Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/0e8b5d-ee98-47fb-a389-03fa7a9c371e/1/5ARKnRChnmsaztrJ_3eNT0CQaMs.mft
File: 5ARKnRChnmsaztrJ_3eNT0CQaMs.mft (raw, json)
Hash identifier: ws8Ns6leOjBcipTVVfW4sd8cAxW9xLx8XRE5NpETHqo=
Subject key identifier: BB:D8:06:84:64:FE:CE:21:44:AF:8B:C8:59:65:99:B8:E2:B7:70:DD
Authority key identifier: E4:04:4A:9D:10:A1:9E:6B:1A:CE:DA:C9:FF:77:8D:4F:40:90:68:CB
Certificate issuer: /CN=e4044a9d10a19e6b1acedac9ff778d4f409068cb
Certificate serial: 019CACB4B8B19FFE237B836B2FC0D8F129BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5ARKnRChnmsaztrJ_3eNT0CQaMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/0e8b5d-ee98-47fb-a389-03fa7a9c371e/1/5ARKnRChnmsaztrJ_3eNT0CQaMs.mft
Manifest number: 0D99
Signing time: Mon 02 Mar 2026 04:00:50 +0000
Manifest this update: Mon 02 Mar 2026 04:00:50 +0000
Manifest next update: Tue 03 Mar 2026 04:00:50 +0000
Files and hashes: 1: 5ARKnRChnmsaztrJ_3eNT0CQaMs.crl (hash: O6yRV38VnvF+dXEhSOawWZRktSZOvBUgaV7izN0dwMI=)
2: kkPGy3M1-5xu9OIRpXmU25SAI2Y.roa (hash: cyrjAwqc3oU6K0wTg1ctpzSIWyDuDU/OKlnASWiAbYg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/0e8b5d-ee98-47fb-a389-03fa7a9c371e/1/5ARKnRChnmsaztrJ_3eNT0CQaMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/0e8b5d-ee98-47fb-a389-03fa7a9c371e/1/5ARKnRChnmsaztrJ_3eNT0CQaMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/5ARKnRChnmsaztrJ_3eNT0CQaMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:b8:b1:9f:fe:23:7b:83:6b:2f:c0:d8:f1:29:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4044a9d10a19e6b1acedac9ff778d4f409068cb
Validity
Not Before: Mar 2 04:00:50 2026 GMT
Not After : Mar 3 04:00:50 2026 GMT
Subject: CN=bbd8068464fece2144af8bc8596599b8e2b770dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:92:c2:c9:64:a9:ba:05:de:e2:c1:80:68:82:
d6:15:e4:4a:13:44:6a:ce:1f:31:6b:e5:4f:b5:d4:
c3:fa:0e:db:66:d5:cc:eb:32:8f:ac:9a:de:4f:aa:
75:46:6f:cd:80:23:c1:39:f4:39:83:20:65:7b:e7:
e8:f3:c0:82:08:29:24:c5:05:63:dc:26:a7:be:7e:
62:aa:e3:cf:69:4e:77:d0:4d:d6:ae:30:78:c6:16:
33:2b:0b:b8:21:cf:bb:67:be:39:e0:21:bd:8b:30:
f6:07:64:98:ea:4f:4a:50:94:e1:83:94:e7:a2:a9:
c2:d3:81:d1:b0:6c:37:ab:4e:51:ec:f3:ad:49:96:
17:0c:fd:ca:fb:a6:eb:76:33:6d:5a:6d:7c:4c:3a:
40:1f:47:e6:be:e4:0e:73:a7:96:e8:c4:fa:1a:8a:
8c:89:41:85:96:c9:12:9c:bb:dc:33:0e:79:9b:f5:
8b:b8:4e:db:9d:9c:b7:48:35:4d:08:91:dd:cb:bc:
33:2b:38:db:71:c8:95:bc:ea:7e:bc:18:c3:54:98:
fa:d7:aa:04:73:0f:1f:29:4e:d0:83:bd:62:58:c3:
fa:0e:98:fe:0b:c2:32:de:f9:37:6c:c0:e5:88:af:
a7:42:44:3e:e7:15:cb:22:15:93:1d:1e:fe:83:fe:
0f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:D8:06:84:64:FE:CE:21:44:AF:8B:C8:59:65:99:B8:E2:B7:70:DD
X509v3 Authority Key Identifier:
keyid:E4:04:4A:9D:10:A1:9E:6B:1A:CE:DA:C9:FF:77:8D:4F:40:90:68:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5ARKnRChnmsaztrJ_3eNT0CQaMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0e8b5d-ee98-47fb-a389-03fa7a9c371e/1/5ARKnRChnmsaztrJ_3eNT0CQaMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0e8b5d-ee98-47fb-a389-03fa7a9c371e/1/5ARKnRChnmsaztrJ_3eNT0CQaMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:22:6e:5f:13:d7:d8:ac:56:0a:36:05:d5:7a:8f:e3:3d:ec:
55:3f:ba:15:e3:6c:c1:4f:43:a5:51:55:d7:74:c0:10:75:8e:
fa:34:55:ab:5f:9c:9b:36:bd:2a:48:4e:1e:c6:4f:95:87:6f:
0a:fa:fe:cb:fa:45:f6:91:cd:2c:be:49:bd:77:98:e4:1d:f4:
f4:51:b8:b3:0e:7d:71:0c:bb:f9:a6:f8:c8:c4:2b:a8:a7:c3:
2f:80:54:10:49:b5:49:3f:02:e0:8d:57:37:99:87:7d:4b:b3:
38:12:f8:48:e2:cd:ee:e2:a0:9a:52:96:9b:fd:4d:4a:7e:cd:
fc:92:cc:3c:38:1f:1c:c3:0f:08:c9:bb:50:90:22:09:75:77:
ab:eb:f2:8f:0e:97:9f:e0:ea:2d:b0:06:ae:34:36:c6:35:c6:
57:6d:1b:a4:27:9c:49:f3:29:b7:6d:1b:05:ef:fc:c3:db:80:
dc:1f:80:db:64:89:18:07:51:e6:eb:c2:9f:c7:da:a0:b5:60:
0c:73:3a:cc:a4:51:69:de:b3:d3:55:90:ae:88:4a:a4:d8:bf:
3c:24:c0:bf:e2:f9:b4:bb:4c:c9:cb:84:89:96:60:64:d1:8d:
cd:fb:52:be:9f:a1:da:94:24:a5:40:02:cb:e3:1a:b3:c9:4e:
b0:ea:ee:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:13:25 2026 by rpki-client