Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/ca2a80-1d90-4823-b3f1-4e284cff0799/1/5nXaCc0660yTfGP1NfM_1X0MIZE.mft
File: 5nXaCc0660yTfGP1NfM_1X0MIZE.mft (raw, json)
Hash identifier: pTEU7dze8mzVJlLVnNT6kfItgJzkfDlXPVNsdT3ux+w=
Subject key identifier: EB:D9:99:27:06:23:4C:9A:D1:CF:29:1F:9C:09:CB:1B:00:AD:9A:DB
Authority key identifier: E6:75:DA:09:CD:3A:EB:4C:93:7C:63:F5:35:F3:3F:D5:7D:0C:21:91
Certificate issuer: /CN=e675da09cd3aeb4c937c63f535f33fd57d0c2191
Certificate serial: 019D382E7E8E0A8021E9C415BBCC8F3C30D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5nXaCc0660yTfGP1NfM_1X0MIZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/ca2a80-1d90-4823-b3f1-4e284cff0799/1/5nXaCc0660yTfGP1NfM_1X0MIZE.mft
Manifest number: 16BB
Signing time: Sun 29 Mar 2026 06:01:04 +0000
Manifest this update: Sun 29 Mar 2026 06:01:04 +0000
Manifest next update: Mon 30 Mar 2026 06:01:04 +0000
Files and hashes: 1: 5nXaCc0660yTfGP1NfM_1X0MIZE.crl (hash: Uqo8unALKU/XlU3kXvf5YWz8UR3LNgduYh4HxBFd5+s=)
2: IWYrbXuJb7rdaqwraiq_apy6AMA.roa (hash: abrxD3L91b+QPLIZVyKImnAT+E+aScHR2G4289W+U4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/ca2a80-1d90-4823-b3f1-4e284cff0799/1/5nXaCc0660yTfGP1NfM_1X0MIZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/ca2a80-1d90-4823-b3f1-4e284cff0799/1/5nXaCc0660yTfGP1NfM_1X0MIZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/5nXaCc0660yTfGP1NfM_1X0MIZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:7e:8e:0a:80:21:e9:c4:15:bb:cc:8f:3c:30:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e675da09cd3aeb4c937c63f535f33fd57d0c2191
Validity
Not Before: Mar 29 06:01:04 2026 GMT
Not After : Mar 30 06:01:04 2026 GMT
Subject: CN=ebd9992706234c9ad1cf291f9c09cb1b00ad9adb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0e:af:45:65:a7:24:ac:58:16:79:3c:16:d9:
63:ac:cd:3a:97:b6:5b:0f:1d:be:60:69:e4:ce:7e:
fa:9d:be:9e:54:40:7b:5e:47:70:be:ae:cc:ae:48:
d3:6d:d1:6a:33:9c:7b:07:53:d5:0d:2a:0f:e9:8b:
f1:12:53:5a:0c:ed:db:09:4d:23:f4:fc:bc:90:47:
a0:ad:66:90:41:7c:46:9e:91:7b:ad:07:f5:2f:b3:
6b:19:50:0e:82:71:99:05:cf:28:04:00:3d:64:68:
77:87:18:6e:60:5e:2a:a9:54:03:b2:c8:02:ce:0d:
9e:7c:39:a5:18:92:00:71:64:4e:a5:85:e7:0d:02:
21:f1:64:0e:b0:19:c3:5f:ba:2a:bc:ac:a7:46:6b:
ed:fc:8c:8b:98:81:1b:27:ef:a4:c4:d0:6a:2d:1e:
89:c2:54:65:9f:23:c9:fb:ee:b4:6e:8d:27:21:80:
c8:b2:2e:e1:b6:cc:53:ea:2b:d5:d3:c1:4f:48:41:
4a:c4:a4:21:e0:3a:a4:00:40:fd:8a:c7:e3:83:78:
2e:73:53:1c:1c:2f:8e:0b:3e:28:4e:a9:1b:55:ac:
74:ae:4e:2e:8e:30:6a:2b:18:04:8f:9b:79:d0:3c:
5c:9f:5a:92:5b:9c:29:20:8f:40:96:55:f3:ab:a3:
f1:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:D9:99:27:06:23:4C:9A:D1:CF:29:1F:9C:09:CB:1B:00:AD:9A:DB
X509v3 Authority Key Identifier:
keyid:E6:75:DA:09:CD:3A:EB:4C:93:7C:63:F5:35:F3:3F:D5:7D:0C:21:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5nXaCc0660yTfGP1NfM_1X0MIZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/ca2a80-1d90-4823-b3f1-4e284cff0799/1/5nXaCc0660yTfGP1NfM_1X0MIZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/ca2a80-1d90-4823-b3f1-4e284cff0799/1/5nXaCc0660yTfGP1NfM_1X0MIZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:30:13:89:4c:da:1d:ce:86:6c:24:c0:f1:c8:af:d3:b2:7d:
a0:86:23:e4:34:4f:3f:f2:3e:f4:aa:3b:ef:dc:88:53:5c:ff:
6a:21:cb:af:cf:3a:fb:1e:13:49:77:1e:de:fe:94:ee:90:f2:
09:08:98:23:d8:1f:e3:b1:18:d8:53:71:47:75:92:a1:2a:1a:
64:eb:69:54:14:70:49:58:ad:a9:da:03:b2:a4:14:04:03:31:
f8:a2:f0:f0:6e:e3:cc:00:4f:1d:b6:7b:89:6c:5c:34:07:b6:
9a:32:e9:71:0e:e4:b5:8d:66:d9:84:82:5f:0b:71:35:4a:57:
8a:83:82:a3:23:8b:3f:64:78:4c:2a:ed:d6:8e:a2:6a:df:00:
06:94:65:18:80:9e:79:6e:fa:92:06:77:f7:a9:58:ce:8b:89:
12:69:90:aa:12:6b:1a:a5:0a:46:2e:c1:ec:f6:29:7c:28:b4:
bf:fb:51:a9:3a:b6:d3:86:04:f9:14:0f:63:90:72:85:d7:c5:
c8:64:e8:cf:48:61:bb:64:58:bc:25:1b:fb:47:75:bf:e4:96:
67:6b:52:35:a0:27:71:aa:51:e4:7c:4a:1b:81:cf:43:c3:a6:
60:09:fe:7e:78:ae:2a:7c:32:34:f7:3f:c7:67:f6:ff:ac:1b:
ce:62:e9:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:50 2026 by rpki-client