Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/6363ce-c8a0-4961-ae80-d5a785517bbf/1/p5860xQqLAL5krlqsLm2OQr3_gI.mft
File: p5860xQqLAL5krlqsLm2OQr3_gI.mft (raw, json)
Hash identifier: /xEuR0Rov5S5Fiua2C8bfraQEgvqQQCQIaIiSsK634Y=
Subject key identifier: 10:C4:C9:5D:52:3B:F3:4F:4A:88:61:4E:E1:61:31:28:73:DF:B3:FB
Authority key identifier: A7:9F:3A:D3:14:2A:2C:02:F9:92:B9:6A:B0:B9:B6:39:0A:F7:FE:02
Certificate issuer: /CN=a79f3ad3142a2c02f992b96ab0b9b6390af7fe02
Certificate serial: 019CAAC6EE074F7B632686DF0897EBF48FCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p5860xQqLAL5krlqsLm2OQr3_gI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/6363ce-c8a0-4961-ae80-d5a785517bbf/1/p5860xQqLAL5krlqsLm2OQr3_gI.mft
Manifest number: 089A
Signing time: Sun 01 Mar 2026 19:01:29 +0000
Manifest this update: Sun 01 Mar 2026 19:01:29 +0000
Manifest next update: Mon 02 Mar 2026 19:01:29 +0000
Files and hashes: 1: JWCAfjjh5zsM89EhT5JBBpHJm28.roa (hash: +D0zzkFTWspOvvhGzzd00EXqwAQzFC2yhaPbQUOWqZU=)
2: p5860xQqLAL5krlqsLm2OQr3_gI.crl (hash: Gsnes1GCktPXfJ0Pp6f+sM4azTePWxEVj5N4jUFsiBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/6363ce-c8a0-4961-ae80-d5a785517bbf/1/p5860xQqLAL5krlqsLm2OQr3_gI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/6363ce-c8a0-4961-ae80-d5a785517bbf/1/p5860xQqLAL5krlqsLm2OQr3_gI.mft
rsync://rpki.ripe.net/repository/DEFAULT/p5860xQqLAL5krlqsLm2OQr3_gI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:ee:07:4f:7b:63:26:86:df:08:97:eb:f4:8f:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a79f3ad3142a2c02f992b96ab0b9b6390af7fe02
Validity
Not Before: Mar 1 19:01:29 2026 GMT
Not After : Mar 2 19:01:29 2026 GMT
Subject: CN=10c4c95d523bf34f4a88614ee161312873dfb3fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:53:33:8a:ee:2f:a1:7e:1a:f2:b5:6a:78:c0:
f4:91:94:7b:a6:6f:17:9f:78:85:a3:1b:be:08:68:
02:61:ba:ce:04:0d:84:20:86:84:31:97:f7:d9:b1:
fa:bf:67:35:4a:f5:59:c7:78:a9:1e:92:09:b9:dd:
44:a8:4b:e3:cf:79:bd:76:57:10:fc:75:7e:25:29:
ec:0a:2d:46:c8:85:05:93:eb:e1:42:9f:ac:3e:03:
3d:da:be:b0:1c:0c:eb:39:7a:08:5e:7f:2b:72:81:
85:fd:6f:3d:c6:f4:a0:68:8f:0f:56:69:04:a7:d9:
20:50:9a:b5:a8:03:81:4d:92:0e:8b:43:48:92:5f:
26:dd:e4:ac:e7:bd:0b:85:4b:97:ac:d3:2c:52:a0:
a6:f7:26:b0:be:e6:65:16:66:ce:80:d1:7d:45:d4:
37:5d:68:eb:b8:0d:a3:ad:f5:ec:74:4c:20:4f:a3:
cb:be:60:82:94:79:4d:53:10:09:70:86:7e:bf:f7:
bb:69:47:54:d3:ed:d2:f1:d0:1a:3c:26:33:94:c2:
8a:92:16:49:51:10:2e:37:04:6c:f7:af:4e:c9:98:
69:15:83:64:8b:f4:8c:2c:c6:d3:ed:5b:ad:3e:71:
a3:c4:59:2d:5c:f5:1c:1d:23:28:1f:78:57:ec:c2:
7e:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:C4:C9:5D:52:3B:F3:4F:4A:88:61:4E:E1:61:31:28:73:DF:B3:FB
X509v3 Authority Key Identifier:
keyid:A7:9F:3A:D3:14:2A:2C:02:F9:92:B9:6A:B0:B9:B6:39:0A:F7:FE:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p5860xQqLAL5krlqsLm2OQr3_gI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6363ce-c8a0-4961-ae80-d5a785517bbf/1/p5860xQqLAL5krlqsLm2OQr3_gI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6363ce-c8a0-4961-ae80-d5a785517bbf/1/p5860xQqLAL5krlqsLm2OQr3_gI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:6d:25:88:79:87:a3:bb:a1:35:40:57:fd:a5:5c:ad:26:26:
3d:d6:e7:45:43:9a:92:88:5f:dd:0b:b7:69:a6:72:80:0d:58:
07:38:ab:a0:5c:b6:cc:66:3d:88:a4:c1:eb:2a:44:85:dc:19:
c1:a1:39:08:cb:66:e7:bd:df:cf:76:33:a4:74:cf:08:5f:95:
18:39:29:ad:9d:aa:fd:73:bb:8e:09:42:71:82:5d:cd:79:d2:
4e:62:23:32:d8:78:7f:25:8d:f5:bf:72:1c:e6:45:4a:45:60:
16:80:ba:1a:d4:9f:54:49:4f:ef:64:eb:ae:db:db:b0:f6:f4:
c9:88:f1:d1:9e:42:29:99:59:c5:4c:d3:8c:53:ab:9c:3e:b3:
aa:3a:d1:59:b1:cc:3b:32:31:ac:fd:f0:74:cd:3a:58:9b:9e:
23:2f:18:8d:91:87:df:36:17:91:cb:e9:37:d8:8a:0a:5b:7a:
c7:f9:af:0b:d2:2d:f8:aa:84:5b:6c:a8:50:8d:e3:29:35:e4:
15:cc:66:7d:a3:fd:76:8d:dd:94:8c:af:4c:52:62:71:46:6f:
62:f1:01:5b:eb:6d:83:b4:4e:22:e2:64:63:54:f3:6c:4d:ef:
3c:b8:ce:dc:b9:31:19:74:f7:4a:d9:32:1d:e4:60:44:ef:24:
f1:70:d5:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:39:45 2026 by rpki-client