Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/fd8ef9-7833-4974-9257-65b4a69fbbce/1/0-5NbhwEoPWClbKpchCs1Hv32Wo.mft
File: 0-5NbhwEoPWClbKpchCs1Hv32Wo.mft (raw, json)
Hash identifier: riZMsHQu3bslLJEnKzbNZWl9WCmfzLJn1+aUgBHpJkI=
Subject key identifier: E3:1E:4B:4B:C7:0D:BB:2A:6C:06:21:93:62:09:69:0D:28:49:2D:23
Authority key identifier: D3:EE:4D:6E:1C:04:A0:F5:82:95:B2:A9:72:10:AC:D4:7B:F7:D9:6A
Certificate issuer: /CN=d3ee4d6e1c04a0f58295b2a97210acd47bf7d96a
Certificate serial: 019D37F734D32FDEB4CD5EEFA47060828DC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0-5NbhwEoPWClbKpchCs1Hv32Wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/fd8ef9-7833-4974-9257-65b4a69fbbce/1/0-5NbhwEoPWClbKpchCs1Hv32Wo.mft
Manifest number: 0158
Signing time: Sun 29 Mar 2026 05:00:40 +0000
Manifest this update: Sun 29 Mar 2026 05:00:40 +0000
Manifest next update: Mon 30 Mar 2026 05:00:40 +0000
Files and hashes: 1: 0-5NbhwEoPWClbKpchCs1Hv32Wo.crl (hash: ydp4z7cZ6i/mZabYxbDf5DiuF+8f80G4onTg+n5GsRE=)
2: _5oe6VqZsqBT0LMhmKV2LIl_uf8.roa (hash: /SkExJhWDQiBSVIh+Uw/CkRQN60+0HSnourFk+/DB2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/fd8ef9-7833-4974-9257-65b4a69fbbce/1/0-5NbhwEoPWClbKpchCs1Hv32Wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/fd8ef9-7833-4974-9257-65b4a69fbbce/1/0-5NbhwEoPWClbKpchCs1Hv32Wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0-5NbhwEoPWClbKpchCs1Hv32Wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:34:d3:2f:de:b4:cd:5e:ef:a4:70:60:82:8d:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3ee4d6e1c04a0f58295b2a97210acd47bf7d96a
Validity
Not Before: Mar 29 05:00:40 2026 GMT
Not After : Mar 30 05:00:40 2026 GMT
Subject: CN=e31e4b4bc70dbb2a6c0621936209690d28492d23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:30:87:25:c5:73:d2:56:67:86:c1:c0:ea:a9:
69:29:30:8a:1d:a9:5b:d0:a7:ea:dc:f7:0a:4c:7b:
2d:6a:2a:0b:69:f9:a5:4a:32:65:1d:05:84:8c:ae:
5d:3a:8b:3f:81:b7:eb:49:8f:bc:3c:5f:ea:5c:93:
42:3e:94:18:6c:28:a9:df:f3:2e:81:d5:10:cf:64:
95:0c:e3:1e:f5:34:8b:28:7c:30:36:c8:da:b1:19:
56:10:f0:f7:f4:2f:44:81:d6:ff:2f:a7:a0:7d:1f:
f2:20:ec:1b:30:6a:90:c7:5e:19:45:42:a0:30:ad:
07:f1:12:57:10:aa:54:92:22:41:4f:ca:55:da:fc:
82:9e:52:23:9e:a1:fa:b7:38:58:e4:d9:5a:9b:41:
26:c6:0a:9d:12:e2:2e:ce:5b:2b:fe:42:46:13:22:
a9:84:18:e0:f7:f6:bd:bd:1f:03:31:fd:56:6e:84:
bf:16:d3:fb:33:85:50:61:a0:4c:81:c2:14:38:e7:
fa:5d:46:d3:44:4f:b9:8a:2c:bf:31:dc:ad:26:d1:
3d:f6:62:d5:a6:e3:f3:14:37:ad:f6:03:2a:4e:c7:
23:ca:6f:9d:52:4a:43:1f:57:65:a2:3d:0d:2b:95:
2d:9a:76:2a:71:40:b6:e8:bc:1b:d5:ad:1a:2f:59:
0c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:1E:4B:4B:C7:0D:BB:2A:6C:06:21:93:62:09:69:0D:28:49:2D:23
X509v3 Authority Key Identifier:
keyid:D3:EE:4D:6E:1C:04:A0:F5:82:95:B2:A9:72:10:AC:D4:7B:F7:D9:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-5NbhwEoPWClbKpchCs1Hv32Wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/fd8ef9-7833-4974-9257-65b4a69fbbce/1/0-5NbhwEoPWClbKpchCs1Hv32Wo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/fd8ef9-7833-4974-9257-65b4a69fbbce/1/0-5NbhwEoPWClbKpchCs1Hv32Wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:c4:51:14:99:a2:b7:1f:ac:95:01:2e:af:d3:1d:1b:15:59:
fb:e6:c1:30:a3:99:73:ff:a3:2a:9d:d3:cc:96:52:f2:83:14:
1a:ba:ef:d6:15:56:80:7a:ab:c7:4e:05:a6:eb:86:0a:57:1d:
c9:63:be:cf:c8:3c:d8:35:ea:46:c2:06:29:95:31:c9:e6:27:
b8:b7:b9:b1:2e:ba:f0:d3:1f:6d:8c:a8:b5:2d:cf:50:65:35:
ea:31:93:10:ea:72:b6:2d:56:d2:ee:97:79:69:e5:7d:b5:0a:
f2:83:e2:46:61:5e:47:8b:59:b9:e7:50:da:5f:c7:14:a4:77:
4b:22:6e:6d:66:ab:53:bf:4a:1a:4e:05:88:21:1f:96:dc:15:
4b:39:b8:33:18:d9:53:86:b6:91:8c:f4:a8:05:28:17:f0:f5:
e1:67:2c:b9:41:42:b7:ef:23:2d:48:1c:ce:39:ce:a5:38:e8:
cc:41:ce:ea:1e:4e:7a:1d:fd:6d:c0:6a:37:af:fa:bc:37:76:
1a:1b:22:57:aa:da:ed:01:89:fd:e4:a9:39:0a:ee:84:59:b3:
57:5e:fb:68:66:c0:74:62:0a:6e:ed:4f:ec:42:9a:cd:e9:0b:
43:41:ef:47:59:18:13:08:ec:6f:93:87:b5:e0:8d:0f:36:87:
35:c2:b3:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:11 2026 by rpki-client