Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/f37203-f172-459f-8315-82f25ac6887f/1/5iMpnuR7T2EtuQoU-V5AdnrgZlc.mft
File: 5iMpnuR7T2EtuQoU-V5AdnrgZlc.mft (raw, json)
Hash identifier: b2o7wcaAkCUUE7S+t4EF6cLejufbZtTKFdAl8ltMK04=
Subject key identifier: FC:8A:83:99:46:9B:33:01:47:48:CF:40:A6:D2:BB:72:69:CF:E3:82
Authority key identifier: E6:23:29:9E:E4:7B:4F:61:2D:B9:0A:14:F9:5E:40:76:7A:E0:66:57
Certificate issuer: /CN=e623299ee47b4f612db90a14f95e40767ae06657
Certificate serial: 019D26CCF4F6225EAD6685F14B556CBEF308
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5iMpnuR7T2EtuQoU-V5AdnrgZlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/f37203-f172-459f-8315-82f25ac6887f/1/5iMpnuR7T2EtuQoU-V5AdnrgZlc.mft
Manifest number: 1517
Signing time: Wed 25 Mar 2026 21:00:59 +0000
Manifest this update: Wed 25 Mar 2026 21:00:59 +0000
Manifest next update: Thu 26 Mar 2026 21:00:59 +0000
Files and hashes: 1: 5iMpnuR7T2EtuQoU-V5AdnrgZlc.crl (hash: lEjAtETZM5q63gJBhZ+RUoOkUGiLtgQ4uGS65wKOu4o=)
2: kVVy-YWr30S0GSdgLLy6UhLp1JQ.roa (hash: MLFi2OYZr+v/54OGb70/05XIuu/GA7oMfXFZI0ZBmD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/f37203-f172-459f-8315-82f25ac6887f/1/5iMpnuR7T2EtuQoU-V5AdnrgZlc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/f37203-f172-459f-8315-82f25ac6887f/1/5iMpnuR7T2EtuQoU-V5AdnrgZlc.mft
rsync://rpki.ripe.net/repository/DEFAULT/5iMpnuR7T2EtuQoU-V5AdnrgZlc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:f4:f6:22:5e:ad:66:85:f1:4b:55:6c:be:f3:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e623299ee47b4f612db90a14f95e40767ae06657
Validity
Not Before: Mar 25 21:00:59 2026 GMT
Not After : Mar 26 21:00:59 2026 GMT
Subject: CN=fc8a8399469b33014748cf40a6d2bb7269cfe382
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:79:fc:aa:69:36:6c:f9:f9:ae:c7:71:05:d3:
9e:2b:8c:c9:79:40:4b:9f:51:7e:90:0f:b7:a8:48:
5a:5b:42:ec:7c:16:c4:67:61:6f:85:65:2d:19:59:
c3:f7:f9:df:05:ac:66:09:1a:72:d6:4a:19:3e:9a:
1c:9c:b8:03:2d:87:2c:49:ce:1a:24:b4:85:0d:ea:
4b:81:cb:f7:79:10:89:65:48:76:90:dd:32:52:69:
bb:01:61:40:5b:6f:f4:f0:0f:48:5e:ad:9f:bd:45:
26:c3:28:ef:6d:b7:4c:0c:20:c9:28:46:8e:3a:fa:
a5:58:28:e5:11:5e:94:fb:b1:6a:34:e7:13:a6:bc:
21:af:f2:26:a2:cd:8f:1e:4b:72:ec:2e:dc:00:98:
99:d9:ed:9a:95:d9:4f:0b:a5:0d:ed:9b:f0:b6:a8:
2e:ba:c9:b7:1a:d1:c4:6b:b4:23:0a:c3:08:14:0c:
c0:b6:9f:ef:a1:68:c3:6d:d1:dd:9b:5c:9d:9e:4d:
74:73:95:c8:2b:64:bb:7b:6b:e1:33:e2:6e:ed:8c:
22:11:27:94:5f:50:74:3a:a0:87:da:6c:ca:2a:65:
e1:88:bf:d4:83:75:f7:f8:fb:92:64:58:cf:70:d5:
0e:12:fe:84:e0:95:f4:79:0d:24:fe:37:10:7e:83:
14:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:8A:83:99:46:9B:33:01:47:48:CF:40:A6:D2:BB:72:69:CF:E3:82
X509v3 Authority Key Identifier:
keyid:E6:23:29:9E:E4:7B:4F:61:2D:B9:0A:14:F9:5E:40:76:7A:E0:66:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5iMpnuR7T2EtuQoU-V5AdnrgZlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/f37203-f172-459f-8315-82f25ac6887f/1/5iMpnuR7T2EtuQoU-V5AdnrgZlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/f37203-f172-459f-8315-82f25ac6887f/1/5iMpnuR7T2EtuQoU-V5AdnrgZlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:92:93:b3:02:c2:61:75:43:46:a3:76:e4:5e:15:88:3c:27:
0b:91:6a:d5:a6:ca:21:3e:50:88:21:f3:b3:08:95:56:37:0e:
83:1c:7c:d9:51:5a:79:f3:85:4d:1f:19:4a:e0:cc:85:9c:4b:
9a:09:ac:4f:21:73:99:4a:70:2c:69:25:cd:43:7e:a0:6c:a5:
32:32:ae:0e:be:f7:88:7e:bd:ff:e2:27:45:e6:10:ac:dd:49:
df:3b:0b:5b:99:3b:ef:e8:f7:02:f2:68:d6:9a:f7:0b:32:b5:
86:73:9d:09:12:c8:f9:00:8f:5a:b7:b8:1b:c1:5e:c7:a2:9b:
84:7c:b6:fb:ef:e9:75:b0:ab:43:93:87:e0:89:7e:36:06:92:
33:83:95:20:b8:f1:b6:42:a7:73:ad:e6:95:8b:4b:15:14:dd:
6b:77:88:ad:90:7a:67:5f:eb:6f:92:90:b0:1a:24:7b:e8:a0:
99:45:5c:20:a3:c0:89:e6:d6:eb:91:19:9e:c6:14:ce:97:9d:
52:49:13:c7:96:f6:d8:5b:eb:92:c5:f4:fb:2d:8b:24:9f:9d:
aa:ad:58:f1:84:b4:1a:46:e4:9c:20:4e:33:31:b0:bc:2e:9f:
d1:4a:82:33:a8:8d:c3:dc:2c:82:25:c8:c5:05:dc:46:fc:d5:
56:6f:30:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:32 2026 by rpki-client