Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/3abc74-a84f-4c6c-af0d-70c589dd2171/1/D5_AEbXohjvPO7cq12ldMZdCuEQ.mft
File: D5_AEbXohjvPO7cq12ldMZdCuEQ.mft (raw, json)
Hash identifier: JNHhM64TGJKin1y9kqpossHbZLrshNzqhwcU/iFluSA=
Subject key identifier: 3F:F1:5A:E3:DE:04:65:7E:53:03:0C:50:46:1A:CA:E1:93:67:32:83
Authority key identifier: 0F:9F:C0:11:B5:E8:86:3B:CF:3B:B7:2A:D7:69:5D:31:97:42:B8:44
Certificate issuer: /CN=0f9fc011b5e8863bcf3bb72ad7695d319742b844
Certificate serial: 019D3940BD735929F2F3C53C8C432AD6DEAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5_AEbXohjvPO7cq12ldMZdCuEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/3abc74-a84f-4c6c-af0d-70c589dd2171/1/D5_AEbXohjvPO7cq12ldMZdCuEQ.mft
Manifest number: 0137
Signing time: Sun 29 Mar 2026 11:00:37 +0000
Manifest this update: Sun 29 Mar 2026 11:00:37 +0000
Manifest next update: Mon 30 Mar 2026 11:00:37 +0000
Files and hashes: 1: C2alc4W0qUaR_O2dT6t7YsOa3tU.roa (hash: XKnTKvL5wXPD8yEbAMnox+MgSzxyy4w+ZP5niGbD9/U=)
2: D5_AEbXohjvPO7cq12ldMZdCuEQ.crl (hash: DuS9fz8ZoC/tgn1TOAKx0jiPImKnWsla+dZka35Hjaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/3abc74-a84f-4c6c-af0d-70c589dd2171/1/D5_AEbXohjvPO7cq12ldMZdCuEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/3abc74-a84f-4c6c-af0d-70c589dd2171/1/D5_AEbXohjvPO7cq12ldMZdCuEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/D5_AEbXohjvPO7cq12ldMZdCuEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:bd:73:59:29:f2:f3:c5:3c:8c:43:2a:d6:de:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f9fc011b5e8863bcf3bb72ad7695d319742b844
Validity
Not Before: Mar 29 11:00:37 2026 GMT
Not After : Mar 30 11:00:37 2026 GMT
Subject: CN=3ff15ae3de04657e53030c50461acae193673283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0c:47:25:22:df:67:b6:ce:8a:21:5a:0f:45:
87:41:7b:ef:6f:4b:e4:a2:a1:9f:4b:d2:85:c9:15:
4b:6a:b2:75:0d:40:da:9a:7b:1a:5c:0c:dc:c7:ba:
c7:80:08:fa:b3:97:1c:32:08:e1:86:a4:96:da:37:
2c:01:f3:b5:5e:e3:f7:e8:e4:a0:7e:4f:37:1d:1c:
d4:32:08:0a:67:bc:fe:15:dc:a7:1e:ed:3c:31:a5:
6f:83:c1:e9:90:94:ba:fc:b2:e5:8f:69:8e:0c:7a:
11:95:14:ba:e5:0f:8e:f3:3d:66:2a:5d:b2:c5:85:
8d:82:97:0b:82:57:af:70:3c:d9:8d:90:d2:24:7b:
40:dd:e8:f0:6e:20:05:07:56:6f:45:e2:09:49:5a:
21:bf:95:ae:ab:bd:84:b1:a1:90:dc:46:9b:d8:84:
21:0a:2c:b2:d8:fe:8d:2c:57:36:15:32:b8:79:4f:
00:93:fe:f0:69:7c:fd:01:35:14:ad:52:38:da:d0:
f9:84:0e:c0:96:06:14:0b:4f:b7:c0:5e:c9:a1:e2:
23:b4:ba:29:e6:f0:22:05:8e:8d:41:04:5c:4c:65:
d4:8f:cf:72:94:37:4e:01:35:78:e9:d6:73:8a:44:
30:d4:a9:ef:a4:24:89:40:eb:e5:f8:6e:be:d1:b2:
18:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:F1:5A:E3:DE:04:65:7E:53:03:0C:50:46:1A:CA:E1:93:67:32:83
X509v3 Authority Key Identifier:
keyid:0F:9F:C0:11:B5:E8:86:3B:CF:3B:B7:2A:D7:69:5D:31:97:42:B8:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5_AEbXohjvPO7cq12ldMZdCuEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3abc74-a84f-4c6c-af0d-70c589dd2171/1/D5_AEbXohjvPO7cq12ldMZdCuEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3abc74-a84f-4c6c-af0d-70c589dd2171/1/D5_AEbXohjvPO7cq12ldMZdCuEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:cd:28:ac:69:74:1d:d6:39:65:6b:79:3c:27:96:79:02:93:
7f:1a:0f:95:db:4b:10:7f:d9:41:87:bf:21:ed:2d:06:c8:2a:
90:3e:d2:95:36:49:cb:42:b0:fe:bd:03:e0:63:31:f6:d3:c2:
94:cb:8c:32:43:69:5e:e9:a9:35:64:66:c9:3f:9d:2a:ba:d3:
7b:be:74:37:ff:f1:3d:f5:f0:65:36:d1:74:9d:ca:b5:ef:e0:
3a:22:a2:8a:d0:76:45:2f:ec:5e:0e:97:ad:b5:3f:29:87:e7:
9c:d8:af:42:ba:49:2f:10:3d:84:3d:ff:57:d0:aa:51:8e:2f:
b9:f7:3a:f6:64:27:5f:16:79:40:e3:a3:e1:46:2e:e9:ca:4a:
d2:73:cf:b8:07:8f:a7:b7:4f:53:45:03:9a:a7:85:9d:53:2e:
5b:15:4a:2c:d5:22:c7:48:bf:a3:76:9e:ed:83:4f:2c:3e:2c:
0d:5f:3e:32:7e:d7:2e:43:06:4c:97:e8:0c:01:53:af:29:e7:
ad:2f:55:75:7c:01:3f:83:b1:c1:eb:f1:c2:82:4a:1d:cf:0a:
68:79:5b:b7:a5:50:a6:8d:f0:aa:b5:08:0b:2c:f2:2f:64:4b:
aa:b8:e1:7e:b4:37:80:f2:1f:7a:a9:31:76:31:b2:ac:01:fd:
bd:75:5f:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:43:49 2026 by rpki-client