Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/5ea2ff-8d66-4a11-93f8-2e2908588865/1/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.mft
File: 5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.mft (raw, json)
Hash identifier: cGKh526wLOGW/zQL0ke/bXUIpy62waLMkipQc9bCCHQ=
Subject key identifier: 3D:C7:64:AB:84:CA:34:09:89:55:05:E8:1E:F6:72:62:DA:BD:03:BA
Authority key identifier: E4:7E:E5:BE:E3:ED:23:F9:43:76:1E:58:F0:EE:A9:7C:7C:5B:F8:7C
Certificate issuer: /CN=e47ee5bee3ed23f943761e58f0eea97c7c5bf87c
Certificate serial: 019CAA21E87DA2BAD8C7ED138D61CA925C6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/5ea2ff-8d66-4a11-93f8-2e2908588865/1/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.mft
Manifest number: 0BF5
Signing time: Sun 01 Mar 2026 16:01:14 +0000
Manifest this update: Sun 01 Mar 2026 16:01:14 +0000
Manifest next update: Mon 02 Mar 2026 16:01:14 +0000
Files and hashes: 1: 5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.crl (hash: DE5GVpdvfv2uc+6DKVdUR1dl45vGuQwMzUsGQy56UNM=)
2: cHSnTM0TIgMVZV_Pq7Op9CcRxNw.roa (hash: AyIttbsE/zYFTDAmxKD+ND4Xjn5eOSnndB3Dk5UaIJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/5ea2ff-8d66-4a11-93f8-2e2908588865/1/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/5ea2ff-8d66-4a11-93f8-2e2908588865/1/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:e8:7d:a2:ba:d8:c7:ed:13:8d:61:ca:92:5c:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e47ee5bee3ed23f943761e58f0eea97c7c5bf87c
Validity
Not Before: Mar 1 16:01:14 2026 GMT
Not After : Mar 2 16:01:14 2026 GMT
Subject: CN=3dc764ab84ca3409895505e81ef67262dabd03ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:d9:c7:f1:09:03:94:a1:e9:76:c0:f9:81:6e:
ff:d3:1d:e0:5a:b5:40:d3:65:cf:e0:14:f1:70:86:
ea:bc:24:12:60:53:ab:2c:96:db:a9:cb:0f:13:be:
22:8a:08:9a:75:a6:c0:0f:ae:ba:76:11:ee:29:8c:
db:dd:e8:ef:93:b9:03:14:4b:47:07:d6:af:b1:96:
a5:ae:ab:db:d6:bb:69:f4:e0:9c:f6:d8:7c:0b:be:
12:da:58:87:d0:51:96:7f:47:28:ab:be:40:2c:1e:
50:fd:6f:11:ee:1c:db:3f:e6:e3:f1:82:29:d5:0d:
eb:6c:e7:1d:51:69:a1:23:49:ba:c3:67:02:3c:95:
3c:84:57:71:46:cc:bf:af:ca:9f:a5:bc:88:a9:f7:
cb:9b:33:ac:8a:18:34:7d:1e:5f:2e:75:a4:7e:71:
a1:2a:8f:d3:1b:5e:38:86:9c:79:1c:e3:18:d5:b7:
fb:ba:3d:98:ff:9a:77:44:56:94:6f:f0:6e:28:9a:
67:87:bc:4b:a9:f3:03:70:61:7f:27:a7:ae:74:3f:
e9:de:03:e9:89:d3:95:23:1b:94:d9:77:f0:f7:ec:
d9:80:2a:d5:65:e2:f5:2d:8d:e0:06:11:dd:21:83:
74:3d:98:24:e5:91:e7:b7:5c:d7:55:ab:ed:60:1e:
18:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:C7:64:AB:84:CA:34:09:89:55:05:E8:1E:F6:72:62:DA:BD:03:BA
X509v3 Authority Key Identifier:
keyid:E4:7E:E5:BE:E3:ED:23:F9:43:76:1E:58:F0:EE:A9:7C:7C:5B:F8:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/5ea2ff-8d66-4a11-93f8-2e2908588865/1/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/5ea2ff-8d66-4a11-93f8-2e2908588865/1/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:0c:45:00:6f:89:af:5b:26:e2:06:0c:d3:b5:1b:45:3d:7a:
ff:a3:25:75:e2:ce:c0:2f:9f:33:58:d7:a1:71:1e:4f:d0:82:
8a:9e:14:25:9f:2b:49:77:4a:ab:35:12:55:4d:93:11:fa:bc:
93:d5:d4:82:6c:c1:31:37:56:11:a5:15:01:ba:4c:76:e5:4b:
cf:37:06:b7:f5:0d:fb:3d:70:ed:54:e4:37:e5:06:28:11:38:
c5:1c:70:01:30:86:62:88:22:9b:67:d2:a9:11:c5:9e:71:59:
ac:63:e8:13:66:af:db:f6:dc:ee:d1:ee:54:91:01:07:3d:db:
c1:59:66:a4:46:5a:d0:4e:b1:a9:b7:52:be:f3:a5:2d:e7:41:
a5:d9:88:d8:08:f9:33:45:14:e9:66:4c:ad:71:e2:f7:c9:ad:
dc:ea:3c:a2:4b:22:32:40:8d:a2:69:d7:72:81:77:d8:f2:be:
cf:9b:27:3f:fd:79:5c:1d:ce:26:5a:ef:bd:db:4e:be:42:c7:
98:ca:3d:87:62:ac:d3:ea:f2:cf:25:d5:c1:64:10:e3:d8:8e:
a1:ee:60:61:52:52:0d:95:c3:21:b3:a9:06:31:a3:0e:fb:94:
ef:5a:62:46:07:ee:fa:5f:71:85:46:ad:b5:1c:cc:87:6d:71:
c1:89:e6:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:40:05 2026 by rpki-client