Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/42be5f-2432-4899-a4ff-198adda5a281/1/5OF-B7BNx2ydbJH6_C1ahALGS44.mft
File: 5OF-B7BNx2ydbJH6_C1ahALGS44.mft (raw, json)
Hash identifier: gCDdw+u80IM8x/1AXb7SUDhbXGsGPDeMICcfs+zr4IY=
Subject key identifier: 00:77:0A:41:D7:46:4D:74:73:62:C5:02:5E:7B:AD:62:99:3D:ED:7D
Authority key identifier: E4:E1:7E:07:B0:4D:C7:6C:9D:6C:91:FA:FC:2D:5A:84:02:C6:4B:8E
Certificate issuer: /CN=e4e17e07b04dc76c9d6c91fafc2d5a8402c64b8e
Certificate serial: 019CE7B6CBF4F835EA87A450AD3127C083D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5OF-B7BNx2ydbJH6_C1ahALGS44.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/42be5f-2432-4899-a4ff-198adda5a281/1/5OF-B7BNx2ydbJH6_C1ahALGS44.mft
Manifest number: 15EE
Signing time: Fri 13 Mar 2026 15:00:42 +0000
Manifest this update: Fri 13 Mar 2026 15:00:42 +0000
Manifest next update: Sat 14 Mar 2026 15:00:42 +0000
Files and hashes: 1: 5OF-B7BNx2ydbJH6_C1ahALGS44.crl (hash: 4wgpXvc7z/i8aHAKUnJXMsGNgkDOk+ccwNU3MTApsgU=)
2: W8rhJbGm4uBlDFmRmYTPxvGZjIY.roa (hash: j8NolW6nxGCELrxi3LXv8g6WHbwNoVgMueKJmj8/BfU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/42be5f-2432-4899-a4ff-198adda5a281/1/5OF-B7BNx2ydbJH6_C1ahALGS44.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/42be5f-2432-4899-a4ff-198adda5a281/1/5OF-B7BNx2ydbJH6_C1ahALGS44.mft
rsync://rpki.ripe.net/repository/DEFAULT/5OF-B7BNx2ydbJH6_C1ahALGS44.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e7:b6:cb:f4:f8:35:ea:87:a4:50:ad:31:27:c0:83:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4e17e07b04dc76c9d6c91fafc2d5a8402c64b8e
Validity
Not Before: Mar 13 15:00:42 2026 GMT
Not After : Mar 14 15:00:42 2026 GMT
Subject: CN=00770a41d7464d747362c5025e7bad62993ded7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:17:d6:1b:f8:5a:c3:27:75:c5:1a:07:34:2c:
20:3c:c9:03:9f:7a:68:d8:d1:d7:9a:bb:8c:b8:64:
db:2b:55:ca:68:3a:e0:58:f5:1e:ce:b7:7f:cf:5f:
27:c8:05:47:71:9c:22:14:18:a4:06:e4:be:2f:01:
9b:95:62:bb:ee:d3:40:54:36:88:b7:c7:6d:3d:40:
0d:b7:2a:5d:1b:1a:5f:93:8b:7b:32:ce:c8:c0:c0:
39:d6:19:fd:17:b4:6e:73:c6:2d:d5:e9:2c:72:7f:
95:99:55:68:56:ad:50:fe:46:36:a3:57:32:42:20:
ba:5d:21:e2:22:a3:ee:b3:30:aa:1a:3c:a8:5c:26:
3a:94:b0:77:98:0c:c8:8f:5c:68:22:75:9e:26:3e:
80:bd:81:41:a4:04:cc:82:45:b9:e8:b7:dd:fd:78:
13:28:39:b6:11:9a:fd:02:f4:74:08:f9:a0:e2:4b:
d6:f7:9f:88:a2:2a:30:6e:89:c3:94:42:d7:59:b3:
e0:70:4f:b0:dd:bd:86:2d:ea:3c:1d:3c:fc:7f:93:
29:fc:83:45:4b:11:ba:e6:81:62:fa:b8:6b:91:97:
42:e1:be:ab:52:53:43:ee:d4:6e:a1:68:97:cf:85:
b4:c8:c9:1d:84:a4:a9:8c:c3:52:7f:e9:b2:2c:64:
67:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:77:0A:41:D7:46:4D:74:73:62:C5:02:5E:7B:AD:62:99:3D:ED:7D
X509v3 Authority Key Identifier:
keyid:E4:E1:7E:07:B0:4D:C7:6C:9D:6C:91:FA:FC:2D:5A:84:02:C6:4B:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5OF-B7BNx2ydbJH6_C1ahALGS44.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/42be5f-2432-4899-a4ff-198adda5a281/1/5OF-B7BNx2ydbJH6_C1ahALGS44.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/42be5f-2432-4899-a4ff-198adda5a281/1/5OF-B7BNx2ydbJH6_C1ahALGS44.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:10:90:6d:38:eb:0e:2c:86:49:3a:8e:f0:da:f0:d9:68:f4:
74:86:f1:33:b9:f3:fd:95:f8:19:b8:0c:29:e0:43:f7:15:e8:
eb:c8:a7:0a:95:35:6b:d9:ba:5e:d1:20:93:66:32:88:66:1c:
90:d6:ed:cf:ec:52:e1:b3:c6:8b:4d:61:97:c6:df:f5:59:8e:
1f:aa:39:14:d8:5f:62:bc:30:1b:33:23:05:02:ed:80:76:fe:
e3:10:4c:43:03:96:de:80:e1:7c:69:99:06:a6:8b:d0:1a:29:
d7:0f:59:41:ac:98:09:a9:02:f9:5a:47:a8:a4:74:00:6f:36:
b2:51:e5:59:23:e4:3d:68:9a:fc:de:12:f2:a1:b5:59:49:d3:
b8:ee:33:22:a4:99:cd:ba:a9:98:a3:01:19:98:c3:a3:0b:0b:
13:2a:9e:ee:d0:6f:ca:fc:12:09:79:86:40:c1:bb:27:66:1b:
22:95:84:01:3d:1e:ee:5a:a5:28:80:32:dd:47:46:4d:d1:12:
87:9a:ca:23:06:36:ad:c6:a5:ee:29:fd:63:70:bc:bf:1a:e1:
0c:0e:70:f5:00:2f:27:81:61:21:79:58:ae:8d:df:af:91:1c:
cd:0b:4c:08:0b:b1:97:f3:ad:a9:f8:a8:e6:d9:bb:4d:8b:5f:
7b:ae:fb:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 16:47:51 2026 by rpki-client