Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/87b768-1545-494a-84f9-1cf50a536026/1/p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.mft
File: p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.mft (raw, json)
Hash identifier: 9t558qBn9pXZbdQe0rlE7WWZVMDF6Z2YmDut0KKeuSc=
Subject key identifier: 03:AD:83:30:49:7E:AF:3F:92:92:7C:67:68:95:BE:87:1E:44:4F:DE
Authority key identifier: A7:96:7D:76:C2:D4:67:20:D4:CF:AC:04:59:FA:3C:3D:22:00:50:44
Certificate issuer: /CN=a7967d76c2d46720d4cfac0459fa3c3d22005044
Certificate serial: 019CAA58E76FE62459396CA1B5CFE14BF7C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/87b768-1545-494a-84f9-1cf50a536026/1/p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.mft
Manifest number: 154D
Signing time: Sun 01 Mar 2026 17:01:18 +0000
Manifest this update: Sun 01 Mar 2026 17:01:18 +0000
Manifest next update: Mon 02 Mar 2026 17:01:18 +0000
Files and hashes: 1: OawgqQGPtlwEMOxGkAtl6L82H4Q.roa (hash: K2gpWslD9/HiQy1xYHGfxNVNM4NYrBOnVdVEvGdhuWM=)
2: p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.crl (hash: Y2D2plpdtJevc18cR1q+Axbln5sJkNWJNuOGqfnM0ms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/87b768-1545-494a-84f9-1cf50a536026/1/p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/87b768-1545-494a-84f9-1cf50a536026/1/p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:e7:6f:e6:24:59:39:6c:a1:b5:cf:e1:4b:f7:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7967d76c2d46720d4cfac0459fa3c3d22005044
Validity
Not Before: Mar 1 17:01:18 2026 GMT
Not After : Mar 2 17:01:18 2026 GMT
Subject: CN=03ad8330497eaf3f92927c676895be871e444fde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c2:5c:49:93:e4:f5:7a:0c:45:85:2a:6c:3b:
0b:57:70:2e:5b:31:25:42:ec:b3:05:21:08:fa:2d:
33:80:fd:05:00:f0:54:ae:9e:c3:c8:57:35:ed:36:
a7:bb:7a:96:d7:b9:ea:33:55:65:7e:a7:ff:28:3f:
f9:f0:1b:05:61:33:c5:b9:b0:6d:29:9a:73:5a:18:
30:de:56:c3:1f:ac:d2:5f:46:4c:f3:de:7f:d9:67:
5c:ff:a7:8d:e2:64:13:8a:23:bf:19:8a:f1:ad:6c:
23:0a:30:d2:33:18:04:57:d7:4b:4c:09:2c:fa:f5:
e7:11:d4:d5:21:d4:17:8f:d7:63:fb:6a:ad:30:84:
c2:b0:50:25:56:63:c0:1d:22:b5:2d:36:12:e5:73:
a6:41:75:9c:f0:82:5f:ce:17:be:4e:7c:4f:75:dc:
ce:fb:f2:4b:93:7a:5f:1b:eb:e1:d0:63:5d:fe:a4:
6e:f8:e2:6c:2c:1a:ec:6b:2f:da:4c:40:fa:f5:62:
34:3d:cf:76:be:56:41:6b:39:37:e8:02:24:d5:ae:
cb:9b:8c:a9:1e:ae:4d:b3:58:e1:04:49:49:af:bc:
8a:f5:bb:40:fd:2d:a8:39:9a:86:7c:dd:c5:c6:86:
b7:75:9d:02:05:29:51:de:d1:5e:14:e5:5a:c5:f0:
88:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:AD:83:30:49:7E:AF:3F:92:92:7C:67:68:95:BE:87:1E:44:4F:DE
X509v3 Authority Key Identifier:
keyid:A7:96:7D:76:C2:D4:67:20:D4:CF:AC:04:59:FA:3C:3D:22:00:50:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/87b768-1545-494a-84f9-1cf50a536026/1/p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/87b768-1545-494a-84f9-1cf50a536026/1/p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:60:d1:50:ea:1f:bd:05:d7:f8:ee:dc:9c:c7:7c:07:7d:ad:
26:f3:48:2b:f4:44:af:77:5d:0a:09:3e:10:83:12:e8:28:bd:
5a:61:b1:d4:d3:46:ed:3c:51:95:aa:a1:be:a6:7d:78:d6:64:
50:a4:b2:10:bb:f3:c4:db:1e:4f:f2:33:a0:b7:10:ee:6c:6a:
fa:7d:1e:0a:70:81:12:f1:eb:66:6f:f5:61:14:d6:24:c8:14:
08:db:e7:4f:dd:86:49:60:3c:53:19:de:96:b3:f5:df:50:35:
4e:58:e1:25:a5:f1:d6:b0:5e:65:03:57:0f:23:61:b2:b8:2c:
7b:a0:8e:00:a0:0a:af:ad:de:13:a3:09:f0:1b:93:02:b5:df:
e1:9a:d6:ec:1a:38:04:95:a2:20:66:bc:9d:78:de:3a:3c:9b:
b7:0c:44:e1:8c:7e:c2:8f:fc:cb:03:65:f8:5d:d8:e0:97:52:
1e:59:5a:19:e9:69:58:3a:8f:79:8d:7e:4a:cb:e4:35:cd:a7:
64:d0:6f:89:e1:3b:d3:32:ef:9d:18:e1:c6:85:b7:5c:eb:c1:
32:4b:74:31:0c:51:8e:05:8c:df:47:0a:46:22:8b:21:71:9c:
b4:c8:72:03:12:06:8d:14:5a:87:48:20:8e:29:ac:92:f3:a4:
d2:55:64:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:47:25 2026 by rpki-client