Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/5e61f7-8363-4acc-b8a4-fe103fd3857c/1/b5MGmHM7rTPAgXGce2i9GXI6Wnc.mft
File: b5MGmHM7rTPAgXGce2i9GXI6Wnc.mft (raw, json)
Hash identifier: yq3w0ZdR/L2uTw+ohTUqbGGAHj4ZnuKyKgtrFFAEU5w=
Subject key identifier: 73:3D:74:B7:B6:68:E8:4B:1D:2A:24:B6:2C:D6:17:3A:7C:02:50:E9
Authority key identifier: 6F:93:06:98:73:3B:AD:33:C0:81:71:9C:7B:68:BD:19:72:3A:5A:77
Certificate issuer: /CN=6f930698733bad33c081719c7b68bd19723a5a77
Certificate serial: 019CAAC62481ACFF6811041EDE62994F245E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b5MGmHM7rTPAgXGce2i9GXI6Wnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/5e61f7-8363-4acc-b8a4-fe103fd3857c/1/b5MGmHM7rTPAgXGce2i9GXI6Wnc.mft
Manifest number: 0B29
Signing time: Sun 01 Mar 2026 19:00:37 +0000
Manifest this update: Sun 01 Mar 2026 19:00:37 +0000
Manifest next update: Mon 02 Mar 2026 19:00:37 +0000
Files and hashes: 1: 2E_5c2tZgKxgYVqHOgF9pIGzE74.roa (hash: 7EiMkIUV539Sj9o+RaFXH20bjjKdD7ng/M7VyVmG8mw=)
2: HVZne9WI9uLyJvB9NxBslBjCmlY.roa (hash: YcoHAaoNXAPXHw2TXGEF6Izlodu3eSDrEKdqQwFTx38=)
3: b5MGmHM7rTPAgXGce2i9GXI6Wnc.crl (hash: aNrhq0DEhDjUWIVr97EtnIzkXUulI+5DIypmbgpUJH4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/5e61f7-8363-4acc-b8a4-fe103fd3857c/1/b5MGmHM7rTPAgXGce2i9GXI6Wnc.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/5e61f7-8363-4acc-b8a4-fe103fd3857c/1/b5MGmHM7rTPAgXGce2i9GXI6Wnc.mft
rsync://rpki.ripe.net/repository/DEFAULT/b5MGmHM7rTPAgXGce2i9GXI6Wnc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:24:81:ac:ff:68:11:04:1e:de:62:99:4f:24:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f930698733bad33c081719c7b68bd19723a5a77
Validity
Not Before: Mar 1 19:00:37 2026 GMT
Not After : Mar 2 19:00:37 2026 GMT
Subject: CN=733d74b7b668e84b1d2a24b62cd6173a7c0250e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:6d:68:79:f5:76:b9:91:19:18:a4:62:94:b2:
09:19:4a:a4:ef:3f:70:30:f7:62:cd:f5:4b:ad:45:
11:6e:ba:24:33:92:13:f2:9a:dd:fd:07:f1:b9:4d:
ef:25:fb:d0:ce:47:06:00:46:c5:5a:88:53:39:6f:
58:ac:54:6d:f2:20:65:8a:e0:49:9f:5c:c0:92:bb:
dd:54:96:11:91:25:36:51:bd:ff:d8:5d:80:a6:76:
b3:44:16:69:dc:b4:7d:0f:e4:4b:58:57:e4:d0:72:
f4:a7:f5:a5:8c:0b:24:38:7d:53:c2:62:1a:32:42:
50:4e:d2:0a:ed:f5:8a:c5:a2:59:4a:2f:0e:18:6a:
89:3e:5d:51:1e:72:8c:dd:d3:6c:61:39:38:ac:26:
62:2c:09:34:ee:55:7b:5f:46:dd:53:2f:62:f1:fa:
f5:f3:eb:92:b3:87:c9:e3:9b:09:84:09:43:0f:a3:
37:db:f3:86:20:61:16:4a:76:9c:74:70:97:64:76:
8b:51:67:39:aa:d4:c0:d1:7f:9e:b4:f9:90:63:02:
04:a7:99:c8:0f:90:c8:ca:0e:9d:2a:d6:86:75:dd:
17:06:9a:68:7a:73:1c:17:be:3a:6f:44:15:e3:57:
b3:46:53:d3:d2:1f:14:5e:26:7e:4a:57:97:49:9f:
c8:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:3D:74:B7:B6:68:E8:4B:1D:2A:24:B6:2C:D6:17:3A:7C:02:50:E9
X509v3 Authority Key Identifier:
keyid:6F:93:06:98:73:3B:AD:33:C0:81:71:9C:7B:68:BD:19:72:3A:5A:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5MGmHM7rTPAgXGce2i9GXI6Wnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/5e61f7-8363-4acc-b8a4-fe103fd3857c/1/b5MGmHM7rTPAgXGce2i9GXI6Wnc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/5e61f7-8363-4acc-b8a4-fe103fd3857c/1/b5MGmHM7rTPAgXGce2i9GXI6Wnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:e8:2f:ef:25:e5:32:5a:3b:7f:3f:f2:6f:67:df:eb:86:6d:
ac:4a:1b:48:5c:83:49:fc:3e:47:9a:44:4e:22:fa:fc:d9:31:
18:4b:7f:ae:32:b8:af:6e:0d:22:b0:dd:92:a4:01:ee:db:dc:
24:bb:ac:77:7e:41:9c:a9:27:28:a3:e8:41:7f:12:83:87:b5:
79:c0:55:b0:ae:56:e3:2c:c0:e2:bd:91:cf:75:3d:24:4b:92:
fb:c9:0e:1a:3f:a5:20:7b:b3:4e:04:fd:5e:69:fa:25:38:cf:
8d:d9:98:bf:c5:f9:30:72:6e:d4:b1:5f:d2:e2:06:f0:3f:62:
b8:8a:88:32:73:37:88:fd:88:28:74:5d:51:8e:da:ad:94:1d:
e8:26:0a:3b:65:40:02:60:85:75:be:b4:4b:bd:4e:08:bf:48:
40:34:7d:1b:2b:60:b8:9e:3e:a1:c2:c4:66:4c:36:fa:88:6a:
9d:de:b6:f2:43:32:d0:11:af:74:f8:7d:f7:9e:e8:76:a4:06:
29:c2:d6:17:84:32:6e:7c:c3:8f:e6:19:82:4f:53:73:87:62:
13:b0:97:df:85:85:95:0e:a2:11:ce:61:1e:1e:3c:e3:8f:8b:
11:39:66:33:c5:e3:a8:a5:f9:34:2f:73:d3:ec:89:8f:86:b0:
46:fd:8a:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:07:15 2026 by rpki-client