Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.mft
File: i5zFfKhHI67ChBFF9vfTAb3zW6w.mft (raw, json)
Hash identifier: gZgrY92BsnOwJvRlQgSGwurhiHfUIlfHnHkpkMN/x4k=
Subject key identifier: 2C:6F:F7:0B:FA:E2:D4:33:78:64:8D:3D:29:78:EB:5B:A6:34:33:BF
Authority key identifier: 8B:9C:C5:7C:A8:47:23:AE:C2:84:11:45:F6:F7:D3:01:BD:F3:5B:AC
Certificate issuer: /CN=8b9cc57ca84723aec2841145f6f7d301bdf35bac
Certificate serial: 019D38D30BD2C2B5DFF843CA1CE862DE2DEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5zFfKhHI67ChBFF9vfTAb3zW6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.mft
Manifest number: 06BE
Signing time: Sun 29 Mar 2026 09:00:48 +0000
Manifest this update: Sun 29 Mar 2026 09:00:48 +0000
Manifest next update: Mon 30 Mar 2026 09:00:48 +0000
Files and hashes: 1: ReYuRGqP1WRrzh_ImF48CcDJ3RI.roa (hash: ufYZ4Au1+4D7CL0qz6B/FUig9GN1b/FI0Eb2tprJPcI=)
2: i5zFfKhHI67ChBFF9vfTAb3zW6w.crl (hash: Tp83nGsT6fHUObz09JG+/u1cXzVwhVUp3BuxP9LhcM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/i5zFfKhHI67ChBFF9vfTAb3zW6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:0b:d2:c2:b5:df:f8:43:ca:1c:e8:62:de:2d:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b9cc57ca84723aec2841145f6f7d301bdf35bac
Validity
Not Before: Mar 29 09:00:48 2026 GMT
Not After : Mar 30 09:00:48 2026 GMT
Subject: CN=2c6ff70bfae2d43378648d3d2978eb5ba63433bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:dd:69:a8:fa:56:6a:9f:d9:04:ff:7c:fe:4d:
33:a6:d6:30:b6:45:c7:1f:da:95:c4:7e:6f:72:13:
d8:5f:35:2d:dc:e6:25:c2:8a:8c:09:15:d8:15:bb:
71:81:ba:09:26:bb:02:34:90:5c:32:19:ae:7d:b9:
cc:76:e1:7a:ab:dc:14:c0:39:ee:08:2d:c4:93:0c:
a1:31:2e:89:3c:b9:da:81:0f:cd:8b:0f:52:61:05:
57:3a:52:22:7c:c3:88:e0:6e:02:0a:23:59:30:3f:
6a:d1:37:95:2b:a4:c9:58:d5:f3:e2:ae:a5:05:99:
58:39:58:59:1e:52:8d:72:bc:1e:09:9d:3d:27:3f:
8f:62:37:29:6a:af:a6:2e:71:b0:a3:64:43:73:2d:
b9:c1:58:18:d0:d1:dd:57:05:47:f6:f2:d5:e7:15:
66:b9:1b:6a:da:13:4d:f5:af:32:da:ee:77:1c:7e:
51:14:9c:d1:93:55:31:e6:dc:31:2f:0e:48:12:c2:
cd:a4:ec:54:0d:98:fd:97:2e:46:91:ff:92:93:d2:
ab:a1:7d:c9:0f:ec:9e:95:a5:e5:c5:a9:65:d8:ac:
54:2a:55:13:3d:af:72:c5:58:24:77:40:86:d3:c4:
68:12:31:12:ab:cd:bf:39:ee:86:8d:fa:b2:cc:9c:
22:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:6F:F7:0B:FA:E2:D4:33:78:64:8D:3D:29:78:EB:5B:A6:34:33:BF
X509v3 Authority Key Identifier:
keyid:8B:9C:C5:7C:A8:47:23:AE:C2:84:11:45:F6:F7:D3:01:BD:F3:5B:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5zFfKhHI67ChBFF9vfTAb3zW6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:35:c9:3b:1c:e2:37:b1:ba:8f:25:35:01:31:51:60:21:b5:
a3:62:6e:c7:a0:bb:3a:9b:c8:18:43:a9:d0:77:88:f2:fa:48:
b9:87:c9:d5:5f:05:46:e4:f2:3c:b3:0d:e8:ec:01:a5:38:1b:
d9:10:32:9b:16:df:3c:e5:5e:23:ff:42:f2:87:8d:2e:be:05:
f9:7d:dc:e6:dd:e7:88:d3:86:13:72:fd:0f:69:52:ad:fc:1a:
22:9b:37:9f:a7:9f:d6:82:c6:d7:46:18:49:7a:2b:4d:c5:65:
82:1e:4a:17:fd:cc:35:5d:82:2d:cc:7c:f2:f2:d6:3a:32:f1:
17:f4:49:d6:6e:5c:64:b0:8a:81:5c:f0:ac:df:0b:40:10:93:
03:2c:99:90:b7:40:8f:67:2a:18:97:6a:47:0b:19:89:d1:75:
60:2f:29:a4:50:38:0f:7e:f5:ba:db:d2:79:86:2b:0b:a2:b4:
b3:6f:f4:cf:3a:b5:c5:91:76:6f:b0:b5:fc:22:06:10:f6:63:
b0:a0:56:d3:ca:ce:24:ab:2c:fa:ca:6a:e0:95:95:24:81:1d:
f9:ff:f4:56:03:ed:78:c6:64:8a:fd:35:34:e1:12:d8:ab:2e:
7a:dc:24:a7:a8:ce:b6:5a:3d:60:51:81:2b:6d:13:85:8a:c3:
59:8e:e1:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:48:02 2026 by rpki-client