Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/3b74f0-e753-4669-85fd-822eaf0d22b0/1/m5TSR2sxUeHn8DYNzk84USXu1fs.mft
File: m5TSR2sxUeHn8DYNzk84USXu1fs.mft (raw, json)
Hash identifier: bAYbECRuLv6bfE60XBUMbfVgDNI7EdfeVdDdiipQQVw=
Subject key identifier: 7E:0B:A9:F1:5C:C7:AC:2A:65:C8:00:CF:44:18:19:FB:F4:FF:53:DE
Authority key identifier: 9B:94:D2:47:6B:31:51:E1:E7:F0:36:0D:CE:4F:38:51:25:EE:D5:FB
Certificate issuer: /CN=9b94d2476b3151e1e7f0360dce4f385125eed5fb
Certificate serial: 019CABD9E8C76A606CA525EA91144327C50F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m5TSR2sxUeHn8DYNzk84USXu1fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/3b74f0-e753-4669-85fd-822eaf0d22b0/1/m5TSR2sxUeHn8DYNzk84USXu1fs.mft
Manifest number: 1845
Signing time: Mon 02 Mar 2026 00:01:50 +0000
Manifest this update: Mon 02 Mar 2026 00:01:50 +0000
Manifest next update: Tue 03 Mar 2026 00:01:50 +0000
Files and hashes: 1: m5TSR2sxUeHn8DYNzk84USXu1fs.crl (hash: W+/uT052Mp/ykTdodz/OBszZR+boKsZdfkCGRTMaMBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/3b74f0-e753-4669-85fd-822eaf0d22b0/1/m5TSR2sxUeHn8DYNzk84USXu1fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/3b74f0-e753-4669-85fd-822eaf0d22b0/1/m5TSR2sxUeHn8DYNzk84USXu1fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/m5TSR2sxUeHn8DYNzk84USXu1fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:e8:c7:6a:60:6c:a5:25:ea:91:14:43:27:c5:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b94d2476b3151e1e7f0360dce4f385125eed5fb
Validity
Not Before: Mar 2 00:01:50 2026 GMT
Not After : Mar 3 00:01:50 2026 GMT
Subject: CN=7e0ba9f15cc7ac2a65c800cf441819fbf4ff53de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:2f:36:2f:f0:85:d4:ac:87:25:af:db:ee:4e:
64:85:cf:10:61:eb:c6:4c:69:16:ed:4f:ca:a4:bc:
fd:34:90:cb:69:8d:96:5e:c7:19:a3:9c:f9:26:d3:
b5:84:3e:76:87:83:d6:13:68:56:56:e9:02:6b:6b:
30:c9:3a:73:48:c8:4c:67:1f:71:29:87:dc:e3:a8:
05:78:48:84:19:ba:d1:90:b1:b5:44:7f:30:e2:8d:
5d:6b:c2:cb:1c:92:f0:64:cd:9a:2a:fd:99:ad:30:
7c:8e:2c:b5:16:3e:4f:8a:34:e1:d5:50:92:87:03:
9f:32:16:2f:4d:0a:e0:92:2a:f2:70:f7:d6:55:bb:
a1:d7:61:ff:76:2a:a4:d0:71:f3:ea:72:96:fd:88:
b1:81:82:ff:bd:b1:3d:68:44:f1:f6:24:57:27:02:
1f:f6:1a:f6:fe:5d:39:ed:fb:c0:46:2c:c7:67:bc:
fd:57:0a:26:e3:78:47:0a:bc:55:23:53:16:ab:65:
bb:4c:f4:77:58:c8:20:c6:52:90:82:11:25:06:1f:
4f:00:dd:18:b9:85:5e:ff:4a:c3:6b:65:49:a9:82:
74:10:3a:39:76:e5:be:cd:ea:35:b5:08:c7:d9:c7:
ad:45:44:87:c3:62:00:52:db:a1:d1:cd:3f:b7:cd:
49:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:0B:A9:F1:5C:C7:AC:2A:65:C8:00:CF:44:18:19:FB:F4:FF:53:DE
X509v3 Authority Key Identifier:
keyid:9B:94:D2:47:6B:31:51:E1:E7:F0:36:0D:CE:4F:38:51:25:EE:D5:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m5TSR2sxUeHn8DYNzk84USXu1fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/3b74f0-e753-4669-85fd-822eaf0d22b0/1/m5TSR2sxUeHn8DYNzk84USXu1fs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/3b74f0-e753-4669-85fd-822eaf0d22b0/1/m5TSR2sxUeHn8DYNzk84USXu1fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:0f:7b:d6:09:ae:27:0c:1d:a7:5d:c0:0d:c3:27:b1:5d:f5:
f7:9c:bc:35:2a:f7:a1:e7:a5:a6:67:25:a3:32:e7:d8:84:20:
7e:47:50:1a:0e:ad:71:cc:89:22:5b:8c:9f:7c:6c:fe:10:a7:
69:6d:25:3e:dc:7c:8e:c9:f0:a5:e0:d8:6f:28:ca:ee:6c:75:
38:52:fc:20:2f:67:aa:1f:aa:7b:8a:d2:02:1f:fc:50:f3:a5:
90:e6:77:8a:16:94:ca:e7:12:de:d5:bf:83:5b:b4:96:68:8d:
d0:7e:f9:a5:be:6c:ba:28:ba:16:64:64:ab:fd:ce:ab:68:9f:
bf:8b:b7:8e:a7:7b:42:5e:55:eb:8b:4d:dd:c7:87:05:f7:21:
06:74:61:2f:2c:6b:50:04:40:11:20:57:20:b3:81:37:f2:2b:
f8:97:21:b9:95:a6:b4:53:00:dd:75:3d:b8:a0:90:d2:96:9b:
ae:2d:4b:f5:0d:e6:fb:d9:4f:ac:68:77:e3:2c:5e:e1:c8:d8:
ec:0a:8f:36:29:90:3b:cb:eb:57:1d:17:6d:8c:43:1f:c5:3c:
92:2f:1f:e8:bd:ae:c9:79:b4:b8:4f:f6:e0:19:9f:c7:f3:4f:
0d:75:be:7d:1d:a5:39:02:b4:2e:30:55:52:3f:e1:30:f9:a5:
9d:dc:ff:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:27:31 2026 by rpki-client