Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.mft
File: U5jsPBWxT9itkTy7lWV9jqgufiU.mft (raw, json)
Hash identifier: n72inFfjc/OLLAqfhAy39zDUVxfQoN5TUnOrcD/24Cw=
Subject key identifier: 01:F1:4B:04:8F:89:43:57:27:D7:BE:B3:92:F1:F7:A7:AB:85:92:04
Authority key identifier: 53:98:EC:3C:15:B1:4F:D8:AD:91:3C:BB:95:65:7D:8E:A8:2E:7E:25
Certificate issuer: /CN=5398ec3c15b14fd8ad913cbb95657d8ea82e7e25
Certificate serial: 019CAEA33266D79CCD4310F96FE8726EAA91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U5jsPBWxT9itkTy7lWV9jqgufiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.mft
Manifest number: 052C
Signing time: Mon 02 Mar 2026 13:00:56 +0000
Manifest this update: Mon 02 Mar 2026 13:00:56 +0000
Manifest next update: Tue 03 Mar 2026 13:00:56 +0000
Files and hashes: 1: U5jsPBWxT9itkTy7lWV9jqgufiU.crl (hash: 3IGD2FhBioReB82BEmhPX7kMYbXvbeyWeh/GH4dHr1o=)
2: mVapMmHRdrNnHP7qEe61fUd9MJ4.roa (hash: 7gjqh37t5TbJMLovzwK7uE6PbR35tPIiZgeHv6oUC54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/U5jsPBWxT9itkTy7lWV9jqgufiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:a3:32:66:d7:9c:cd:43:10:f9:6f:e8:72:6e:aa:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5398ec3c15b14fd8ad913cbb95657d8ea82e7e25
Validity
Not Before: Mar 2 13:00:56 2026 GMT
Not After : Mar 3 13:00:56 2026 GMT
Subject: CN=01f14b048f89435727d7beb392f1f7a7ab859204
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e8:29:d2:cb:7c:87:0e:35:e0:55:94:f3:b2:
0a:47:13:61:71:fe:2f:f3:8a:a4:b3:21:cd:de:6b:
6a:d1:8b:13:45:37:a2:68:44:7e:3b:f1:6f:9e:1d:
d3:4d:bb:4a:05:c2:4c:de:53:52:ec:d6:6b:c6:0f:
35:c4:16:c7:ce:46:1e:30:76:cb:55:dc:a9:3b:1e:
d8:93:94:db:6e:11:36:33:e7:50:43:ec:50:28:72:
25:b3:a0:00:6c:9f:c6:f2:73:5b:bc:42:56:19:51:
a2:eb:6d:c9:70:da:66:2c:b4:bb:b5:eb:8f:4f:53:
ca:d2:60:24:96:b1:98:be:7c:03:a1:a0:dc:db:60:
82:b4:54:b0:3a:ee:93:1d:a9:09:92:f2:ef:a7:16:
2d:20:7e:06:3b:6d:2c:96:94:32:b3:04:0d:83:60:
0a:1c:e9:fd:68:60:7a:15:4d:fc:a2:8c:36:73:e2:
d8:a0:f9:84:00:1f:fa:de:a9:49:13:94:0c:f1:f0:
94:3b:a7:16:fb:91:c3:4c:81:7e:0a:de:e9:e2:cf:
86:ec:62:4e:6f:05:29:cd:a6:c7:a0:26:a2:50:56:
62:2b:53:d5:df:30:f9:53:26:d6:7d:ef:0f:12:d6:
9d:a6:16:e7:ed:68:88:ac:ab:e5:23:55:71:d8:50:
4e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:F1:4B:04:8F:89:43:57:27:D7:BE:B3:92:F1:F7:A7:AB:85:92:04
X509v3 Authority Key Identifier:
keyid:53:98:EC:3C:15:B1:4F:D8:AD:91:3C:BB:95:65:7D:8E:A8:2E:7E:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U5jsPBWxT9itkTy7lWV9jqgufiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:7f:d4:ca:85:d4:4a:64:0d:5c:77:be:ee:e3:5d:87:af:27:
1e:96:a4:7c:ea:2c:1d:6b:a9:af:f0:18:88:4b:5b:96:1b:a6:
a4:62:0b:ca:c5:20:64:6d:a0:76:2b:55:b7:ff:b8:90:d1:bd:
74:ca:0d:f7:6f:ba:d4:e2:01:82:48:75:57:6d:81:fc:87:28:
af:00:48:11:88:68:ea:07:1b:93:88:9f:d3:fc:64:2d:f9:3b:
3d:d7:30:06:e9:00:dd:78:9b:62:e6:91:5b:3f:46:e3:a6:3e:
5e:b8:23:46:3b:3f:3a:61:e1:79:ac:ed:ae:7c:17:72:87:fc:
41:e7:8a:fc:d5:0d:ea:cd:2d:b4:c1:68:59:90:70:c9:34:a7:
e7:95:92:c1:98:d1:8b:a1:66:23:0d:1f:10:55:6a:05:2f:39:
92:59:10:c1:8a:01:18:26:4a:cb:c0:1c:b4:e0:dd:3d:b4:33:
67:33:fc:c7:2b:5c:8d:dc:dd:2a:14:e9:f8:8e:27:66:07:4c:
41:73:ce:37:fc:b7:5d:98:69:b4:41:0a:e8:34:e1:a7:ca:37:
8c:39:bc:2e:1e:1f:10:96:0b:79:88:ee:3e:19:53:97:55:6c:
14:e3:a6:33:cc:e1:5e:8f:61:d9:6e:3b:d8:59:8c:05:2d:98:
74:d2:a9:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:27:22 2026 by rpki-client