Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/e91813-927e-47a5-b702-de5378461fee/1/s5xw9844MbjyzOidsUon3aoOmcI.mft
File: s5xw9844MbjyzOidsUon3aoOmcI.mft (raw, json)
Hash identifier: Zo8RzXWWEyZKmKz6XlFIvgTxoYdBK9VjnggvQM/orLI=
Subject key identifier: 5C:F6:93:76:F8:09:22:A7:FC:F0:1D:91:50:5D:DE:C4:15:74:51:29
Authority key identifier: B3:9C:70:F7:CE:38:31:B8:F2:CC:E8:9D:B1:4A:27:DD:AA:0E:99:C2
Certificate issuer: /CN=b39c70f7ce3831b8f2cce89db14a27ddaa0e99c2
Certificate serial: 019CAA8FDA22CE563FA90561E7C39AA9B614
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s5xw9844MbjyzOidsUon3aoOmcI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/e91813-927e-47a5-b702-de5378461fee/1/s5xw9844MbjyzOidsUon3aoOmcI.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 18:01:19 +0000
Manifest this update: Sun 01 Mar 2026 18:01:19 +0000
Manifest next update: Mon 02 Mar 2026 18:01:19 +0000
Files and hashes: 1: 4oagPgJG74n6HXB_8ZxEG0Z-zQQ.roa (hash: SihbXUlI6CJuGEx9+oO0M0CfndPW0YeuEcTHzRftuKM=)
2: eR0_T7rJiSO4J7CxpKrWHFxxpOc.roa (hash: EZHtgyXuVhoKYg4ldCwReKSDjf4sa7sqciiJnV/pNsU=)
3: gk6Oi_1ZEpbTJNkrcfzivPseRk4.roa (hash: MTngT7ag+SmUmwcOQxAC0+9glcY1SoAbKgViBkJyexI=)
4: s5xw9844MbjyzOidsUon3aoOmcI.crl (hash: clO8FqRI5J2yrlBwWa3e3pXL1QEZjvI6sOfgX0XEYtA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/e91813-927e-47a5-b702-de5378461fee/1/s5xw9844MbjyzOidsUon3aoOmcI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/e91813-927e-47a5-b702-de5378461fee/1/s5xw9844MbjyzOidsUon3aoOmcI.mft
rsync://rpki.ripe.net/repository/DEFAULT/s5xw9844MbjyzOidsUon3aoOmcI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:da:22:ce:56:3f:a9:05:61:e7:c3:9a:a9:b6:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b39c70f7ce3831b8f2cce89db14a27ddaa0e99c2
Validity
Not Before: Mar 1 18:01:19 2026 GMT
Not After : Mar 2 18:01:19 2026 GMT
Subject: CN=5cf69376f80922a7fcf01d91505ddec415745129
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:eb:60:6f:4d:1b:d7:65:ed:b2:68:d2:9c:a4:
10:d1:5f:3f:53:97:8f:4c:d5:54:a9:fa:2a:88:d9:
d7:16:4c:44:c7:41:05:5f:4c:61:d4:76:e5:9d:b2:
50:32:ab:b8:33:6c:7e:96:3c:d9:34:da:54:0b:cd:
4a:94:62:f3:f9:e0:8e:e2:53:dd:55:7b:c9:88:4e:
07:69:3d:50:8e:5e:f1:bc:71:36:a4:8f:ff:39:49:
9b:03:b9:a1:f3:09:4b:7d:2a:5e:33:5f:a5:bc:5d:
a9:51:67:ec:e2:bb:74:03:3e:1e:25:85:8f:81:70:
60:a3:b4:77:12:b3:2f:25:bc:cf:b1:51:96:dd:01:
59:d6:ab:97:c4:ca:8b:69:a6:03:e7:7e:ab:22:1e:
1f:75:c2:a5:d0:4e:0b:ea:5d:e3:65:b7:e3:16:32:
94:66:30:e6:a7:b0:14:5f:72:d0:40:07:cc:d8:e8:
a6:82:83:0e:d6:4d:82:48:c6:b8:08:36:6c:74:3e:
f9:4f:6a:ee:3f:38:d0:5e:7d:dc:3e:d3:48:29:3f:
25:ae:fe:24:be:cf:cd:65:95:4c:f1:e9:47:04:fc:
5f:c3:de:9a:32:f8:df:84:4d:eb:49:67:02:1a:7c:
43:63:32:1d:0a:9b:e4:11:fd:ac:ec:1e:0a:21:d5:
6c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:F6:93:76:F8:09:22:A7:FC:F0:1D:91:50:5D:DE:C4:15:74:51:29
X509v3 Authority Key Identifier:
keyid:B3:9C:70:F7:CE:38:31:B8:F2:CC:E8:9D:B1:4A:27:DD:AA:0E:99:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s5xw9844MbjyzOidsUon3aoOmcI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e91813-927e-47a5-b702-de5378461fee/1/s5xw9844MbjyzOidsUon3aoOmcI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e91813-927e-47a5-b702-de5378461fee/1/s5xw9844MbjyzOidsUon3aoOmcI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:04:2b:06:ff:83:93:db:27:c2:da:20:db:33:58:e0:b1:db:
cb:01:8f:1a:1d:78:af:4d:9e:76:89:bf:94:5d:f6:54:04:48:
20:f4:f0:c4:d4:1c:72:af:98:28:77:fe:e0:3e:8e:31:40:00:
c2:2e:3e:5a:80:ae:01:b0:ad:e5:3a:ee:fb:9f:8a:4e:38:13:
91:80:a0:b0:f7:99:bb:69:3c:e5:9a:c1:ab:7a:ea:d4:d4:f1:
d5:3d:e7:c7:3b:6c:bd:9d:fc:09:28:44:74:8c:e1:8e:be:bf:
9d:89:8a:d3:f3:46:9a:33:85:f1:a7:9f:41:95:34:62:ee:93:
b6:84:26:da:22:8f:17:cc:84:8f:6b:90:b1:db:4d:c8:86:6a:
e1:e5:52:12:d9:ad:c9:14:15:33:39:ca:29:25:48:c8:7e:32:
b3:dd:38:98:9e:8b:9f:1e:0e:c3:40:fd:70:e8:25:9c:a2:8c:
55:a6:17:88:23:91:d2:43:2b:d7:52:56:be:f0:77:a0:ac:ae:
e7:88:93:3e:04:5e:36:d0:e2:c9:ce:55:20:68:ab:5a:12:dc:
88:59:4e:1f:6d:f9:38:e0:f3:4a:50:22:70:bb:99:12:a3:92:
2e:85:80:61:af:c9:a0:23:80:53:49:23:76:20:87:6c:be:3c:
6c:88:c6:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:36:57 2026 by rpki-client