Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/45adde-27b5-4d99-9319-d7c00750ed94/1/53bFGYDHUepeMd3ayO9h-1bJcA8.mft
File: 53bFGYDHUepeMd3ayO9h-1bJcA8.mft (raw, json)
Hash identifier: TvLwxvB0TgJvT4Pctv2M54mh/ddMjoOLUxU6Q0LzK5c=
Subject key identifier: 8C:F2:39:67:3C:8C:53:33:99:95:1E:BD:58:F8:37:16:C1:D4:A1:3A
Authority key identifier: E7:76:C5:19:80:C7:51:EA:5E:31:DD:DA:C8:EF:61:FB:56:C9:70:0F
Certificate issuer: /CN=e776c51980c751ea5e31dddac8ef61fb56c9700f
Certificate serial: 019D16107ACC930E4D5EB09D6E21300919B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/53bFGYDHUepeMd3ayO9h-1bJcA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/45adde-27b5-4d99-9319-d7c00750ed94/1/53bFGYDHUepeMd3ayO9h-1bJcA8.mft
Manifest number: 0491
Signing time: Sun 22 Mar 2026 15:01:11 +0000
Manifest this update: Sun 22 Mar 2026 15:01:11 +0000
Manifest next update: Mon 23 Mar 2026 15:01:11 +0000
Files and hashes: 1: 53bFGYDHUepeMd3ayO9h-1bJcA8.crl (hash: eJYrnsw/wPMVPRJCE/pFLspuH9ojwCNb+Z5bR74zEFo=)
2: TQEZqwqBvL5LSKJlBpz9ZlwxI2k.roa (hash: h28Y5SLCkXSu2nNw0njBdHdQWxez9aqEeYAyLE+jLNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/45adde-27b5-4d99-9319-d7c00750ed94/1/53bFGYDHUepeMd3ayO9h-1bJcA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/45adde-27b5-4d99-9319-d7c00750ed94/1/53bFGYDHUepeMd3ayO9h-1bJcA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/53bFGYDHUepeMd3ayO9h-1bJcA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 23 Mar 2026 15:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:16:10:7a:cc:93:0e:4d:5e:b0:9d:6e:21:30:09:19:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e776c51980c751ea5e31dddac8ef61fb56c9700f
Validity
Not Before: Mar 22 15:01:11 2026 GMT
Not After : Mar 23 15:01:11 2026 GMT
Subject: CN=8cf239673c8c533399951ebd58f83716c1d4a13a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:66:15:1d:50:b3:e0:76:d9:fa:20:c9:99:72:
17:6d:38:73:dd:0e:40:df:01:b3:ae:cc:dd:f2:57:
47:9e:19:63:a2:fa:f1:2a:8f:51:83:c8:bf:df:6f:
52:27:11:05:cb:e8:a1:af:5c:c7:eb:f2:f3:89:6a:
55:a9:3a:36:7d:cb:cc:64:ef:f3:80:ee:57:b8:26:
16:28:1a:81:63:05:f7:17:18:75:65:5d:44:8f:ae:
2f:4e:0b:3f:57:e3:b1:1a:b5:f0:87:15:bc:3c:c5:
57:a2:de:53:5d:e9:fa:a5:4f:b2:10:39:01:0d:2b:
f6:ce:b0:43:91:62:d7:6b:64:76:1e:f1:92:8e:10:
c5:28:21:ff:e4:fc:a5:02:0b:ba:9d:fb:7a:a3:df:
0e:40:1c:07:89:fa:79:1d:85:41:a2:24:ba:8e:d3:
2e:a2:ac:b9:e6:4e:76:ab:80:63:0e:30:00:c3:22:
25:1f:a1:34:04:29:1c:9c:6d:c3:a8:3e:61:87:48:
54:fc:6e:5b:8c:6d:8d:66:b0:e9:ab:24:d2:5c:b2:
df:3b:c7:2c:7b:03:d3:0e:62:2f:d8:0e:11:78:9a:
25:a4:d4:67:1d:de:ca:d1:03:e3:d5:23:3b:c2:9a:
2f:24:18:39:a8:70:d3:ed:93:fd:52:23:2d:0c:54:
41:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:F2:39:67:3C:8C:53:33:99:95:1E:BD:58:F8:37:16:C1:D4:A1:3A
X509v3 Authority Key Identifier:
keyid:E7:76:C5:19:80:C7:51:EA:5E:31:DD:DA:C8:EF:61:FB:56:C9:70:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/53bFGYDHUepeMd3ayO9h-1bJcA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/45adde-27b5-4d99-9319-d7c00750ed94/1/53bFGYDHUepeMd3ayO9h-1bJcA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/45adde-27b5-4d99-9319-d7c00750ed94/1/53bFGYDHUepeMd3ayO9h-1bJcA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:a0:c2:ba:09:8d:ae:62:46:31:7a:e4:be:7b:fb:d8:25:e9:
6c:c5:6f:2c:6a:03:48:09:d4:7a:75:57:98:75:41:04:18:13:
4a:bb:5e:13:8d:74:4e:d3:0d:ae:af:1b:10:9d:1f:90:a7:ad:
00:52:f3:c9:7d:86:47:ba:68:33:f0:b3:9d:3a:8e:f6:c5:da:
d8:60:35:ec:20:74:8b:a4:48:bc:63:a8:14:3f:25:c3:1b:f9:
ed:17:bc:c3:69:98:c1:41:8b:ba:31:63:d6:3a:6f:93:63:83:
83:47:fb:6d:9e:45:92:da:df:7d:c1:9a:73:b7:02:87:cc:db:
23:30:97:de:7f:91:20:97:39:58:ff:22:bb:f0:13:4f:a9:88:
ab:64:f7:9b:0b:27:b1:02:75:dc:ec:6b:7f:2e:d4:ec:4f:a6:
87:3a:ef:51:aa:9b:e5:78:85:92:4a:16:13:90:2f:88:d6:fc:
24:eb:47:c5:2b:76:88:56:06:7b:76:40:b3:a7:88:16:12:17:
1a:9a:40:56:8c:ea:64:ee:f0:cc:4f:df:2a:09:3e:62:c7:f0:
a2:13:e6:c2:31:73:ba:e0:70:b7:3d:d2:ac:3f:b0:e7:72:b8:
c5:78:a8:49:26:40:50:f9:d0:02:a2:cd:44:c7:fd:92:f0:75:
8f:d3:98:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 22 22:03:38 2026 by rpki-client