Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/841257-9d93-4918-a8ae-72ca13dfad2b/1/5yHQ6mg8xnWULAmPWcQRyGDorto.mft
File: 5yHQ6mg8xnWULAmPWcQRyGDorto.mft (raw, json)
Hash identifier: vgorydUczp4P36IUKYVufpYJ0qhAlNYyDLKvZh7QfPQ=
Subject key identifier: 14:06:85:C9:74:B7:04:39:E7:39:FA:46:C3:73:CF:93:79:DB:59:D4
Authority key identifier: E7:21:D0:EA:68:3C:C6:75:94:2C:09:8F:59:C4:11:C8:60:E8:AE:DA
Certificate issuer: /CN=e721d0ea683cc675942c098f59c411c860e8aeda
Certificate serial: 019CABD9B6D0A1C82AEAD0FC7C36C060AA87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5yHQ6mg8xnWULAmPWcQRyGDorto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/841257-9d93-4918-a8ae-72ca13dfad2b/1/5yHQ6mg8xnWULAmPWcQRyGDorto.mft
Manifest number: 0428
Signing time: Mon 02 Mar 2026 00:01:37 +0000
Manifest this update: Mon 02 Mar 2026 00:01:37 +0000
Manifest next update: Tue 03 Mar 2026 00:01:37 +0000
Files and hashes: 1: 5yHQ6mg8xnWULAmPWcQRyGDorto.crl (hash: PgcUAB5vQSSJsRP6L4SDoVXRVdZM1blq2/zonkdzZss=)
2: STO2kom-zBw1tRgfWNcBAQ37NC8.roa (hash: a0Fmrw1wcNVYzRWWKC14G0JJl+6PihD7ZzdaxPHGENs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/841257-9d93-4918-a8ae-72ca13dfad2b/1/5yHQ6mg8xnWULAmPWcQRyGDorto.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/841257-9d93-4918-a8ae-72ca13dfad2b/1/5yHQ6mg8xnWULAmPWcQRyGDorto.mft
rsync://rpki.ripe.net/repository/DEFAULT/5yHQ6mg8xnWULAmPWcQRyGDorto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:b6:d0:a1:c8:2a:ea:d0:fc:7c:36:c0:60:aa:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e721d0ea683cc675942c098f59c411c860e8aeda
Validity
Not Before: Mar 2 00:01:37 2026 GMT
Not After : Mar 3 00:01:37 2026 GMT
Subject: CN=140685c974b70439e739fa46c373cf9379db59d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:20:d7:8e:7a:4e:ba:73:85:5e:14:1c:31:92:
c7:e5:94:94:dd:ac:38:79:77:7a:16:53:b5:dc:8d:
9f:b1:f2:87:a1:45:bf:4f:49:a9:1f:b2:f0:03:35:
13:5c:ca:f9:70:25:b0:cc:eb:ed:05:ca:73:54:ea:
60:cd:22:24:91:36:50:55:83:fe:6c:96:48:4a:7d:
18:1e:8c:6f:7c:23:ce:0d:34:ed:6e:86:78:ae:ee:
c1:59:64:a5:18:f1:60:58:5e:8f:e7:fc:06:d7:95:
e3:90:fa:59:36:d3:49:2f:41:32:d2:84:37:b9:a1:
0b:3c:22:7c:29:06:e4:fc:15:fa:56:fe:b2:67:dc:
1e:29:75:98:8f:53:9c:e8:54:91:fe:51:e9:fe:41:
81:1c:39:87:50:17:d0:b5:6c:5a:2f:2e:c0:25:db:
8f:bb:01:84:6f:61:af:11:8a:ef:84:e7:4e:e3:7d:
2e:40:f6:94:80:b3:c2:f7:47:9e:1b:31:ab:62:c5:
4d:16:15:ed:05:ac:5d:c2:70:bd:4b:23:62:39:90:
72:06:2e:c0:03:d6:b1:2c:67:2a:22:b0:d8:2a:a6:
06:4d:5c:bd:5e:f6:48:15:01:15:53:3e:26:b7:5d:
b7:b4:9a:f7:f9:f8:ee:30:0d:0a:1f:19:05:1d:41:
05:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:06:85:C9:74:B7:04:39:E7:39:FA:46:C3:73:CF:93:79:DB:59:D4
X509v3 Authority Key Identifier:
keyid:E7:21:D0:EA:68:3C:C6:75:94:2C:09:8F:59:C4:11:C8:60:E8:AE:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5yHQ6mg8xnWULAmPWcQRyGDorto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/841257-9d93-4918-a8ae-72ca13dfad2b/1/5yHQ6mg8xnWULAmPWcQRyGDorto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/841257-9d93-4918-a8ae-72ca13dfad2b/1/5yHQ6mg8xnWULAmPWcQRyGDorto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
da:6d:a9:6e:17:d1:21:a7:b8:3d:01:98:ef:cb:c5:df:a3:04:
a0:f9:45:e2:70:24:31:6b:05:9b:d7:4c:ce:e5:24:47:5c:6b:
81:63:fc:d7:f8:b0:c8:69:d8:fc:23:6c:45:d0:58:70:0b:75:
29:43:e1:c1:3b:5f:4d:35:ba:c7:22:bb:d9:62:b2:2c:40:90:
d4:6f:ba:e7:18:0e:2a:ed:f6:29:62:6d:f6:0c:b6:2b:9a:f0:
3f:b6:c2:a1:5f:94:e5:c4:1d:5a:fd:0f:10:b0:b1:96:f2:56:
62:8f:de:5c:8a:b9:02:40:3b:c3:e4:6d:3e:6c:86:e6:7b:0c:
19:80:20:cc:40:2e:dd:7c:6b:60:c1:a3:55:16:96:cf:7f:48:
53:62:20:c2:77:50:78:ea:8f:40:41:78:1b:88:60:c7:f8:e4:
57:38:98:8c:3e:96:ed:50:15:40:9a:e4:b8:85:43:78:93:b4:
26:04:78:ce:85:de:83:0a:63:61:a6:37:8b:fd:64:d7:13:3c:
91:77:f6:17:15:4c:22:0c:92:ef:a1:9c:dd:a9:5e:99:0e:f2:
bf:c7:54:f4:26:8c:c7:ce:d7:a1:70:1c:13:77:c0:7c:a7:5c:
82:70:17:8d:28:0f:69:29:17:8d:a6:e9:bf:8c:a5:73:4c:6a:
82:e7:78:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:42:37 2026 by rpki-client