Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/5P9bv1QMZZVLmROmjCTRdN6X2Ck.mft
File: 5P9bv1QMZZVLmROmjCTRdN6X2Ck.mft (raw, json)
Hash identifier: H2paSpA+7a4UNQG+J+aFufvmC9fz4RR5ZUO/1AyFNuA=
Subject key identifier: 61:39:97:C6:C4:9A:17:61:0D:EB:2F:3A:22:55:87:25:3A:8C:9C:C8
Authority key identifier: E4:FF:5B:BF:54:0C:65:95:4B:99:13:A6:8C:24:D1:74:DE:97:D8:29
Certificate issuer: /CN=e4ff5bbf540c65954b9913a68c24d174de97d829
Certificate serial: 019CAB6BAD912469C9E458F920276BDA469C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5P9bv1QMZZVLmROmjCTRdN6X2Ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/5P9bv1QMZZVLmROmjCTRdN6X2Ck.mft
Manifest number: 0FC7
Signing time: Sun 01 Mar 2026 22:01:26 +0000
Manifest this update: Sun 01 Mar 2026 22:01:26 +0000
Manifest next update: Mon 02 Mar 2026 22:01:26 +0000
Files and hashes: 1: 5P9bv1QMZZVLmROmjCTRdN6X2Ck.crl (hash: /ANFYefojAhUr0rI3MPCK0QxIygYhcL3mfq0sFni3Oc=)
2: IJhmUCiFKkEWauTpmApnTpFj-SE.roa (hash: kLeSqMguXmeNnm1rZ9r4cMOYIPZfo29ixEQEwX6dLeM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/5P9bv1QMZZVLmROmjCTRdN6X2Ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/5P9bv1QMZZVLmROmjCTRdN6X2Ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/5P9bv1QMZZVLmROmjCTRdN6X2Ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:ad:91:24:69:c9:e4:58:f9:20:27:6b:da:46:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4ff5bbf540c65954b9913a68c24d174de97d829
Validity
Not Before: Mar 1 22:01:26 2026 GMT
Not After : Mar 2 22:01:26 2026 GMT
Subject: CN=613997c6c49a17610deb2f3a225587253a8c9cc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:25:7a:6b:fb:33:a8:46:57:b2:84:9d:fb:ee:
2f:67:59:24:12:28:e0:c6:d1:93:ca:56:e1:d9:7b:
17:3b:a6:43:f6:20:e1:e5:14:74:e9:d0:ea:48:f2:
b0:0e:3d:ba:52:6c:59:2d:ef:9b:76:08:05:fa:51:
40:2f:2b:5b:b1:18:1c:0b:15:ee:67:7e:62:85:55:
89:63:67:fe:9b:2d:6a:e1:cc:2f:0b:ba:12:15:0a:
52:c8:c1:c1:62:23:9b:61:31:3e:06:80:a0:86:65:
41:2d:71:6f:0d:73:9e:53:7e:ab:11:cf:4d:0a:d6:
0d:09:c3:cf:60:fc:62:42:bb:1d:1d:28:d9:ba:90:
96:3d:ea:c5:58:74:1b:cc:c2:b9:b5:1c:60:e5:06:
7d:ed:b0:97:2c:c3:68:c6:73:68:1e:e6:bc:fe:29:
a6:6a:76:dc:38:cf:1f:e1:74:03:e9:72:95:e1:e8:
5e:81:b2:da:ce:f4:06:2e:b5:52:03:8c:87:07:44:
54:97:45:90:91:15:d7:4d:b0:ab:12:9d:68:30:85:
72:21:0c:f9:6a:73:ae:23:25:87:9d:ba:2a:d2:f7:
ef:e5:21:5f:1b:de:f9:57:da:53:6e:45:72:8f:2d:
b5:c9:d0:c7:39:3e:ab:5e:4f:62:de:28:bf:7e:27:
be:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:39:97:C6:C4:9A:17:61:0D:EB:2F:3A:22:55:87:25:3A:8C:9C:C8
X509v3 Authority Key Identifier:
keyid:E4:FF:5B:BF:54:0C:65:95:4B:99:13:A6:8C:24:D1:74:DE:97:D8:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5P9bv1QMZZVLmROmjCTRdN6X2Ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/5P9bv1QMZZVLmROmjCTRdN6X2Ck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/5P9bv1QMZZVLmROmjCTRdN6X2Ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:56:33:ce:65:65:55:f7:cd:4f:1f:c7:2c:b0:af:84:19:df:
1c:02:26:20:2f:73:13:bb:38:d2:0a:79:9c:98:90:76:97:6c:
24:43:ce:ba:50:fb:03:f8:5c:8c:6f:18:20:60:71:55:b2:81:
97:47:ff:6f:39:dc:dc:a9:d4:48:fd:a8:62:2d:83:9c:21:b0:
d9:f7:0a:db:3c:e8:9c:bf:df:43:d6:67:6c:e0:13:b6:39:50:
ec:c0:16:50:cd:c0:72:0a:e6:71:58:23:de:ea:9a:94:e7:3a:
b6:42:d1:91:38:b7:ef:2b:85:4a:5b:45:19:18:55:db:18:45:
d5:3e:80:f6:97:6e:24:15:0d:16:f2:d7:03:08:8d:54:0b:82:
4d:93:1c:91:58:d2:f1:ea:a0:bf:4c:9c:ac:13:41:45:11:94:
81:40:d7:c4:15:b6:f5:4b:11:6b:58:a6:b1:6e:94:0e:b5:e4:
5a:8f:0b:89:42:91:1f:db:f8:d5:35:74:ce:55:1f:a1:2b:b2:
66:90:f8:11:81:fc:82:6c:28:ad:9c:81:62:1e:ad:18:aa:1d:
4f:a5:4a:78:63:4c:73:ab:58:42:14:2f:b6:28:b9:81:e2:88:
8a:24:50:26:84:5e:cd:4f:55:d2:7c:d8:fc:15:10:cd:0f:35:
c1:f4:76:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:50:26 2026 by rpki-client