Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/9facae-fd90-4b4c-a2ec-9127e8105699/1/0x5KjNKJjF3m1mJfEMSy6F9GH3g.mft
File: 0x5KjNKJjF3m1mJfEMSy6F9GH3g.mft (raw, json)
Hash identifier: Uqz5Bk9ZxgBCuQK3LFLmOCtrTNx2U4crJag9tMC+WwA=
Subject key identifier: 10:CC:B3:2F:BC:12:4E:94:BB:99:C0:81:71:F2:2F:C6:39:D3:92:A6
Authority key identifier: D3:1E:4A:8C:D2:89:8C:5D:E6:D6:62:5F:10:C4:B2:E8:5F:46:1F:78
Certificate issuer: /CN=d31e4a8cd2898c5de6d6625f10c4b2e85f461f78
Certificate serial: 019D9886D79F066BC2ED454870345403C39E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0x5KjNKJjF3m1mJfEMSy6F9GH3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/9facae-fd90-4b4c-a2ec-9127e8105699/1/0x5KjNKJjF3m1mJfEMSy6F9GH3g.mft
Manifest number: 0AE7
Signing time: Thu 16 Apr 2026 23:01:06 +0000
Manifest this update: Thu 16 Apr 2026 23:01:06 +0000
Manifest next update: Fri 17 Apr 2026 23:01:06 +0000
Files and hashes: 1: 0x5KjNKJjF3m1mJfEMSy6F9GH3g.crl (hash: 47JAb1pJ7oX4Q6QLA4Qno7keqARg6U0R4udF6BQFEes=)
2: 2TC861jK8VELUxYLqwLBwJEBDQA.roa (hash: oKo7gej4ajG4+SLdtnyEgBggOZ1BZWPfVe9QrL/7Aj0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/9facae-fd90-4b4c-a2ec-9127e8105699/1/0x5KjNKJjF3m1mJfEMSy6F9GH3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/9facae-fd90-4b4c-a2ec-9127e8105699/1/0x5KjNKJjF3m1mJfEMSy6F9GH3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/0x5KjNKJjF3m1mJfEMSy6F9GH3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:d7:9f:06:6b:c2:ed:45:48:70:34:54:03:c3:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d31e4a8cd2898c5de6d6625f10c4b2e85f461f78
Validity
Not Before: Apr 16 23:01:06 2026 GMT
Not After : Apr 17 23:01:06 2026 GMT
Subject: CN=10ccb32fbc124e94bb99c08171f22fc639d392a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:94:61:4c:07:89:d4:70:a4:92:dc:e2:a4:bc:
c0:17:d7:33:5c:7c:29:6c:f1:e1:dc:bf:3c:02:85:
b3:af:b1:1b:28:1b:d2:3f:01:98:d3:53:04:14:0b:
03:7a:b2:6f:d1:ab:60:17:f1:c9:3c:85:da:69:a7:
79:b3:5c:2f:96:de:66:14:de:3b:62:7c:6f:f2:2e:
73:07:dd:16:69:0a:cd:32:d3:2c:6c:60:eb:00:2f:
72:82:be:58:7c:48:45:9e:23:e1:be:5a:1a:be:1d:
89:64:ff:db:b4:6e:b5:4b:22:08:7b:e1:1a:54:8f:
7b:b2:53:eb:6f:6a:ec:c2:96:9f:93:08:68:98:81:
77:1f:69:dd:43:ec:ed:ce:20:38:ba:a9:3d:4d:72:
26:15:e3:2a:cf:d6:73:cc:9c:5c:03:cc:fd:43:ba:
3e:74:7a:a9:b6:43:20:78:4e:38:26:73:37:11:38:
b4:34:0f:17:90:b9:fb:df:84:f2:b5:e3:8f:4b:72:
ac:25:c3:14:ae:44:e1:d4:5c:05:63:bd:8e:eb:1b:
c6:95:7c:34:3f:a6:c1:f3:3b:c3:9d:64:8a:b5:4e:
d4:ce:13:fd:55:75:b0:30:0a:d6:c3:43:82:28:f0:
77:c1:82:e8:ca:6b:15:a8:af:20:22:8b:2e:08:a0:
95:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:CC:B3:2F:BC:12:4E:94:BB:99:C0:81:71:F2:2F:C6:39:D3:92:A6
X509v3 Authority Key Identifier:
keyid:D3:1E:4A:8C:D2:89:8C:5D:E6:D6:62:5F:10:C4:B2:E8:5F:46:1F:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0x5KjNKJjF3m1mJfEMSy6F9GH3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/9facae-fd90-4b4c-a2ec-9127e8105699/1/0x5KjNKJjF3m1mJfEMSy6F9GH3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/9facae-fd90-4b4c-a2ec-9127e8105699/1/0x5KjNKJjF3m1mJfEMSy6F9GH3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:12:37:5f:66:3a:84:cc:d2:33:dd:d9:7a:1c:7a:5b:22:17:
70:25:c3:85:51:2b:b6:f9:31:91:4b:8f:d7:05:c0:cc:16:8f:
99:6b:2a:ed:e5:7d:0a:58:83:94:c3:ba:ac:ea:2d:c1:13:a4:
96:bb:ac:f0:b2:d5:9e:de:4c:cc:30:8d:10:e1:e0:ef:8c:d6:
5d:0c:eb:c6:14:a2:94:e6:da:e8:d3:36:36:0c:57:52:95:a3:
bb:f0:00:75:c4:26:de:67:c6:b0:5d:bc:b4:01:c7:a1:41:f5:
5c:86:8c:8b:e4:98:a9:d7:b0:eb:41:d8:db:c6:51:bf:eb:b8:
2d:df:9a:90:58:b3:32:ed:9a:08:df:8b:19:48:46:29:82:37:
2d:8c:5c:a6:a1:d3:d9:59:cb:99:93:a1:80:e1:2a:e5:dc:39:
21:d7:fc:cd:5e:05:2f:92:38:99:79:f2:39:08:23:8d:1f:6d:
dd:19:ec:6f:0c:ad:27:93:35:da:e2:f0:09:a7:89:a2:86:79:
db:ce:87:08:5a:99:a7:90:ee:5a:2c:f8:eb:7e:03:d9:54:97:
9d:8f:7a:59:09:f3:b9:14:bc:ec:97:90:5c:6c:93:b1:ec:36:
f8:65:70:c4:c9:e6:a0:8f:a6:90:0d:c0:0f:64:a0:a8:f6:98:
9e:9f:b6:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:39:35 2026 by rpki-client