Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.mft
File: p5u6KAWpiJVOT-xCVwUw8W-ecJM.mft (raw, json)
Hash identifier: PXzbvZwUFJ+O786NuchbtozpuO3uHJw/bucU1Hs4RSo=
Subject key identifier: F0:FC:1E:6D:B0:67:E2:E5:04:EC:A6:9A:A8:66:CD:81:3E:BF:9E:B5
Authority key identifier: A7:9B:BA:28:05:A9:88:95:4E:4F:EC:42:57:05:30:F1:6F:9E:70:93
Certificate issuer: /CN=a79bba2805a988954e4fec42570530f16f9e7093
Certificate serial: 019CB400FE6A4D42A67D89F83976998AEE1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p5u6KAWpiJVOT-xCVwUw8W-ecJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.mft
Manifest number: 1865
Signing time: Tue 03 Mar 2026 14:01:29 +0000
Manifest this update: Tue 03 Mar 2026 14:01:29 +0000
Manifest next update: Wed 04 Mar 2026 14:01:29 +0000
Files and hashes: 1: 4L_3KrprYTwmc6F0VK5YpQh7-ng.roa (hash: uekFvxE8fCG4iinAEMabm31AvzlJiPb5Eowm61DVMsU=)
2: cSElFw2-npFTxsWdmh_TS_DX1JM.roa (hash: uQXzfb9jOFxKjYKBJjLHpQzon0I+K9i1XFfrYpIMvJY=)
3: p5u6KAWpiJVOT-xCVwUw8W-ecJM.crl (hash: h4Mpei9/PNRZikFRU967MWSWlESnX1h1kJfcRr2AISk=)
4: yU3X6K3B4JZT9bvq8QhnbjxPF2c.roa (hash: 2A76nDGpl64/49OxgRrM5/iYg+gEwhn7gAXzWZ5+Pfc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/p5u6KAWpiJVOT-xCVwUw8W-ecJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Mar 2026 14:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b4:00:fe:6a:4d:42:a6:7d:89:f8:39:76:99:8a:ee:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a79bba2805a988954e4fec42570530f16f9e7093
Validity
Not Before: Mar 3 14:01:29 2026 GMT
Not After : Mar 4 14:01:29 2026 GMT
Subject: CN=f0fc1e6db067e2e504eca69aa866cd813ebf9eb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:6c:39:95:41:34:d2:a5:59:4a:8b:b6:28:2f:
ff:6d:9e:b6:d2:8f:bb:9c:bb:5a:98:9d:54:85:29:
d0:30:78:d8:30:17:39:46:4b:5e:7c:ea:8b:99:9c:
a0:e4:4d:3e:50:0f:b6:0a:97:2d:22:45:0a:9a:b1:
e5:7f:05:6c:34:28:b2:c8:0e:f8:5e:5c:38:13:c7:
c2:d3:eb:78:e5:e2:b5:ca:34:22:87:0b:9c:9e:a6:
9f:da:0a:69:78:96:d7:c8:dc:6f:75:ed:9b:2c:34:
7e:90:05:f9:2f:60:69:1e:25:7c:85:cc:0a:63:56:
5e:8e:04:c1:6f:d6:ae:fe:ec:76:85:e1:ff:34:3d:
47:6a:09:20:2b:62:93:a0:51:03:27:15:fb:ea:87:
46:66:a5:03:97:29:94:a7:c3:f7:35:ba:19:8e:88:
c7:1e:73:51:ef:51:b9:62:54:d8:e0:d0:ef:9b:d5:
44:92:0f:7a:e7:20:95:73:cd:12:3b:55:ec:0f:0c:
b8:59:00:99:c4:51:3b:15:75:44:00:2d:2a:63:7d:
64:15:34:d2:2c:2b:d9:f3:f5:9b:b6:9c:9c:a9:08:
06:dd:7a:fa:91:8b:43:a0:ec:19:d4:80:19:ec:14:
93:cc:e0:95:de:6a:fe:58:1f:14:ce:2e:f5:7b:2b:
94:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:FC:1E:6D:B0:67:E2:E5:04:EC:A6:9A:A8:66:CD:81:3E:BF:9E:B5
X509v3 Authority Key Identifier:
keyid:A7:9B:BA:28:05:A9:88:95:4E:4F:EC:42:57:05:30:F1:6F:9E:70:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p5u6KAWpiJVOT-xCVwUw8W-ecJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:a9:0a:2d:cd:cf:84:79:59:cb:8c:14:b1:d6:67:55:e9:a5:
8b:c8:07:06:8f:fb:b1:a5:ac:ed:97:97:19:29:f1:f7:63:d9:
12:01:c1:7f:8b:31:9c:48:15:4a:a0:54:71:6b:fd:5c:4b:f3:
45:96:6f:6a:00:f9:b3:65:bb:f4:fb:fc:d6:95:f4:c3:3f:57:
61:60:0c:54:29:8e:9b:33:79:05:1e:c5:0f:6d:ba:5c:e6:6f:
b0:05:b1:60:ce:93:97:99:74:bc:3f:15:24:71:5e:a7:b9:27:
51:b3:90:ee:f4:f3:89:8c:a0:51:b8:36:9a:67:c5:1a:80:63:
31:47:20:93:e7:f3:6d:23:3c:94:a4:18:b4:d0:c3:f2:7d:2a:
33:90:97:eb:ae:c7:79:f7:38:ad:45:74:d8:9c:5b:4c:a9:ec:
97:68:30:63:92:c6:85:c8:7b:d3:4b:68:8d:f0:7d:5f:f7:b3:
33:d4:4f:74:1b:3a:2a:a1:7c:a0:6b:31:75:c9:c8:1d:d8:67:
81:15:77:1b:7d:3f:3f:40:d9:d1:d3:11:20:ed:b5:cc:1f:13:
5b:a0:f5:1d:e8:e7:d4:73:ec:3f:13:e1:53:31:3c:c5:bd:aa:
cc:40:19:bf:62:47:c8:be:cf:98:45:82:53:39:bc:18:70:f0:
6e:e8:c9:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 16:55:18 2026 by rpki-client