Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/5bbebc-cf36-43a4-9974-9b6cfd8a2aa3/1/5o9MhddoNjPDOOA92OykR78_Z4U.mft
File: 5o9MhddoNjPDOOA92OykR78_Z4U.mft (raw, json)
Hash identifier: JlvuFAdE7PPOa22/yN64v+uvKgKkMY1l99UkvO7NBVc=
Subject key identifier: E0:7E:8C:35:12:F3:3A:49:7D:F5:D2:0A:70:68:CF:5C:01:96:BB:B5
Authority key identifier: E6:8F:4C:85:D7:68:36:33:C3:38:E0:3D:D8:EC:A4:47:BF:3F:67:85
Certificate issuer: /CN=e68f4c85d7683633c338e03dd8eca447bf3f6785
Certificate serial: 019D382E7FE015B31FFF4A4AD20240A5A77B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5o9MhddoNjPDOOA92OykR78_Z4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/5bbebc-cf36-43a4-9974-9b6cfd8a2aa3/1/5o9MhddoNjPDOOA92OykR78_Z4U.mft
Manifest number: 0DD2
Signing time: Sun 29 Mar 2026 06:01:04 +0000
Manifest this update: Sun 29 Mar 2026 06:01:04 +0000
Manifest next update: Mon 30 Mar 2026 06:01:04 +0000
Files and hashes: 1: 5o9MhddoNjPDOOA92OykR78_Z4U.crl (hash: ZIspd9cncw+GtT0GsZfhQgyk6Wz4EjckuZmV/qItbAo=)
2: YmBgxnOOglEWqDI9vvh0tfVl6fA.roa (hash: 2oqLEwP1fLoivASRJm1VDhmVmyCsjEy83bO8HNzsUEs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/5bbebc-cf36-43a4-9974-9b6cfd8a2aa3/1/5o9MhddoNjPDOOA92OykR78_Z4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/5bbebc-cf36-43a4-9974-9b6cfd8a2aa3/1/5o9MhddoNjPDOOA92OykR78_Z4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/5o9MhddoNjPDOOA92OykR78_Z4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:7f:e0:15:b3:1f:ff:4a:4a:d2:02:40:a5:a7:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e68f4c85d7683633c338e03dd8eca447bf3f6785
Validity
Not Before: Mar 29 06:01:04 2026 GMT
Not After : Mar 30 06:01:04 2026 GMT
Subject: CN=e07e8c3512f33a497df5d20a7068cf5c0196bbb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:04:e8:78:89:c1:48:2a:f7:96:f2:3f:78:d1:
da:d1:68:03:b2:9e:40:6b:98:8b:54:7b:a8:bd:c9:
a0:a0:57:7a:c5:0c:4e:4f:aa:f2:d9:8f:b5:23:74:
f6:42:08:c9:5a:eb:75:09:b8:e2:c0:d5:e4:ca:03:
05:07:32:50:fc:d2:b0:c5:a3:22:85:dd:a2:4d:25:
ab:8e:c9:af:ba:bd:a6:f4:a9:31:0f:a8:22:2f:b9:
eb:c1:98:f1:f2:a5:de:1a:5f:51:92:79:b2:55:ae:
92:c7:e0:72:df:ff:4a:0c:b1:57:5d:6d:37:34:94:
1b:4c:8c:e1:b6:fe:5c:ab:e3:24:35:0a:20:18:61:
08:a0:6d:c1:56:d5:44:ff:c1:bd:91:09:fc:f7:10:
a7:41:f6:2a:cd:80:cb:33:9f:4f:ec:8b:72:e8:ce:
16:ff:5e:0a:8d:ec:66:04:58:56:90:a0:05:5b:e1:
c7:a3:b7:a7:07:17:92:4a:fb:99:07:98:10:ad:ff:
1d:32:51:c9:ac:2d:3a:17:2c:93:02:62:fb:cb:11:
4f:7f:63:20:ab:14:d5:32:e2:e2:2a:54:e8:34:df:
e8:ec:3a:3d:ac:cd:88:8f:68:07:07:9f:fa:77:97:
25:d3:77:48:2a:fe:07:3a:15:b3:68:f2:9d:34:7c:
93:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:7E:8C:35:12:F3:3A:49:7D:F5:D2:0A:70:68:CF:5C:01:96:BB:B5
X509v3 Authority Key Identifier:
keyid:E6:8F:4C:85:D7:68:36:33:C3:38:E0:3D:D8:EC:A4:47:BF:3F:67:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5o9MhddoNjPDOOA92OykR78_Z4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/5bbebc-cf36-43a4-9974-9b6cfd8a2aa3/1/5o9MhddoNjPDOOA92OykR78_Z4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/5bbebc-cf36-43a4-9974-9b6cfd8a2aa3/1/5o9MhddoNjPDOOA92OykR78_Z4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:b4:39:cc:de:68:0b:e5:be:bd:20:d5:38:e2:ad:41:d3:b1:
08:0b:df:7d:b8:43:7e:32:71:67:5a:2b:6e:35:12:dd:8e:e1:
51:85:ae:63:e9:9f:9e:2f:b0:3f:f7:7d:bd:27:b1:93:8e:90:
0d:0d:a5:dd:22:c6:23:95:df:e0:84:88:80:33:a9:62:a2:5f:
9b:95:e7:01:67:17:d6:4c:a5:68:91:19:5e:c8:0a:85:54:f1:
82:46:6a:23:f6:79:ec:af:2c:57:c2:c5:e2:fc:6b:43:dc:1c:
ee:85:67:b8:02:bc:6a:b9:d9:ff:ae:aa:7a:35:5b:d4:25:ea:
8d:cc:f1:7a:b7:bf:90:53:01:a6:71:2e:8a:b9:3f:70:f7:74:
4a:b6:4f:37:e0:d6:75:07:2d:45:f5:ef:d9:06:ac:a4:a8:1a:
9c:10:59:0a:56:0d:a8:14:54:30:3e:26:8d:e7:6b:6a:08:5f:
27:c5:6f:92:50:71:d5:ad:09:42:94:a1:aa:20:60:bd:53:cd:
18:b7:bd:e7:8d:3f:ef:75:89:75:38:6a:15:f6:64:a5:5e:7e:
f8:e0:46:1f:0c:07:13:ab:5e:e0:2a:5d:88:b5:0b:db:ad:a6:
25:87:34:ab:bf:9a:3a:c6:54:96:f2:1d:b5:89:f1:cf:41:cf:
ea:d0:c8:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:31:02 2026 by rpki-client