Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.mft
File: 5m53Jv9ToTyAzLyk1dOU5Oiu9UI.mft (raw, json)
Hash identifier: B/rIxv2FdQRt7wjmNEl0VgjueTTt7g6V/jiKvcL9bNA=
Subject key identifier: 91:4A:C0:8D:BD:13:45:2F:62:34:CC:FE:C1:C7:53:BC:A6:C4:7F:06
Authority key identifier: E6:6E:77:26:FF:53:A1:3C:80:CC:BC:A4:D5:D3:94:E4:E8:AE:F5:42
Certificate issuer: /CN=e66e7726ff53a13c80ccbca4d5d394e4e8aef542
Certificate serial: 019D39776F90F4D52F2901CA7A5748F93ADD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.mft
Manifest number: 1301
Signing time: Sun 29 Mar 2026 12:00:21 +0000
Manifest this update: Sun 29 Mar 2026 12:00:21 +0000
Manifest next update: Mon 30 Mar 2026 12:00:21 +0000
Files and hashes: 1: 5m53Jv9ToTyAzLyk1dOU5Oiu9UI.crl (hash: E5vjmBhJ8BB1EZ2vvGBOshNK3V1ukEWaoaM1wG5+ARQ=)
2: 7_L8NcVLRTz2RYybJHlGYVjuobc.roa (hash: JorE4629r9nl2sDA/mjIQPSANIbO1m6LYD+3jl05Tds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:6f:90:f4:d5:2f:29:01:ca:7a:57:48:f9:3a:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e66e7726ff53a13c80ccbca4d5d394e4e8aef542
Validity
Not Before: Mar 29 12:00:21 2026 GMT
Not After : Mar 30 12:00:21 2026 GMT
Subject: CN=914ac08dbd13452f6234ccfec1c753bca6c47f06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:1a:44:70:8c:c3:13:b5:6e:1c:f4:51:e4:ab:
b2:a6:14:a8:c7:9f:fd:36:d3:94:22:20:a7:c3:81:
42:93:16:f6:66:3b:de:e9:e3:80:95:30:d2:30:17:
71:ce:fc:fc:87:86:51:4b:0a:2b:cd:33:a2:fe:84:
be:47:9c:05:15:22:70:c8:48:70:85:0d:58:23:9c:
e6:1b:95:a2:68:ab:e4:9b:75:9e:af:03:1b:af:d4:
8c:ea:0b:34:0a:c5:76:4b:78:7a:5e:f6:b5:67:c2:
8b:ba:e4:54:27:44:a4:40:7a:67:05:b9:8e:59:e4:
b3:65:e0:eb:0c:78:de:34:f6:07:8a:be:9b:25:bd:
32:41:40:28:2e:c6:c6:33:2b:ef:70:f2:45:b7:7e:
6b:f0:85:38:51:6f:9c:63:8d:0a:d3:6c:c9:47:20:
6f:27:f0:0d:b6:d3:cd:90:c2:66:c0:c8:e9:04:47:
15:35:6b:fe:dc:af:00:17:e3:dc:3b:25:4d:73:4e:
bc:fa:2c:7d:39:a6:4c:07:89:e0:cf:dd:2d:c3:72:
ea:60:4f:a7:5e:0e:24:57:a8:f0:94:9e:58:9e:69:
25:7f:26:3d:ab:b8:a7:5b:16:28:c6:c4:89:ab:0f:
e8:11:88:83:91:b3:fe:9e:49:97:0d:6d:46:38:c0:
40:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:4A:C0:8D:BD:13:45:2F:62:34:CC:FE:C1:C7:53:BC:A6:C4:7F:06
X509v3 Authority Key Identifier:
keyid:E6:6E:77:26:FF:53:A1:3C:80:CC:BC:A4:D5:D3:94:E4:E8:AE:F5:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:8a:58:3b:29:b0:8a:9b:46:a9:e3:c5:96:9d:5e:41:f9:53:
c4:31:d4:53:6e:d2:8c:c5:23:01:57:12:17:8c:0e:14:b5:e5:
56:6d:cc:e7:39:82:e3:bf:ea:de:c9:ac:5a:2e:c4:b3:81:a9:
b0:5d:c6:60:81:c1:ee:ad:4a:6d:04:c1:20:7f:00:f6:ba:49:
4b:0f:4c:a7:26:48:fc:c6:95:73:7f:df:ad:61:d7:b3:2d:81:
e9:a4:cc:73:bc:9d:b8:a0:b9:75:e4:3a:69:38:a2:66:e5:68:
00:2e:dc:7f:d1:b1:72:21:98:3e:c0:84:27:2d:7f:76:dc:aa:
72:ea:52:8c:25:96:0f:93:f4:db:06:27:10:cf:8e:f1:4c:37:
67:5e:f6:df:c7:bf:3f:b8:4f:95:cc:03:86:2b:45:cb:b3:76:
29:b3:25:60:75:84:c6:71:41:8d:26:57:8c:5d:d8:f3:f0:88:
24:e8:be:81:56:59:ce:61:39:8c:64:88:be:90:91:cb:1e:08:
b4:9c:7c:da:63:91:34:f7:99:be:b8:f5:aa:bb:33:67:f5:a2:
ed:04:7e:b5:94:90:5e:3b:e8:f7:74:df:7c:a5:35:1d:b8:b0:
15:19:16:86:18:75:e2:f8:f6:fe:48:a6:4a:f1:fa:fb:fa:70:
66:1a:85:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:57:36 2026 by rpki-client