Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/15cb51-4cea-45e3-a760-0371d4b4547a/1/5AsW02mtJ87YVJlGUyjwlbFV9DE.mft
File: 5AsW02mtJ87YVJlGUyjwlbFV9DE.mft (raw, json)
Hash identifier: VlZqbh9zOEhPagTlQ0hrzl5/3qGuVf2ks5i37y51YJc=
Subject key identifier: B4:DF:D6:63:E9:4F:4C:68:AD:B1:E8:C1:B0:33:6E:42:E7:05:FA:BC
Authority key identifier: E4:0B:16:D3:69:AD:27:CE:D8:54:99:46:53:28:F0:95:B1:55:F4:31
Certificate issuer: /CN=e40b16d369ad27ced85499465328f095b155f431
Certificate serial: 019CAD59630A39937CA6194D3A33E80AE157
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5AsW02mtJ87YVJlGUyjwlbFV9DE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/15cb51-4cea-45e3-a760-0371d4b4547a/1/5AsW02mtJ87YVJlGUyjwlbFV9DE.mft
Manifest number: 8F
Signing time: Mon 02 Mar 2026 07:00:42 +0000
Manifest this update: Mon 02 Mar 2026 07:00:42 +0000
Manifest next update: Tue 03 Mar 2026 07:00:42 +0000
Files and hashes: 1: 5AsW02mtJ87YVJlGUyjwlbFV9DE.crl (hash: xeMnBVOie2yRtAvQKJVdIHmqH81vW91i+lxxJAWUR6w=)
2: XIHqllXiQ75dwiTpm0BLVs13ydc.roa (hash: rq4fzIyxgD0rSmb8ZDZH7Qipo9yBXOQk9IG67zBkkr8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/15cb51-4cea-45e3-a760-0371d4b4547a/1/5AsW02mtJ87YVJlGUyjwlbFV9DE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/15cb51-4cea-45e3-a760-0371d4b4547a/1/5AsW02mtJ87YVJlGUyjwlbFV9DE.mft
rsync://rpki.ripe.net/repository/DEFAULT/5AsW02mtJ87YVJlGUyjwlbFV9DE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:63:0a:39:93:7c:a6:19:4d:3a:33:e8:0a:e1:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e40b16d369ad27ced85499465328f095b155f431
Validity
Not Before: Mar 2 07:00:42 2026 GMT
Not After : Mar 3 07:00:42 2026 GMT
Subject: CN=b4dfd663e94f4c68adb1e8c1b0336e42e705fabc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:49:08:bd:f2:45:97:cb:ef:50:2e:ef:26:ff:
a2:6b:e5:ca:d4:5a:1b:01:d6:70:44:02:40:fb:88:
bb:d9:64:fa:11:73:c3:f7:a5:54:d4:85:60:8c:fe:
77:d9:92:b1:24:96:85:2a:dc:bc:49:db:73:80:26:
25:30:71:ac:07:a4:25:75:4e:d3:55:10:05:2e:95:
31:ba:4a:42:45:71:57:ec:2b:1c:22:27:3e:18:e2:
19:f7:f3:a7:4f:00:ff:69:fa:66:be:67:df:1c:21:
9e:c2:79:06:63:d4:2f:b7:99:ff:5b:96:dc:97:11:
4a:b7:72:18:5b:51:54:11:2d:1b:3f:45:2b:46:99:
fb:cd:54:fc:5c:2e:6e:0d:f4:45:db:49:17:2d:20:
69:96:c6:1c:17:19:51:4b:55:9f:53:cf:26:bc:71:
92:85:21:1e:30:b6:40:a1:ec:8c:f3:fd:9c:48:70:
1a:41:6c:18:28:4a:85:a0:63:26:ca:5e:6e:f6:64:
dc:d2:40:e9:2a:7f:9a:8b:d6:c3:e5:e4:dd:39:b7:
9f:b6:a3:f6:a3:65:b8:b8:20:cf:1d:7b:75:e3:d2:
b8:b4:34:9b:e4:e5:05:85:0c:c1:e0:9c:25:e6:37:
d1:11:bb:c4:a2:2e:88:a0:8a:40:e4:4b:6e:9a:99:
cb:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:DF:D6:63:E9:4F:4C:68:AD:B1:E8:C1:B0:33:6E:42:E7:05:FA:BC
X509v3 Authority Key Identifier:
keyid:E4:0B:16:D3:69:AD:27:CE:D8:54:99:46:53:28:F0:95:B1:55:F4:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5AsW02mtJ87YVJlGUyjwlbFV9DE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/15cb51-4cea-45e3-a760-0371d4b4547a/1/5AsW02mtJ87YVJlGUyjwlbFV9DE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/15cb51-4cea-45e3-a760-0371d4b4547a/1/5AsW02mtJ87YVJlGUyjwlbFV9DE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:c6:bb:ae:5d:5f:93:1d:30:9e:14:9d:01:e3:43:fe:f9:f8:
97:cb:6c:56:0f:8d:4d:c8:9b:98:41:d4:bb:2f:9d:37:97:e4:
a9:e4:bc:21:a4:7a:63:e4:cd:da:04:d6:02:dd:3f:f7:29:cf:
c0:f5:4d:f1:13:85:b1:81:ed:01:c4:4f:16:ce:14:c6:32:27:
95:c0:be:4a:ef:ee:93:df:fe:4f:08:81:30:05:e5:aa:8a:d2:
a3:b9:7f:7b:b3:c4:83:28:19:ba:e5:62:b8:e4:05:83:64:70:
5c:0f:8e:6e:d2:6c:3c:9a:66:fb:43:51:43:d3:dd:61:b1:24:
97:c8:14:7e:90:17:97:f5:81:f1:c5:ac:4b:11:bc:24:2e:b9:
c1:d4:74:53:16:30:3a:27:26:d4:e3:1b:9b:1b:3f:84:28:07:
9c:e9:3f:ec:2f:0a:5d:47:f5:cf:d8:98:a4:3e:5a:68:63:ac:
6a:ca:35:dc:0f:e8:98:22:e1:c3:3b:68:81:af:f1:07:3e:c8:
c8:d0:ee:3a:b2:02:24:f7:8d:6c:73:be:42:0d:bc:08:ce:db:
b2:d5:ea:fd:9c:c1:49:37:b5:48:af:25:4e:6a:3e:6f:78:63:
7f:23:36:b3:13:ef:9d:23:9f:ac:d6:f1:33:d9:03:5e:e8:bf:
aa:c9:12:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:56:36 2026 by rpki-client