Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/e0cf43-e4c0-46f7-bde8-16fd5ba4f0e4/1/SV5QAUnOjXG5YEtYngwy_qB6mLg.mft
File: SV5QAUnOjXG5YEtYngwy_qB6mLg.mft (raw, json)
Hash identifier: i5UlvTQT4ALQvhCGtcVKTn658Ifh5tu3xbJc4zTYG58=
Subject key identifier: 94:87:35:15:EC:3E:CA:B6:59:F8:A3:A2:13:30:3D:D3:33:BB:C5:3D
Authority key identifier: 49:5E:50:01:49:CE:8D:71:B9:60:4B:58:9E:0C:32:FE:A0:7A:98:B8
Certificate issuer: /CN=495e500149ce8d71b9604b589e0c32fea07a98b8
Certificate serial: 019CAAFD256156CE17362F77A6243CD75BA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SV5QAUnOjXG5YEtYngwy_qB6mLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/e0cf43-e4c0-46f7-bde8-16fd5ba4f0e4/1/SV5QAUnOjXG5YEtYngwy_qB6mLg.mft
Manifest number: 0789
Signing time: Sun 01 Mar 2026 20:00:42 +0000
Manifest this update: Sun 01 Mar 2026 20:00:42 +0000
Manifest next update: Mon 02 Mar 2026 20:00:42 +0000
Files and hashes: 1: SV5QAUnOjXG5YEtYngwy_qB6mLg.crl (hash: 957h1QfXFEzDpenJYpMKEgF2ddIeL2uj7Khi84XWnlU=)
2: VzUVQUcd7OnmjAnSFD9XEdaKHBo.roa (hash: v5QHIOhAyXcKwswCFZQCXWUhqfqv61whE/aKu+RfMmg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/e0cf43-e4c0-46f7-bde8-16fd5ba4f0e4/1/SV5QAUnOjXG5YEtYngwy_qB6mLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/e0cf43-e4c0-46f7-bde8-16fd5ba4f0e4/1/SV5QAUnOjXG5YEtYngwy_qB6mLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/SV5QAUnOjXG5YEtYngwy_qB6mLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:25:61:56:ce:17:36:2f:77:a6:24:3c:d7:5b:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=495e500149ce8d71b9604b589e0c32fea07a98b8
Validity
Not Before: Mar 1 20:00:42 2026 GMT
Not After : Mar 2 20:00:42 2026 GMT
Subject: CN=94873515ec3ecab659f8a3a213303dd333bbc53d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:df:b6:7d:cb:53:10:de:b1:98:4e:77:5d:d6:
bf:79:a5:35:c5:dd:4d:ef:b7:db:f4:b9:bb:af:f3:
57:f9:e5:36:da:f6:4c:21:01:3f:20:cf:b3:84:5e:
d5:01:62:68:62:f9:4e:76:4e:f1:af:e0:96:66:5b:
ce:f9:dd:36:12:e8:d0:0d:c5:21:14:74:8e:d1:1d:
29:6a:a7:59:d4:0a:9a:6e:14:1d:59:be:92:76:62:
ea:1a:d2:90:e3:d1:f3:a9:65:2f:48:07:ed:c0:68:
7e:82:54:8f:b7:c9:78:3e:8b:cf:bf:df:9d:f7:af:
66:c3:6d:08:2c:f7:35:12:65:59:7c:63:99:54:2c:
3c:c3:ca:39:df:51:9f:3c:6f:38:8e:f4:4d:2d:e7:
7a:18:af:e9:44:57:46:2f:16:a7:2c:57:79:93:72:
a2:65:72:de:9d:bc:8b:c6:f4:ab:83:27:89:82:9d:
7d:10:83:2d:ff:b9:b9:ff:83:de:c0:9c:ce:a6:19:
60:cc:78:ea:c3:09:8b:ec:cc:77:01:c5:f1:b6:11:
22:85:29:53:78:42:be:24:8a:b2:33:11:23:6a:07:
1a:cf:d0:ad:97:a6:3a:92:cc:9a:1d:5e:ff:32:6b:
19:ad:10:4a:36:23:1c:aa:c1:17:2b:e4:51:89:8d:
51:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:87:35:15:EC:3E:CA:B6:59:F8:A3:A2:13:30:3D:D3:33:BB:C5:3D
X509v3 Authority Key Identifier:
keyid:49:5E:50:01:49:CE:8D:71:B9:60:4B:58:9E:0C:32:FE:A0:7A:98:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SV5QAUnOjXG5YEtYngwy_qB6mLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/e0cf43-e4c0-46f7-bde8-16fd5ba4f0e4/1/SV5QAUnOjXG5YEtYngwy_qB6mLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/e0cf43-e4c0-46f7-bde8-16fd5ba4f0e4/1/SV5QAUnOjXG5YEtYngwy_qB6mLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:dc:73:ee:ed:5b:ae:aa:a0:32:04:8d:dc:0a:e2:81:df:5f:
64:b9:a1:73:3a:d5:27:bc:ef:63:6e:fc:35:b6:98:0d:fc:e4:
03:28:5d:0e:93:b8:67:85:37:10:bf:a7:27:cb:2f:3c:71:e5:
ef:0a:20:07:e4:51:dc:9a:29:4f:23:bb:42:77:11:29:b3:89:
d7:9a:64:59:96:d3:9c:df:d4:f9:38:9e:76:17:cc:9a:ef:72:
cb:05:fe:ae:a8:03:34:15:fc:01:11:49:4c:c9:5b:29:8a:00:
30:0a:2a:d2:ab:44:0c:83:b8:c8:f1:4d:9e:83:36:45:5a:7b:
cc:f9:5f:5e:f2:37:eb:36:72:ab:65:2c:d0:5e:a7:8c:ff:3b:
7c:31:b1:c5:bb:6b:40:a1:02:88:7b:bc:a1:89:8c:17:a9:ec:
6c:42:6e:eb:ce:55:bb:51:3a:da:a8:c2:62:8c:87:63:ec:51:
fc:c7:82:39:7c:d2:be:a1:e8:65:c1:f1:b3:da:7c:09:bd:a5:
07:9e:9f:ac:79:39:97:35:a5:ef:3a:af:fb:43:0b:8b:3e:ae:
02:4b:5d:1f:d3:5e:cd:8a:47:7c:f0:5a:d2:41:a1:ad:af:21:
4b:d5:85:6e:1f:ff:39:d5:f7:16:dd:ee:09:e6:6b:a0:94:3e:
a6:37:84:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:57:52 2026 by rpki-client