Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/5P9bv1QMZZVLmROmjCTRdN6X2Ck.mft
File: 5P9bv1QMZZVLmROmjCTRdN6X2Ck.mft (raw, json)
Hash identifier: gZXoPY9H24AGO8FO/U/VLZMZknPsdQN8lN+v+qlhE+Q=
Subject key identifier: F0:78:1D:13:22:40:5F:2C:73:6F:0C:00:B9:96:F4:CE:B9:67:6E:63
Authority key identifier: E4:FF:5B:BF:54:0C:65:95:4B:99:13:A6:8C:24:D1:74:DE:97:D8:29
Certificate issuer: /CN=e4ff5bbf540c65954b9913a68c24d174de97d829
Certificate serial: 019D386678C47DC9066B3605217740DF061B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5P9bv1QMZZVLmROmjCTRdN6X2Ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/5P9bv1QMZZVLmROmjCTRdN6X2Ck.mft
Manifest number: 1010
Signing time: Sun 29 Mar 2026 07:02:12 +0000
Manifest this update: Sun 29 Mar 2026 07:02:12 +0000
Manifest next update: Mon 30 Mar 2026 07:02:12 +0000
Files and hashes: 1: 5P9bv1QMZZVLmROmjCTRdN6X2Ck.crl (hash: Zv9hOw/jwIJyC091KJIHIFv11RryYJcK+gur+vF9hRw=)
2: IJhmUCiFKkEWauTpmApnTpFj-SE.roa (hash: kLeSqMguXmeNnm1rZ9r4cMOYIPZfo29ixEQEwX6dLeM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/5P9bv1QMZZVLmROmjCTRdN6X2Ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/5P9bv1QMZZVLmROmjCTRdN6X2Ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/5P9bv1QMZZVLmROmjCTRdN6X2Ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:78:c4:7d:c9:06:6b:36:05:21:77:40:df:06:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4ff5bbf540c65954b9913a68c24d174de97d829
Validity
Not Before: Mar 29 07:02:12 2026 GMT
Not After : Mar 30 07:02:12 2026 GMT
Subject: CN=f0781d1322405f2c736f0c00b996f4ceb9676e63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e7:8a:84:66:0b:e8:0c:16:e8:be:4d:4f:69:
8d:14:0d:fd:c4:45:2b:1c:db:ee:1a:d7:00:26:6f:
55:de:37:8d:33:9c:62:0b:37:95:90:ea:da:c1:6b:
0b:72:29:61:20:d2:74:11:fb:20:68:05:a0:2f:f2:
16:ca:bf:2d:70:18:e9:37:ef:0d:ae:78:ba:85:54:
59:ac:a8:f2:28:4b:44:7d:c8:44:ae:c6:47:8f:0b:
ff:cf:31:e3:e8:d3:76:40:74:cd:2c:28:2c:e4:86:
4a:86:29:dc:ce:12:84:2e:fe:37:4c:d7:ad:1d:d9:
c2:5b:38:50:ca:83:f0:6d:4f:b0:a0:49:45:e9:97:
b0:8c:fd:7e:37:4c:c7:a8:c7:5f:c4:62:86:86:86:
0f:f8:86:f0:fc:d1:22:b0:8e:ef:7f:6d:4a:cc:d1:
cd:2c:cd:ca:11:a9:3a:51:96:d6:32:d6:2a:08:e6:
f3:d2:36:00:7d:6a:44:d6:ff:96:02:e4:d7:80:ac:
12:5a:c5:2c:75:06:c8:3b:c0:d9:eb:37:cb:0e:fd:
b2:2e:bc:3f:ba:29:74:c2:cd:c7:c8:3f:37:09:64:
23:69:a4:40:c4:c9:d3:77:58:86:39:21:86:b2:95:
0c:9b:cc:97:fc:5d:3b:d2:4d:b3:66:00:fd:b3:c2:
31:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:78:1D:13:22:40:5F:2C:73:6F:0C:00:B9:96:F4:CE:B9:67:6E:63
X509v3 Authority Key Identifier:
keyid:E4:FF:5B:BF:54:0C:65:95:4B:99:13:A6:8C:24:D1:74:DE:97:D8:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5P9bv1QMZZVLmROmjCTRdN6X2Ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/5P9bv1QMZZVLmROmjCTRdN6X2Ck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/5P9bv1QMZZVLmROmjCTRdN6X2Ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:34:24:fc:a9:ec:24:1c:88:2f:f8:0f:a7:f1:5d:76:8a:b0:
eb:cd:a7:5a:80:61:dd:ec:fc:c5:e0:e5:5f:0d:8f:3b:75:29:
f0:72:40:da:f5:f6:b1:32:a0:c8:02:f9:2d:dc:d3:ee:31:48:
c9:07:11:0e:21:62:c1:67:98:a7:76:95:f9:4e:76:79:fb:92:
bf:a8:31:ad:9c:04:9b:ca:ce:bf:93:1d:6f:af:e9:a0:fe:04:
3b:ac:ea:c3:cd:e1:1f:b9:3b:b3:60:6f:6a:1a:3c:3d:1a:92:
ed:32:8f:6c:7d:89:a0:42:58:48:1f:3e:33:36:f6:da:8c:57:
28:60:0c:19:f4:de:19:2d:a3:fe:74:80:57:22:ed:a2:fb:e6:
39:c7:c3:33:f5:10:7c:f8:c3:7d:b7:31:44:9c:f1:9c:c9:2f:
70:c4:0f:94:7d:14:24:f9:39:66:67:5c:40:44:84:65:fb:c7:
41:94:c7:24:0a:da:a1:1a:58:04:8a:9b:d2:76:a5:2a:68:6b:
68:ad:6b:80:9a:54:cc:cf:46:46:59:bf:51:a6:25:4c:5a:60:
90:05:1a:4b:b6:47:f1:a1:83:02:d4:8a:23:68:de:9c:37:a2:
ff:44:6b:54:58:76:5f:07:27:04:3b:0f:27:be:de:51:35:36:
f9:15:de:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:45:59 2026 by rpki-client