Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/b6ab7b-b348-4763-97ec-16c63c426c33/1/5_2MB2tTpxIbVBePW2p-KRNbzOw.mft
File: 5_2MB2tTpxIbVBePW2p-KRNbzOw.mft (raw, json)
Hash identifier: rjQ3B7HOep1mzkpEyu2nCRXGTyVbNcWGAZJjyvN+p08=
Subject key identifier: 49:C1:00:1E:74:4A:0A:7D:22:6E:13:AC:EC:43:7D:D3:27:A0:E8:F3
Authority key identifier: E7:FD:8C:07:6B:53:A7:12:1B:54:17:8F:5B:6A:7E:29:13:5B:CC:EC
Certificate issuer: /CN=e7fd8c076b53a7121b54178f5b6a7e29135bccec
Certificate serial: 019D28167AC53AC17D4ADB6577818AA22435
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_2MB2tTpxIbVBePW2p-KRNbzOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/b6ab7b-b348-4763-97ec-16c63c426c33/1/5_2MB2tTpxIbVBePW2p-KRNbzOw.mft
Manifest number: 0337
Signing time: Thu 26 Mar 2026 03:00:55 +0000
Manifest this update: Thu 26 Mar 2026 03:00:55 +0000
Manifest next update: Fri 27 Mar 2026 03:00:55 +0000
Files and hashes: 1: 5_2MB2tTpxIbVBePW2p-KRNbzOw.crl (hash: u1jRbYM/QD7Rf2wF/ekjEKOWr35OzOhnpBQFlKjCisI=)
2: mcBFodUS0CwQmUkGW0FYxCXI2Ow.roa (hash: jkf/rJLpDQOpzEiYaZvjFupL9lXgwt7xQFwFKnS2W7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/b6ab7b-b348-4763-97ec-16c63c426c33/1/5_2MB2tTpxIbVBePW2p-KRNbzOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/b6ab7b-b348-4763-97ec-16c63c426c33/1/5_2MB2tTpxIbVBePW2p-KRNbzOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5_2MB2tTpxIbVBePW2p-KRNbzOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:7a:c5:3a:c1:7d:4a:db:65:77:81:8a:a2:24:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7fd8c076b53a7121b54178f5b6a7e29135bccec
Validity
Not Before: Mar 26 03:00:55 2026 GMT
Not After : Mar 27 03:00:55 2026 GMT
Subject: CN=49c1001e744a0a7d226e13acec437dd327a0e8f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f9:1a:fd:e5:8f:1e:b5:03:d5:30:0f:06:93:
3d:1e:3e:6c:60:30:fd:7a:5a:02:d9:b7:35:2c:5e:
0f:53:73:0e:25:48:4d:80:3b:21:d8:75:8e:b4:2c:
5d:67:b3:3b:bd:06:13:85:28:f7:39:3f:90:5f:a9:
dd:3d:0d:21:64:29:dc:c0:05:1d:b7:4b:5d:39:80:
5f:dd:85:e2:3b:38:cd:c8:b2:c6:1d:1f:44:f1:d8:
aa:49:6b:fa:2f:48:7f:d0:22:bd:d1:23:f1:8e:e6:
48:0d:c5:27:ba:a1:6d:70:95:9d:d8:f8:8d:2b:51:
af:fc:15:13:a3:87:fc:90:38:5c:05:86:b2:36:ed:
b2:31:d2:a8:ab:63:85:54:5d:bf:ac:24:6b:00:21:
89:6f:68:95:d2:c4:c1:d6:1c:88:f9:6b:ae:78:eb:
ac:b4:13:d7:a2:15:bb:3b:a7:56:b3:6f:2f:cf:b7:
58:cd:dd:7a:f1:df:dd:fa:50:4a:e9:a2:cb:0b:01:
13:cb:1f:ad:e8:ee:32:31:58:21:42:b8:78:61:2e:
d7:4c:19:6e:3f:d9:57:10:67:26:0c:24:33:46:b8:
b3:8b:c1:d3:5f:df:4d:8e:05:52:e7:af:f4:e2:77:
20:04:e0:56:9d:e7:51:ef:fc:cb:3f:74:a2:b8:93:
13:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:C1:00:1E:74:4A:0A:7D:22:6E:13:AC:EC:43:7D:D3:27:A0:E8:F3
X509v3 Authority Key Identifier:
keyid:E7:FD:8C:07:6B:53:A7:12:1B:54:17:8F:5B:6A:7E:29:13:5B:CC:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_2MB2tTpxIbVBePW2p-KRNbzOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/b6ab7b-b348-4763-97ec-16c63c426c33/1/5_2MB2tTpxIbVBePW2p-KRNbzOw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/b6ab7b-b348-4763-97ec-16c63c426c33/1/5_2MB2tTpxIbVBePW2p-KRNbzOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:83:56:fb:49:ce:88:e4:ec:84:9a:58:b3:a6:21:8f:be:b7:
61:a2:44:bc:66:3a:55:78:6b:2a:79:13:04:26:95:a9:7f:06:
6a:bc:90:6a:aa:26:0f:da:34:94:cb:3e:f3:ab:cc:0f:45:96:
f4:40:7e:49:1b:56:e0:5e:18:36:0b:9a:71:2f:8f:64:6e:eb:
d3:9a:cf:e9:14:06:e4:aa:16:73:d0:dd:90:35:1d:45:28:67:
16:22:34:47:8a:5b:bc:af:8f:aa:33:e8:1d:cd:4b:26:c5:aa:
15:af:01:5a:9d:8b:2c:de:5c:6e:7f:e9:6a:9f:06:21:51:47:
27:29:37:33:5b:f8:69:2d:b5:95:bb:ef:76:33:fc:f6:d5:c0:
3c:22:e3:1b:37:e8:5c:ad:e9:ed:8b:c5:43:75:13:8e:a1:5a:
cc:72:b9:92:17:44:20:fa:d1:c4:63:e5:8b:91:5f:99:d5:dc:
4f:7a:96:ea:ef:33:d4:48:fd:2a:cb:3c:85:60:9c:33:25:a8:
0f:32:3f:a9:98:93:0f:96:dc:41:fe:df:eb:97:26:aa:21:97:
e2:d4:cd:bb:0a:cb:bf:19:c1:84:4b:52:47:9c:5f:4b:ff:5f:
41:7a:2b:9b:22:07:ea:3a:ea:80:e0:33:5b:40:ae:fe:57:bb:
89:80:8c:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:49:41 2026 by rpki-client