Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/5bbebc-cf36-43a4-9974-9b6cfd8a2aa3/1/5o9MhddoNjPDOOA92OykR78_Z4U.mft
File: 5o9MhddoNjPDOOA92OykR78_Z4U.mft (raw, json)
Hash identifier: qWAHMH+yLi32/9faq9wSmL+nB+FgdAsk25iGsqxN/Tw=
Subject key identifier: 93:69:43:2D:62:40:C7:4B:5E:BA:1C:54:51:29:75:5F:00:E6:DC:4D
Authority key identifier: E6:8F:4C:85:D7:68:36:33:C3:38:E0:3D:D8:EC:A4:47:BF:3F:67:85
Certificate issuer: /CN=e68f4c85d7683633c338e03dd8eca447bf3f6785
Certificate serial: 019CA9458392E7D597339386EB2C41D8A60C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5o9MhddoNjPDOOA92OykR78_Z4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/5bbebc-cf36-43a4-9974-9b6cfd8a2aa3/1/5o9MhddoNjPDOOA92OykR78_Z4U.mft
Manifest number: 0D88
Signing time: Sun 01 Mar 2026 12:00:31 +0000
Manifest this update: Sun 01 Mar 2026 12:00:31 +0000
Manifest next update: Mon 02 Mar 2026 12:00:31 +0000
Files and hashes: 1: 5o9MhddoNjPDOOA92OykR78_Z4U.crl (hash: ynwtJwBQ4pImcVQo3fo/a1JOHeyJu7pHVW+robNewAc=)
2: YmBgxnOOglEWqDI9vvh0tfVl6fA.roa (hash: 2oqLEwP1fLoivASRJm1VDhmVmyCsjEy83bO8HNzsUEs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/5bbebc-cf36-43a4-9974-9b6cfd8a2aa3/1/5o9MhddoNjPDOOA92OykR78_Z4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/5bbebc-cf36-43a4-9974-9b6cfd8a2aa3/1/5o9MhddoNjPDOOA92OykR78_Z4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/5o9MhddoNjPDOOA92OykR78_Z4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 12:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:45:83:92:e7:d5:97:33:93:86:eb:2c:41:d8:a6:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e68f4c85d7683633c338e03dd8eca447bf3f6785
Validity
Not Before: Mar 1 12:00:31 2026 GMT
Not After : Mar 2 12:00:31 2026 GMT
Subject: CN=9369432d6240c74b5eba1c545129755f00e6dc4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:41:59:f4:84:3f:83:0c:25:ac:2d:dc:59:89:
74:13:b2:fa:f1:36:33:ae:e0:43:5a:1e:8b:6a:8e:
ce:21:e0:84:17:05:4b:bc:6c:0a:6c:ef:11:94:89:
de:38:ae:d8:9f:13:73:2f:c9:4d:b4:7d:a0:02:77:
d3:f9:c5:37:37:66:89:cf:11:0d:7e:59:4b:7e:86:
1c:e8:2d:ff:5c:3a:de:3f:5c:d3:4c:5f:ec:83:a2:
dc:2b:e1:80:8d:d0:9a:26:0b:cb:f1:e2:ad:74:38:
48:ad:37:68:2d:b5:af:66:83:30:ba:e6:b3:19:67:
a2:9c:b0:2f:ca:84:6c:77:43:77:26:5c:97:76:ea:
c9:60:f9:4b:5b:f1:77:9a:49:13:ca:71:48:3f:13:
71:47:e5:35:03:c9:58:5f:be:1d:0d:90:ef:50:13:
d7:b9:ef:5a:db:6a:ae:e2:ab:18:92:1f:13:14:ed:
ac:88:94:11:48:b9:04:7e:83:98:a1:c0:39:a6:a1:
33:10:fa:4f:83:fe:39:d3:ac:31:36:1a:77:89:50:
03:b3:e5:35:3d:6d:3c:d4:ae:fc:5d:18:36:26:53:
d2:8c:54:3d:1c:26:db:37:60:66:13:3b:25:87:84:
2f:ce:95:77:ae:7a:f0:49:0f:3f:80:b7:68:51:d8:
16:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:69:43:2D:62:40:C7:4B:5E:BA:1C:54:51:29:75:5F:00:E6:DC:4D
X509v3 Authority Key Identifier:
keyid:E6:8F:4C:85:D7:68:36:33:C3:38:E0:3D:D8:EC:A4:47:BF:3F:67:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5o9MhddoNjPDOOA92OykR78_Z4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/5bbebc-cf36-43a4-9974-9b6cfd8a2aa3/1/5o9MhddoNjPDOOA92OykR78_Z4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/5bbebc-cf36-43a4-9974-9b6cfd8a2aa3/1/5o9MhddoNjPDOOA92OykR78_Z4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:46:af:42:8c:6e:e6:5a:95:41:95:73:ac:39:a7:f0:9c:3b:
4f:14:d0:82:5b:00:19:c5:6e:1b:4d:31:01:f5:27:5d:61:0d:
30:82:97:a6:1b:02:0e:e3:b2:83:d8:6a:ff:e1:f6:88:76:d8:
30:85:bb:19:c3:96:b2:c4:10:d1:17:ae:d4:fa:3f:fa:31:2c:
53:14:14:52:0c:90:45:c2:f3:3c:cc:95:36:7d:6f:c8:d2:6e:
8a:67:42:75:d4:26:00:f1:e3:5d:05:07:e5:0d:a8:2c:60:84:
9a:77:08:10:ce:d6:e6:df:9f:d7:60:48:0d:b8:3e:6d:ac:2a:
a5:9c:26:2d:e3:1c:63:cb:ad:00:62:21:9e:e6:b4:a1:d1:df:
bd:a4:04:c8:9e:9c:56:35:7c:17:cc:1e:ee:01:94:a3:5c:8d:
ac:22:26:75:19:2f:73:a8:1b:0d:17:d8:e1:bb:94:01:ae:f2:
92:ce:4a:dd:9e:b2:e8:c6:7f:2a:e8:48:a9:33:4f:79:69:ac:
22:b4:e6:cb:9d:96:2d:8c:29:8e:d4:2d:a9:01:68:cd:76:57:
ed:57:e3:42:ef:22:fb:71:b9:ad:ee:71:2d:19:f9:77:86:bd:
20:69:d8:50:85:da:1a:f1:b0:f3:c0:64:23:a7:6f:e2:12:87:
67:b4:a8:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:57:19 2026 by rpki-client