Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/28026f-bc8b-44a8-be42-d6b055dab47b/1/5J_xmt1LshEp7ogjFL5zy3jM7bM.mft
File: 5J_xmt1LshEp7ogjFL5zy3jM7bM.mft (raw, json)
Hash identifier: /C6dHE+RW9VHAgO6gFsVNWVfkXhiqCajzBfVtgPNGxM=
Subject key identifier: 16:C1:7D:5B:58:0C:42:70:F9:6C:AE:7E:DC:5F:46:3D:8C:0A:EB:06
Authority key identifier: E4:9F:F1:9A:DD:4B:B2:11:29:EE:88:23:14:BE:73:CB:78:CC:ED:B3
Certificate issuer: /CN=e49ff19add4bb21129ee882314be73cb78ccedb3
Certificate serial: 019CAA8F7F8AACF40CD3952DA6DE7335EDA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5J_xmt1LshEp7ogjFL5zy3jM7bM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/28026f-bc8b-44a8-be42-d6b055dab47b/1/5J_xmt1LshEp7ogjFL5zy3jM7bM.mft
Manifest number: 0937
Signing time: Sun 01 Mar 2026 18:00:56 +0000
Manifest this update: Sun 01 Mar 2026 18:00:56 +0000
Manifest next update: Mon 02 Mar 2026 18:00:56 +0000
Files and hashes: 1: 5J_xmt1LshEp7ogjFL5zy3jM7bM.crl (hash: V+BLTIofEl9rZsZ0AXD1THmNUune7Pw2+0WgJbgKA/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/28026f-bc8b-44a8-be42-d6b055dab47b/1/5J_xmt1LshEp7ogjFL5zy3jM7bM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/28026f-bc8b-44a8-be42-d6b055dab47b/1/5J_xmt1LshEp7ogjFL5zy3jM7bM.mft
rsync://rpki.ripe.net/repository/DEFAULT/5J_xmt1LshEp7ogjFL5zy3jM7bM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:7f:8a:ac:f4:0c:d3:95:2d:a6:de:73:35:ed:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e49ff19add4bb21129ee882314be73cb78ccedb3
Validity
Not Before: Mar 1 18:00:56 2026 GMT
Not After : Mar 2 18:00:56 2026 GMT
Subject: CN=16c17d5b580c4270f96cae7edc5f463d8c0aeb06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:5a:3d:6e:db:3d:da:01:85:58:8b:5a:4c:6b:
a7:ce:86:2a:3e:7a:d8:07:f1:36:66:23:df:1c:84:
32:e3:8a:bf:6c:80:7c:6e:26:ff:c5:0d:f5:4b:ea:
a1:9f:0a:82:89:27:86:d4:e0:0d:16:27:38:7c:32:
7c:12:6c:78:2b:ed:4c:4e:97:ea:87:7f:24:81:a8:
56:f7:f1:ef:9c:f4:bd:0f:d4:9c:d5:ba:4d:6b:ff:
12:8d:0c:ee:45:9f:90:e9:ee:22:e5:d9:92:25:9c:
e9:88:77:2a:30:f8:82:6c:0e:08:9a:eb:93:8f:a8:
4c:48:5a:f0:bd:e3:06:05:d2:48:20:78:37:2f:6e:
6b:6f:2f:f8:95:b6:66:0e:37:f1:4c:e8:ca:4b:84:
c3:2c:6d:1d:0d:3d:92:45:21:95:52:44:b9:29:8d:
fe:a6:f1:8b:58:8d:02:60:b3:d6:aa:b8:bc:ef:77:
cf:b5:63:2b:82:65:ca:81:ce:ee:ec:07:cd:f2:67:
10:43:b0:ba:d2:4e:7e:af:e6:30:f2:9f:88:49:b8:
b3:bb:3d:08:82:14:0d:5a:8f:81:4b:5c:52:bc:c9:
4b:31:77:d2:28:41:5c:f2:c7:3d:fd:bc:6e:15:bd:
2b:d0:4a:f5:13:e1:73:a7:da:90:ce:8c:41:71:e7:
b2:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:C1:7D:5B:58:0C:42:70:F9:6C:AE:7E:DC:5F:46:3D:8C:0A:EB:06
X509v3 Authority Key Identifier:
keyid:E4:9F:F1:9A:DD:4B:B2:11:29:EE:88:23:14:BE:73:CB:78:CC:ED:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5J_xmt1LshEp7ogjFL5zy3jM7bM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/28026f-bc8b-44a8-be42-d6b055dab47b/1/5J_xmt1LshEp7ogjFL5zy3jM7bM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/28026f-bc8b-44a8-be42-d6b055dab47b/1/5J_xmt1LshEp7ogjFL5zy3jM7bM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:c6:6c:12:4a:67:6e:bd:3e:66:e0:4f:ca:b8:b7:15:ab:59:
0c:d9:da:ce:6c:52:b8:cf:07:74:2d:55:64:c2:6e:49:7e:7c:
3f:4a:9b:b9:a0:43:92:c5:44:12:88:a3:1a:1f:db:44:8b:67:
90:2e:28:a1:69:17:b3:74:d1:81:6e:87:6d:68:a0:e6:2c:8a:
a4:f6:3a:f6:eb:7c:cf:71:09:75:d5:d2:39:4b:2e:da:79:23:
dd:ed:b8:35:76:7f:5c:da:29:33:21:8c:65:f4:ff:45:1a:a2:
66:04:5c:36:40:67:25:99:6e:d2:94:ca:47:17:09:53:12:21:
62:08:11:4f:47:99:b8:38:06:cc:6e:06:63:ad:ea:32:56:99:
64:1c:09:ef:d8:7d:17:f6:24:7a:cd:43:32:07:53:aa:32:bf:
1b:ce:84:31:20:27:71:0b:ec:11:60:52:4e:83:c0:b4:52:ab:
b8:c0:67:e1:6d:a3:20:ee:c6:1e:6b:10:a6:60:6b:9d:54:ed:
f0:bd:98:66:68:dc:8e:44:e4:d5:7c:05:fe:96:1b:9b:8b:98:
db:ca:2e:64:56:e6:00:72:45:19:d5:3b:83:ac:1e:7f:9f:bc:
1f:7a:6f:e4:d8:5e:b8:da:2f:ab:f7:6c:00:05:a6:e0:cd:79:
50:fc:19:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:59:46 2026 by rpki-client