Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/5PUXQd8Tb5OJJU795Lqa3PsN5r8.mft
File: 5PUXQd8Tb5OJJU795Lqa3PsN5r8.mft (raw, json)
Hash identifier: 8kWzLK07/HVdInpyLr2jd/qYE6iJb5dwFsV3GShl4MI=
Subject key identifier: 20:F2:46:61:EE:56:EC:F2:F1:94:8F:FE:45:76:AE:9F:1A:32:F6:69
Authority key identifier: E4:F5:17:41:DF:13:6F:93:89:25:4E:FD:E4:BA:9A:DC:FB:0D:E6:BF
Certificate issuer: /CN=e4f51741df136f9389254efde4ba9adcfb0de6bf
Certificate serial: 019CE9A57FE8765C7138C9F6499A5C2F9EC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5PUXQd8Tb5OJJU795Lqa3PsN5r8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/5PUXQd8Tb5OJJU795Lqa3PsN5r8.mft
Manifest number: 08F2
Signing time: Sat 14 Mar 2026 00:01:03 +0000
Manifest this update: Sat 14 Mar 2026 00:01:03 +0000
Manifest next update: Sun 15 Mar 2026 00:01:03 +0000
Files and hashes: 1: 5PUXQd8Tb5OJJU795Lqa3PsN5r8.crl (hash: hIscC8WgPr1bUYGUV35OyMG6BixWk7jRYvaMDQj+Mos=)
2: eTB20vbuw0ColRTbhpUzLeqy0n0.roa (hash: KC01L3zZWRaOvr8WRrIfqvZndCj/RMYJlTwl8jE/MI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/5PUXQd8Tb5OJJU795Lqa3PsN5r8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/5PUXQd8Tb5OJJU795Lqa3PsN5r8.mft
rsync://rpki.ripe.net/repository/DEFAULT/5PUXQd8Tb5OJJU795Lqa3PsN5r8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Mar 2026 00:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e9:a5:7f:e8:76:5c:71:38:c9:f6:49:9a:5c:2f:9e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4f51741df136f9389254efde4ba9adcfb0de6bf
Validity
Not Before: Mar 14 00:01:03 2026 GMT
Not After : Mar 15 00:01:03 2026 GMT
Subject: CN=20f24661ee56ecf2f1948ffe4576ae9f1a32f669
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:98:b3:c0:a6:70:a5:b5:1d:40:b1:12:a5:7b:
45:7c:26:51:fe:d8:c0:66:64:44:e5:b6:a8:32:ec:
61:50:ab:17:23:34:ac:74:23:dd:54:ef:2d:1c:a8:
10:55:19:3e:03:81:e7:f9:4d:c1:fd:21:b3:76:79:
68:e9:43:4f:30:c9:77:6d:cb:6f:8e:c5:e5:b3:d3:
0d:3a:d6:ec:ca:51:fe:ef:60:a3:cb:35:f4:1f:21:
37:e8:bb:45:99:3f:cc:70:6e:6d:fb:13:7f:fd:cb:
62:6e:92:4e:a5:99:9d:8a:69:19:38:7e:cd:3b:3c:
eb:bb:d9:f9:59:9b:26:ba:4d:84:90:44:13:92:30:
00:2b:84:22:90:4f:95:49:67:55:c9:15:a7:10:3f:
c7:14:b2:50:5c:2d:b2:71:c2:bb:3c:69:a7:1a:37:
c8:ef:2c:53:5b:61:52:a2:b1:5f:b6:91:aa:8f:d5:
80:56:25:db:31:e2:44:a8:ba:bd:20:23:e8:0d:51:
d8:0d:50:75:13:05:f9:e3:19:16:a7:07:cc:49:7d:
8f:8f:c5:fc:d3:14:27:79:70:31:73:7d:59:30:f5:
12:e7:4c:4e:ed:b4:06:d1:97:45:ff:cc:3e:1c:78:
18:39:03:77:5e:d8:a1:8b:16:7f:95:ef:fa:3e:f9:
73:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:F2:46:61:EE:56:EC:F2:F1:94:8F:FE:45:76:AE:9F:1A:32:F6:69
X509v3 Authority Key Identifier:
keyid:E4:F5:17:41:DF:13:6F:93:89:25:4E:FD:E4:BA:9A:DC:FB:0D:E6:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5PUXQd8Tb5OJJU795Lqa3PsN5r8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/5PUXQd8Tb5OJJU795Lqa3PsN5r8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/5PUXQd8Tb5OJJU795Lqa3PsN5r8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:db:36:f7:f4:24:e2:ac:20:03:f9:6b:e0:84:0e:0c:a3:20:
9c:6e:36:9a:d4:15:5b:4c:20:97:25:aa:9c:da:22:7b:a3:7d:
f4:5b:39:9c:d9:2c:41:89:fa:64:89:41:b3:85:ab:61:fc:c5:
a6:c3:88:b3:e3:4e:c8:cd:c7:fb:b1:46:72:9a:6f:0d:f8:62:
3e:db:72:d7:11:e7:f9:93:c3:5d:96:ca:30:30:5e:e9:6d:b5:
21:38:be:0b:aa:61:3f:07:09:af:19:a0:bf:d5:8b:5c:bc:08:
50:1a:26:2a:c1:43:ed:8f:db:d5:db:67:bb:37:88:7c:ed:64:
29:09:44:7a:ea:6b:c4:23:1e:74:0b:28:43:be:ad:69:98:02:
ee:60:e8:be:57:dd:30:39:e0:bc:d5:bc:f2:9d:72:64:f3:97:
11:8f:7a:b3:3f:53:b5:85:a6:a3:6a:d1:43:d9:19:2b:63:d6:
45:cb:b5:3c:3a:f4:91:aa:ab:99:72:f1:ff:a1:d1:8b:05:d8:
f7:92:48:dc:59:ad:e5:57:50:b4:7b:a5:dc:0d:57:e9:5c:d3:
ff:5f:58:be:76:3a:eb:67:0d:6e:ed:3c:ed:5d:b7:ff:3e:de:
32:6c:c3:f9:cb:a5:11:9a:69:11:fd:97:a0:7f:6f:2e:3a:b9:
9a:93:1e:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 10:32:04 2026 by rpki-client