Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/9facae-fd90-4b4c-a2ec-9127e8105699/1/0x5KjNKJjF3m1mJfEMSy6F9GH3g.mft
File: 0x5KjNKJjF3m1mJfEMSy6F9GH3g.mft (raw, json)
Hash identifier: gxuyzyIstRMHboS7+eKrzzu9vBcjn0DolPdCuLFhQ9g=
Subject key identifier: E5:13:FD:10:5C:AF:26:BE:E4:7B:32:4D:73:0D:DC:16:A0:B0:A0:0E
Authority key identifier: D3:1E:4A:8C:D2:89:8C:5D:E6:D6:62:5F:10:C4:B2:E8:5F:46:1F:78
Certificate issuer: /CN=d31e4a8cd2898c5de6d6625f10c4b2e85f461f78
Certificate serial: 019D39E5DE3C9F345618F01B7237C612644E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0x5KjNKJjF3m1mJfEMSy6F9GH3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/9facae-fd90-4b4c-a2ec-9127e8105699/1/0x5KjNKJjF3m1mJfEMSy6F9GH3g.mft
Manifest number: 0AB6
Signing time: Sun 29 Mar 2026 14:00:58 +0000
Manifest this update: Sun 29 Mar 2026 14:00:58 +0000
Manifest next update: Mon 30 Mar 2026 14:00:58 +0000
Files and hashes: 1: 0x5KjNKJjF3m1mJfEMSy6F9GH3g.crl (hash: jkbZ8MU186QeG2e0kDYnuQlp29j0DYG46fKZrOMPEJk=)
2: 2TC861jK8VELUxYLqwLBwJEBDQA.roa (hash: oKo7gej4ajG4+SLdtnyEgBggOZ1BZWPfVe9QrL/7Aj0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/9facae-fd90-4b4c-a2ec-9127e8105699/1/0x5KjNKJjF3m1mJfEMSy6F9GH3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/9facae-fd90-4b4c-a2ec-9127e8105699/1/0x5KjNKJjF3m1mJfEMSy6F9GH3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/0x5KjNKJjF3m1mJfEMSy6F9GH3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:de:3c:9f:34:56:18:f0:1b:72:37:c6:12:64:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d31e4a8cd2898c5de6d6625f10c4b2e85f461f78
Validity
Not Before: Mar 29 14:00:58 2026 GMT
Not After : Mar 30 14:00:58 2026 GMT
Subject: CN=e513fd105caf26bee47b324d730ddc16a0b0a00e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:49:fd:d2:02:9c:ae:aa:9b:23:2d:70:1d:c0:
5d:54:8b:af:ae:cf:a0:9a:27:d5:9e:ae:12:34:a8:
c3:ad:b6:9c:8a:ec:76:62:1c:9c:64:a3:aa:ff:77:
7d:3a:a3:7a:19:25:2a:c4:73:f7:0e:39:8d:b7:e7:
ca:3b:56:c3:0f:30:5b:5e:e2:0f:f9:6d:e8:99:7b:
e0:37:f4:01:cc:bf:1e:46:3d:c8:0f:2b:86:78:16:
dc:b6:43:93:3c:4b:9b:c9:82:18:f2:ee:c1:b5:da:
50:b8:07:13:62:4d:06:16:e9:30:44:01:3a:90:9d:
d5:17:04:a7:dd:47:46:82:07:a8:77:b2:86:93:4f:
b4:e7:11:73:f8:30:5a:b8:57:c8:56:6e:c8:af:09:
9b:3d:16:c4:65:f7:88:7e:a9:2e:3a:d7:6a:5c:6e:
6f:79:39:8c:67:8d:41:66:be:3b:34:43:46:79:4d:
fc:8b:8a:de:e3:cd:79:0a:80:f5:34:10:f5:29:c3:
ad:32:ae:b5:26:43:8b:42:26:39:1f:73:9e:8a:cf:
b7:24:87:08:0e:94:7f:b9:13:2c:44:70:87:0c:e8:
68:53:e2:76:fc:b6:f6:df:d0:d9:ce:aa:d9:bc:92:
fb:dc:9b:79:ec:63:5e:49:a2:f8:e0:95:44:23:83:
01:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:13:FD:10:5C:AF:26:BE:E4:7B:32:4D:73:0D:DC:16:A0:B0:A0:0E
X509v3 Authority Key Identifier:
keyid:D3:1E:4A:8C:D2:89:8C:5D:E6:D6:62:5F:10:C4:B2:E8:5F:46:1F:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0x5KjNKJjF3m1mJfEMSy6F9GH3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/9facae-fd90-4b4c-a2ec-9127e8105699/1/0x5KjNKJjF3m1mJfEMSy6F9GH3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/9facae-fd90-4b4c-a2ec-9127e8105699/1/0x5KjNKJjF3m1mJfEMSy6F9GH3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:ee:e5:db:08:f3:b5:dd:0d:16:b1:2c:40:3e:43:27:9f:d3:
11:66:c5:dd:5d:03:47:18:4a:4d:9a:c6:2a:23:33:59:44:5f:
9a:ce:21:dc:dc:fd:6b:59:a3:cf:e6:5e:ef:c6:85:fc:ef:ca:
6f:1c:3b:a5:d8:61:00:d1:ff:59:12:45:42:2e:56:8c:dc:4e:
db:2b:ef:4c:07:2d:ac:07:71:b5:d3:a6:57:86:00:40:9d:b2:
e5:f3:a8:c0:c6:4b:f2:2f:95:b9:9d:25:f8:4e:a7:4b:35:40:
6a:0e:ae:ff:37:6b:dc:91:06:34:36:dc:e6:93:51:52:ad:0a:
63:9e:be:09:91:8d:82:b3:f2:21:a5:f7:b5:90:c5:7d:c9:f0:
37:cc:9c:77:aa:0c:27:01:0b:dd:7c:b0:ea:57:8c:83:b5:15:
45:5f:12:c5:a9:58:9d:33:d9:3c:4d:23:f8:6f:50:6a:02:50:
d9:9c:15:12:97:b3:88:d8:10:c8:d1:af:2c:fd:dd:c5:e9:5b:
7f:3c:26:3d:e1:7e:01:fc:df:e7:97:8c:9e:b0:de:74:f5:f6:
1c:5f:56:78:d8:50:45:15:8a:1d:3f:19:aa:42:6d:e8:f6:34:
2d:1a:95:6c:8d:73:12:20:1a:fa:53:3e:c4:12:bd:a5:ba:9a:
02:d2:ce:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:46:41 2026 by rpki-client