Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/0c14db-8620-4996-afae-b9cf40094640/1/b5RYfBGZosPfQBl7GfNlDGF94UU.mft
File: b5RYfBGZosPfQBl7GfNlDGF94UU.mft (raw, json)
Hash identifier: exaMhDsDYdwRLayIqsCyMlkSwF01tsJPXJiF1tbeUTI=
Subject key identifier: 96:AD:F3:70:45:97:1A:07:09:06:B0:80:A8:E1:0F:41:38:DA:5A:CA
Authority key identifier: 6F:94:58:7C:11:99:A2:C3:DF:40:19:7B:19:F3:65:0C:61:7D:E1:45
Certificate issuer: /CN=6f94587c1199a2c3df40197b19f3650c617de145
Certificate serial: 019CB023B9CF031F0CD9C17430EA36B8FE4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b5RYfBGZosPfQBl7GfNlDGF94UU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/0c14db-8620-4996-afae-b9cf40094640/1/b5RYfBGZosPfQBl7GfNlDGF94UU.mft
Manifest number: 036A
Signing time: Mon 02 Mar 2026 20:00:57 +0000
Manifest this update: Mon 02 Mar 2026 20:00:57 +0000
Manifest next update: Tue 03 Mar 2026 20:00:57 +0000
Files and hashes: 1: JXguqTWTZJXOx7wR4QzL1WTD3w0.roa (hash: by9aF7KEg8z9kfigzE6BcO3FIwfxJ5MTT0jDESZsK+s=)
2: b5RYfBGZosPfQBl7GfNlDGF94UU.crl (hash: XuES4s8y/4wQQNYij8JFVrox7ET/rp107EwkEV1cJIM=)
3: ppk17F6OyNc0EwSbu1kw3GGU0jI.roa (hash: XKo5gTm78DhZYG3mOTajWDGyeUuNj7w2rAJKRuCr/xk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/0c14db-8620-4996-afae-b9cf40094640/1/b5RYfBGZosPfQBl7GfNlDGF94UU.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/0c14db-8620-4996-afae-b9cf40094640/1/b5RYfBGZosPfQBl7GfNlDGF94UU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b5RYfBGZosPfQBl7GfNlDGF94UU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 20:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b0:23:b9:cf:03:1f:0c:d9:c1:74:30:ea:36:b8:fe:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f94587c1199a2c3df40197b19f3650c617de145
Validity
Not Before: Mar 2 20:00:57 2026 GMT
Not After : Mar 3 20:00:57 2026 GMT
Subject: CN=96adf37045971a070906b080a8e10f4138da5aca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:10:fb:e2:95:b7:d5:4f:5a:32:b7:58:ac:34:
4b:f9:77:e5:e7:f2:87:78:2b:96:3d:28:40:04:2f:
61:d7:59:2c:3b:fa:14:31:f4:c5:b9:01:0d:65:45:
a8:87:b0:ea:3f:86:dc:b2:ea:2d:97:9a:ad:f6:80:
3b:dd:3a:16:8b:be:ba:5e:2a:4c:55:4c:f4:41:da:
8b:fe:9e:16:c0:28:51:79:89:58:43:7a:4c:f2:f8:
4b:bd:47:59:f2:86:2c:1b:3b:d2:26:23:a5:e2:96:
90:95:9d:ef:a5:ad:59:cc:e1:62:4a:99:dc:17:61:
21:06:b0:be:7c:d7:1c:df:aa:08:96:7a:cc:e6:84:
ec:0d:74:e6:09:ca:1c:85:00:cc:f4:86:e3:6d:35:
de:9d:ee:d3:10:4b:7d:6a:21:eb:57:c9:3d:2f:6d:
b4:22:74:b1:cf:7e:1e:30:1a:c7:09:43:03:28:c4:
8f:59:73:3b:8f:cf:cc:44:df:ff:88:8b:1f:df:7c:
f5:c2:b8:84:31:e6:d0:57:92:cf:27:07:8c:96:fc:
de:7b:44:52:65:46:5a:ab:3d:d4:4d:a7:31:83:8b:
79:dd:c1:0d:8f:41:88:39:06:36:3a:4a:1c:e3:08:
e4:34:5a:e8:6b:9b:7d:2e:7e:f3:e8:89:7a:e0:90:
2d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:AD:F3:70:45:97:1A:07:09:06:B0:80:A8:E1:0F:41:38:DA:5A:CA
X509v3 Authority Key Identifier:
keyid:6F:94:58:7C:11:99:A2:C3:DF:40:19:7B:19:F3:65:0C:61:7D:E1:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5RYfBGZosPfQBl7GfNlDGF94UU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/0c14db-8620-4996-afae-b9cf40094640/1/b5RYfBGZosPfQBl7GfNlDGF94UU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/0c14db-8620-4996-afae-b9cf40094640/1/b5RYfBGZosPfQBl7GfNlDGF94UU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:70:b5:b0:0c:0d:6d:d0:7a:e9:e0:18:81:e7:01:0e:8d:95:
3b:1f:d9:5c:73:21:fd:7a:35:a4:a3:c9:29:9d:db:09:47:e4:
16:36:6a:19:a4:5e:7b:0f:1e:7f:4f:44:17:25:19:f1:72:79:
1c:f0:9e:9d:d4:de:cd:da:54:60:7c:a7:53:ae:8f:cd:a8:bc:
dd:40:d9:df:98:a4:8b:1e:69:f0:b8:ea:ea:64:37:ba:1c:f1:
5f:58:d4:2b:6a:c4:06:f4:75:e9:fd:be:50:e4:07:c0:f1:51:
13:a0:5c:ab:6e:93:61:08:e5:01:9b:01:c2:ec:59:8f:9d:9a:
af:64:f5:a2:a4:7c:2c:6b:04:bb:c7:cb:31:2a:de:cb:ed:72:
c6:68:37:80:12:f3:e4:07:e5:71:19:06:ea:8c:91:00:ba:9c:
b0:dd:d1:44:0c:ef:39:5c:18:87:eb:10:1f:cb:7c:05:a6:d3:
2b:2e:80:3e:3d:8c:47:04:a8:e0:0b:07:a1:67:31:d2:3d:d3:
17:d0:ec:87:3b:c9:e3:1f:f3:b6:66:75:16:a1:29:0e:53:10:
66:0c:29:f5:e0:b0:01:99:f9:b9:2b:dc:c1:60:e0:1e:4d:5c:
34:af:61:8f:73:e8:3f:81:cf:02:d8:4b:1b:7d:22:72:2d:e6:
1c:28:3d:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 05:40:51 2026 by rpki-client