Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/d8a024-6c06-4f98-a834-e63362098c70/1/5DlX3rqBbJYAzgpNB_yn0wbv7mE.mft
File: 5DlX3rqBbJYAzgpNB_yn0wbv7mE.mft (raw, json)
Hash identifier: 16AO/W1qbRi2FFDZ4E5UJm6Fcm5UM99V7KxSuGaE/f0=
Subject key identifier: 92:15:36:6B:32:19:42:87:37:AC:EA:5B:4A:12:A4:47:67:C9:3E:86
Authority key identifier: E4:39:57:DE:BA:81:6C:96:00:CE:0A:4D:07:FC:A7:D3:06:EF:EE:61
Certificate issuer: /CN=e43957deba816c9600ce0a4d07fca7d306efee61
Certificate serial: 019D382E0A2887BAC9400FA83E42781FFC16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5DlX3rqBbJYAzgpNB_yn0wbv7mE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/d8a024-6c06-4f98-a834-e63362098c70/1/5DlX3rqBbJYAzgpNB_yn0wbv7mE.mft
Manifest number: 0345
Signing time: Sun 29 Mar 2026 06:00:34 +0000
Manifest this update: Sun 29 Mar 2026 06:00:34 +0000
Manifest next update: Mon 30 Mar 2026 06:00:34 +0000
Files and hashes: 1: 5DlX3rqBbJYAzgpNB_yn0wbv7mE.crl (hash: UqeJ3O6pztXnRzIkzpSI0kjsFnQIWIYmeJPTIRQelBQ=)
2: jXP7E3ZhCPS-nhI96RhyBYQFCsE.roa (hash: TPYf0iiW2OcHHUnh4b/qsDWeDvydotieDoi8cPyorB4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/d8a024-6c06-4f98-a834-e63362098c70/1/5DlX3rqBbJYAzgpNB_yn0wbv7mE.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/d8a024-6c06-4f98-a834-e63362098c70/1/5DlX3rqBbJYAzgpNB_yn0wbv7mE.mft
rsync://rpki.ripe.net/repository/DEFAULT/5DlX3rqBbJYAzgpNB_yn0wbv7mE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:0a:28:87:ba:c9:40:0f:a8:3e:42:78:1f:fc:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e43957deba816c9600ce0a4d07fca7d306efee61
Validity
Not Before: Mar 29 06:00:34 2026 GMT
Not After : Mar 30 06:00:34 2026 GMT
Subject: CN=9215366b3219428737acea5b4a12a44767c93e86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d0:70:4b:f0:7d:b0:45:72:48:b5:7b:40:8f:
f1:39:a2:b3:a1:fe:07:29:25:e6:6b:61:fa:92:55:
35:54:88:e8:f4:c9:42:60:06:e7:b4:38:62:66:13:
95:5a:ff:ea:1e:fa:94:c3:50:f2:4b:f3:78:f8:27:
4f:d0:94:6c:69:72:fb:28:34:0a:7d:92:96:8f:a5:
21:ca:0e:51:66:7f:cf:cf:2a:4c:92:50:77:7d:52:
62:cc:f3:57:c5:5f:86:a1:89:d9:42:ea:8e:69:35:
43:49:26:ee:83:a9:91:cb:48:55:43:ab:4a:97:3a:
f9:01:a3:d5:53:be:c3:b3:e9:e5:b3:b7:af:a7:a3:
01:84:df:3b:72:01:e6:f3:18:f5:4f:be:c6:50:b5:
91:4f:8d:38:2c:b6:53:d2:6b:8b:09:28:a3:75:55:
5b:ef:09:53:25:b6:a5:ea:a8:49:b9:2e:ce:6b:b3:
dd:e0:c1:e5:87:db:dc:d7:ed:8b:d9:34:11:5f:1f:
69:e0:1b:bd:dd:5a:bf:5a:f7:ce:bc:43:af:ff:fd:
1b:bb:54:0e:6e:98:21:f6:41:83:2d:27:bb:81:29:
eb:fd:7f:19:bf:2b:9d:ac:d7:9c:c0:c0:3b:63:b6:
76:4d:0a:67:6e:9c:ba:75:76:ea:d5:18:16:a4:71:
0b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:15:36:6B:32:19:42:87:37:AC:EA:5B:4A:12:A4:47:67:C9:3E:86
X509v3 Authority Key Identifier:
keyid:E4:39:57:DE:BA:81:6C:96:00:CE:0A:4D:07:FC:A7:D3:06:EF:EE:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5DlX3rqBbJYAzgpNB_yn0wbv7mE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/d8a024-6c06-4f98-a834-e63362098c70/1/5DlX3rqBbJYAzgpNB_yn0wbv7mE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/d8a024-6c06-4f98-a834-e63362098c70/1/5DlX3rqBbJYAzgpNB_yn0wbv7mE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:26:74:f2:7e:18:6d:fe:48:d3:2a:d4:a5:68:64:02:86:64:
98:13:65:7a:c4:6d:6d:ad:08:a2:7f:d7:f9:83:ca:80:e4:0c:
4e:68:c4:71:4e:91:6e:96:90:0c:72:84:2d:9b:61:1d:f7:ac:
d9:b6:b0:75:45:11:82:6c:39:47:a3:1e:7e:03:35:ce:0c:d8:
6a:2f:84:73:0f:6d:51:8d:77:37:ab:99:44:a8:07:f8:d6:98:
82:c8:5a:8a:30:39:49:b1:bc:da:a4:63:f8:9f:18:a0:04:4f:
51:2b:ed:47:26:a6:33:ba:d4:38:33:d7:b2:0d:f4:30:f5:b5:
d7:42:80:10:e8:4e:52:54:7a:ce:94:c8:14:34:40:17:ce:b1:
03:8f:29:dc:92:4a:5d:87:13:d9:bc:95:90:4b:41:e3:cc:9b:
2f:f4:89:70:bb:3a:dc:2e:e4:be:ee:0a:1e:4f:8d:86:46:62:
0e:e0:93:4b:41:85:2a:b1:ca:b9:7a:08:12:b6:e9:58:25:f8:
85:2f:6a:6b:1a:0c:41:a6:1a:b2:ae:10:a0:f2:eb:ea:5a:47:
b9:7a:3e:c1:87:c5:0e:17:c8:fc:38:13:56:90:96:88:0d:2f:
6c:c7:48:67:77:5b:4c:f5:cb:ca:ea:0a:1e:7d:f7:d9:6a:03:
34:52:b9:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:59 2026 by rpki-client