Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/9facae-fd90-4b4c-a2ec-9127e8105699/1/0x5KjNKJjF3m1mJfEMSy6F9GH3g.mft
File: 0x5KjNKJjF3m1mJfEMSy6F9GH3g.mft (raw, json)
Hash identifier: OxLdpFwLKpvi8h0sAM8pS8ZaubYJXfTEBumSTLJRhBU=
Subject key identifier: 39:C9:59:B9:88:5D:89:89:A0:AD:4C:AD:FC:0E:DB:A1:C3:B3:A5:60
Authority key identifier: D3:1E:4A:8C:D2:89:8C:5D:E6:D6:62:5F:10:C4:B2:E8:5F:46:1F:78
Certificate issuer: /CN=d31e4a8cd2898c5de6d6625f10c4b2e85f461f78
Certificate serial: 019CAAFD4A658FF566E35D5386766A8C9EDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0x5KjNKJjF3m1mJfEMSy6F9GH3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/9facae-fd90-4b4c-a2ec-9127e8105699/1/0x5KjNKJjF3m1mJfEMSy6F9GH3g.mft
Manifest number: 0A6C
Signing time: Sun 01 Mar 2026 20:00:52 +0000
Manifest this update: Sun 01 Mar 2026 20:00:52 +0000
Manifest next update: Mon 02 Mar 2026 20:00:52 +0000
Files and hashes: 1: 0x5KjNKJjF3m1mJfEMSy6F9GH3g.crl (hash: cJen3MWa2GRBshrq11jyRLQvVYPxXdr/K5nP+wByWeo=)
2: 2TC861jK8VELUxYLqwLBwJEBDQA.roa (hash: oKo7gej4ajG4+SLdtnyEgBggOZ1BZWPfVe9QrL/7Aj0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/9facae-fd90-4b4c-a2ec-9127e8105699/1/0x5KjNKJjF3m1mJfEMSy6F9GH3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/9facae-fd90-4b4c-a2ec-9127e8105699/1/0x5KjNKJjF3m1mJfEMSy6F9GH3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/0x5KjNKJjF3m1mJfEMSy6F9GH3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:4a:65:8f:f5:66:e3:5d:53:86:76:6a:8c:9e:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d31e4a8cd2898c5de6d6625f10c4b2e85f461f78
Validity
Not Before: Mar 1 20:00:52 2026 GMT
Not After : Mar 2 20:00:52 2026 GMT
Subject: CN=39c959b9885d8989a0ad4cadfc0edba1c3b3a560
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9d:d7:6f:0d:b2:1b:3a:76:ad:6b:3f:47:77:
0e:e4:5b:5f:1e:7d:fa:78:10:88:6d:d5:7e:d3:12:
a2:f9:84:be:67:f2:a6:3f:57:5b:15:1f:05:fb:5b:
4c:80:e9:84:a7:88:0a:09:31:11:a1:ec:eb:57:ee:
1c:f6:47:f0:b0:a6:43:a8:e5:3a:f4:25:6c:61:eb:
a6:af:a2:70:eb:f0:20:c8:fe:25:e6:e6:19:ce:45:
7d:72:83:ba:bb:82:fe:f8:b7:6e:49:8f:8a:47:b3:
cf:6c:ec:84:05:5f:ad:9d:49:44:30:28:92:f1:2b:
bb:6c:17:39:3f:e2:53:20:08:76:5f:48:cb:c8:b1:
82:ae:d0:49:59:24:12:08:35:57:66:c0:9e:14:e1:
67:42:8b:8e:e5:a1:d6:91:e3:2d:c6:4b:fd:bb:78:
85:3b:50:44:6b:a0:b2:3b:21:4c:8b:ee:c0:ec:16:
3a:31:5d:4f:2a:17:2b:e9:95:4c:26:be:7b:be:9c:
fd:a7:51:e7:fb:78:73:e3:31:66:3d:83:a9:ae:4d:
7b:0f:b8:5f:5d:4d:c0:8c:3b:9d:85:20:12:ec:96:
7e:2f:d0:ce:96:12:be:fb:99:ab:35:ca:62:10:c2:
63:59:5d:3f:b4:75:be:ef:d8:7a:05:e9:4b:52:50:
a7:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:C9:59:B9:88:5D:89:89:A0:AD:4C:AD:FC:0E:DB:A1:C3:B3:A5:60
X509v3 Authority Key Identifier:
