Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.mft
File: 5MzXNQiptZmF1Vl4aOOl1ex0X14.mft (raw, json)
Hash identifier: SodA3dvssrc1koQSy9nTBIETWiXFDIDXQwFHQLWOglw=
Subject key identifier: F5:BE:7B:55:A6:1E:BF:12:F7:EE:7E:5B:91:D3:16:A5:42:68:55:C2
Authority key identifier: E4:CC:D7:35:08:A9:B5:99:85:D5:59:78:68:E3:A5:D5:EC:74:5F:5E
Certificate issuer: /CN=e4ccd73508a9b59985d5597868e3a5d5ec745f5e
Certificate serial: 019CE2FE45726B0F86DB83A520E4EF0A1CEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5MzXNQiptZmF1Vl4aOOl1ex0X14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.mft
Manifest number: 1036
Signing time: Thu 12 Mar 2026 17:00:40 +0000
Manifest this update: Thu 12 Mar 2026 17:00:40 +0000
Manifest next update: Fri 13 Mar 2026 17:00:40 +0000
Files and hashes: 1: 5MzXNQiptZmF1Vl4aOOl1ex0X14.crl (hash: M2N72eCVVatm5e45tCOdnwoc2IuzoJ8BcJwxFcH1cIM=)
2: J_wTFK-Imelz3lo0EhalX7WkndE.roa (hash: LyfXf848vt7E8bU3yBHMuVskZUEoXA7JJdYXHBAJ7MY=)
3: QE-p0DolLSe1YcERFi4pB7qqbME.roa (hash: tSsxRvUgtqlAtlXCTQBKtK0rsPOfdoX05ytqnptRrgY=)
4: Y4XWS1rxbRyTsrkehJHiTfLRsBA.roa (hash: Umh1axeyy2cYjkidrczQZIziQ2tY05LzkbHNxBOVUb8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.mft
rsync://rpki.ripe.net/repository/DEFAULT/5MzXNQiptZmF1Vl4aOOl1ex0X14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 17:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e2:fe:45:72:6b:0f:86:db:83:a5:20:e4:ef:0a:1c:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4ccd73508a9b59985d5597868e3a5d5ec745f5e
Validity
Not Before: Mar 12 17:00:40 2026 GMT
Not After : Mar 13 17:00:40 2026 GMT
Subject: CN=f5be7b55a61ebf12f7ee7e5b91d316a5426855c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:be:77:c0:de:aa:8c:16:d1:99:80:39:d9:30:
66:e0:18:b8:06:88:ba:0b:ab:82:4b:11:72:c6:05:
b8:ed:38:19:d8:ec:3e:13:4a:78:ae:d7:8e:9a:83:
45:6a:8d:e1:a3:83:fa:7e:c6:23:3f:2f:ce:af:57:
59:06:be:09:27:17:a0:e1:14:64:b8:87:44:84:ac:
ad:e6:77:37:5a:aa:53:4b:ae:6f:92:89:76:00:7b:
a5:4c:48:1f:ee:ed:61:59:b4:ae:28:b4:ad:e9:a2:
3e:63:5c:30:30:37:79:80:37:b2:d0:44:2c:6b:9f:
9b:31:16:96:8a:76:57:51:7d:b1:4d:b9:f5:c1:dc:
0a:48:ec:e3:a9:3d:d5:19:a2:55:3d:f8:46:15:f1:
20:5a:a5:3e:5a:71:db:7d:06:a8:48:a9:b2:fe:f2:
ff:54:0b:7a:d3:3a:b1:53:e4:d0:5e:5f:ee:24:e9:
ed:f0:c7:3d:a3:fe:bf:a5:93:19:60:0e:c5:4f:18:
9d:e4:26:82:a3:6a:9a:b9:25:bf:e9:e8:e5:7f:ee:
62:24:dd:71:5b:e7:66:ae:66:58:7d:7c:55:32:07:
e1:c1:61:89:ef:7f:02:a7:5d:7e:10:d0:c8:1d:6a:
0c:12:50:bc:53:95:41:52:ce:c9:c7:bf:a2:c0:57:
8f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:BE:7B:55:A6:1E:BF:12:F7:EE:7E:5B:91:D3:16:A5:42:68:55:C2
X509v3 Authority Key Identifier:
keyid:E4:CC:D7:35:08:A9:B5:99:85:D5:59:78:68:E3:A5:D5:EC:74:5F:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5MzXNQiptZmF1Vl4aOOl1ex0X14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:0f:8a:8a:ba:1f:7e:73:85:79:ad:f7:bb:2c:e0:1d:af:7c:
22:ea:d3:8a:7c:d1:39:0d:d6:ae:1c:8b:0f:42:78:69:87:df:
af:3e:d5:6a:56:fd:04:1b:b4:2b:0f:53:20:d3:13:cb:72:e6:
c8:32:24:5c:71:0e:33:29:21:40:b3:d5:d1:d0:87:a0:15:27:
ed:03:f0:ad:79:b8:87:55:4e:a1:05:53:9a:46:d1:c9:8d:8d:
f1:d9:cf:74:aa:a0:b3:d8:b0:89:44:37:14:25:91:20:4e:2c:
e5:d2:80:5d:9c:20:2f:07:49:04:d6:1b:99:97:2e:b2:a1:52:
71:a9:74:72:28:9e:9d:f8:17:a7:e5:12:4a:b3:d7:09:a0:42:
43:74:4f:47:d5:5e:2e:2c:07:04:c1:75:5d:13:cb:69:e6:5e:
92:8d:ac:9b:a1:74:f3:b5:16:f9:44:a9:16:72:a6:9b:28:f5:
a1:80:c7:fa:bb:1a:d0:2f:46:5c:94:71:9b:38:bb:61:83:49:
e7:4d:13:37:dd:01:88:01:d9:98:a6:46:f8:2a:06:e4:cd:bd:
3b:1d:69:32:24:fd:7f:b5:ba:63:f6:b8:ff:02:5e:01:45:58:
47:d3:c2:fb:02:43:6f:c4:6c:cc:d4:06:af:0f:5c:91:10:21:
36:90:ca:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 02:08:39 2026 by rpki-client