Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.mft
File: 5cNA7ludrxpoGPDfQH-ll1iGsQ8.mft (raw, json)
Hash identifier: mmQNBVILXXX7SV7UzCV5cnRqXHVur2sCzW3x1fgwYww=
Subject key identifier: 21:7B:F0:65:2E:0A:FE:5C:58:A9:62:C7:E3:8E:87:EB:57:BE:D1:01
Authority key identifier: E5:C3:40:EE:5B:9D:AF:1A:68:18:F0:DF:40:7F:A5:97:58:86:B1:0F
Certificate issuer: /CN=e5c340ee5b9daf1a6818f0df407fa5975886b10f
Certificate serial: 019CBAA73121BEF9F526E10A59F7A878EBB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5cNA7ludrxpoGPDfQH-ll1iGsQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.mft
Manifest number: 0CBF
Signing time: Wed 04 Mar 2026 21:00:45 +0000
Manifest this update: Wed 04 Mar 2026 21:00:45 +0000
Manifest next update: Thu 05 Mar 2026 21:00:45 +0000
Files and hashes: 1: 5cNA7ludrxpoGPDfQH-ll1iGsQ8.crl (hash: QVagm1u6EG+q1IebXFqRNwiObYbe/56V3iR2KHKJGZc=)
2: N0NwAtFb84h0xfganWJihzoCSpE.roa (hash: /Ubv+K+n65IZQaZN4AFBb/50l8Puw9jgWyG9wc4RYFM=)
3: OxaeKc7pRBgah12v_9xLvX75AHM.roa (hash: qygdd+Z/MhrVDqAYLLnF2qLBOy48W3eHlGWo3g+C2qA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/5cNA7ludrxpoGPDfQH-ll1iGsQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Mar 2026 14:20:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ba:a7:31:21:be:f9:f5:26:e1:0a:59:f7:a8:78:eb:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5c340ee5b9daf1a6818f0df407fa5975886b10f
Validity
Not Before: Mar 4 21:00:45 2026 GMT
Not After : Mar 5 21:00:45 2026 GMT
Subject: CN=217bf0652e0afe5c58a962c7e38e87eb57bed101
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:5a:15:0c:a2:39:bf:3c:72:5b:5c:2a:24:16:
39:e6:eb:6e:da:77:a3:05:46:72:93:ea:56:55:3a:
f3:07:f3:fe:9c:80:63:5a:30:97:59:34:63:72:99:
0f:af:1a:15:96:f3:a9:96:9d:7d:bc:c1:de:e6:fa:
83:13:1b:44:92:ef:3c:78:dd:0a:4b:a7:1d:9f:e6:
34:6a:b9:d6:4b:1f:39:c6:5a:dc:8c:8a:78:d7:c3:
70:41:f2:33:c3:40:7c:56:35:cb:6c:f7:99:2c:20:
bc:64:e9:cb:9b:64:11:5f:6c:1b:f4:6e:cd:53:ec:
da:47:15:60:60:64:f8:d9:9a:b5:e4:ed:0b:0b:b8:
10:ea:f9:4d:12:76:5d:7c:0d:3c:d4:86:10:ec:d4:
d0:97:34:d9:5e:55:b9:f3:98:dc:cb:fe:c4:d5:68:
bc:a5:fe:a5:73:ec:5d:b1:b4:14:1a:42:71:dd:89:
3a:c7:7c:d4:f6:69:32:de:d8:e0:3b:8b:9e:e9:de:
9c:4b:b5:8c:01:e2:cf:4a:6f:6b:d6:b2:fd:4d:1c:
03:4e:0e:a5:ca:94:15:e4:2a:ac:0e:e1:dc:a4:51:
c5:33:54:09:ec:2a:a8:72:6e:3b:90:9a:08:7c:f9:
b0:76:ea:14:67:36:11:06:9b:72:e1:cc:93:1f:37:
52:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:7B:F0:65:2E:0A:FE:5C:58:A9:62:C7:E3:8E:87:EB:57:BE:D1:01
X509v3 Authority Key Identifier:
keyid:E5:C3:40:EE:5B:9D:AF:1A:68:18:F0:DF:40:7F:A5:97:58:86:B1:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5cNA7ludrxpoGPDfQH-ll1iGsQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:7e:2d:20:53:b0:67:da:8b:96:ad:a1:2c:73:c2:a9:10:e6:
41:b2:4d:30:68:7a:1f:72:0d:11:e9:8d:3c:54:a7:2c:5a:e6:
30:3b:49:05:d0:b5:a8:35:e2:00:77:9b:9e:d7:d3:26:c6:de:
51:57:6e:47:30:71:86:61:bc:0d:3a:a2:33:74:c6:b6:25:1b:
28:ec:d2:d8:6a:d3:00:2b:44:53:8a:f0:fb:6c:b6:2d:91:d4:
4e:25:94:5d:3b:5d:5b:d7:1a:de:a8:80:31:04:4f:10:f3:14:
ac:e9:ec:6a:48:46:6f:2f:5e:32:32:45:08:80:b0:cc:13:0d:
a3:9c:bf:85:6e:76:0d:64:e3:12:7e:02:10:4b:56:c4:33:95:
1e:f1:14:13:43:4f:7e:79:d4:16:2e:30:35:0c:0d:8d:91:21:
78:96:56:54:8a:13:66:d6:5f:e5:03:1b:de:d4:58:4c:b0:e3:
38:2b:97:2e:fa:d9:a3:43:2b:9f:8c:71:3e:ad:30:90:b7:87:
6e:29:1a:69:c3:e5:7c:d8:7b:79:03:b1:ef:43:af:90:15:d4:
03:6c:11:f9:7e:11:bf:b6:85:60:72:34:e4:13:85:0a:94:ef:
5e:64:cd:77:b7:68:a6:f2:ca:e6:bd:3c:91:8a:8e:55:2e:b9:
0a:58:24:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 23:38:58 2026 by rpki-client