Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/7c3b6d-d5a6-4efd-99bf-c9880090e3c5/1/v141bOg5-NOTBn0fCbfdHFWgHlc.mft
File: v141bOg5-NOTBn0fCbfdHFWgHlc.mft (raw, json)
Hash identifier: azaDCpm/MPBSW4r6Izeb/RQjnjCkWMIXV9HK0bR/x/k=
Subject key identifier: 25:0D:D3:B6:F6:4E:A3:20:0E:1B:87:F3:D8:50:02:F5:CE:F1:86:59
Authority key identifier: BF:5E:35:6C:E8:39:F8:D3:93:06:7D:1F:09:B7:DD:1C:55:A0:1E:57
Certificate issuer: /CN=bf5e356ce839f8d393067d1f09b7dd1c55a01e57
Certificate serial: 019CAAC6A2A89D006A70269076B7DFC8E01D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v141bOg5-NOTBn0fCbfdHFWgHlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/7c3b6d-d5a6-4efd-99bf-c9880090e3c5/1/v141bOg5-NOTBn0fCbfdHFWgHlc.mft
Manifest number: 053F
Signing time: Sun 01 Mar 2026 19:01:10 +0000
Manifest this update: Sun 01 Mar 2026 19:01:10 +0000
Manifest next update: Mon 02 Mar 2026 19:01:10 +0000
Files and hashes: 1: v141bOg5-NOTBn0fCbfdHFWgHlc.crl (hash: AB2AhCK4U007Ign4hPinc6P2rPT200zSW6+Bf74Iz3E=)
2: vAouvOE7JSaMC475TpDqm8JvBho.roa (hash: hrbVWv0InqnmWPgkOG3ics28eJAV30J6nL+Bc/a8QUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/7c3b6d-d5a6-4efd-99bf-c9880090e3c5/1/v141bOg5-NOTBn0fCbfdHFWgHlc.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/7c3b6d-d5a6-4efd-99bf-c9880090e3c5/1/v141bOg5-NOTBn0fCbfdHFWgHlc.mft
rsync://rpki.ripe.net/repository/DEFAULT/v141bOg5-NOTBn0fCbfdHFWgHlc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:a2:a8:9d:00:6a:70:26:90:76:b7:df:c8:e0:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf5e356ce839f8d393067d1f09b7dd1c55a01e57
Validity
Not Before: Mar 1 19:01:10 2026 GMT
Not After : Mar 2 19:01:10 2026 GMT
Subject: CN=250dd3b6f64ea3200e1b87f3d85002f5cef18659
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:21:fb:0b:73:35:f6:84:83:4c:8b:c5:f2:71:
96:32:4d:7e:48:cc:ef:26:71:5b:a0:c8:84:89:7f:
3c:22:a7:a1:4e:65:6e:45:47:30:c0:5b:84:51:32:
f8:17:35:76:b6:b1:10:37:e4:ea:5b:47:ae:3e:a0:
ba:11:8f:2f:d5:00:66:07:8d:48:ec:64:52:b8:06:
67:21:eb:f2:6a:de:58:02:e2:80:a6:9b:4e:85:7a:
45:14:45:61:b5:98:4a:23:01:ed:6b:07:a8:0b:1d:
98:ba:28:08:02:e1:ca:c9:77:3e:8d:b8:18:9e:46:
eb:41:98:b2:ec:98:5a:fa:b7:0d:38:b6:b3:69:83:
28:00:7a:ab:cc:5f:1d:92:05:cc:57:c3:a8:b6:1c:
e6:d2:7c:33:32:d2:f7:e2:a8:ce:33:94:47:d1:7f:
32:9f:8d:77:d0:28:a2:ea:47:49:ac:aa:64:72:e9:
fe:1c:0a:7e:a9:06:fe:7c:07:60:c4:ef:4b:77:70:
b3:8b:d6:9f:c9:01:9a:ff:57:28:db:ff:3d:01:49:
98:3a:88:57:89:61:b9:73:c1:09:46:b0:15:2f:52:
fe:a1:dc:d5:b0:26:da:f3:91:da:59:24:34:cf:1f:
84:2a:78:34:25:cc:94:78:91:4b:92:14:57:73:91:
23:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:0D:D3:B6:F6:4E:A3:20:0E:1B:87:F3:D8:50:02:F5:CE:F1:86:59
X509v3 Authority Key Identifier:
keyid:BF:5E:35:6C:E8:39:F8:D3:93:06:7D:1F:09:B7:DD:1C:55:A0:1E:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v141bOg5-NOTBn0fCbfdHFWgHlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/7c3b6d-d5a6-4efd-99bf-c9880090e3c5/1/v141bOg5-NOTBn0fCbfdHFWgHlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/7c3b6d-d5a6-4efd-99bf-c9880090e3c5/1/v141bOg5-NOTBn0fCbfdHFWgHlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:20:b0:7b:10:7f:c8:64:57:1b:10:89:d7:fa:a2:08:ed:0c:
73:18:33:90:64:ec:f5:67:c4:f7:15:85:70:0f:8c:eb:2e:e1:
fe:f3:f7:fd:01:3c:3e:c4:12:7e:73:ca:a6:cf:ba:5c:62:c1:
c6:67:09:a3:07:f8:60:80:cd:c1:48:06:86:d6:5c:cf:f1:c5:
83:be:20:d2:bd:6f:1e:5b:f6:cf:14:25:bd:96:d7:bd:4c:a2:
cb:9f:1c:0d:8b:fc:c4:d4:b2:29:d8:db:f6:2c:f9:01:00:b7:
08:69:36:72:81:4a:07:53:cd:9c:d4:d9:dd:f8:07:75:9c:8f:
59:67:a4:28:6d:e8:a6:cb:7e:55:1f:46:0b:90:a5:6d:2f:28:
09:7b:8d:ff:cc:92:b5:6c:ef:f4:e3:10:59:27:63:4e:2f:78:
70:13:e1:20:2c:ca:e8:a7:7f:32:6f:03:0d:b6:3a:eb:3d:0b:
1b:4b:eb:c0:0c:a7:d0:6b:ba:fe:6a:bb:07:33:15:bd:fa:88:
d5:d2:7d:cb:73:df:59:e1:5a:63:0f:7c:9d:e8:5a:fc:2b:ab:
31:06:4a:77:c0:3e:8d:b5:fb:57:b8:b2:19:9f:11:ab:f3:6d:
c8:23:5b:77:db:87:69:b4:f5:98:01:40:48:72:74:ef:54:7a:
3a:77:d9:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:41 2026 by rpki-client