Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/a27a19-90b5-4671-bbc1-472d882e9d72/1/5gBvGrt1cn57wwwXnml00tGPjzg.mft
File: 5gBvGrt1cn57wwwXnml00tGPjzg.mft (raw, json)
Hash identifier: 4D4EXDfho/lY4T/d7cyv/y657x1TCmgixsw0BiFLsCc=
Subject key identifier: 97:C3:F7:C8:03:E7:E0:23:0A:93:E4:F4:53:ED:5E:91:7D:49:C7:EF
Authority key identifier: E6:00:6F:1A:BB:75:72:7E:7B:C3:0C:17:9E:69:74:D2:D1:8F:8F:38
Certificate issuer: /CN=e6006f1abb75727e7bc30c179e6974d2d18f8f38
Certificate serial: 019CAC7E04AE81C647E193BF88ECBB280D65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5gBvGrt1cn57wwwXnml00tGPjzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/a27a19-90b5-4671-bbc1-472d882e9d72/1/5gBvGrt1cn57wwwXnml00tGPjzg.mft
Manifest number: 139C
Signing time: Mon 02 Mar 2026 03:01:05 +0000
Manifest this update: Mon 02 Mar 2026 03:01:05 +0000
Manifest next update: Tue 03 Mar 2026 03:01:05 +0000
Files and hashes: 1: 5gBvGrt1cn57wwwXnml00tGPjzg.crl (hash: IvZvMghaMQhOc9HFpY3FQ1+tjAw9O6ZxELOSIJs/Fzg=)
2: MWO6M6MJ4bPprYC1GxT7fwTCMB4.roa (hash: ANyTmu/82kqGvMyK/QfVvJiysGdLYGce9RuoYKBpHjk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/a27a19-90b5-4671-bbc1-472d882e9d72/1/5gBvGrt1cn57wwwXnml00tGPjzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/a27a19-90b5-4671-bbc1-472d882e9d72/1/5gBvGrt1cn57wwwXnml00tGPjzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/5gBvGrt1cn57wwwXnml00tGPjzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:04:ae:81:c6:47:e1:93:bf:88:ec:bb:28:0d:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6006f1abb75727e7bc30c179e6974d2d18f8f38
Validity
Not Before: Mar 2 03:01:05 2026 GMT
Not After : Mar 3 03:01:05 2026 GMT
Subject: CN=97c3f7c803e7e0230a93e4f453ed5e917d49c7ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2e:3f:6c:7c:2b:41:02:7b:d8:08:2e:8a:aa:
9c:e7:c9:ed:33:11:26:eb:01:ae:63:ce:4a:df:9d:
f3:67:5a:f6:92:a0:78:32:86:ad:c0:4d:65:5c:e5:
ab:98:38:87:4f:46:38:8d:d8:09:5e:61:2b:12:49:
c9:23:12:2f:d9:e8:10:3c:aa:ae:41:6b:64:3e:85:
f2:70:63:ff:33:97:65:51:4f:9c:04:b4:52:4b:77:
5a:f3:21:66:19:cf:b3:da:de:30:a0:75:5b:94:0b:
63:59:74:7c:04:bb:e0:15:f1:5b:e5:2c:19:c2:36:
2b:9a:58:f8:d0:65:72:33:2f:4e:40:e9:77:06:53:
7e:5e:fa:18:47:67:85:86:91:0f:53:c3:06:86:63:
dc:bc:6b:5a:5b:c8:60:ec:17:16:86:53:0e:9f:14:
1d:1e:29:f1:d9:84:fb:08:38:70:63:7f:3e:c3:49:
ef:4f:37:b9:ac:7a:47:23:c0:7c:73:86:8c:1d:60:
91:9a:2f:e5:72:a4:10:98:f8:bd:91:40:2e:72:a6:
b2:81:da:ee:a6:3a:7f:de:dc:d3:b9:25:d7:f3:d7:
b1:77:0e:60:0e:29:61:c7:cf:e5:2a:c9:45:18:c4:
4a:13:4a:d0:25:3e:31:91:f2:a4:cb:ad:fa:d4:f8:
61:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:C3:F7:C8:03:E7:E0:23:0A:93:E4:F4:53:ED:5E:91:7D:49:C7:EF
X509v3 Authority Key Identifier:
keyid:E6:00:6F:1A:BB:75:72:7E:7B:C3:0C:17:9E:69:74:D2:D1:8F:8F:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5gBvGrt1cn57wwwXnml00tGPjzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a27a19-90b5-4671-bbc1-472d882e9d72/1/5gBvGrt1cn57wwwXnml00tGPjzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a27a19-90b5-4671-bbc1-472d882e9d72/1/5gBvGrt1cn57wwwXnml00tGPjzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:dd:51:04:ee:21:92:f2:3a:96:f0:60:c9:2a:71:43:53:1a:
31:ea:f8:9b:25:80:00:a4:9e:2b:95:8e:b3:09:2a:b5:1a:bf:
73:36:6d:c3:90:46:00:4c:2f:71:b8:2e:e8:a0:8f:fd:42:c0:
6f:18:a0:d0:44:59:bb:64:0f:59:75:20:6f:4f:11:4b:9b:a2:
df:08:7d:bd:52:60:61:e7:08:a5:5a:14:30:5f:f6:43:fb:26:
3a:65:3d:68:87:14:29:80:e9:72:bf:a1:b8:e0:60:82:3d:59:
1d:b8:f1:33:66:4f:a9:9c:ba:cc:47:0a:f6:ad:68:10:30:6e:
f7:d5:06:e9:e2:08:e1:1c:55:6b:a6:15:2b:bd:4c:f2:c1:ac:
3c:f1:37:75:6e:b0:ec:7d:13:b0:72:2d:b3:9d:0a:19:c9:ba:
97:37:8a:ab:51:88:1e:66:86:5b:eb:6d:12:89:fe:f1:51:52:
06:64:38:b5:58:2d:95:ce:d3:46:f4:6e:80:1e:be:aa:74:6c:
d3:40:b4:ca:99:8e:df:e7:88:6e:6c:95:2a:7e:6b:07:dd:fc:
2a:ca:a1:05:bb:f2:eb:67:c9:44:62:21:2c:69:fd:01:4b:64:
fa:35:46:06:96:ac:d5:66:d1:5c:18:d2:71:10:67:34:e5:32:
fe:de:73:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:02:54 2026 by rpki-client