Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.mft
File: 5-XEyZ1hMQSZgq-a2bhmArKSm7g.mft (raw, json)
Hash identifier: ieBiXNC0FXuAh/zZ6EyQ6NMy2rCAxB4MgWzKTvMT+GM=
Subject key identifier: 7B:46:AF:35:59:B2:99:2B:16:6D:AA:AB:67:81:8A:FD:A3:58:4B:62
Authority key identifier: E7:E5:C4:C9:9D:61:31:04:99:82:AF:9A:D9:B8:66:02:B2:92:9B:B8
Certificate issuer: /CN=e7e5c4c99d6131049982af9ad9b86602b2929bb8
Certificate serial: 019CAB34902E1087C40791D943D3A572CB91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5-XEyZ1hMQSZgq-a2bhmArKSm7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 21:01:14 +0000
Manifest this update: Sun 01 Mar 2026 21:01:14 +0000
Manifest next update: Mon 02 Mar 2026 21:01:14 +0000
Files and hashes: 1: 5-XEyZ1hMQSZgq-a2bhmArKSm7g.crl (hash: vkv20WaQ9ez3UzVL8NvGrQmpw4VugOdo89NHmfpM8SU=)
2: z-3swOq83iQal-4HNbXMWQFTmtk.roa (hash: 2AnlHpZVm/nKwMz5eQ79wwh/KAfXL/jahLqbUXf70ls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/5-XEyZ1hMQSZgq-a2bhmArKSm7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:90:2e:10:87:c4:07:91:d9:43:d3:a5:72:cb:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7e5c4c99d6131049982af9ad9b86602b2929bb8
Validity
Not Before: Mar 1 21:01:14 2026 GMT
Not After : Mar 2 21:01:14 2026 GMT
Subject: CN=7b46af3559b2992b166daaab67818afda3584b62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:34:8a:5a:be:9a:73:46:03:5a:6f:6f:80:62:
9b:18:ac:b6:ee:b3:4e:79:42:c1:66:4e:8a:cf:0e:
73:df:36:c7:78:64:29:95:29:f0:12:ed:2e:b8:f6:
df:48:7e:e9:6e:c1:3f:a9:3f:45:b5:5d:28:1f:55:
52:b9:e7:27:0a:a2:5c:80:95:40:e3:50:c5:13:18:
09:15:37:dd:a9:d5:05:a7:1b:a9:b2:fd:ea:5e:b5:
51:c1:fd:6d:d4:ea:d8:46:47:1a:a6:1d:71:b7:7c:
3e:37:c4:18:b8:31:36:45:92:95:b8:eb:c7:56:c1:
7b:12:74:41:6f:cc:ff:50:09:8b:20:b6:85:c4:dd:
ca:3d:01:52:53:e6:87:61:bf:07:74:98:89:a2:5c:
45:75:57:1d:49:2c:46:d5:f9:63:fc:23:34:d1:6e:
1f:1a:f1:a4:7b:88:35:d5:d4:11:db:12:bd:4e:b3:
ef:4b:3c:fd:52:15:6a:c0:ab:da:49:49:f8:28:28:
c9:db:71:79:73:bd:9a:4c:de:bc:b0:fd:b1:87:5b:
bd:63:ab:e7:28:ee:d7:e7:88:33:6d:87:53:3f:4a:
23:9b:92:2d:5c:2f:5f:40:66:c1:33:af:06:e3:18:
9c:1a:2e:cb:a8:12:e9:8d:0e:35:6b:34:77:14:b4:
3e:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:46:AF:35:59:B2:99:2B:16:6D:AA:AB:67:81:8A:FD:A3:58:4B:62
X509v3 Authority Key Identifier:
keyid:E7:E5:C4:C9:9D:61:31:04:99:82:AF:9A:D9:B8:66:02:B2:92:9B:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5-XEyZ1hMQSZgq-a2bhmArKSm7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:aa:86:ed:b8:6c:7a:04:61:83:95:8e:31:49:ff:e0:1e:06:
a3:f4:d0:cf:8d:74:6c:a6:81:5f:3e:dc:40:96:43:38:02:22:
87:d9:55:b7:4e:fe:48:b5:db:64:f9:66:f8:62:2e:66:2b:6b:
49:43:55:19:2e:09:3a:7f:17:7d:6a:3a:2f:c3:15:e4:79:f3:
40:67:b6:90:fc:e0:b8:c5:ee:36:de:bf:e7:67:25:b0:2c:ab:
a0:10:25:18:4c:d8:3d:be:89:49:a9:cf:a6:62:b2:cc:4b:96:
72:0d:49:b0:83:d9:6d:18:41:3d:5b:dd:f1:39:72:26:a5:1b:
49:d7:21:49:2c:77:cb:e6:f7:63:bb:3d:d6:c4:78:b3:53:74:
ed:c6:81:b7:53:41:de:bc:1a:89:67:09:58:9a:1d:7a:fb:9b:
68:d8:67:54:80:bf:9e:3d:25:48:7c:e6:2a:63:f1:3f:c4:6e:
39:d2:98:eb:94:c5:c6:e8:dc:8a:6f:7e:2e:4d:20:35:29:27:
17:7c:86:4e:af:e7:f1:0e:e3:53:da:93:a8:2c:2b:ce:dc:e3:
d7:86:20:c6:f7:a4:77:1b:55:55:8d:b1:d0:3c:df:37:a3:1f:
ca:03:c1:76:ef:2a:6b:b5:10:e3:c8:a4:91:8b:8f:08:2f:62:
19:96:bb:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:27:20 2026 by rpki-client