Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/d66af3-28b5-42eb-ad01-95d53b531545/1/5NU8R_Id1mUrZ_70lclP39FSjOs.mft
File: 5NU8R_Id1mUrZ_70lclP39FSjOs.mft (raw, json)
Hash identifier: S4USvXaOplHI9ZIaTXp1uqqifS4UGxK+aJYr99mbCFo=
Subject key identifier: 20:38:BC:20:11:22:C1:25:8D:D8:21:0A:41:0F:8F:95:3C:DA:81:6E
Authority key identifier: E4:D5:3C:47:F2:1D:D6:65:2B:67:FE:F4:95:C9:4F:DF:D1:52:8C:EB
Certificate issuer: /CN=e4d53c47f21dd6652b67fef495c94fdfd1528ceb
Certificate serial: 019CE6DAA2F472A8B157876E30A4AA534B37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5NU8R_Id1mUrZ_70lclP39FSjOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/d66af3-28b5-42eb-ad01-95d53b531545/1/5NU8R_Id1mUrZ_70lclP39FSjOs.mft
Manifest number: 020F
Signing time: Fri 13 Mar 2026 11:00:14 +0000
Manifest this update: Fri 13 Mar 2026 11:00:14 +0000
Manifest next update: Sat 14 Mar 2026 11:00:14 +0000
Files and hashes: 1: 5NU8R_Id1mUrZ_70lclP39FSjOs.crl (hash: PAWlTJ1WC2AIkud2bBaNayqRITyEwYQGi6qv7pfO8O0=)
2: DGLs36BU_cILxHYLxiJQIBEtMJI.roa (hash: qUohKLi8iKm8w87fsK66S0pB8JkDeoGnUD+Ll8azgYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/d66af3-28b5-42eb-ad01-95d53b531545/1/5NU8R_Id1mUrZ_70lclP39FSjOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/d66af3-28b5-42eb-ad01-95d53b531545/1/5NU8R_Id1mUrZ_70lclP39FSjOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/5NU8R_Id1mUrZ_70lclP39FSjOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:da:a2:f4:72:a8:b1:57:87:6e:30:a4:aa:53:4b:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4d53c47f21dd6652b67fef495c94fdfd1528ceb
Validity
Not Before: Mar 13 11:00:14 2026 GMT
Not After : Mar 14 11:00:14 2026 GMT
Subject: CN=2038bc201122c1258dd8210a410f8f953cda816e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d0:9f:c6:e5:01:93:53:7d:98:d0:db:91:0a:
20:ea:c9:5c:d3:57:8a:f5:83:04:75:9a:d5:78:aa:
81:d7:f2:b4:5e:00:b9:a7:c4:ce:0b:f3:c4:ff:33:
15:73:91:26:2c:c1:85:cc:75:eb:d1:af:45:fb:1c:
7f:13:36:8a:7f:9f:bc:6d:47:1b:6b:2f:b2:51:19:
bc:51:15:a2:61:32:03:12:9f:d0:f1:32:c1:de:8d:
15:60:3b:47:87:44:f3:23:44:e4:43:a1:89:e4:cd:
1f:1f:91:6c:25:9a:68:ca:79:35:19:d6:ed:08:7e:
eb:16:ae:42:1c:33:d6:b3:7d:20:30:98:25:a8:4c:
cd:50:1e:8e:02:71:b9:80:0c:cb:03:bd:41:ca:f8:
60:d6:3d:61:28:95:f2:48:8f:c5:2e:8d:11:2c:6b:
c8:a1:81:5a:d2:e4:27:95:fb:52:bf:61:4e:c4:02:
70:03:d7:ee:ee:c8:79:58:d1:85:cb:a9:08:34:8c:
96:f7:62:15:83:df:3d:a6:cb:89:f0:2d:81:49:96:
b1:e1:33:46:fa:75:73:55:9b:95:e8:f2:49:4f:24:
0b:79:46:d5:68:0f:ba:ef:f8:59:e1:0b:32:07:df:
8b:1f:86:f9:18:0a:f0:79:cf:9b:ac:f1:6d:e9:d2:
1a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:38:BC:20:11:22:C1:25:8D:D8:21:0A:41:0F:8F:95:3C:DA:81:6E
X509v3 Authority Key Identifier:
keyid:E4:D5:3C:47:F2:1D:D6:65:2B:67:FE:F4:95:C9:4F:DF:D1:52:8C:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5NU8R_Id1mUrZ_70lclP39FSjOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/d66af3-28b5-42eb-ad01-95d53b531545/1/5NU8R_Id1mUrZ_70lclP39FSjOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/d66af3-28b5-42eb-ad01-95d53b531545/1/5NU8R_Id1mUrZ_70lclP39FSjOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:9d:bd:fe:72:8c:c8:48:2f:3c:cf:06:d2:12:f6:33:f8:1f:
77:67:47:1c:dd:b9:73:88:5c:07:ec:18:d1:3c:d5:cd:ef:81:
b0:f8:bc:2f:54:69:44:97:41:d3:34:16:e7:3e:9c:d2:de:14:
c0:22:05:5b:93:b6:7a:80:e8:e5:7c:d2:0d:90:3b:f9:d2:a6:
28:63:e4:52:1a:48:72:26:e4:00:d3:c6:97:c9:d3:fc:1d:59:
f8:31:33:d6:05:68:97:b2:f7:d9:21:cd:01:a0:d5:f8:75:b4:
fc:94:a0:e4:11:cb:b4:83:0d:4d:f7:88:22:2a:7f:3e:59:31:
eb:6f:d2:15:74:95:24:d5:01:c9:a2:3a:0a:19:9f:cd:f1:52:
d7:0b:cf:97:c4:b3:25:4d:ee:8d:81:da:a6:20:dd:ae:5c:fc:
07:57:24:94:ea:09:d1:38:00:c4:52:cc:3f:69:0c:5c:91:6d:
4b:4c:6c:6e:d7:5d:95:b7:4c:5e:d9:6e:a5:a4:c2:05:63:14:
6e:e9:fe:b3:aa:05:1f:e1:60:4e:2f:fa:d4:a0:37:a6:42:45:
b7:af:d3:d0:c1:3b:77:ca:11:bf:50:92:04:2f:1f:3c:e9:52:
1d:d3:b0:f0:17:06:33:41:9f:51:ab:59:e8:95:27:be:a3:be:
03:ec:07:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 18:15:40 2026 by rpki-client