Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.mft
File: 5jAHYU9ncAssp21gtJQreo5LXOQ.mft (raw, json)
Hash identifier: PrT0PsjsFFNPSt1Tzo8XnCRN520brMByVcshwOgxnzM=
Subject key identifier: D7:76:A4:74:2E:44:F8:1E:CC:06:1B:6D:32:1E:91:6E:69:E9:EE:E1
Authority key identifier: E6:30:07:61:4F:67:70:0B:2C:A7:6D:60:B4:94:2B:7A:8E:4B:5C:E4
Certificate issuer: /CN=e63007614f67700b2ca76d60b4942b7a8e4b5ce4
Certificate serial: 019CAE3572E68F7FFA0E8EB63242D7557515
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5jAHYU9ncAssp21gtJQreo5LXOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.mft
Manifest number: 097F
Signing time: Mon 02 Mar 2026 11:01:04 +0000
Manifest this update: Mon 02 Mar 2026 11:01:04 +0000
Manifest next update: Tue 03 Mar 2026 11:01:04 +0000
Files and hashes: 1: 5jAHYU9ncAssp21gtJQreo5LXOQ.crl (hash: jgBLGlB+x3zwXb3hy8q1nLDoGNcbi1uevX5Q2nIFfmc=)
2: jmnDOsm4XHUSPILw7nGYM1oOQEs.roa (hash: 0inc/wmsdWPIKoI7fVSGb11ctPl1XySYsdqtu8Ok5kc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5jAHYU9ncAssp21gtJQreo5LXOQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 11:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:72:e6:8f:7f:fa:0e:8e:b6:32:42:d7:55:75:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e63007614f67700b2ca76d60b4942b7a8e4b5ce4
Validity
Not Before: Mar 2 11:01:04 2026 GMT
Not After : Mar 3 11:01:04 2026 GMT
Subject: CN=d776a4742e44f81ecc061b6d321e916e69e9eee1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:26:a5:15:2a:c0:47:a3:7b:0f:08:59:13:70:
dd:58:f6:3e:15:5d:84:5f:c9:16:94:36:95:0b:73:
61:b6:ea:ab:6b:eb:76:04:10:7d:6d:e5:3e:70:01:
8c:7d:ad:1d:cd:6d:39:f6:8c:bf:ab:47:2f:88:bf:
b9:39:7e:87:ab:da:22:da:5c:ca:9e:7c:43:79:83:
91:b6:ad:e6:df:d9:c7:c5:cb:10:e6:bc:2a:67:28:
e7:dd:63:f0:f6:5c:8c:0a:34:d7:6e:5a:de:4d:c4:
b3:9d:90:82:48:76:de:d7:9e:b1:a2:fa:dc:79:27:
ef:f6:96:48:37:c8:c2:81:94:55:49:52:48:f3:69:
bd:a8:b4:b0:7b:2d:a9:1b:32:45:8d:59:0d:2f:e1:
d8:75:0a:f6:10:3a:a8:63:e0:6f:5a:8f:04:7c:45:
76:ea:96:a5:44:73:ad:32:48:a0:9f:5a:3c:30:b5:
45:ac:cb:d3:3e:fe:b7:c7:c0:f2:3e:20:e8:6a:f3:
2c:83:a8:af:87:64:ce:11:67:40:87:a6:08:2b:9f:
49:63:ff:9b:80:67:d5:6d:ba:01:6a:71:32:31:86:
11:71:1f:3b:0f:19:cb:ac:0a:84:8b:64:81:0b:7f:
c8:06:5c:a0:42:93:bc:c1:1a:a3:6c:99:3e:fd:24:
62:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:76:A4:74:2E:44:F8:1E:CC:06:1B:6D:32:1E:91:6E:69:E9:EE:E1
X509v3 Authority Key Identifier:
keyid:E6:30:07:61:4F:67:70:0B:2C:A7:6D:60:B4:94:2B:7A:8E:4B:5C:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5jAHYU9ncAssp21gtJQreo5LXOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:a8:c3:50:f1:79:91:0f:b8:54:60:66:09:a2:fd:1b:c9:db:
98:b3:66:d8:30:da:cf:ce:07:ab:7c:43:ab:f4:cc:99:dc:e5:
61:cf:b3:24:b3:76:08:08:61:dc:56:da:76:25:c8:70:57:b5:
98:81:df:e4:47:94:12:ed:12:8f:c0:a2:ad:52:b9:4c:65:60:
31:ce:74:ae:98:12:30:df:5d:2f:69:d3:d9:76:fa:3c:d1:59:
d4:dd:7c:b3:c8:c0:44:b4:25:9f:1b:39:99:a2:cb:0d:56:d6:
cb:20:1b:31:a9:d7:63:09:9e:56:7c:6a:ed:c8:33:d6:7b:4e:
75:3f:1f:24:b3:fa:f8:fc:74:b8:cd:9e:d6:ac:d4:90:82:8e:
1b:e8:31:b9:03:d3:ff:4e:6e:c1:ce:f8:8b:a0:58:2e:17:d0:
c1:ed:fe:96:06:a5:cd:19:c6:ca:e4:ea:9c:7f:6b:aa:db:e3:
03:9b:cf:a9:e9:fd:c8:0e:f9:f9:d1:51:3b:c1:90:ca:b2:64:
3a:f4:5b:58:c9:78:3a:b9:96:e8:cc:7c:f5:01:f3:ff:f7:a8:
55:8b:c2:4c:ba:32:93:16:81:57:f8:86:bc:31:e8:2c:27:5e:
32:9e:48:d2:44:55:53:22:de:7f:8d:8c:82:c0:53:6b:89:2b:
ca:68:43:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:54:45 2026 by rpki-client