Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9f5223-a56c-465b-ac65-fd152a6a0587/1/5ar3bSe6gS4NXOIwXxfFMYjCWAw.mft
File: 5ar3bSe6gS4NXOIwXxfFMYjCWAw.mft (raw, json)
Hash identifier: 5af+zEVia4DMeLetGZsHbuKlXYTB+RQmFgE5tBWHxKI=
Subject key identifier: 1D:2F:FD:8A:94:73:7A:B9:60:2C:15:F3:12:CF:B8:69:B4:A7:B6:5C
Authority key identifier: E5:AA:F7:6D:27:BA:81:2E:0D:5C:E2:30:5F:17:C5:31:88:C2:58:0C
Certificate issuer: /CN=e5aaf76d27ba812e0d5ce2305f17c53188c2580c
Certificate serial: 019CAA8FC31FD44E5253CFFB7A78478C968B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5ar3bSe6gS4NXOIwXxfFMYjCWAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9f5223-a56c-465b-ac65-fd152a6a0587/1/5ar3bSe6gS4NXOIwXxfFMYjCWAw.mft
Manifest number: 0A55
Signing time: Sun 01 Mar 2026 18:01:14 +0000
Manifest this update: Sun 01 Mar 2026 18:01:14 +0000
Manifest next update: Mon 02 Mar 2026 18:01:14 +0000
Files and hashes: 1: 5ar3bSe6gS4NXOIwXxfFMYjCWAw.crl (hash: WQvO+qziGiUC0810GZb+Arn1vL8il33fFtp6GCXmNe8=)
2: oPgrYeYQdKE5w12V1Qsc5asf-z0.roa (hash: DyrqcRbA6WGivtdHIlCxrVDtSLyegGOpED1YlRSd3w0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9f5223-a56c-465b-ac65-fd152a6a0587/1/5ar3bSe6gS4NXOIwXxfFMYjCWAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/9f5223-a56c-465b-ac65-fd152a6a0587/1/5ar3bSe6gS4NXOIwXxfFMYjCWAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5ar3bSe6gS4NXOIwXxfFMYjCWAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:c3:1f:d4:4e:52:53:cf:fb:7a:78:47:8c:96:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5aaf76d27ba812e0d5ce2305f17c53188c2580c
Validity
Not Before: Mar 1 18:01:14 2026 GMT
Not After : Mar 2 18:01:14 2026 GMT
Subject: CN=1d2ffd8a94737ab9602c15f312cfb869b4a7b65c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a7:cf:01:2b:87:c2:38:27:57:dc:bc:d6:e4:
ba:28:33:58:a2:7d:8b:11:62:0d:a3:98:ee:4b:f3:
32:44:c9:12:e9:40:ab:14:9a:c4:a0:93:31:f2:f7:
17:57:69:79:96:f0:22:48:d6:45:78:8d:3b:f0:bb:
75:e8:04:06:5e:ea:fc:b1:cf:0c:2c:6b:74:3f:d1:
f3:cc:dd:13:be:b7:40:5d:f8:f8:0a:13:a2:bf:8c:
66:a8:9d:d3:6d:c5:14:63:72:6e:20:da:ce:ad:50:
ee:39:ed:ca:61:fa:e4:05:f5:84:81:d7:e9:d2:f6:
68:94:9c:42:80:57:75:76:8b:1a:9b:1f:31:34:7e:
19:e3:09:41:cc:8a:fd:f3:b4:a6:6c:31:ad:28:ad:
9d:2c:33:61:47:21:7d:64:c8:ef:11:7d:c7:bb:56:
86:df:59:63:59:39:95:3e:1f:85:cb:b1:23:d8:02:
8f:5c:bd:c7:2d:88:17:dc:be:d2:2c:3f:71:33:8f:
4e:13:ad:d2:89:16:7a:c2:b9:ef:58:28:d1:fb:a8:
8a:e1:cc:ce:30:98:4f:4b:95:e2:ae:fe:53:99:ed:
6f:90:4d:04:32:6f:b4:bf:bc:43:c5:9e:fe:86:af:
eb:03:8d:16:0d:4a:e5:e9:28:90:90:0b:18:8a:04:
f1:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:2F:FD:8A:94:73:7A:B9:60:2C:15:F3:12:CF:B8:69:B4:A7:B6:5C
X509v3 Authority Key Identifier:
keyid:E5:AA:F7:6D:27:BA:81:2E:0D:5C:E2:30:5F:17:C5:31:88:C2:58:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5ar3bSe6gS4NXOIwXxfFMYjCWAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9f5223-a56c-465b-ac65-fd152a6a0587/1/5ar3bSe6gS4NXOIwXxfFMYjCWAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9f5223-a56c-465b-ac65-fd152a6a0587/1/5ar3bSe6gS4NXOIwXxfFMYjCWAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:19:30:31:97:4a:04:f7:20:a5:17:35:88:52:78:6e:f0:b9:
68:fe:69:dc:08:6c:36:b6:4d:55:24:2a:2d:57:9e:8b:8e:12:
11:e7:80:7f:02:ba:3c:c3:02:ff:56:a8:7c:33:fe:1a:57:52:
12:c4:e2:c4:d8:ae:a4:49:8c:dc:d2:c6:01:13:bd:89:9d:5e:
3c:94:44:eb:25:0d:a7:10:c0:39:dc:81:ee:ce:4f:ea:ee:19:
3c:5a:e8:1c:7a:12:37:bd:f9:24:43:a0:c9:10:18:4d:be:65:
91:2a:8c:2a:69:62:5c:e3:59:33:c2:00:2f:82:9d:38:fe:15:
89:66:7a:d2:3a:f1:15:39:e5:93:b6:e6:c3:76:db:a4:0d:9f:
62:db:21:56:aa:12:9f:01:00:6b:ab:70:fb:cd:22:e3:ab:e6:
2f:6c:93:35:19:94:0b:07:9e:de:ab:11:2e:5f:64:e6:e2:67:
29:fd:2a:b9:24:23:b0:aa:fd:6c:57:c5:d9:8f:ea:44:86:03:
87:80:a4:e2:00:33:13:12:8e:26:3a:61:a4:8c:e0:0d:23:ea:
04:f4:1b:7a:f0:10:f4:96:bc:3d:bf:f9:ce:1e:ac:29:e1:fa:
b0:d9:37:71:85:4c:11:5f:f7:da:5a:15:a1:4d:84:b9:45:07:
a1:c2:75:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:11:02 2026 by rpki-client