Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/da3406-04f9-47b0-a119-b88afef13367/1/_5m8PRSR-CJfiBFk9ZMUS3olyOs.mft
File: _5m8PRSR-CJfiBFk9ZMUS3olyOs.mft (raw, json)
Hash identifier: PCWqX8Sb4EHyBXT5nJJi+edL8YzG5LLAyaxdXNk6UK0=
Subject key identifier: BE:BB:F5:B2:6B:6D:31:EF:87:5E:51:20:9C:43:1E:E7:55:D9:6D:40
Authority key identifier: FF:99:BC:3D:14:91:F8:22:5F:88:11:64:F5:93:14:4B:7A:25:C8:EB
Certificate issuer: /CN=ff99bc3d1491f8225f881164f593144b7a25c8eb
Certificate serial: 019D39AF2D914111A93E59AC95F411E1876B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_5m8PRSR-CJfiBFk9ZMUS3olyOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/da3406-04f9-47b0-a119-b88afef13367/1/_5m8PRSR-CJfiBFk9ZMUS3olyOs.mft
Manifest number: 1262
Signing time: Sun 29 Mar 2026 13:01:14 +0000
Manifest this update: Sun 29 Mar 2026 13:01:14 +0000
Manifest next update: Mon 30 Mar 2026 13:01:14 +0000
Files and hashes: 1: 04FSpzq4m-1XB6Xit5U77C8a4zQ.roa (hash: mIEzNAi8bCdeISsLWc2pP3wecbIvm3THnuOD2ckxOcM=)
2: _5m8PRSR-CJfiBFk9ZMUS3olyOs.crl (hash: SUOqXDBaUctSS0+I/fZgEdrnKgs3ntDSWW+XBpWxCZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/da3406-04f9-47b0-a119-b88afef13367/1/_5m8PRSR-CJfiBFk9ZMUS3olyOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/da3406-04f9-47b0-a119-b88afef13367/1/_5m8PRSR-CJfiBFk9ZMUS3olyOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_5m8PRSR-CJfiBFk9ZMUS3olyOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:2d:91:41:11:a9:3e:59:ac:95:f4:11:e1:87:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff99bc3d1491f8225f881164f593144b7a25c8eb
Validity
Not Before: Mar 29 13:01:14 2026 GMT
Not After : Mar 30 13:01:14 2026 GMT
Subject: CN=bebbf5b26b6d31ef875e51209c431ee755d96d40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:2c:82:a3:4e:ec:0f:e6:4e:a2:22:e5:a9:b8:
54:12:08:8c:9f:9b:66:ac:c1:7e:2d:9c:22:dc:1b:
41:73:43:de:4a:fd:05:28:5a:23:4e:b4:69:8c:fd:
b0:10:68:76:31:db:6c:70:52:7d:a0:2a:ef:af:20:
e6:ee:5a:2f:33:01:b4:95:d4:88:15:f7:7c:04:53:
96:36:14:7a:b3:a9:bc:f5:bb:73:1b:d4:25:7b:a8:
00:36:08:30:5c:2a:6f:3f:48:6f:89:9c:8d:dd:74:
e8:3e:f4:88:81:8c:19:60:58:80:6a:31:b0:ec:26:
66:5e:0b:5b:65:ea:1d:07:63:27:03:76:51:3c:52:
3c:07:c0:46:95:e8:ec:b1:bd:2e:ee:38:bc:8e:bb:
a4:d0:91:fc:52:0e:8e:89:df:b6:18:a8:ac:6e:52:
01:fd:ab:0b:b1:01:37:ee:c8:21:1c:9a:7b:a7:62:
ec:64:37:14:44:b5:0e:8c:aa:15:0b:c8:15:11:08:
ff:e2:79:ab:43:cd:7c:82:bd:ad:6b:02:05:fb:08:
41:93:08:94:92:12:29:0b:7f:63:04:34:7d:34:b7:
6c:e7:c0:c2:d5:48:35:91:bd:6e:7b:1a:cc:31:91:
57:05:ad:4a:c7:7a:09:91:32:5c:ab:a3:57:f4:aa:
98:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:BB:F5:B2:6B:6D:31:EF:87:5E:51:20:9C:43:1E:E7:55:D9:6D:40
X509v3 Authority Key Identifier:
keyid:FF:99:BC:3D:14:91:F8:22:5F:88:11:64:F5:93:14:4B:7A:25:C8:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_5m8PRSR-CJfiBFk9ZMUS3olyOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/da3406-04f9-47b0-a119-b88afef13367/1/_5m8PRSR-CJfiBFk9ZMUS3olyOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/da3406-04f9-47b0-a119-b88afef13367/1/_5m8PRSR-CJfiBFk9ZMUS3olyOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:65:61:5c:f1:20:f4:5b:93:e8:bc:49:5a:f8:b4:6f:02:1c:
eb:fe:80:5a:00:36:cb:a4:81:48:8d:75:f5:2a:4e:10:7e:32:
15:bc:7b:3c:bd:68:45:fd:5b:56:cf:a9:95:60:43:44:24:aa:
e8:f6:27:ad:42:dd:83:56:84:4a:b4:b0:88:d3:22:35:4e:ef:
6b:df:22:50:e9:6e:a6:e7:b6:f8:91:ba:16:f1:53:58:f5:ef:
aa:1c:d3:ea:42:49:32:47:f8:ee:8b:80:fe:6b:d0:16:32:54:
74:d0:bf:b1:44:3f:7d:e7:df:a1:0e:14:39:78:75:11:63:b9:
ac:55:aa:cf:43:f0:58:8e:b5:82:97:91:5d:ad:86:86:c0:2e:
cb:7f:27:82:97:ff:7c:ce:18:d4:d4:0e:ca:d9:56:31:25:52:
33:2a:da:49:11:ee:dd:a3:e3:88:06:ab:f9:13:4e:41:87:cc:
02:aa:92:ae:35:0a:3b:ce:f4:ee:3a:bb:ba:e7:0b:44:f2:16:
4e:0e:2f:32:e9:21:13:31:3f:89:2c:0c:94:42:2e:6e:de:bc:
b7:74:10:5b:78:10:e9:9b:cd:12:53:f5:6e:13:b9:5c:52:18:
24:74:d3:45:ac:73:ae:ac:77:ce:55:97:bb:16:ff:b5:cd:b2:
4d:de:73:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:47:48 2026 by rpki-client