Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.mft
File: 5m53Jv9ToTyAzLyk1dOU5Oiu9UI.mft (raw, json)
Hash identifier: v7T3tJPO4F9ATy9rbpKCsNM7omzvX9+IUj7MX/EAvus=
Subject key identifier: 7C:DD:71:CD:28:A1:B9:E9:07:EE:7C:60:27:E0:85:38:A7:AF:39:B4
Authority key identifier: E6:6E:77:26:FF:53:A1:3C:80:CC:BC:A4:D5:D3:94:E4:E8:AE:F5:42
Certificate issuer: /CN=e66e7726ff53a13c80ccbca4d5d394e4e8aef542
Certificate serial: 019D26282EF5CB90C9D55C358D1C99CA3867
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.mft
Manifest number: 12F7
Signing time: Wed 25 Mar 2026 18:01:00 +0000
Manifest this update: Wed 25 Mar 2026 18:01:00 +0000
Manifest next update: Thu 26 Mar 2026 18:01:00 +0000
Files and hashes: 1: 5m53Jv9ToTyAzLyk1dOU5Oiu9UI.crl (hash: xLfoQkDoR+FH66ZoKlYPP+lTZkNZ+J66UR+Ggts5tCo=)
2: 7_L8NcVLRTz2RYybJHlGYVjuobc.roa (hash: JorE4629r9nl2sDA/mjIQPSANIbO1m6LYD+3jl05Tds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 18:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:2e:f5:cb:90:c9:d5:5c:35:8d:1c:99:ca:38:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e66e7726ff53a13c80ccbca4d5d394e4e8aef542
Validity
Not Before: Mar 25 18:01:00 2026 GMT
Not After : Mar 26 18:01:00 2026 GMT
Subject: CN=7cdd71cd28a1b9e907ee7c6027e08538a7af39b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:fa:65:bb:1f:58:6e:57:91:b1:0b:f6:86:d5:
a4:c3:39:d2:1c:80:d3:eb:4d:74:d3:8d:1e:35:24:
4f:82:1c:70:6e:e6:c6:0b:9d:a9:06:2c:d4:df:79:
ea:16:87:2b:3b:49:a5:e5:5b:0f:fb:fb:d9:ae:04:
b7:e4:d0:f8:dc:69:c6:7b:6e:73:d9:79:b9:de:8c:
0f:4f:27:35:df:e7:3b:1b:2d:c1:95:0c:da:bf:6d:
d7:22:fc:ec:bc:db:21:84:20:d1:74:e0:c3:a5:4b:
ef:50:32:64:5a:e3:2e:3d:2f:c4:16:4d:6c:7f:dd:
ee:87:49:a0:e6:eb:63:4b:73:06:f1:c5:65:cc:2b:
5c:3c:9c:68:4f:50:e2:3b:73:e4:e9:ab:4c:8e:7b:
d7:70:9b:7c:94:4e:a0:cf:92:9c:9c:54:ff:7b:d8:
be:a1:21:d6:5e:ee:74:3f:82:cd:d7:8f:c6:09:7c:
6a:73:c0:c4:bd:35:88:24:05:21:5b:1f:13:e1:e8:
cf:68:14:9a:b2:5b:b9:ef:4a:72:08:9e:8d:a8:e6:
2e:8d:6c:e5:92:27:8d:97:fa:dc:10:03:df:ae:1f:
73:d6:88:1f:2a:81:4d:d2:da:78:34:c3:aa:31:71:
c7:ff:18:2d:ba:28:2a:f8:af:dd:23:ca:72:72:41:
f3:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:DD:71:CD:28:A1:B9:E9:07:EE:7C:60:27:E0:85:38:A7:AF:39:B4
X509v3 Authority Key Identifier:
keyid:E6:6E:77:26:FF:53:A1:3C:80:CC:BC:A4:D5:D3:94:E4:E8:AE:F5:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:00:ab:0d:87:44:9d:00:f0:82:15:46:17:44:db:7d:d5:3a:
4e:b1:f4:49:a2:27:6c:e4:bd:1f:86:86:0a:a8:5f:f3:f8:92:
f9:b1:4c:d7:dd:48:79:a0:44:45:12:c2:59:7c:b0:6e:74:4f:
11:ff:f3:78:23:18:bb:2d:a9:13:dc:bc:3d:f3:ca:7b:b6:35:
71:5f:40:e6:c2:3d:97:2c:67:b0:cf:b8:1d:68:79:7b:2f:c1:
e4:f6:9f:1e:5c:14:29:47:f6:13:d8:4d:24:49:c2:ca:ea:97:
ad:2b:15:28:ad:cb:71:ea:ef:4f:a2:e1:f0:5e:60:88:49:e8:
8b:54:f3:43:16:7e:f9:ae:16:86:bb:87:2e:d0:5e:ea:cd:ae:
15:f7:12:88:b0:97:09:68:a5:76:62:7d:00:f2:7a:32:a3:97:
e3:1a:7b:85:bc:13:d4:51:4e:fe:bf:11:3d:72:eb:b8:e3:e4:
fc:4a:c2:f9:b0:92:c7:a6:0f:85:8e:32:b3:73:42:73:e8:b9:
45:35:0e:43:fc:31:02:8c:48:4d:00:62:e3:f1:fb:f5:0e:6f:
76:7f:b4:7e:ff:83:39:3b:a1:9b:81:e5:a7:b2:1e:85:b4:bc:
a1:01:3d:fc:87:11:1c:c8:80:d7:cf:26:19:41:91:e4:e7:e6:
50:d9:33:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:54:42 2026 by rpki-client