Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/e5a629-8f68-432e-9e5a-c419e7129928/1/51hSRFn5E1C_OnC93qArt_GY9ic.mft
File: 51hSRFn5E1C_OnC93qArt_GY9ic.mft (raw, json)
Hash identifier: nP3KBOe+GP8JhnFZV5nWXQykYMgCgRiaGJ/gP9lMUuI=
Subject key identifier: A3:36:2F:83:8B:AB:1C:06:42:5C:2C:FE:88:37:C6:D6:B7:6B:04:CA
Authority key identifier: E7:58:52:44:59:F9:13:50:BF:3A:70:BD:DE:A0:2B:B7:F1:98:F6:27
Certificate issuer: /CN=e758524459f91350bf3a70bddea02bb7f198f627
Certificate serial: 019D37C06CCA3DCF723702224FAFA85E3168
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51hSRFn5E1C_OnC93qArt_GY9ic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/e5a629-8f68-432e-9e5a-c419e7129928/1/51hSRFn5E1C_OnC93qArt_GY9ic.mft
Manifest number: 0BBB
Signing time: Sun 29 Mar 2026 04:00:50 +0000
Manifest this update: Sun 29 Mar 2026 04:00:50 +0000
Manifest next update: Mon 30 Mar 2026 04:00:50 +0000
Files and hashes: 1: 51hSRFn5E1C_OnC93qArt_GY9ic.crl (hash: ElrVvORKDENi4E495Z4BqsDz99tZAqzchflBRgTwlbM=)
2: hIJ7BxSqfQNayGkNVH4Xy86Dhbc.roa (hash: fAcJlzHm8GX5dH8gtKkRjvytkl6PKP9fjOi2EMtY8+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/e5a629-8f68-432e-9e5a-c419e7129928/1/51hSRFn5E1C_OnC93qArt_GY9ic.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/e5a629-8f68-432e-9e5a-c419e7129928/1/51hSRFn5E1C_OnC93qArt_GY9ic.mft
rsync://rpki.ripe.net/repository/DEFAULT/51hSRFn5E1C_OnC93qArt_GY9ic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:6c:ca:3d:cf:72:37:02:22:4f:af:a8:5e:31:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e758524459f91350bf3a70bddea02bb7f198f627
Validity
Not Before: Mar 29 04:00:50 2026 GMT
Not After : Mar 30 04:00:50 2026 GMT
Subject: CN=a3362f838bab1c06425c2cfe8837c6d6b76b04ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:42:25:22:a1:13:39:6d:34:de:b8:a1:15:ab:
f7:98:c6:e2:cf:b8:da:18:84:6d:43:d3:dd:dd:82:
a0:90:a0:27:c7:07:b4:62:05:82:0f:e9:21:e1:98:
a1:ee:da:43:12:12:4b:a5:9b:51:97:b0:6d:77:fe:
e2:cb:2f:8e:f2:ed:a1:88:45:f2:ed:c5:1f:4e:f4:
a2:42:c5:7e:b3:f0:ce:08:10:58:65:48:77:30:89:
b4:81:73:0b:c5:61:7f:c6:b9:60:68:58:66:ca:9e:
0e:37:7f:47:d9:37:e1:c9:40:92:8e:9f:4e:60:1d:
56:13:fc:96:7b:ee:07:ef:f0:af:62:d4:8b:88:59:
51:b2:23:af:4f:ed:4c:d5:06:c8:81:e7:a7:a5:1a:
1d:aa:92:94:6b:b1:da:38:e2:3e:d7:33:09:a4:37:
a4:e6:35:58:09:3d:6b:54:cb:bc:ff:26:ac:0a:73:
8a:f6:91:02:f0:4f:10:6b:7c:1a:87:2c:f8:9d:24:
63:34:30:6a:ec:f4:1b:14:96:29:cc:b3:fa:e9:6e:
1f:32:d7:24:03:b2:0e:d9:8c:aa:ff:9f:90:7c:fa:
fa:45:83:86:a0:d2:03:09:37:f7:18:fb:a4:bf:4c:
09:1e:dc:8e:32:e6:6f:bf:61:8c:16:ec:bb:5f:31:
ad:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:36:2F:83:8B:AB:1C:06:42:5C:2C:FE:88:37:C6:D6:B7:6B:04:CA
X509v3 Authority Key Identifier:
keyid:E7:58:52:44:59:F9:13:50:BF:3A:70:BD:DE:A0:2B:B7:F1:98:F6:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51hSRFn5E1C_OnC93qArt_GY9ic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e5a629-8f68-432e-9e5a-c419e7129928/1/51hSRFn5E1C_OnC93qArt_GY9ic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e5a629-8f68-432e-9e5a-c419e7129928/1/51hSRFn5E1C_OnC93qArt_GY9ic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:42:62:f4:a2:1a:5e:87:3c:6f:db:80:e7:05:69:d2:a1:9b:
09:11:2b:a9:c0:62:9c:48:92:96:c1:06:c1:ef:57:76:e4:7f:
5b:8d:7b:13:3a:d3:25:1f:d4:d9:15:9f:3e:a3:a5:73:63:36:
24:05:bb:ba:3b:23:0d:bc:52:4d:71:a8:6a:29:c1:c8:a4:4d:
22:65:d8:8e:1d:98:4f:6d:03:0a:e3:3a:47:64:9a:52:5f:1b:
19:35:8d:d0:3c:01:cb:4d:45:1f:de:8c:95:bb:59:25:39:50:
4d:ce:8e:91:65:e9:43:64:be:3f:cf:ea:d5:35:9a:99:5b:bc:
e7:cc:f8:7b:d4:ae:dc:fa:e5:08:1c:ef:81:52:25:21:01:05:
40:20:3f:10:56:c4:e2:f8:64:07:f8:7c:c4:5f:d3:54:ff:21:
fb:a4:92:54:9f:ee:79:15:b8:cc:e4:3d:72:02:4e:88:64:44:
20:6e:f8:f9:a1:c2:1d:52:8e:36:6b:f7:7c:3c:00:3f:29:2e:
9f:40:89:60:82:69:9e:6d:a5:8a:1a:34:66:80:93:6c:e2:35:
cf:ce:73:6e:20:25:2e:0e:91:37:1c:5c:4c:4e:d6:85:29:ff:
0d:a4:f9:63:d9:87:24:50:6b:64:a7:e1:57:b7:10:53:e1:16:
1b:7d:97:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:00 2026 by rpki-client