Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/334c56-2e69-4da2-b01d-030802641c67/1/5D-RsCFSiCv5YF12vqQhqgvU5ig.mft
File: 5D-RsCFSiCv5YF12vqQhqgvU5ig.mft (raw, json)
Hash identifier: agWA9BlvblKRYcdN5GzfuY2LtKOt0KjMfmcK1uBja94=
Subject key identifier: D2:CB:A0:97:D5:8E:86:13:C2:35:F0:13:52:A6:8E:19:98:44:F9:2D
Authority key identifier: E4:3F:91:B0:21:52:88:2B:F9:60:5D:76:BE:A4:21:AA:0B:D4:E6:28
Certificate issuer: /CN=e43f91b02152882bf9605d76bea421aa0bd4e628
Certificate serial: 019D38D343EAEC3D1B0C4C69BAEEF787CB5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5D-RsCFSiCv5YF12vqQhqgvU5ig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/334c56-2e69-4da2-b01d-030802641c67/1/5D-RsCFSiCv5YF12vqQhqgvU5ig.mft
Manifest number: 0E7E
Signing time: Sun 29 Mar 2026 09:01:02 +0000
Manifest this update: Sun 29 Mar 2026 09:01:02 +0000
Manifest next update: Mon 30 Mar 2026 09:01:02 +0000
Files and hashes: 1: 5D-RsCFSiCv5YF12vqQhqgvU5ig.crl (hash: MVseW5TaBlWxFmZPRbtIZPzJLSGjEqcHDL0gA+DICbQ=)
2: mFHqDso79bnSGrudnucQz5R41Oo.roa (hash: xaP9Kn1Lx08lI3zRt9f0iOZYpubw0vPg4T0MZuTFXEQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/334c56-2e69-4da2-b01d-030802641c67/1/5D-RsCFSiCv5YF12vqQhqgvU5ig.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/334c56-2e69-4da2-b01d-030802641c67/1/5D-RsCFSiCv5YF12vqQhqgvU5ig.mft
rsync://rpki.ripe.net/repository/DEFAULT/5D-RsCFSiCv5YF12vqQhqgvU5ig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:43:ea:ec:3d:1b:0c:4c:69:ba:ee:f7:87:cb:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e43f91b02152882bf9605d76bea421aa0bd4e628
Validity
Not Before: Mar 29 09:01:02 2026 GMT
Not After : Mar 30 09:01:02 2026 GMT
Subject: CN=d2cba097d58e8613c235f01352a68e199844f92d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ae:f7:41:0a:d7:fb:7d:1b:26:c5:96:ea:8b:
fd:6c:d4:bb:e2:de:16:97:ed:ec:1b:b2:41:13:55:
f8:65:d1:2b:84:5c:a4:74:90:47:e5:75:ae:3a:e8:
94:b7:d9:6b:05:fa:66:0d:5d:cd:a7:7f:05:8b:53:
ef:54:23:c8:33:41:ec:b8:c2:0d:69:af:5a:57:87:
f8:71:5c:56:62:c6:58:11:6f:b2:08:87:71:08:21:
2b:3a:e7:c2:de:12:af:f6:10:81:df:0e:9f:c4:94:
bc:f9:03:6c:e9:8d:78:6e:17:64:ac:16:64:30:7a:
43:ae:26:22:cf:87:bd:0e:06:9a:74:6a:9a:f4:b8:
46:b0:10:e9:3b:c5:2c:05:78:4d:ff:94:b5:d6:4d:
1c:8d:24:62:d9:94:78:e8:8e:91:ca:c4:cc:97:25:
ed:4f:59:1e:32:93:b5:43:2c:a6:24:32:87:b1:5b:
94:bf:43:9f:d4:aa:1c:d2:1f:ea:bb:7f:dd:d9:04:
03:72:8f:63:08:b0:15:d0:16:e5:57:ee:64:e0:f3:
00:35:49:8b:d5:6f:d4:37:78:87:53:3e:4a:fb:27:
c5:b7:41:25:fe:ac:cf:94:84:1b:97:f0:ba:16:82:
b5:41:3a:f5:20:00:cb:58:0c:b8:d1:1e:f1:0a:1b:
4a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:CB:A0:97:D5:8E:86:13:C2:35:F0:13:52:A6:8E:19:98:44:F9:2D
X509v3 Authority Key Identifier:
keyid:E4:3F:91:B0:21:52:88:2B:F9:60:5D:76:BE:A4:21:AA:0B:D4:E6:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5D-RsCFSiCv5YF12vqQhqgvU5ig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/334c56-2e69-4da2-b01d-030802641c67/1/5D-RsCFSiCv5YF12vqQhqgvU5ig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/334c56-2e69-4da2-b01d-030802641c67/1/5D-RsCFSiCv5YF12vqQhqgvU5ig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:b6:f0:65:fd:fd:4f:db:9c:39:a3:fb:3e:a4:1d:4d:95:ed:
55:38:fc:2b:30:cf:da:c6:e4:34:cc:8b:17:c9:7d:20:6c:af:
8e:0f:cf:db:81:ac:9c:5e:54:8e:89:4f:be:fc:4c:a3:02:91:
10:6a:03:41:e3:77:1a:88:09:c8:b8:66:3a:7b:72:92:f5:5c:
20:60:7d:66:66:d4:10:36:16:5e:7a:38:2e:b0:58:d6:d1:2b:
6e:be:53:e4:42:96:1b:d2:59:1a:68:4b:ff:38:39:db:5d:80:
b4:3a:21:21:af:e2:8d:14:0f:ac:cc:b2:b3:a9:f2:01:26:b6:
ed:85:6d:4c:30:29:2a:1a:90:9c:ba:fa:72:2d:c1:80:60:5f:
e3:d1:dc:26:bd:f0:ae:b8:e0:f6:3d:96:86:1f:7b:b0:cf:e1:
56:c4:97:ca:4c:89:bd:b0:3c:fc:37:42:af:df:d0:b9:ef:e8:
df:4a:27:8f:bb:a7:ed:c7:5c:70:34:ba:d2:05:ce:df:a1:0b:
23:a6:de:4c:e3:fc:a3:7b:f7:d8:11:ad:11:d0:0f:e3:5e:91:
f1:f7:2a:b2:69:2e:fb:1e:11:cb:b5:70:e0:ef:91:b0:83:28:
60:74:97:a7:a8:22:00:da:a5:ce:03:96:ca:ab:63:0c:ea:11:
de:fb:88:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:35 2026 by rpki-client