Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/6dc121-0a6f-45ad-8af9-e1a4293520be/1/s5HsSXtk1hEkn95Zel7ofpM31e4.mft
File: s5HsSXtk1hEkn95Zel7ofpM31e4.mft (raw, json)
Hash identifier: Swy+gI6DFg3xOjcjBgmGg4ITSzjZq9pqntuJbpRyLZs=
Subject key identifier: 10:F2:51:B7:79:9E:3A:B6:E5:87:4A:41:B0:0E:58:33:4C:02:46:E3
Authority key identifier: B3:91:EC:49:7B:64:D6:11:24:9F:DE:59:7A:5E:E8:7E:93:37:D5:EE
Certificate issuer: /CN=b391ec497b64d611249fde597a5ee87e9337d5ee
Certificate serial: 019D386566ADC37B665BB67B32BB27BA8B20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s5HsSXtk1hEkn95Zel7ofpM31e4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/6dc121-0a6f-45ad-8af9-e1a4293520be/1/s5HsSXtk1hEkn95Zel7ofpM31e4.mft
Manifest number: 0832
Signing time: Sun 29 Mar 2026 07:01:02 +0000
Manifest this update: Sun 29 Mar 2026 07:01:02 +0000
Manifest next update: Mon 30 Mar 2026 07:01:02 +0000
Files and hashes: 1: EjJrWFeTwJ_321jk-J6zSaeztUY.roa (hash: 6r9Rq2EqEC8dkR5wD5X0UhjtGuaRN59q4KgSMAlkjYI=)
2: s5HsSXtk1hEkn95Zel7ofpM31e4.crl (hash: zwi/8Ra2vM57/ThlQRqGrhxvTn5N64g+YCBJ6ZuNpS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/6dc121-0a6f-45ad-8af9-e1a4293520be/1/s5HsSXtk1hEkn95Zel7ofpM31e4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/6dc121-0a6f-45ad-8af9-e1a4293520be/1/s5HsSXtk1hEkn95Zel7ofpM31e4.mft
rsync://rpki.ripe.net/repository/DEFAULT/s5HsSXtk1hEkn95Zel7ofpM31e4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:66:ad:c3:7b:66:5b:b6:7b:32:bb:27:ba:8b:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b391ec497b64d611249fde597a5ee87e9337d5ee
Validity
Not Before: Mar 29 07:01:02 2026 GMT
Not After : Mar 30 07:01:02 2026 GMT
Subject: CN=10f251b7799e3ab6e5874a41b00e58334c0246e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e1:c0:cc:e8:d5:fa:44:ff:55:4d:7c:c5:21:
66:87:07:8a:0e:11:a8:3a:f2:3c:67:8d:8d:1b:c0:
a2:b2:73:9d:8c:9c:af:1d:ed:cd:c2:a5:1f:ef:66:
e0:74:99:29:d5:51:e1:4e:11:03:88:96:7c:e8:4e:
7c:c8:e5:4d:18:c4:30:f3:2c:d6:31:ed:b2:a1:e3:
f0:b2:2a:a6:1a:0a:30:11:80:f4:2a:e7:58:72:99:
69:fb:fb:1a:23:ab:3b:1a:0a:0f:0d:64:e3:44:d2:
6a:1e:05:b4:cd:c6:d6:33:88:3d:99:67:bd:6d:1f:
e6:84:4d:60:0d:27:1d:04:fa:8a:87:72:42:cb:8f:
6c:e5:7f:be:2c:ef:dd:fb:7e:5b:56:3d:ce:c8:12:
21:00:ee:43:30:da:87:6d:3b:0a:ff:c1:bb:14:d6:
19:1f:4e:29:9c:55:f3:02:7b:d9:c0:24:73:a9:9d:
b0:7e:2c:9e:0a:b4:7c:a1:91:75:58:58:d1:ae:3b:
2e:ce:1c:9c:00:98:f9:ce:19:c3:8f:9a:92:6e:18:
b2:e2:b3:12:f5:5f:64:e7:4d:68:7d:fe:46:c2:14:
0f:da:31:69:00:d1:c2:bb:ca:5c:e1:8b:13:50:0b:
9f:93:e7:30:b8:8d:3b:83:e9:1d:22:bf:b4:80:76:
e3:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:F2:51:B7:79:9E:3A:B6:E5:87:4A:41:B0:0E:58:33:4C:02:46:E3
X509v3 Authority Key Identifier:
keyid:B3:91:EC:49:7B:64:D6:11:24:9F:DE:59:7A:5E:E8:7E:93:37:D5:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s5HsSXtk1hEkn95Zel7ofpM31e4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/6dc121-0a6f-45ad-8af9-e1a4293520be/1/s5HsSXtk1hEkn95Zel7ofpM31e4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/6dc121-0a6f-45ad-8af9-e1a4293520be/1/s5HsSXtk1hEkn95Zel7ofpM31e4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:16:17:53:a3:71:40:e2:c8:fd:20:1a:fb:b7:50:f5:30:cd:
11:4c:77:65:80:48:81:55:fa:e8:f5:fe:c7:51:b7:95:75:f5:
56:61:52:29:62:d4:f0:23:c2:f4:02:c1:fe:14:3a:af:1a:f3:
db:9a:14:47:c5:00:82:8b:1b:7a:90:e8:c5:f0:d0:dd:9e:92:
f4:76:5d:41:65:c2:8f:80:a4:56:21:c9:4b:ad:20:c0:4b:28:
6f:3d:04:8c:0e:e8:97:3a:98:96:ec:0b:6b:b5:96:94:fb:e5:
2f:73:99:16:5b:bd:25:4d:2c:fe:76:da:01:81:df:0c:e5:e4:
0f:cc:11:43:8f:25:b2:f1:96:24:64:15:39:c9:c7:e0:4e:18:
b8:e9:23:18:4a:1d:fc:bc:1c:96:33:7e:f5:b9:17:af:04:d5:
cd:40:a8:59:ee:e8:8f:43:0a:9b:b2:ee:80:76:da:b9:84:77:
17:72:54:b8:a2:dc:2b:eb:3e:88:8d:b9:1b:b9:23:4a:c1:c4:
59:35:5d:4f:30:fb:c0:89:5c:e4:9d:26:af:fa:ee:d7:c8:44:
7c:00:f8:6e:95:b9:c0:68:a6:03:23:29:fc:ea:8c:c2:7e:b8:
32:60:9b:1b:78:d1:49:45:e3:8d:35:43:08:46:ee:dd:c1:e0:
88:ac:1a:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:03 2026 by rpki-client