Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/0a567c-af6b-461a-a7a0-dcfbc28f4731/1/5KVOQra3iNjki0iEQt2RiySFrDU.mft
File: 5KVOQra3iNjki0iEQt2RiySFrDU.mft (raw, json)
Hash identifier: vOn00gj9svjzLrhcJZ3szO3x3IFEKaFKCwneaptPcq8=
Subject key identifier: DD:70:07:4E:56:07:1E:94:18:54:19:9B:00:77:AA:8C:DE:78:7A:44
Authority key identifier: E4:A5:4E:42:B6:B7:88:D8:E4:8B:48:84:42:DD:91:8B:24:85:AC:35
Certificate issuer: /CN=e4a54e42b6b788d8e48b488442dd918b2485ac35
Certificate serial: 019CB95E19F92FEEFD50AF7E2FCB04F53CB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5KVOQra3iNjki0iEQt2RiySFrDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/0a567c-af6b-461a-a7a0-dcfbc28f4731/1/5KVOQra3iNjki0iEQt2RiySFrDU.mft
Manifest number: 0294
Signing time: Wed 04 Mar 2026 15:01:17 +0000
Manifest this update: Wed 04 Mar 2026 15:01:17 +0000
Manifest next update: Thu 05 Mar 2026 15:01:17 +0000
Files and hashes: 1: 5KVOQra3iNjki0iEQt2RiySFrDU.crl (hash: aSku3lusoN2SyBgQWBQZk9OaNf6UfWhmrwGOUaaes2U=)
2: v2rVsh0dCI0ULQlOGc8HMoLg5uo.roa (hash: 6uedt+3d7jJXVdMAyo0QQWrH7s27rp7WpYCrWtYVZzI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/0a567c-af6b-461a-a7a0-dcfbc28f4731/1/5KVOQra3iNjki0iEQt2RiySFrDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/0a567c-af6b-461a-a7a0-dcfbc28f4731/1/5KVOQra3iNjki0iEQt2RiySFrDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/5KVOQra3iNjki0iEQt2RiySFrDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Mar 2026 14:20:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b9:5e:19:f9:2f:ee:fd:50:af:7e:2f:cb:04:f5:3c:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4a54e42b6b788d8e48b488442dd918b2485ac35
Validity
Not Before: Mar 4 15:01:17 2026 GMT
Not After : Mar 5 15:01:17 2026 GMT
Subject: CN=dd70074e56071e941854199b0077aa8cde787a44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:92:0b:22:ac:16:19:4e:82:90:f4:43:38:23:
02:55:2b:d2:94:1f:53:f4:cc:54:c9:19:0f:62:f1:
c8:ba:8f:96:3f:0a:15:e7:51:b1:5e:0a:7e:4f:19:
7d:10:84:b8:17:5e:56:67:c4:e6:72:d0:d9:61:35:
cd:29:13:00:3c:34:b7:0f:dc:8d:34:4c:c4:d6:a5:
d6:67:dd:e4:e2:9d:e5:0d:de:51:f7:13:2c:31:5a:
df:9b:f0:2b:d3:95:f6:2d:e4:d2:ed:b0:d1:c0:3c:
73:4f:67:a7:c6:e8:e7:b0:6f:fc:46:45:2d:4d:62:
8c:16:05:99:79:0a:5a:cf:27:a4:a3:df:07:1c:64:
ac:d7:a7:7e:1f:21:cf:23:78:dd:d1:03:5b:73:78:
93:a9:cd:f5:be:b5:78:82:e7:97:0b:10:6c:7b:c6:
28:66:ae:12:41:dd:ae:b6:77:df:d1:c4:ad:24:74:
52:63:1a:48:cf:4a:84:27:42:aa:39:ad:75:ff:13:
f0:f9:a8:71:f7:de:b5:4c:59:6e:71:51:c7:67:c1:
c0:75:27:16:7a:9d:5b:6f:a3:28:fa:f4:a2:8e:4c:
7b:fa:93:09:2c:ae:20:e1:50:33:88:5c:da:d2:40:
e6:25:85:01:8f:92:68:88:11:61:96:f9:20:76:03:
af:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:70:07:4E:56:07:1E:94:18:54:19:9B:00:77:AA:8C:DE:78:7A:44
X509v3 Authority Key Identifier:
keyid:E4:A5:4E:42:B6:B7:88:D8:E4:8B:48:84:42:DD:91:8B:24:85:AC:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5KVOQra3iNjki0iEQt2RiySFrDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0a567c-af6b-461a-a7a0-dcfbc28f4731/1/5KVOQra3iNjki0iEQt2RiySFrDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0a567c-af6b-461a-a7a0-dcfbc28f4731/1/5KVOQra3iNjki0iEQt2RiySFrDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:6c:dc:5b:c3:69:1f:f5:08:4b:c3:a3:1c:f8:b8:ac:df:7a:
d8:3b:de:8c:ba:86:3d:35:5e:db:4f:93:46:45:2e:cd:29:d5:
40:9a:3d:fa:01:13:a5:d4:2b:6f:b0:cd:ec:5d:38:26:19:62:
01:f0:10:2e:35:01:1d:7b:af:0e:3e:eb:c5:30:31:1e:cc:e0:
15:11:b7:ee:27:8c:db:90:ad:72:49:2b:bb:21:98:32:2a:ea:
1e:73:a2:be:08:23:ed:12:a0:8a:f7:8f:cf:77:7c:8a:19:95:
59:0f:ed:f4:fc:e4:13:e2:16:f0:be:7a:44:2b:5e:61:7d:ef:
d4:d5:2a:9b:99:8b:e8:c0:ee:92:a3:85:a7:70:30:03:13:8f:
82:e8:bf:27:b6:e8:e2:db:59:c3:01:47:60:51:98:bd:67:a1:
54:46:42:2e:f3:c3:3c:d1:bf:4e:18:ed:cd:04:b5:75:1a:2d:
ae:b0:5c:e5:36:ac:8f:e0:6b:89:34:a6:c6:c3:0d:c3:3c:ce:
06:9e:a0:55:2f:d4:ce:39:5e:4f:85:65:78:35:5b:d2:cf:27:
1c:3e:31:3c:b3:5b:44:9a:bc:6c:05:5d:a3:94:3c:9b:6f:7e:
d9:92:25:02:d9:5f:a3:25:95:6a:54:b4:d5:29:f4:92:39:cb:
17:71:b1:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 20:43:05 2026 by rpki-client