Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/5LqR1iZQTMvGTYl0C2PLLrQjT3A.mft
File: 5LqR1iZQTMvGTYl0C2PLLrQjT3A.mft (raw, json)
Hash identifier: YOP6F6Hkx7bJrd6QscnKmPJMkTYGStfSXQVk752aFRc=
Subject key identifier: B1:6E:5D:CE:81:08:50:A0:58:04:5B:10:68:6C:78:00:B3:4F:DC:78
Authority key identifier: E4:BA:91:D6:26:50:4C:CB:C6:4D:89:74:0B:63:CB:2E:B4:23:4F:70
Certificate issuer: /CN=e4ba91d626504ccbc64d89740b63cb2eb4234f70
Certificate serial: 019CEC38FC0F9C159C267A858A1000025EAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5LqR1iZQTMvGTYl0C2PLLrQjT3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/5LqR1iZQTMvGTYl0C2PLLrQjT3A.mft
Manifest number: 1868
Signing time: Sat 14 Mar 2026 12:01:23 +0000
Manifest this update: Sat 14 Mar 2026 12:01:23 +0000
Manifest next update: Sun 15 Mar 2026 12:01:23 +0000
Files and hashes: 1: 5LqR1iZQTMvGTYl0C2PLLrQjT3A.crl (hash: 8r0EpX1K9DRHSFjeO9TAKjavqzRWfax5vfuyMhxoo6E=)
2: 8nPl3AcrOpCxoPHI-yYhk20Z4jo.roa (hash: xYCGhk8KRGNgVElrhL//wuDH3rNsau4dVCz023td3io=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/5LqR1iZQTMvGTYl0C2PLLrQjT3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/5LqR1iZQTMvGTYl0C2PLLrQjT3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/5LqR1iZQTMvGTYl0C2PLLrQjT3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Mar 2026 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ec:38:fc:0f:9c:15:9c:26:7a:85:8a:10:00:02:5e:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4ba91d626504ccbc64d89740b63cb2eb4234f70
Validity
Not Before: Mar 14 12:01:23 2026 GMT
Not After : Mar 15 12:01:23 2026 GMT
Subject: CN=b16e5dce810850a058045b10686c7800b34fdc78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:43:ae:32:14:d2:cc:cb:ff:63:c0:e9:1d:11:
a2:5d:9b:bc:dc:74:0b:05:d5:26:62:fe:16:f9:e0:
a1:a2:14:82:72:5a:a5:16:ef:a0:13:d6:ee:f9:a7:
3c:63:0b:21:79:dd:fb:cb:53:84:4e:55:f0:ab:d1:
ea:c3:08:ca:e0:13:ae:c3:16:c9:be:20:3a:fd:8d:
fa:9b:7e:d8:a6:75:06:82:3e:8f:5b:8c:d0:f3:69:
18:34:4c:84:95:71:b1:42:d9:98:44:be:96:dc:ce:
09:a0:eb:0d:47:6d:ba:f3:09:a5:75:f8:01:51:fe:
b9:8e:e2:02:66:b7:0d:26:b2:47:7a:97:b7:0d:e2:
e1:09:17:eb:5d:28:d7:5c:47:7d:96:72:25:dc:b1:
c6:a1:94:78:3d:3e:65:6c:bb:4b:d5:05:64:ed:1c:
96:2a:2f:59:45:0b:7e:c7:df:1d:e7:ee:97:af:99:
f3:36:39:63:2a:22:e5:dd:32:1c:13:9d:ae:69:c2:
dc:00:b4:ee:07:2b:59:33:5e:80:4f:7a:77:f8:0c:
73:7e:25:64:ff:64:44:04:73:bf:7e:96:4a:82:08:
07:a2:58:26:df:19:19:ef:cb:ce:51:a1:fb:90:ac:
63:d9:71:27:27:bd:73:6d:8a:b9:95:79:59:05:e1:
59:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:6E:5D:CE:81:08:50:A0:58:04:5B:10:68:6C:78:00:B3:4F:DC:78
X509v3 Authority Key Identifier:
keyid:E4:BA:91:D6:26:50:4C:CB:C6:4D:89:74:0B:63:CB:2E:B4:23:4F:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5LqR1iZQTMvGTYl0C2PLLrQjT3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/5LqR1iZQTMvGTYl0C2PLLrQjT3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/5LqR1iZQTMvGTYl0C2PLLrQjT3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:16:8a:7b:c7:ec:57:58:24:22:7e:64:e6:2b:bd:fe:2e:dd:
ff:93:83:b7:bd:18:43:3e:b1:e3:db:02:34:15:1e:39:5a:76:
49:6c:0c:20:9b:6b:8a:0d:68:27:f7:a9:88:a5:62:11:35:0a:
22:70:d8:e8:5d:19:31:51:07:b6:40:d8:b1:c5:a2:e6:5d:3d:
cf:1f:14:82:2f:c9:5d:e8:49:3a:18:5a:40:b1:ac:74:4f:e0:
64:b5:35:8e:78:9e:e5:af:ac:62:6f:7a:ba:6c:d3:96:68:85:
ea:22:43:7e:58:00:2a:30:02:c8:33:98:91:a2:a2:ca:48:bf:
ae:23:c4:b8:3a:a1:a5:c0:14:be:58:f7:02:3e:34:c9:d0:2d:
11:c2:28:ae:f9:88:6b:1e:16:21:e3:53:79:11:b4:f6:9c:3a:
be:52:ce:71:e3:86:5a:11:db:37:bf:34:34:0c:fe:06:83:83:
87:f2:22:ce:38:58:8d:f4:a8:ac:77:a2:ba:79:42:62:ce:08:
26:86:f6:d9:97:a1:c6:4b:ed:11:5f:1f:1d:05:68:20:66:2f:
fa:95:ae:e9:39:3b:a9:cb:e8:bb:b0:b0:4c:aa:d4:b8:71:2b:
d8:b9:a8:9f:cf:ef:fb:ae:97:92:ad:c6:ec:ea:5a:5f:3b:98:
cd:77:bb:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 22:45:53 2026 by rpki-client