Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/53f9bd-7f54-4bd2-b5a4-e584cd5f8d11/1/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.mft
File: j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.mft (raw, json)
Hash identifier: wt1a0HReu4FjphcFdzWyEvNv+/dOKqTtkvTF3BIA+H4=
Subject key identifier: 71:AF:D4:90:3C:BE:C2:F7:79:77:E1:83:3F:A2:58:0D:1C:07:5C:00
Authority key identifier: 8F:98:05:F6:48:01:DD:93:59:94:14:A6:25:09:B1:2A:54:02:F8:68
Certificate issuer: /CN=8f9805f64801dd93599414a62509b12a5402f868
Certificate serial: 019CACEBA7110BE15FDA22DAD45DF619C6FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/53f9bd-7f54-4bd2-b5a4-e584cd5f8d11/1/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.mft
Manifest number: 0596
Signing time: Mon 02 Mar 2026 05:00:50 +0000
Manifest this update: Mon 02 Mar 2026 05:00:50 +0000
Manifest next update: Tue 03 Mar 2026 05:00:50 +0000
Files and hashes: 1: MTWvaT-KZib9yb4FWgpaDciaIa4.roa (hash: udiDof62oIqMZQkTZswgaISYaPILO26piyBTi1c5Vbg=)
2: j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.crl (hash: crlwtZttLZEtYvbOBRFI+4eVSs2hXePAHTiyLF3yg/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/53f9bd-7f54-4bd2-b5a4-e584cd5f8d11/1/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/53f9bd-7f54-4bd2-b5a4-e584cd5f8d11/1/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.mft
rsync://rpki.ripe.net/repository/DEFAULT/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:a7:11:0b:e1:5f:da:22:da:d4:5d:f6:19:c6:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f9805f64801dd93599414a62509b12a5402f868
Validity
Not Before: Mar 2 05:00:50 2026 GMT
Not After : Mar 3 05:00:50 2026 GMT
Subject: CN=71afd4903cbec2f77977e1833fa2580d1c075c00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:75:b0:60:fd:16:03:45:13:c0:1d:08:52:74:
79:31:47:4b:36:3a:36:55:c9:63:b5:66:83:25:5e:
e0:2a:d0:f0:73:26:57:53:cd:9a:31:b3:8f:bc:c5:
97:07:37:ac:02:24:bf:5c:58:38:74:fe:ef:25:9d:
ec:77:d8:5e:f2:64:a6:c9:bc:88:92:8f:73:f0:bf:
72:66:15:67:97:bd:c7:17:3b:04:2c:0b:80:a6:cb:
04:25:23:4f:f3:21:5b:50:d8:6f:e8:39:f6:a2:81:
da:57:ac:1e:06:a6:07:96:ce:9d:ea:20:a5:d0:11:
83:f9:79:b9:28:97:d3:1a:dc:6e:94:3f:58:b6:f8:
2b:78:5f:5b:78:37:9b:09:50:92:ad:e7:43:bb:46:
3a:fa:a5:4d:46:94:01:3a:b3:73:bb:65:dd:6d:14:
7b:c8:eb:30:21:be:da:77:b3:5a:fb:1c:ee:57:5b:
3c:27:48:0a:86:e7:52:51:f9:d4:e1:c6:8d:ef:2c:
79:6e:88:0b:bb:9b:1f:cd:da:57:cf:a3:3a:5e:e5:
db:96:bb:17:52:16:34:65:b9:43:0b:cc:f3:fc:e9:
d1:c3:e6:38:59:10:0c:5b:df:59:2c:66:cb:02:28:
48:c3:77:48:d4:2f:34:df:ac:43:b1:f0:d2:c2:09:
52:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:AF:D4:90:3C:BE:C2:F7:79:77:E1:83:3F:A2:58:0D:1C:07:5C:00
X509v3 Authority Key Identifier:
keyid:8F:98:05:F6:48:01:DD:93:59:94:14:A6:25:09:B1:2A:54:02:F8:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/53f9bd-7f54-4bd2-b5a4-e584cd5f8d11/1/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/53f9bd-7f54-4bd2-b5a4-e584cd5f8d11/1/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:c5:a4:b8:7d:1c:fc:03:16:e3:53:bd:5b:9c:d8:bd:8a:08:
fc:63:88:36:2f:24:c3:47:a7:a4:ad:94:c5:47:44:58:01:47:
5e:73:95:93:ca:1b:ea:f2:f5:89:f8:2b:22:70:21:e0:ee:fc:
07:b3:f0:76:75:95:30:d0:9d:b9:28:aa:75:55:b4:66:53:ae:
33:60:1c:95:d8:78:11:2f:9d:7e:d1:62:ca:1e:f5:e7:f3:3c:
bf:d2:61:85:b2:4e:43:01:ca:1d:49:ed:75:87:34:bc:1d:4f:
80:dd:99:c4:0f:70:ee:0a:e9:c1:10:12:5c:34:7b:c3:a7:5e:
f6:5e:1b:97:05:da:33:9f:f5:8c:28:68:6b:fa:51:11:d2:c6:
5c:95:ef:5f:45:1a:3c:b2:25:7a:67:d4:53:78:94:87:c8:63:
1d:b5:ec:c3:46:6d:1f:cd:6f:09:43:ee:3b:0f:5f:40:e0:2a:
56:d0:7f:6a:5e:a8:55:ad:62:ad:88:b1:4d:82:80:76:a8:14:
bd:80:a7:5b:93:90:27:3f:96:c1:6d:84:66:bb:4c:71:0c:c8:
e0:45:cb:60:4e:b9:b3:c6:ef:33:98:b6:20:b6:0b:94:2e:96:
91:87:c1:ab:3a:37:f9:5f:56:d8:35:a6:60:a6:04:e8:f2:04:
87:3c:9a:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:41:32 2026 by rpki-client