keyid:D3:1E:4A:8C:D2:89:8C:5D:E6:D6:62:5F:10:C4:B2:E8:5F:46:1F:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0x5KjNKJjF3m1mJfEMSy6F9GH3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/9facae-fd90-4b4c-a2ec-9127e8105699/1/0x5KjNKJjF3m1mJfEMSy6F9GH3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/9facae-fd90-4b4c-a2ec-9127e8105699/1/0x5KjNKJjF3m1mJfEMSy6F9GH3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:16:7a:85:a2:c7:dd:47:0b:47:0a:d3:54:2a:d7:ba:52:67:
36:62:59:b0:17:6a:40:d0:de:ed:78:73:c8:79:40:6f:40:a6:
c6:2a:5f:83:e4:d4:67:bf:b9:5d:4f:16:56:75:e8:98:f7:77:
44:63:f2:f7:fd:5c:7a:35:ae:45:bf:72:5a:a0:8b:d4:dd:c7:
fc:ea:09:cc:d2:46:4c:d9:c0:94:bb:4d:7e:40:05:c5:b3:86:
a6:dc:1a:d3:e2:34:74:13:7b:74:d0:38:09:65:32:1e:7f:2d:
53:ee:2f:6d:c7:37:c7:fc:79:a6:a9:c6:67:95:2b:02:1e:51:
7f:ee:80:b4:1f:27:0a:f4:a4:14:ac:50:4f:59:cc:32:5e:de:
ac:40:8d:b5:d3:58:4d:6a:22:40:eb:a4:45:0f:59:ab:79:0f:
0d:62:cf:74:50:0d:7f:54:19:25:05:64:b5:64:50:cf:2e:8b:
88:17:a6:2a:03:8b:11:f9:e1:86:5e:d9:bd:48:a6:1e:9d:62:
96:3a:ec:e8:f0:01:52:00:f0:37:a1:1f:3a:04:7f:84:44:24:
06:e8:42:bd:d2:82:72:6e:44:83:71:e3:2a:e5:7a:0d:03:25:
d2:10:8f:99:7e:71:48:3b:ee:5a:35:c8:f0:6e:b6:bd:33:54:
37:a7:bd:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyq/Uplj/Vm411ThnZqjJ7fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzMWU0YThjZDI4OThjNWRlNmQ2NjI1ZjEwYzRiMmU4NWY0
NjFmNzgwHhcNMjYwMzAxMjAwMDUyWhcNMjYwMzAyMjAwMDUyWjAzMTEwLwYDVQQD
EygzOWM5NTliOTg4NWQ4OTg5YTBhZDRjYWRmYzBlZGJhMWMzYjNhNTYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqp3Xbw2yGzp2rWs/R3cO5FtfHn36
eBCIbdV+0xKi+YS+Z/KmP1dbFR8F+1tMgOmEp4gKCTERoezrV+4c9kfwsKZDqOU6
9CVsYeumr6Jw6/AgyP4l5uYZzkV9coO6u4L++LduSY+KR7PPbOyEBV+tnUlEMCiS
8Su7bBc5P+JTIAh2X0jLyLGCrtBJWSQSCDVXZsCeFOFnQouO5aHWkeMtxkv9u3iF
O1BEa6CyOyFMi+7A7BY6MV1PKhcr6ZVMJr57vpz9p1Hn+3hz4zFmPYOprk17D7hf
XU3AjDudhSAS7JZ+L9DOlhK++5mrNcpiEMJjWV0/tHW+79h6BelLUlCnrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDnJWbmIXYmJoK1MrfwO26HDs6VgMB8GA1UdIwQY
MBaAFNMeSozSiYxd5tZiXxDEsuhfRh94MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHg1S2pOS0pqRjNtMW1KZkVNU3k2RjlHSDNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS85ZmFjYWUtZmQ5MC00YjRjLWEyZWMt
OTEyN2U4MTA1Njk5LzEvMHg1S2pOS0pqRjNtMW1KZkVNU3k2RjlHSDNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS85ZmFjYWUtZmQ5MC00YjRjLWEyZWMtOTEyN2U4MTA1Njk5
LzEvMHg1S2pOS0pqRjNtMW1KZkVNU3k2RjlHSDNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABxZ6haLH
3UcLRwrTVCrXulJnNmJZsBdqQNDe7XhzyHlAb0Cmxipfg+TUZ7+5XU8WVnXomPd3
RGPy9/1cejWuRb9yWqCL1N3H/OoJzNJGTNnAlLtNfkAFxbOGptwa0+I0dBN7dNA4
CWUyHn8tU+4vbcc3x/x5pqnGZ5UrAh5Rf+6AtB8nCvSkFKxQT1nMMl7erECNtdNY
TWoiQOukRQ9Zq3kPDWLPdFANf1QZJQVktWRQzy6LiBemKgOLEfnhhl7ZvUimHp1i
ljrs6PABUgDwN6EfOgR/hEQkBuhCvdKCcm5Eg3HjKuV6DQMl0hCPmX5xSDvuWjXI
8G62vTNUN6e9nA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:27:45 2026 by rpki-client