Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.mft
File: 5lAiAKbmP3Y5etuU39g0wRaAm58.mft (raw, json)
Hash identifier: KI0akpani19Tfzpfbw+VEddwSALGKwYv14hG7adwmWA=
Subject key identifier: BD:93:34:8B:F1:F0:42:98:A4:2B:07:8F:B6:88:35:53:63:FC:C7:AA
Authority key identifier: E6:50:22:00:A6:E6:3F:76:39:7A:DB:94:DF:D8:34:C1:16:80:9B:9F
Certificate issuer: /CN=e6502200a6e63f76397adb94dfd834c116809b9f
Certificate serial: 019D382E6EEAF1BC10B3DDAE795FF7F18272
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5lAiAKbmP3Y5etuU39g0wRaAm58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.mft
Manifest number: 0F1C
Signing time: Sun 29 Mar 2026 06:01:00 +0000
Manifest this update: Sun 29 Mar 2026 06:01:00 +0000
Manifest next update: Mon 30 Mar 2026 06:01:00 +0000
Files and hashes: 1: 5lAiAKbmP3Y5etuU39g0wRaAm58.crl (hash: +6E+60fGChwEHQp39DM1Fc6fGWHufN/D+5j27HtBSGc=)
2: VbpHqTm4InVPfeEhfG1houFen0s.roa (hash: mGh4WVGrOaH38U0K8XkAxbYr95lc2nJQTlFAMtTdwzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.mft
rsync://rpki.ripe.net/repository/DEFAULT/5lAiAKbmP3Y5etuU39g0wRaAm58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:6e:ea:f1:bc:10:b3:dd:ae:79:5f:f7:f1:82:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6502200a6e63f76397adb94dfd834c116809b9f
Validity
Not Before: Mar 29 06:01:00 2026 GMT
Not After : Mar 30 06:01:00 2026 GMT
Subject: CN=bd93348bf1f04298a42b078fb688355363fcc7aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:6e:fb:75:b4:f9:4d:5f:2e:70:f6:1b:9c:4b:
1f:52:6e:55:ba:7e:48:57:cd:e4:da:52:5e:ab:e2:
09:d6:44:3c:a2:cd:33:21:06:27:ec:30:8e:67:a9:
6d:fd:db:23:a4:2c:3f:61:83:f4:e1:0f:cd:f8:b8:
13:ca:cc:ac:5e:94:ee:b0:ff:33:90:27:b3:98:ba:
04:b5:19:ef:d6:82:c0:75:6f:2e:0d:83:f2:02:ba:
1b:f0:be:b5:39:5a:63:b4:47:5a:6d:6c:64:fe:47:
ef:5e:86:ac:f1:8c:63:c5:e9:81:4c:c7:bd:c9:2a:
5e:1f:e7:b4:c2:62:c7:bc:a9:d0:ce:7b:fd:89:ff:
ae:5d:c0:91:c2:67:24:67:45:17:15:2f:b7:17:67:
b9:59:c9:2b:d6:6a:af:10:fd:6b:3c:ca:48:59:ba:
6d:40:59:db:6a:b4:4b:a7:4d:b2:12:c2:b6:a1:ee:
41:f8:41:42:1b:41:ba:cc:be:b5:6e:f4:0e:62:6d:
89:36:32:3c:02:13:f2:ca:5b:71:ed:f5:73:d5:f7:
ba:ca:7c:92:4f:34:0e:d3:eb:b0:84:02:60:43:a1:
76:c3:c1:0a:1a:1e:fc:a2:f3:e3:eb:7c:a8:b4:f8:
b6:fd:ca:57:b9:fe:d0:9d:0a:a3:06:b2:07:34:b0:
67:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:93:34:8B:F1:F0:42:98:A4:2B:07:8F:B6:88:35:53:63:FC:C7:AA
X509v3 Authority Key Identifier:
keyid:E6:50:22:00:A6:E6:3F:76:39:7A:DB:94:DF:D8:34:C1:16:80:9B:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5lAiAKbmP3Y5etuU39g0wRaAm58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:9f:a8:7a:ae:59:34:26:2b:2d:b3:65:1c:11:7d:87:18:b8:
d4:34:63:93:13:fd:12:8e:29:41:8b:1d:34:02:a0:ea:9c:09:
03:32:21:db:08:3d:2b:3a:57:52:db:6e:82:c3:1b:4b:bd:ca:
c4:de:06:95:e2:82:85:6b:d9:20:70:c3:ab:42:61:ec:ee:35:
5c:b4:65:0b:0e:ae:62:ac:c8:e2:0f:e2:4d:8b:ef:24:ed:64:
81:b8:38:d4:49:a3:25:5a:60:c6:1d:b7:27:c3:ad:89:28:61:
17:15:0a:22:6c:c7:f7:8e:49:fd:0e:fd:e8:b3:2a:5a:db:27:
6d:15:bf:3e:21:8e:98:ab:e4:a7:f4:fa:c7:8f:97:fa:61:fa:
9f:c4:8e:6b:40:18:bb:f3:85:7d:c6:22:46:d8:ec:b9:a1:f9:
a1:3a:bc:13:1b:30:5c:dd:da:5e:8b:51:0a:08:44:8e:1f:70:
a0:05:ff:71:7a:5b:1e:a6:f9:9d:ee:4c:95:44:b5:fb:c7:5f:
aa:22:f0:fd:43:23:f1:1d:a8:64:be:4e:0d:55:57:2c:ae:2d:
d4:54:3d:4f:e0:55:c0:08:b1:7e:33:27:99:84:1e:fe:e2:29:
86:f4:fd:22:2a:e0:83:c6:cd:d3:27:63:8b:5f:f1:9f:b5:4f:
41:e7:6a:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:02:00 2026 by rpki-client