Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/ddf1e1-f07e-4bad-84a8-fe27359fd7ea/1/5F0K3ClN02bfatqIATTb0OaIzPc.mft
File: 5F0K3ClN02bfatqIATTb0OaIzPc.mft (raw, json)
Hash identifier: Q2hg9/BUVwgLjw8ZcpbgsCmRbP8CX2OMzSJgIAA44pc=
Subject key identifier: 10:38:B4:2F:47:73:26:FE:41:F2:56:8D:98:D6:FE:0A:29:03:81:6C
Authority key identifier: E4:5D:0A:DC:29:4D:D3:66:DF:6A:DA:88:01:34:DB:D0:E6:88:CC:F7
Certificate issuer: /CN=e45d0adc294dd366df6ada880134dbd0e688ccf7
Certificate serial: 019D382E0D5FE3E79248FBB6A1F54BEF2078
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5F0K3ClN02bfatqIATTb0OaIzPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/ddf1e1-f07e-4bad-84a8-fe27359fd7ea/1/5F0K3ClN02bfatqIATTb0OaIzPc.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 06:00:35 +0000
Manifest this update: Sun 29 Mar 2026 06:00:35 +0000
Manifest next update: Mon 30 Mar 2026 06:00:35 +0000
Files and hashes: 1: 5F0K3ClN02bfatqIATTb0OaIzPc.crl (hash: CZou+jHZfc668goDOTguE4HvZpjgQK4sN+tyBaTKfVE=)
2: eVHX86Z5BUrMshf-zyfKQYxN0ao.roa (hash: 52NfErShygwUz/Jha+lSZaO5oAHArVutPPK1QEHMLQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/ddf1e1-f07e-4bad-84a8-fe27359fd7ea/1/5F0K3ClN02bfatqIATTb0OaIzPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/ddf1e1-f07e-4bad-84a8-fe27359fd7ea/1/5F0K3ClN02bfatqIATTb0OaIzPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/5F0K3ClN02bfatqIATTb0OaIzPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:0d:5f:e3:e7:92:48:fb:b6:a1:f5:4b:ef:20:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e45d0adc294dd366df6ada880134dbd0e688ccf7
Validity
Not Before: Mar 29 06:00:35 2026 GMT
Not After : Mar 30 06:00:35 2026 GMT
Subject: CN=1038b42f477326fe41f2568d98d6fe0a2903816c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:01:d8:48:73:de:2f:0b:87:8f:28:15:20:b0:
58:fd:95:26:c2:70:f1:c6:75:8e:36:4f:24:20:3e:
39:e2:8c:d4:64:0e:06:1e:99:62:7f:5b:c4:33:82:
b9:48:3f:12:5a:5e:22:65:c9:38:d0:c4:89:1a:78:
15:34:5b:39:28:e6:67:d7:c6:6b:5a:88:de:55:81:
04:6b:66:1d:90:84:9d:c7:27:43:55:0f:6a:37:7c:
75:51:4c:96:ec:5d:8c:ba:c9:db:8e:6b:4d:62:b1:
a4:eb:fd:52:dd:34:6b:5b:fa:3b:22:1a:d5:65:53:
03:64:ad:80:44:49:a0:aa:e1:d4:a4:11:bb:6f:be:
21:a3:a0:00:4b:a1:3b:b9:56:65:e6:96:1b:2c:e1:
ca:6f:2c:1a:85:f2:e0:a7:1d:d6:c5:c7:60:02:60:
32:12:db:a2:6f:17:1e:f4:2e:23:30:b2:d6:f3:f0:
a8:a7:f9:13:10:df:f9:80:03:d9:6e:e3:af:7d:17:
b8:ae:2c:a9:a7:1e:c4:37:6c:30:ae:dd:b7:4b:0f:
9e:cd:11:b7:04:4a:de:13:3a:ac:d1:7b:35:e4:ca:
ab:88:0e:5f:ca:d9:6b:de:3e:34:77:ae:99:f6:a4:
0e:a2:41:4c:6e:35:9a:38:f0:c5:a4:75:3f:38:6c:
b6:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:38:B4:2F:47:73:26:FE:41:F2:56:8D:98:D6:FE:0A:29:03:81:6C
X509v3 Authority Key Identifier:
keyid:E4:5D:0A:DC:29:4D:D3:66:DF:6A:DA:88:01:34:DB:D0:E6:88:CC:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5F0K3ClN02bfatqIATTb0OaIzPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ddf1e1-f07e-4bad-84a8-fe27359fd7ea/1/5F0K3ClN02bfatqIATTb0OaIzPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ddf1e1-f07e-4bad-84a8-fe27359fd7ea/1/5F0K3ClN02bfatqIATTb0OaIzPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:14:ca:10:ef:44:b3:ef:7e:81:e0:25:45:97:6c:e8:cc:fd:
1c:3e:91:9f:90:43:42:55:24:13:7d:dc:03:36:ce:49:0a:c0:
43:cb:30:e2:4b:bf:6a:a4:65:4b:cb:47:04:5d:4f:45:cc:c4:
2d:1b:c7:9f:79:c5:b4:33:1f:4a:c6:0e:fa:55:8b:a8:22:cc:
75:d1:6f:85:31:e1:30:38:17:61:97:1c:15:ea:3e:fb:7f:76:
4c:7f:d3:96:e2:46:4f:af:52:e1:a2:e8:ac:a6:0f:a2:0a:3e:
85:c5:ea:f5:06:c1:2c:e4:41:3e:73:43:a9:bc:76:8b:99:5e:
67:47:6e:ef:97:23:9c:c5:1c:ba:0f:76:7e:cf:4b:be:67:d0:
5c:c7:56:68:91:fc:fc:5e:c7:b8:67:81:4d:d2:bf:2f:f5:4e:
02:9f:1a:7f:48:c4:bc:d4:5f:a4:3e:ab:fe:9f:2d:a7:cf:a6:
33:99:6c:19:52:40:82:7d:1e:4b:91:e4:b0:26:c6:bd:66:6e:
d8:33:5b:01:4c:80:7f:df:f6:a6:ac:02:66:63:ad:96:35:b5:
d9:b2:0c:39:f7:e9:77:64:1e:01:ca:d2:b3:30:fb:33:84:d8:
9a:03:b0:25:50:22:22:ee:21:6d:10:bb:e3:09:b5:e9:5c:8b:
3c:45:b1:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:28 2026 by rpki-client