Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c9/fd8ef9-7833-4974-9257-65b4a69fbbce/1/0-5NbhwEoPWClbKpchCs1Hv32Wo.mft
File: 0-5NbhwEoPWClbKpchCs1Hv32Wo.mft (raw, json)
Hash identifier: 9b6W4DpZjJrx2+4C03Ouo0mD2FRRd0OaD6na+EYBAHo=
Subject key identifier: 45:77:14:94:78:B5:7F:F1:11:DC:1F:D5:00:48:7C:0C:85:50:53:56
Authority key identifier: D3:EE:4D:6E:1C:04:A0:F5:82:95:B2:A9:72:10:AC:D4:7B:F7:D9:6A
Certificate issuer: /CN=d3ee4d6e1c04a0f58295b2a97210acd47bf7d96a
Certificate serial: 01A02733909D24B5C9A2DEDF8BFB8ADF3105
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0-5NbhwEoPWClbKpchCs1Hv32Wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/fd8ef9-7833-4974-9257-65b4a69fbbce/1/0-5NbhwEoPWClbKpchCs1Hv32Wo.mft
Manifest number: 02DD
Signing time: Sat 22 Aug 2026 02:01:25 +0000
Manifest this update: Sat 22 Aug 2026 02:01:25 +0000
Manifest next update: Sun 23 Aug 2026 02:01:25 +0000
Files and hashes: 1: 0-5NbhwEoPWClbKpchCs1Hv32Wo.crl (hash: 9OV6qN6FO2CT2ed4yc5O/CpVg1H2FMCOErmQegUc7A4=)
2: _5oe6VqZsqBT0LMhmKV2LIl_uf8.roa (hash: /SkExJhWDQiBSVIh+Uw/CkRQN60+0HSnourFk+/DB2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/fd8ef9-7833-4974-9257-65b4a69fbbce/1/0-5NbhwEoPWClbKpchCs1Hv32Wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/fd8ef9-7833-4974-9257-65b4a69fbbce/1/0-5NbhwEoPWClbKpchCs1Hv32Wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0-5NbhwEoPWClbKpchCs1Hv32Wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Aug 2026 01:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:27:33:90:9d:24:b5:c9:a2:de:df:8b:fb:8a:df:31:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3ee4d6e1c04a0f58295b2a97210acd47bf7d96a
Validity
Not Before: Aug 22 02:01:25 2026 GMT
Not After : Aug 23 02:01:25 2026 GMT
Subject: CN=4577149478b57ff111dc1fd500487c0c85505356
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e4:c2:f6:56:9f:87:da:e4:30:49:fc:25:be:
70:5f:4c:97:8c:0a:9c:01:f7:39:b8:3f:81:ae:27:
57:3b:ff:94:84:47:a0:b7:bc:5f:ed:59:01:ed:23:
91:9c:17:ed:74:48:10:f8:3f:b4:27:b1:84:33:44:
bb:68:42:9a:eb:c9:ac:f1:cc:db:37:e5:7a:8b:37:
a8:f4:ef:31:4b:07:6b:58:5f:b7:12:f4:30:18:b9:
98:22:5a:36:c4:a1:9e:a5:8c:61:cb:58:28:2e:18:
c1:8a:d8:86:9a:73:12:a8:a6:d8:19:ae:bb:62:80:
eb:91:de:7d:52:4b:47:cb:0b:c6:ac:57:83:6f:eb:
2c:71:64:74:ec:cf:09:e7:d6:62:e5:1b:5c:de:7c:
ab:6d:c2:f5:9e:36:53:19:c3:f1:2f:fc:88:fc:46:
79:b6:2b:bb:1a:5c:c2:35:df:38:bb:99:79:02:c3:
d8:6f:33:60:e2:9e:4e:9f:8e:0b:37:70:47:b9:53:
df:54:47:7c:ad:f7:65:e6:57:e4:35:45:09:ff:a7:
d0:b2:d3:cc:9c:5b:7e:44:29:4a:a7:bc:5d:6c:ae:
b2:c3:e8:69:8f:81:17:d6:21:5a:83:7f:1c:57:3e:
a4:fc:8f:24:64:aa:43:b2:d1:9f:67:71:72:fc:9d:
ee:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:77:14:94:78:B5:7F:F1:11:DC:1F:D5:00:48:7C:0C:85:50:53:56
X509v3 Authority Key Identifier:
keyid:D3:EE:4D:6E:1C:04:A0:F5:82:95:B2:A9:72:10:AC:D4:7B:F7:D9:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-5NbhwEoPWClbKpchCs1Hv32Wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/fd8ef9-7833-4974-9257-65b4a69fbbce/1/0-5NbhwEoPWClbKpchCs1Hv32Wo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/fd8ef9-7833-4974-9257-65b4a69fbbce/1/0-5NbhwEoPWClbKpchCs1Hv32Wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:c9:8d:cc:0f:62:67:bc:9e:32:a0:05:ce:cc:ea:8b:15:6b:
c9:f2:60:ad:98:ad:90:33:f9:0e:fb:72:f9:3b:c0:19:f5:c0:
63:56:11:19:60:ba:1b:31:0b:c1:cb:39:7e:57:88:67:0c:ec:
49:6b:bc:78:c0:76:9d:9d:57:8e:b6:8b:7e:65:7b:5e:4e:0c:
27:24:8c:a3:16:4e:d0:ac:50:1f:02:c4:8b:07:ef:91:a3:81:
78:f7:54:50:3b:de:7b:82:74:cc:4e:8f:bb:b5:96:ea:24:96:
9f:66:0f:92:9e:7e:e2:6c:34:26:88:9e:17:b4:38:23:a9:54:
97:65:6f:5e:b1:85:1a:f1:c1:20:b9:b3:6e:72:b6:3a:0b:c3:
88:61:a1:9f:78:71:25:d3:54:a9:8e:ca:23:6a:82:02:09:77:
29:f2:18:ce:a8:2e:93:ce:b1:f8:29:fe:f3:e6:f9:dc:f7:75:
18:99:a2:06:38:64:f8:60:6a:0a:b6:35:59:92:fe:54:7a:be:
cb:a9:a6:19:d8:29:fc:a9:c5:0f:a2:b9:fc:3b:0f:02:2f:25:
d3:fb:7d:2a:ac:bf:b6:a1:9e:55:17:15:99:9c:48:d0:df:ce:
88:e3:68:9d:dd:a1:05:32:5b:9c:ee:65:08:d0:83:f5:f6:f3:
31:d0:03:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 07:02:45 2026 by rpki-client