Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.mft
File: s5Pfh3vy8M8BqXGJc-ru6HsGl9k.mft (raw, json)
Hash identifier: cl2xSMZtfhvO7DUhwrINfNyV1E2Ugp2T5mSlF0+GRUA=
Subject key identifier: D6:8F:CB:B7:F7:31:34:B3:6D:A5:A1:95:94:CA:FA:BD:46:93:13:A0
Authority key identifier: B3:93:DF:87:7B:F2:F0:CF:01:A9:71:89:73:EA:EE:E8:7B:06:97:D9
Certificate issuer: /CN=b393df877bf2f0cf01a9718973eaeee87b0697d9
Certificate serial: 019D34510D1754E447E88EAF8DD40238FFD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.mft
Manifest number: 126C
Signing time: Sat 28 Mar 2026 12:00:20 +0000
Manifest this update: Sat 28 Mar 2026 12:00:20 +0000
Manifest next update: Sun 29 Mar 2026 12:00:20 +0000
Files and hashes: 1: 2zW08BKeRm7D1IDPo_HIO01939Y.roa (hash: 47sX7u1KvuJt0tJls26PNQunkQblcdvkWNhCFldDuVU=)
2: FiLe_I9IP6W7MphiOr_CiL0bjSs.roa (hash: q1TJFvUMkjNyX0aSOs41/td1gkb7//YLN5yBHlFxZC4=)
3: JIIXr3X9vCQszAbNslU1l97JDHE.roa (hash: 1cSDQwO2+YC255/v6AV3wkUxgfk6+iiyEcMIh68CJvY=)
4: LFK2KZYQdm49lMZGq09_QCx1zKM.roa (hash: nYysAfjey6lKN0HP83k5T3J+7jNUAsnWPGq1zi3IPys=)
5: Txc0Y3w5O2MeuabOsp_i0fCstJU.roa (hash: XbbTV+bUv06PJ/qu0aw1RaX6Asirn+MLh6nL3Y4mz7s=)
6: ZQoXdMphcAyX_vSWGtLFp2lvoas.roa (hash: iFh6LchnjC6OiPt1RjLveej4KNPbVSeFQ+5l4ZDpv0s=)
7: s5Pfh3vy8M8BqXGJc-ru6HsGl9k.crl (hash: PH6CMhIWcA7BuW4JgiqlNncZNNDM0Co+0MA6l6uZjLY=)
8: wDNBjtjhirmC6HysMhN91EuISE4.roa (hash: VJdL+BcRDNdb1Ls5gcb7MknnthUWMMrUmAyuqY4kqkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 12:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:34:51:0d:17:54:e4:47:e8:8e:af:8d:d4:02:38:ff:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b393df877bf2f0cf01a9718973eaeee87b0697d9
Validity
Not Before: Mar 28 12:00:20 2026 GMT
Not After : Mar 29 12:00:20 2026 GMT
Subject: CN=d68fcbb7f73134b36da5a19594cafabd469313a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7a:0b:fa:e4:f4:3a:a8:46:37:67:22:5b:7d:
e5:4f:8b:fe:d4:7e:32:50:ae:78:eb:9f:09:e5:f2:
4c:bb:66:20:67:9c:84:d1:32:d8:b7:6f:20:b0:33:
e0:a0:99:75:7a:ad:b9:ac:c9:22:96:74:a0:26:f9:
9d:df:cd:8f:5d:1d:04:10:19:ad:ef:15:92:0b:d4:
cf:e5:49:72:4a:6a:e4:48:b7:dd:83:f9:c4:77:26:
18:f8:48:42:c3:f1:05:a4:29:53:d0:c5:07:7d:22:
31:05:aa:86:04:ad:4b:d3:86:28:b8:b4:bd:48:0c:
ea:9b:3f:aa:8e:ec:a3:37:e5:dd:92:6e:df:e2:1c:
52:2d:c6:73:ab:0c:7f:cc:d6:3d:c2:ec:c8:cf:4e:
52:66:ec:a3:25:9f:41:1e:12:3c:47:cb:b9:8c:c9:
aa:ec:3e:51:05:41:e1:0c:4b:21:0f:e3:77:eb:e3:
33:cf:93:08:06:c1:3a:11:36:8c:3a:d4:d8:48:16:
b1:2d:cc:56:7c:46:40:f8:bf:4d:36:74:7e:ee:98:
44:b2:66:91:96:17:e3:3d:90:c1:8c:35:db:07:37:
9c:ae:3a:9f:c6:f6:44:4a:8e:7b:89:f3:3d:4c:73:
5f:41:17:df:5a:8d:35:ec:6e:2c:d0:1f:38:4c:7d:
43:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:8F:CB:B7:F7:31:34:B3:6D:A5:A1:95:94:CA:FA:BD:46:93:13:A0
X509v3 Authority Key Identifier:
keyid:B3:93:DF:87:7B:F2:F0:CF:01:A9:71:89:73:EA:EE:E8:7B:06:97:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
da:37:93:7e:76:6b:32:1e:18:ab:a4:62:29:3e:8c:62:9b:7d:
a0:dc:67:a5:81:76:ec:ae:b5:19:10:99:c8:f2:e8:b0:01:5d:
50:4a:ed:1f:51:fb:c6:e3:09:da:f5:29:c9:26:8a:e1:ec:ee:
46:47:88:89:4e:e8:b0:ca:58:6c:7d:86:6e:6b:26:f3:41:61:
71:13:b4:05:a1:cc:cd:d6:3b:6b:f5:0e:aa:a2:96:03:8b:82:
fa:a9:e0:93:46:d9:1e:1a:e6:f6:8a:6a:1b:aa:71:b8:d2:69:
a2:f7:84:2e:11:07:91:f8:61:d8:43:6c:56:39:f7:9b:5b:85:
82:68:8e:6a:6b:b8:98:34:a7:ff:38:c5:a6:f1:d6:17:40:ef:
60:3a:73:30:c5:e8:30:ed:35:c1:d0:7d:da:05:fe:55:dc:e6:
5a:94:c1:6c:07:32:c3:00:b3:1d:50:95:fe:d0:c5:50:35:a5:
24:ff:06:08:14:21:1d:7f:4e:6c:a3:64:c3:7e:e2:f0:75:81:
31:0b:72:9a:1e:50:86:fe:28:7f:1d:de:2a:bd:83:a3:b3:1a:
74:97:5f:68:bb:77:2e:7a:2f:e4:ab:a0:84:69:76:02:dd:c3:
7b:3a:75:6b:15:9f:65:aa:37:68:f3:31:5c:ac:06:b6:8e:ba:
14:2a:2f:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 21:59:28 2026 by rpki-client