
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/9ef60a-73ee-40e1-9006-c0b3b0f54beb/1/5GWsyQgJ77RczaJQoQV2GElLhus.mft
File: 5GWsyQgJ77RczaJQoQV2GElLhus.mft (raw, json)
Hash identifier: nysWnl/1A3SLU0SnGLqtpTqDfaKEeB8vMkg4oaxk4uo=
Subject key identifier: F0:0B:FD:20:74:46:BE:34:12:A1:47:48:DF:29:76:71:D4:39:8F:F5
Authority key identifier: E4:65:AC:C9:08:09:EF:B4:5C:CD:A2:50:A1:05:76:18:49:4B:86:EB
Certificate issuer: /CN=e465acc90809efb45ccda250a1057618494b86eb
Certificate serial: 019CA90EB64BBC7414A917AA5F3018C8BD8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5GWsyQgJ77RczaJQoQV2GElLhus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/9ef60a-73ee-40e1-9006-c0b3b0f54beb/1/5GWsyQgJ77RczaJQoQV2GElLhus.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 11:00:39 +0000
Manifest this update: Sun 01 Mar 2026 11:00:39 +0000
Manifest next update: Mon 02 Mar 2026 11:00:39 +0000
Files and hashes: 1: 2SzXHkxCLVLxwqT1VXOIbH7zS1U.roa (hash: aCYVx/y4t8hASeqhW625AjPBxOCwC/8c0JG862QvXD0=)
2: 5GWsyQgJ77RczaJQoQV2GElLhus.crl (hash: jTWAY6S2xG0CVKScHH7U1YUUyM/w6SQkvk5LELWKw5s=)
3: xprnXzLHdgCC1ErposCq6vG3jPU.roa (hash: yXNFomv+hurOUmhTIqZgZ4hQnilyhZpNY276iiDrBf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/9ef60a-73ee-40e1-9006-c0b3b0f54beb/1/5GWsyQgJ77RczaJQoQV2GElLhus.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/9ef60a-73ee-40e1-9006-c0b3b0f54beb/1/5GWsyQgJ77RczaJQoQV2GElLhus.mft
rsync://rpki.ripe.net/repository/DEFAULT/5GWsyQgJ77RczaJQoQV2GElLhus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 11:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:0e:b6:4b:bc:74:14:a9:17:aa:5f:30:18:c8:bd:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e465acc90809efb45ccda250a1057618494b86eb
Validity
Not Before: Mar 1 11:00:39 2026 GMT
Not After : Mar 2 11:00:39 2026 GMT
Subject: CN=f00bfd207446be3412a14748df297671d4398ff5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:02:ce:f7:85:8f:d4:28:c9:47:d9:2f:8b:fc:
a0:0e:67:88:8d:52:69:eb:c5:fc:88:06:2d:6e:2c:
cb:ed:4f:87:e8:fa:e0:ac:43:d0:c6:9d:53:32:41:
c0:ac:41:55:06:1e:dd:d8:53:11:ec:f6:f0:61:6a:
dc:cd:90:dd:0f:65:d5:6f:b5:56:c1:9c:39:cd:1c:
fd:20:8c:1a:22:ff:4c:e7:fb:7c:1f:9f:d7:cc:24:
a1:56:09:10:13:d9:09:75:e7:91:f0:8a:0b:10:86:
25:2e:1f:61:2f:01:c1:bf:60:b1:54:97:5b:da:03:
64:17:95:5d:f2:c8:65:c4:5c:1d:0c:94:93:a4:a0:
03:b9:a6:57:ed:e8:43:b4:95:37:e9:2b:32:7d:63:
81:93:ca:d1:14:0a:25:61:d1:1e:3a:c5:58:8f:ba:
7f:4f:d1:53:a7:0b:ba:3b:7a:a8:02:91:53:a3:f4:
d4:db:ec:b2:37:98:14:80:3b:90:51:86:f4:96:fb:
22:14:0b:a2:a3:09:4f:50:86:2c:cb:d5:7f:4a:55:
3e:5e:1f:3a:94:22:ba:f8:c2:6e:e7:c4:3e:b0:59:
04:40:5c:22:15:77:35:a8:17:09:9b:5d:81:40:77:
d7:fb:e7:61:45:64:ea:ba:05:79:a9:b0:e6:3d:3d:
c4:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:0B:FD:20:74:46:BE:34:12:A1:47:48:DF:29:76:71:D4:39:8F:F5
X509v3 Authority Key Identifier:
keyid:E4:65:AC:C9:08:09:EF:B4:5C:CD:A2:50:A1:05:76:18:49:4B:86:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5GWsyQgJ77RczaJQoQV2GElLhus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/9ef60a-73ee-40e1-9006-c0b3b0f54beb/1/5GWsyQgJ77RczaJQoQV2GElLhus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/9ef60a-73ee-40e1-9006-c0b3b0f54beb/1/5GWsyQgJ77RczaJQoQV2GElLhus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:cf:49:63:66:68:84:5a:bf:05:45:ab:65:2e:67:22:0f:59:
4a:bb:2d:13:fb:1f:70:70:97:82:ee:5c:ac:06:6f:64:df:4d:
2d:38:a7:fa:21:30:21:03:8a:95:00:c1:8d:51:fa:f5:a3:91:
68:5b:21:b5:e2:55:c5:06:07:e7:43:c9:04:42:d1:66:36:bb:
db:7f:58:74:b4:a0:67:1a:c3:ec:19:1d:2c:98:be:11:01:df:
8f:63:e5:82:92:54:e6:51:8e:b3:95:49:92:7d:3e:a2:32:c9:
c7:d1:5b:89:04:2d:02:b4:25:26:e0:68:5c:57:f6:ae:1f:24:
97:7e:65:08:7e:c8:4f:e5:9c:5f:9c:03:b5:20:48:ca:52:16:
2d:55:1e:a0:d6:e7:d8:a0:b1:1d:56:98:f9:45:64:8f:fc:22:
5c:11:f9:aa:3f:5b:51:37:85:0a:21:ca:a2:cc:af:e3:67:9f:
a8:bd:de:ef:1d:92:da:7d:38:af:24:66:2b:49:3e:b2:77:61:
84:36:73:88:94:4e:26:34:bb:8d:a5:7a:4b:35:a9:cd:b4:bc:
19:ed:37:09:98:b8:11:db:00:ac:dc:2c:9b:30:5b:8b:e6:fd:
5e:52:fb:02:22:62:c2:cd:c3:17:53:ef:28:92:7a:ce:a2:ec:
d6:b6:9e:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:49:49 2026 by rpki-client