Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/1a024c-6b75-4ad8-b59d-af9bb3d125d8/1/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.mft
File: 5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.mft (raw, json)
Hash identifier: nXFTI9Izf67+wq/jlveCjkS90FOAeXvoevNBHZwRM0g=
Subject key identifier: 32:A4:B0:F1:A9:8C:81:D3:71:73:BA:D2:82:59:DE:B6:7F:F7:31:1B
Authority key identifier: E4:6B:3D:61:FE:43:AB:68:04:B6:F1:E3:29:7A:8C:DC:C2:6B:9D:6C
Certificate issuer: /CN=e46b3d61fe43ab6804b6f1e3297a8cdcc26b9d6c
Certificate serial: 019CAA58CC25AE92A2B612FD2107FFFE2953
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/1a024c-6b75-4ad8-b59d-af9bb3d125d8/1/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.mft
Manifest number: 04B6
Signing time: Sun 01 Mar 2026 17:01:11 +0000
Manifest this update: Sun 01 Mar 2026 17:01:11 +0000
Manifest next update: Mon 02 Mar 2026 17:01:11 +0000
Files and hashes: 1: 5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.crl (hash: l9Ddx7cRJGQQUsDLCWCooP4cg6MGpfilomsdw0/Q4+4=)
2: VRLe_vrVUBu7hrug_AwRCwsEDDw.roa (hash: 1ZW4YMZPRX134FBX/m+hkmhqXkoGgUz70QQefV/wFo8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/1a024c-6b75-4ad8-b59d-af9bb3d125d8/1/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/1a024c-6b75-4ad8-b59d-af9bb3d125d8/1/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:cc:25:ae:92:a2:b6:12:fd:21:07:ff:fe:29:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e46b3d61fe43ab6804b6f1e3297a8cdcc26b9d6c
Validity
Not Before: Mar 1 17:01:11 2026 GMT
Not After : Mar 2 17:01:11 2026 GMT
Subject: CN=32a4b0f1a98c81d37173bad28259deb67ff7311b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:38:31:99:05:25:e5:ff:8d:c0:7d:df:cf:cf:
ea:07:a3:3f:ee:f7:ab:be:48:21:ea:55:fd:b8:f9:
cb:d4:5e:0f:56:57:2e:b3:6b:f2:31:94:78:de:1e:
1d:03:c9:e0:bb:f9:3e:30:4f:f1:cd:89:65:f0:d1:
3e:c4:5b:11:94:9f:bb:0c:6c:42:d3:fe:36:95:e8:
bf:09:f9:9c:dc:8b:05:bd:17:9d:fe:52:cf:6b:ff:
32:c7:55:75:0a:d8:bf:c2:52:c7:b1:5f:a8:3b:86:
a7:a9:85:28:d7:5c:60:01:18:b6:59:46:81:4d:a4:
5a:93:50:2c:30:92:07:6a:39:6d:ce:cc:6a:aa:75:
77:a8:cb:90:16:a5:32:ac:24:97:42:71:4f:c1:30:
a9:d9:f9:d4:57:3f:23:25:e9:df:9e:a7:6c:5f:81:
34:fa:47:40:33:16:1b:ba:d3:32:c4:74:72:f2:3d:
07:78:44:49:74:83:eb:79:17:41:b9:34:67:55:7d:
ac:1a:af:a1:c7:55:0f:17:79:42:90:53:ef:cb:0c:
77:21:2a:8b:83:43:a6:a2:28:3a:25:ee:39:0d:02:
52:b7:b6:dd:a3:36:6a:55:27:8f:7d:f2:ad:93:d6:
80:3e:0a:e7:e5:2c:ad:d0:c6:00:1c:a0:6e:d0:6d:
f1:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:A4:B0:F1:A9:8C:81:D3:71:73:BA:D2:82:59:DE:B6:7F:F7:31:1B
X509v3 Authority Key Identifier:
keyid:E4:6B:3D:61:FE:43:AB:68:04:B6:F1:E3:29:7A:8C:DC:C2:6B:9D:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1a024c-6b75-4ad8-b59d-af9bb3d125d8/1/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1a024c-6b75-4ad8-b59d-af9bb3d125d8/1/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:37:b0:07:e7:53:68:6a:59:63:0a:57:12:9f:6e:09:94:db:
91:0a:61:91:b5:d7:15:0e:7f:65:c7:c8:f6:2b:93:40:6d:46:
fb:cf:76:fe:91:e6:ca:75:8f:78:4c:81:7b:42:d9:17:f7:aa:
71:2c:80:ac:f5:90:95:4f:af:c6:95:b6:fa:f6:cc:d3:05:63:
d0:db:b6:bb:97:b9:94:d8:be:00:d6:f7:98:1e:05:84:44:97:
f1:13:83:c7:0b:ce:12:6f:79:38:f8:ff:d9:3c:cb:05:96:e6:
a6:b5:14:fd:2c:e2:a5:1f:0a:8f:2c:a9:13:55:ed:a9:56:92:
5b:00:78:db:09:71:d9:c8:08:3c:0d:86:a0:f3:76:21:ff:93:
22:8e:af:3e:2f:30:8d:5b:d0:c3:f0:4c:b1:2e:62:c0:22:3c:
56:12:3e:93:d1:fb:07:7d:fe:2c:39:39:ea:a3:3d:29:06:7c:
56:d6:b7:be:76:de:cc:d8:02:83:95:c9:82:a1:7d:8d:a8:d3:
0c:22:25:4d:82:d4:92:fc:51:7c:24:be:54:63:8b:0e:0b:35:
42:a6:01:ec:76:3d:f5:23:a2:24:4a:5e:f9:10:b6:53:5f:25:
b9:8f:2a:69:8d:a8:52:14:12:73:63:fb:a9:82:aa:4a:96:f3:
df:be:9c:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:45:08 2026 by rpki-client