaIzPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ddf1e1-f07e-4bad-84a8-fe27359fd7ea/1/5F0K3ClN02bfatqIATTb0OaIzPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ddf1e1-f07e-4bad-84a8-fe27359fd7ea/1/5F0K3ClN02bfatqIATTb0OaIzPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:d2:42:cf:b3:66:ab:67:69:c0:43:78:6c:58:59:ee:d1:39:
f9:a1:10:67:2d:ed:db:2f:73:74:a9:61:6e:40:35:65:45:72:
50:1f:e1:09:ad:ba:6c:11:23:71:79:74:4c:40:3a:8e:25:47:
31:ca:bb:a4:05:98:75:2b:34:5a:59:cb:a0:80:4d:79:e0:78:
97:72:9e:2d:8f:03:b5:d2:fc:90:e5:d3:65:7f:8d:72:74:6a:
eb:68:fd:15:69:24:1a:6b:6c:d4:bb:97:c0:de:a2:8c:66:2e:
a9:eb:2b:67:69:ca:0e:e9:d9:82:6c:52:c8:dc:19:5d:50:75:
fb:3e:71:b9:58:77:5b:e5:4f:d0:91:5f:aa:e1:f8:8a:2d:95:
f8:61:7c:a5:4b:d5:d8:99:b9:65:50:8d:c7:c1:20:af:19:ec:
b2:a2:3f:ad:0f:67:8c:b0:06:da:cf:08:c0:53:22:65:c3:e4:
6a:c0:c6:66:93:b5:25:52:74:4d:85:f8:93:0b:3f:71:26:fa:
4b:a3:1a:f4:fc:5d:90:8e:ba:88:f2:99:00:50:a2:6b:3c:33:
f1:66:c0:34:0a:d6:70:b5:c4:b2:af:ea:48:20:25:43:bc:ff:
11:4c:cc:0c:94:6f:65:74:a6:e6:27:fa:3a:6f:53:38:ff:e2:
ca:1b:63:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:41:31 2026 by rpki-client