Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/5ec970-7965-4e0b-b947-2857e8a23558/1/53ltjBnzKhyvvVt49Sds6N-ZXQo.mft
File: 53ltjBnzKhyvvVt49Sds6N-ZXQo.mft (raw, json)
Hash identifier: egG8KcyMdSXYWGhONDxvyh/PZw9peJiKJlHidUq4HVw=
Subject key identifier: 5A:FB:8F:C6:54:91:7A:7C:B4:13:29:A9:1C:15:02:B8:83:D5:80:F7
Authority key identifier: E7:79:6D:8C:19:F3:2A:1C:AF:BD:5B:78:F5:27:6C:E8:DF:99:5D:0A
Certificate issuer: /CN=e7796d8c19f32a1cafbd5b78f5276ce8df995d0a
Certificate serial: 019D27A8A8DD06E8D375EEB2410903A75F99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/53ltjBnzKhyvvVt49Sds6N-ZXQo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/5ec970-7965-4e0b-b947-2857e8a23558/1/53ltjBnzKhyvvVt49Sds6N-ZXQo.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 01:00:57 +0000
Manifest this update: Thu 26 Mar 2026 01:00:57 +0000
Manifest next update: Fri 27 Mar 2026 01:00:57 +0000
Files and hashes: 1: 53ltjBnzKhyvvVt49Sds6N-ZXQo.crl (hash: zWdzk+HoYZJKVT4kSP/jKUGUQg01oYtWWEYLFRExGSc=)
2: D4ylrio1wtOKejkm6w9gAvQAe9Y.roa (hash: 8e3cUg43lYO4QgRug3qrBfXB7M63c6tSerUcL1Eq+FA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/5ec970-7965-4e0b-b947-2857e8a23558/1/53ltjBnzKhyvvVt49Sds6N-ZXQo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/5ec970-7965-4e0b-b947-2857e8a23558/1/53ltjBnzKhyvvVt49Sds6N-ZXQo.mft
rsync://rpki.ripe.net/repository/DEFAULT/53ltjBnzKhyvvVt49Sds6N-ZXQo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:a8:dd:06:e8:d3:75:ee:b2:41:09:03:a7:5f:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7796d8c19f32a1cafbd5b78f5276ce8df995d0a
Validity
Not Before: Mar 26 01:00:57 2026 GMT
Not After : Mar 27 01:00:57 2026 GMT
Subject: CN=5afb8fc654917a7cb41329a91c1502b883d580f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:41:61:71:c1:6d:f2:7f:5c:50:89:cb:9a:b2:
3d:f8:9b:e0:24:1a:ba:1a:97:c3:8c:14:cb:59:9a:
0a:de:c8:32:88:56:a3:b5:83:1f:bd:00:ab:84:c4:
c6:1d:ab:b9:7a:8d:73:31:99:61:e7:ae:f6:f3:cd:
66:17:d5:62:0a:8b:b6:fb:7a:6c:63:72:7f:91:e3:
47:b8:1b:f2:9a:6f:43:89:e0:ee:ab:18:4b:8c:c5:
f9:37:0c:a1:50:ff:21:48:51:24:25:fa:7f:ad:3c:
80:62:67:17:66:bb:f2:43:9e:80:87:cc:86:f6:11:
cb:15:8b:14:bd:30:fc:67:03:29:7a:7a:bf:a7:77:
cb:04:84:4c:bd:b8:0c:1f:c5:cf:d6:96:72:9b:28:
ce:f7:35:29:ea:0f:fc:47:79:13:b4:b4:48:69:cd:
e9:39:28:a5:65:e3:dd:ca:fd:a0:2f:93:ea:f0:d5:
b3:e4:07:83:3b:88:3b:3b:12:a3:7d:23:ba:46:12:
1a:42:59:8a:c9:5c:a1:3a:f7:b5:85:7b:7f:d0:65:
fa:25:31:da:ba:75:be:fe:c0:49:1f:5e:bc:16:53:
5a:99:38:7c:85:d0:2e:a9:1c:aa:87:79:2c:5e:8e:
e0:78:70:8a:dd:a2:af:ee:62:69:c3:bb:54:cc:3c:
5f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:FB:8F:C6:54:91:7A:7C:B4:13:29:A9:1C:15:02:B8:83:D5:80:F7
X509v3 Authority Key Identifier:
keyid:E7:79:6D:8C:19:F3:2A:1C:AF:BD:5B:78:F5:27:6C:E8:DF:99:5D:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/53ltjBnzKhyvvVt49Sds6N-ZXQo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5ec970-7965-4e0b-b947-2857e8a23558/1/53ltjBnzKhyvvVt49Sds6N-ZXQo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5ec970-7965-4e0b-b947-2857e8a23558/1/53ltjBnzKhyvvVt49Sds6N-ZXQo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:a5:f6:10:e7:7c:57:0b:67:45:32:51:86:4e:72:77:ac:0b:
03:26:78:9e:28:1f:1e:26:6f:d8:1a:51:f3:d5:92:88:13:6f:
02:76:f7:6a:97:90:9a:dc:2f:41:98:3c:2d:27:d4:44:86:f8:
86:df:56:e6:36:50:e3:66:4e:c7:5c:b8:ad:76:ae:41:5b:68:
dd:c6:2a:fe:05:6b:e5:cf:6a:91:9f:a6:d2:52:05:15:8f:f5:
2a:09:ca:a5:49:38:6b:b5:12:ce:91:29:28:4c:44:10:81:9e:
d5:ea:e0:b5:e8:12:0f:30:59:c8:72:9d:8e:bb:a7:10:f0:25:
43:47:1b:60:bb:1c:95:b4:7d:7d:78:0e:59:99:ce:c2:bb:76:
e7:3e:46:d4:20:e2:d3:a6:b2:42:43:ab:f6:7d:f3:97:17:5d:
23:5c:18:bc:39:a6:53:49:42:ed:a9:96:eb:5a:c9:b1:64:6f:
13:c0:87:16:a1:b8:69:a0:58:b9:73:80:23:a4:22:44:53:c5:
a8:7b:33:7d:3c:10:11:08:4f:2c:ba:96:eb:60:bc:7c:3d:79:
a8:73:12:a0:7c:f5:1e:7f:36:08:d0:8f:58:06:95:cc:8a:ef:
52:88:f4:f2:63:5a:67:86:c7:4c:be:a0:fc:5c:dd:c8:06:bd:
2a:3d:b1:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:27:25 2026 by rpki-client