Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/51ea49-7128-46e0-838d-7d5ecb4f181f/1/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.mft
File: n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.mft (raw, json)
Hash identifier: seW3ComT/UhvLWc0OJIwUFCM8dSC2fMbpEFDpbbrNC0=
Subject key identifier: FE:2D:60:43:B4:DB:21:31:76:85:B5:E4:67:A1:2E:D2:54:B6:D6:07
Authority key identifier: 9F:97:4D:A4:5D:59:14:ED:E1:38:1E:EA:F9:C2:BB:16:45:B6:64:3A
Certificate issuer: /CN=9f974da45d5914ede1381eeaf9c2bb1645b6643a
Certificate serial: 019CAA90059599A353A093F440294EBACB08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/51ea49-7128-46e0-838d-7d5ecb4f181f/1/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.mft
Manifest number: 07AF
Signing time: Sun 01 Mar 2026 18:01:31 +0000
Manifest this update: Sun 01 Mar 2026 18:01:31 +0000
Manifest next update: Mon 02 Mar 2026 18:01:31 +0000
Files and hashes: 1: 1t1mh1im05R5TEOwI71Jiu37ecs.roa (hash: m9uNu74yMGw3x49FIpVoScb0nsc8GhB3C9Hq/L+dUZE=)
2: n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.crl (hash: dvOuI/WR2nryoLZUpkH1+t6WMq7Cxmx1sXLSp+wFlCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/51ea49-7128-46e0-838d-7d5ecb4f181f/1/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/51ea49-7128-46e0-838d-7d5ecb4f181f/1/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.mft
rsync://rpki.ripe.net/repository/DEFAULT/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:90:05:95:99:a3:53:a0:93:f4:40:29:4e:ba:cb:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f974da45d5914ede1381eeaf9c2bb1645b6643a
Validity
Not Before: Mar 1 18:01:31 2026 GMT
Not After : Mar 2 18:01:31 2026 GMT
Subject: CN=fe2d6043b4db21317685b5e467a12ed254b6d607
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:95:44:d0:8b:c3:3b:d0:51:f0:9e:09:6a:b4:
74:2d:aa:42:35:4c:0c:d7:9a:01:2c:36:52:bf:57:
46:09:06:fa:7d:8e:7b:cc:58:48:29:65:60:7e:a0:
ee:bf:aa:03:38:de:d1:3f:c9:a3:b8:5c:4b:92:97:
dd:c3:c3:55:64:2a:20:cd:6d:fb:a5:86:6d:0c:d1:
67:c1:d9:60:76:67:15:c9:68:25:3b:69:c2:21:72:
8d:e2:09:31:79:27:2c:cb:97:9e:42:fb:02:3f:28:
76:1e:7b:a0:6d:04:bc:61:c6:d7:bb:26:16:c3:b9:
fb:78:34:1d:ac:d4:78:19:3a:41:40:03:27:81:09:
3e:96:63:ca:24:8f:e9:68:b1:14:b0:c3:0b:3e:a5:
7c:03:56:9d:a3:4c:61:5a:84:af:d8:c1:2c:3d:ee:
1c:e0:e4:33:63:3a:00:d1:43:fc:af:ef:f5:7d:77:
3d:be:77:cc:14:ae:b8:36:81:10:54:3d:83:b3:11:
c5:d4:75:58:4e:6e:6d:f1:d4:b4:07:e4:56:fe:24:
ff:d7:15:9a:c7:fb:da:ca:dd:f9:6c:9e:f2:09:dc:
e2:a5:a4:63:23:42:d9:74:49:f0:24:bb:47:96:38:
f1:30:6c:ec:80:19:dc:ce:65:f1:98:f7:1a:5d:8d:
3a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:2D:60:43:B4:DB:21:31:76:85:B5:E4:67:A1:2E:D2:54:B6:D6:07
X509v3 Authority Key Identifier:
keyid:9F:97:4D:A4:5D:59:14:ED:E1:38:1E:EA:F9:C2:BB:16:45:B6:64:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/51ea49-7128-46e0-838d-7d5ecb4f181f/1/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/51ea49-7128-46e0-838d-7d5ecb4f181f/1/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:5f:87:da:67:30:fc:e9:08:5d:cb:5b:99:b6:1f:16:0f:d2:
ef:8a:01:b1:85:b3:f8:3c:53:cf:b0:86:d0:76:21:82:31:69:
9a:d3:58:5d:db:24:84:f9:38:29:56:14:71:d4:9b:21:be:5b:
0f:12:71:8f:f3:64:d2:7a:91:12:da:0d:26:13:71:69:81:28:
c5:99:2b:6d:e8:bd:59:87:cd:06:52:ce:e6:e3:b6:b2:c8:26:
0e:b6:7f:94:ac:ed:58:a2:9c:94:a0:f9:33:0a:d8:3f:c4:8f:
8f:8b:94:07:a8:b1:91:d4:6d:82:c2:50:40:c1:96:f0:86:c7:
69:20:92:d1:e4:b9:33:0f:8e:dd:59:9e:27:d0:d1:1e:d3:c7:
14:a3:d2:12:8d:20:22:f1:8a:ba:02:22:57:ea:3b:ab:2e:48:
d3:47:12:d3:93:1b:d0:db:6e:9e:14:0d:41:25:59:89:21:05:
74:0d:f3:92:ca:79:45:a2:7c:2f:91:7a:24:5c:90:a5:cf:c6:
ea:ac:1b:20:83:ca:75:38:79:bf:4e:19:6b:38:98:a4:07:29:
6c:18:c8:25:7c:75:45:da:bd:fb:b5:b2:af:d1:22:31:31:4a:
4f:ed:d4:46:f2:55:e7:4a:02:3e:b9:f8:76:84:c8:c3:59:38:
a7:8a:f5:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:50:54 2026 by rpki-client