Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/c05b86-6f16-4964-a503-5eccec8d93b4/1/_sTvIAvJ0n6e1_O8a1wFKS2EMro.mft
File: _sTvIAvJ0n6e1_O8a1wFKS2EMro.mft (raw, json)
Hash identifier: ygcsz8qOvBrZfwBH0rD+lImyf+0KDKtQKzV6s07wNEI=
Subject key identifier: E9:1D:73:17:E9:39:6B:0E:60:47:16:1C:C7:B1:08:0E:B1:52:0F:31
Authority key identifier: FE:C4:EF:20:0B:C9:D2:7E:9E:D7:F3:BC:6B:5C:05:29:2D:84:32:BA
Certificate issuer: /CN=fec4ef200bc9d27e9ed7f3bc6b5c05292d8432ba
Certificate serial: 019D38D352C154DC01ED24218A5C97C60FB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_sTvIAvJ0n6e1_O8a1wFKS2EMro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/c05b86-6f16-4964-a503-5eccec8d93b4/1/_sTvIAvJ0n6e1_O8a1wFKS2EMro.mft
Manifest number: 05AD
Signing time: Sun 29 Mar 2026 09:01:06 +0000
Manifest this update: Sun 29 Mar 2026 09:01:06 +0000
Manifest next update: Mon 30 Mar 2026 09:01:06 +0000
Files and hashes: 1: _sTvIAvJ0n6e1_O8a1wFKS2EMro.crl (hash: 8ZN8cfiGFB5RAiSdH6ZLWyOrdTpptfQ0wdCGfUkrIog=)
2: zwsKXVVMmv0-EwryV2b3Xyq5PW4.roa (hash: 5ydnlDVv4t0zmXg2O1tzQDXDv+ERwDuwKHdXunX5QqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/c05b86-6f16-4964-a503-5eccec8d93b4/1/_sTvIAvJ0n6e1_O8a1wFKS2EMro.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/c05b86-6f16-4964-a503-5eccec8d93b4/1/_sTvIAvJ0n6e1_O8a1wFKS2EMro.mft
rsync://rpki.ripe.net/repository/DEFAULT/_sTvIAvJ0n6e1_O8a1wFKS2EMro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:52:c1:54:dc:01:ed:24:21:8a:5c:97:c6:0f:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fec4ef200bc9d27e9ed7f3bc6b5c05292d8432ba
Validity
Not Before: Mar 29 09:01:06 2026 GMT
Not After : Mar 30 09:01:06 2026 GMT
Subject: CN=e91d7317e9396b0e6047161cc7b1080eb1520f31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5f:90:ee:c6:59:c7:7d:93:62:8d:b9:62:bb:
ab:20:17:e2:12:7b:1b:f1:c0:3b:f6:e7:f4:ab:34:
ba:7a:4b:11:a8:ad:11:0c:ed:97:6d:b0:05:d3:3f:
f1:74:98:54:4f:40:2f:12:a0:22:1b:94:f2:fe:2a:
09:f8:8a:00:12:56:67:47:31:da:c3:c3:af:8e:ee:
d0:0c:59:3e:7e:88:3d:fb:e2:ca:42:31:fd:8c:9c:
01:2d:2a:f5:ef:85:dc:22:a9:2b:d1:b6:4d:44:fe:
a3:ee:9e:c7:ee:51:6f:d1:d8:9c:5c:6e:3c:89:6e:
0d:9e:1d:1c:13:c2:83:48:7d:f2:d5:cb:a1:e9:36:
a9:a1:a5:06:51:d3:b9:b6:32:dd:5b:cf:fc:e8:2a:
e7:75:62:74:ee:a1:b2:d3:06:94:d2:ba:88:95:62:
02:5a:32:49:f7:b3:c6:85:19:a0:15:87:89:a1:cb:
38:db:0a:68:ef:1a:1c:4a:53:21:e0:a3:72:d1:03:
be:a4:8f:78:a9:56:47:60:86:80:95:e3:09:e6:fb:
fd:88:ce:fa:25:7e:fc:8a:2d:34:d8:0c:a9:b3:93:
0c:d6:ab:4e:7e:b5:55:e1:68:72:38:5d:c3:3c:86:
c3:11:0b:85:8a:3f:fd:f5:20:66:9b:b2:75:81:39:
4f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:1D:73:17:E9:39:6B:0E:60:47:16:1C:C7:B1:08:0E:B1:52:0F:31
X509v3 Authority Key Identifier:
keyid:FE:C4:EF:20:0B:C9:D2:7E:9E:D7:F3:BC:6B:5C:05:29:2D:84:32:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_sTvIAvJ0n6e1_O8a1wFKS2EMro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/c05b86-6f16-4964-a503-5eccec8d93b4/1/_sTvIAvJ0n6e1_O8a1wFKS2EMro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/c05b86-6f16-4964-a503-5eccec8d93b4/1/_sTvIAvJ0n6e1_O8a1wFKS2EMro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:85:73:63:81:79:f0:d8:7b:eb:02:ae:ac:85:a1:f9:01:b5:
a6:d5:f4:86:ef:28:68:ed:cd:bc:d0:a6:43:75:e7:cd:7e:8a:
ea:49:4f:bf:c5:0f:e6:f3:b8:4d:4a:e2:d2:c5:84:f5:49:22:
5b:e8:e8:cf:f6:d1:14:de:66:23:2d:e2:bd:62:c9:72:0c:54:
53:d7:d2:b7:ad:20:34:e6:a1:2f:5f:cb:6d:4a:2a:0c:56:77:
3a:cc:75:24:c3:d5:5d:7b:a1:b0:4a:aa:79:83:9b:88:0d:ed:
b9:c6:18:b3:ef:53:a6:16:d7:c5:90:71:7d:57:bf:65:d4:fe:
15:c2:95:d4:ac:b7:df:49:61:df:5a:3e:46:10:3a:ce:b2:bc:
79:f1:45:9b:39:c8:f4:0d:e1:2d:c6:86:c4:05:d0:26:d7:9b:
15:17:af:bb:5a:9b:2e:30:cd:53:e9:23:84:6c:89:91:c7:0b:
fe:a9:88:9c:87:8b:dc:cb:5c:ce:08:2e:64:80:20:6d:8d:04:
17:51:35:c9:06:aa:75:03:27:04:68:1b:e1:73:7f:a3:80:06:
d8:38:bd:f0:10:32:07:24:ab:ab:9a:3f:a8:e8:8b:74:f5:6d:
00:3e:bf:c3:0f:6c:62:40:30:43:ab:20:d8:45:bb:b3:1c:57:
4f:b2:68:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:17:23 2026 by rpki-client