Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/508321-2dfa-4253-a3cb-2f926510ffbf/1/5gFfHiAENZyudla5aK2ypUpDTx4.mft
File: 5gFfHiAENZyudla5aK2ypUpDTx4.mft (raw, json)
Hash identifier: Tftoz50DVsp25IPS/1wN87gArk5pS51B14zZjyVpp2I=
Subject key identifier: F3:69:0E:C4:97:E6:4A:FD:D6:66:40:D4:78:B0:67:6D:CE:E4:20:99
Authority key identifier: E6:01:5F:1E:20:04:35:9C:AE:76:56:B9:68:AD:B2:A5:4A:43:4F:1E
Certificate issuer: /CN=e6015f1e2004359cae7656b968adb2a54a434f1e
Certificate serial: 019CACB4F95A6B88C0DDC1A6EA12B1AFA802
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5gFfHiAENZyudla5aK2ypUpDTx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/508321-2dfa-4253-a3cb-2f926510ffbf/1/5gFfHiAENZyudla5aK2ypUpDTx4.mft
Manifest number: 1846
Signing time: Mon 02 Mar 2026 04:01:07 +0000
Manifest this update: Mon 02 Mar 2026 04:01:07 +0000
Manifest next update: Tue 03 Mar 2026 04:01:07 +0000
Files and hashes: 1: 5gFfHiAENZyudla5aK2ypUpDTx4.crl (hash: 9ilIjtrfHbLu4WLPuTHMnzOGn0P/IBb+AY0NWctzdE4=)
2: gNOVMDvtvsuQYQ-kPKrR7O_nyMk.roa (hash: wGDnNcGTA78hmdHu6y6oulR3cEsAnWv+5REEurYIAmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/508321-2dfa-4253-a3cb-2f926510ffbf/1/5gFfHiAENZyudla5aK2ypUpDTx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/508321-2dfa-4253-a3cb-2f926510ffbf/1/5gFfHiAENZyudla5aK2ypUpDTx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/5gFfHiAENZyudla5aK2ypUpDTx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:f9:5a:6b:88:c0:dd:c1:a6:ea:12:b1:af:a8:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6015f1e2004359cae7656b968adb2a54a434f1e
Validity
Not Before: Mar 2 04:01:07 2026 GMT
Not After : Mar 3 04:01:07 2026 GMT
Subject: CN=f3690ec497e64afdd66640d478b0676dcee42099
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:6b:0d:4b:99:df:be:19:8a:cb:34:bb:f0:5d:
2c:64:d8:fd:a0:2d:57:f4:8d:ec:67:fd:8e:76:78:
f1:94:37:69:69:10:ea:df:2d:bd:2b:dc:0d:b3:db:
6e:60:ee:c4:61:83:e1:8d:3f:79:39:74:ea:61:36:
19:12:ec:98:08:3e:33:3b:ff:b6:6e:88:c4:19:3b:
ce:d1:f7:05:2a:bb:fd:e8:fe:c6:91:3b:4b:4e:9f:
23:12:02:5f:b7:6e:81:b2:89:ca:f7:18:6f:04:19:
74:01:d2:9b:0e:f2:c6:24:52:17:d5:a0:ec:aa:45:
31:a1:12:59:de:57:d5:a2:e6:14:24:e0:0d:27:95:
5a:93:e8:10:ac:2a:6e:d8:3c:d0:95:29:80:7b:86:
c1:78:d1:b2:bb:86:1d:d6:76:e2:69:a5:88:9c:bd:
b6:39:a1:4b:7b:7a:5b:fc:a4:2e:14:1d:c8:a1:94:
f0:1a:b5:77:1d:4a:45:6b:88:2f:b6:39:76:24:62:
41:71:29:35:e0:31:7d:9a:c3:d7:95:25:ea:1b:90:
79:81:8a:93:22:ce:a4:69:96:71:cf:dc:5d:56:eb:
5d:d7:6c:ce:93:93:5a:bd:a5:db:51:17:11:fd:69:
cc:23:6c:62:87:b3:bc:a5:02:a2:97:47:7c:25:b0:
48:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:69:0E:C4:97:E6:4A:FD:D6:66:40:D4:78:B0:67:6D:CE:E4:20:99
X509v3 Authority Key Identifier:
keyid:E6:01:5F:1E:20:04:35:9C:AE:76:56:B9:68:AD:B2:A5:4A:43:4F:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5gFfHiAENZyudla5aK2ypUpDTx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/508321-2dfa-4253-a3cb-2f926510ffbf/1/5gFfHiAENZyudla5aK2ypUpDTx4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/508321-2dfa-4253-a3cb-2f926510ffbf/1/5gFfHiAENZyudla5aK2ypUpDTx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:9d:24:38:6f:2f:33:cb:0d:ef:71:41:19:ff:e2:52:e7:3c:
12:ab:ea:1a:18:09:5e:30:40:b0:9f:47:5c:28:96:08:88:a7:
18:ab:6f:27:6b:d7:eb:0c:76:bf:ba:d6:28:e4:fe:4a:3f:af:
5e:5e:2e:c8:ee:75:34:cd:e6:4e:2b:2d:4e:63:d3:c3:4c:ff:
9e:ae:25:5d:74:89:4a:3e:cf:56:4d:83:24:88:96:4c:57:3e:
49:02:33:66:ec:d8:5e:e3:46:23:09:81:2a:13:c0:f7:35:46:
78:51:83:d0:81:e4:74:a7:28:a1:56:5f:45:45:86:d4:a1:b4:
4a:9d:a9:25:38:d4:4f:4d:04:67:0d:70:3c:b3:6f:cd:1e:12:
63:04:4f:91:6b:37:43:8b:c9:79:66:6c:29:18:40:29:4a:c1:
97:31:1d:74:13:c2:6c:81:f8:9a:88:aa:60:ab:4e:42:66:89:
ef:f0:64:dc:2c:a7:69:70:9f:0a:d8:78:48:7e:c5:62:15:ea:
44:a4:87:a1:67:b6:5c:e8:ea:4a:0c:f3:ce:f9:6a:fc:c0:d8:
5e:ad:88:86:59:a9:f2:f1:3a:37:99:92:d3:99:e9:8e:90:f3:
75:6c:6f:63:be:12:85:c8:88:a8:a4:92:03:bf:c4:11:bf:1b:
85:83:7d:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:04:18 2026 by rpki-client