Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/11aa8c-9591-4cc8-a76a-698e6a8e6708/1/5iL2U5eBxQvEl8egtvXVBe-IudY.mft
File: 5iL2U5eBxQvEl8egtvXVBe-IudY.mft (raw, json)
Hash identifier: XmNgsyrreNr3y+QrAjJVXp/fC0FB3exlBD5IQCPNahw=
Subject key identifier: 7F:92:CE:F7:B0:9E:0E:AF:A3:41:2A:A4:C7:FB:A7:28:43:E3:57:2F
Authority key identifier: E6:22:F6:53:97:81:C5:0B:C4:97:C7:A0:B6:F5:D5:05:EF:88:B9:D6
Certificate issuer: /CN=e622f6539781c50bc497c7a0b6f5d505ef88b9d6
Certificate serial: 019CAA21F008FAFBD7680AB6D9EA84A97782
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5iL2U5eBxQvEl8egtvXVBe-IudY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/11aa8c-9591-4cc8-a76a-698e6a8e6708/1/5iL2U5eBxQvEl8egtvXVBe-IudY.mft
Manifest number: 1397
Signing time: Sun 01 Mar 2026 16:01:16 +0000
Manifest this update: Sun 01 Mar 2026 16:01:16 +0000
Manifest next update: Mon 02 Mar 2026 16:01:16 +0000
Files and hashes: 1: 5iL2U5eBxQvEl8egtvXVBe-IudY.crl (hash: t+aOX+2adZ9MYWyJU1m+SGTCeuSAj5/ddjH9K0B8PHA=)
2: xyBwWE1V7pzMi_BB3s_8J8GEyes.roa (hash: taqunFOi7PSx5Yj4Rqnf0/xGpAdLHU4niJLVDbS+7yI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/11aa8c-9591-4cc8-a76a-698e6a8e6708/1/5iL2U5eBxQvEl8egtvXVBe-IudY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/11aa8c-9591-4cc8-a76a-698e6a8e6708/1/5iL2U5eBxQvEl8egtvXVBe-IudY.mft
rsync://rpki.ripe.net/repository/DEFAULT/5iL2U5eBxQvEl8egtvXVBe-IudY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:f0:08:fa:fb:d7:68:0a:b6:d9:ea:84:a9:77:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e622f6539781c50bc497c7a0b6f5d505ef88b9d6
Validity
Not Before: Mar 1 16:01:16 2026 GMT
Not After : Mar 2 16:01:16 2026 GMT
Subject: CN=7f92cef7b09e0eafa3412aa4c7fba72843e3572f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ca:a4:9a:62:4b:2f:8c:8a:1c:6b:f6:c7:2f:
cf:83:76:15:a5:41:11:b0:37:d0:53:58:35:09:ba:
1b:2d:7b:f5:46:38:22:0a:dc:f7:e2:0b:24:80:be:
62:b2:26:aa:87:99:a6:c8:71:86:32:d7:8f:f7:3d:
73:c9:c4:0f:4a:23:84:1b:92:09:cf:06:68:0f:c4:
28:06:86:11:6a:e4:fd:3f:c8:55:df:da:f7:dd:47:
74:17:58:8c:46:17:42:91:67:35:c1:fe:ab:3f:a5:
04:4f:56:c1:ef:6f:d7:87:94:a2:f2:31:61:36:f0:
bd:bc:a3:69:0c:0a:fd:43:16:07:ea:65:09:02:2e:
f3:dd:e3:c6:ee:de:63:da:87:58:b3:e9:04:95:d5:
e6:b1:da:bf:e5:37:ce:3f:4e:9b:95:9b:db:26:b5:
0a:0f:d5:19:7c:03:3c:47:d6:19:e3:57:b5:2f:24:
7a:47:29:65:62:05:56:6a:b2:e3:b2:51:90:b6:ed:
79:74:2d:07:e8:c6:d0:8a:a2:31:d6:e6:53:94:96:
ce:3d:29:af:d8:05:7b:c6:49:36:e6:75:44:88:aa:
b8:ef:e7:e9:f7:ab:1a:cf:e6:42:d2:fb:6b:1e:ac:
b4:b6:a0:63:7f:30:7a:9a:c0:25:78:f5:1f:d9:41:
23:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:92:CE:F7:B0:9E:0E:AF:A3:41:2A:A4:C7:FB:A7:28:43:E3:57:2F
X509v3 Authority Key Identifier:
keyid:E6:22:F6:53:97:81:C5:0B:C4:97:C7:A0:B6:F5:D5:05:EF:88:B9:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5iL2U5eBxQvEl8egtvXVBe-IudY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/11aa8c-9591-4cc8-a76a-698e6a8e6708/1/5iL2U5eBxQvEl8egtvXVBe-IudY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/11aa8c-9591-4cc8-a76a-698e6a8e6708/1/5iL2U5eBxQvEl8egtvXVBe-IudY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:7a:da:4b:50:ad:87:ae:aa:a1:5d:03:d8:cf:48:8c:88:0a:
be:ec:86:f1:d2:da:e4:5d:b6:3a:99:ed:e3:b7:26:d3:f8:d3:
65:ac:1d:b1:af:ad:3d:41:14:82:86:29:95:5e:4c:a3:7e:e5:
61:76:e9:ac:d6:1b:45:47:eb:04:3c:15:ff:f0:17:bc:5a:bf:
e2:cd:5e:8d:e4:be:67:09:f1:26:bc:52:d8:73:49:11:3f:c8:
1d:3e:c3:9d:64:7b:8b:18:94:f8:3c:ca:2b:4b:56:12:36:fa:
09:3a:2e:67:68:00:fd:1d:08:5b:5e:0d:03:3d:f4:fd:3c:47:
8a:97:c0:ad:5a:37:7a:cd:79:56:91:0f:2d:44:84:d9:a9:b8:
6b:36:1f:97:90:c7:60:91:95:8c:7f:49:8c:bf:db:6c:fd:84:
d0:39:f1:f8:b0:57:1d:af:d2:73:ea:86:ce:f6:42:7f:2e:46:
08:f8:47:96:63:35:e7:b3:e0:bf:24:4a:a0:d5:5d:47:2d:3b:
3c:9d:79:1d:a4:a9:ac:0d:38:eb:46:9d:fb:75:1d:aa:2a:5a:
2f:57:b7:7d:fa:3b:a4:bd:cd:ed:61:ef:d9:2c:f0:d7:20:43:
b4:98:21:bd:3a:2e:58:38:0d:05:5e:6b:e0:f7:88:8c:73:73:
6c:e3:17:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:57:55 2026 by rpki-client