Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/53f9bd-7f54-4bd2-b5a4-e584cd5f8d11/1/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.mft
File: j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.mft (raw, json)
Hash identifier: fiajUYy68S5uTQW1+bEKz07DyDnmVG4xPmMFQrAhIdk=
Subject key identifier: DF:AC:9F:6B:83:AD:AC:12:69:A4:18:85:D3:15:20:CD:26:F1:77:B3
Authority key identifier: 8F:98:05:F6:48:01:DD:93:59:94:14:A6:25:09:B1:2A:54:02:F8:68
Certificate issuer: /CN=8f9805f64801dd93599414a62509b12a5402f868
Certificate serial: 019D39E5768791687B8F57FBA18FB7D784A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/53f9bd-7f54-4bd2-b5a4-e584cd5f8d11/1/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.mft
Manifest number: 05DF
Signing time: Sun 29 Mar 2026 14:00:32 +0000
Manifest this update: Sun 29 Mar 2026 14:00:32 +0000
Manifest next update: Mon 30 Mar 2026 14:00:32 +0000
Files and hashes: 1: MTWvaT-KZib9yb4FWgpaDciaIa4.roa (hash: udiDof62oIqMZQkTZswgaISYaPILO26piyBTi1c5Vbg=)
2: j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.crl (hash: K9aNVmqoXzFbtW9VbWdCFXot/b+Q4JX9YAcsrIdnSXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/53f9bd-7f54-4bd2-b5a4-e584cd5f8d11/1/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/53f9bd-7f54-4bd2-b5a4-e584cd5f8d11/1/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.mft
rsync://rpki.ripe.net/repository/DEFAULT/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:76:87:91:68:7b:8f:57:fb:a1:8f:b7:d7:84:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f9805f64801dd93599414a62509b12a5402f868
Validity
Not Before: Mar 29 14:00:32 2026 GMT
Not After : Mar 30 14:00:32 2026 GMT
Subject: CN=dfac9f6b83adac1269a41885d31520cd26f177b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:a7:1b:c9:65:80:3a:41:b8:a6:7c:72:25:5b:
40:75:7d:a2:96:79:f8:21:39:fc:a9:5a:2c:c0:0f:
6f:54:ac:42:42:09:ed:c6:1e:63:96:dc:ba:99:a1:
9c:8d:a4:29:aa:4f:7d:60:e7:a2:63:32:9b:8d:54:
04:4d:16:36:c4:d8:d6:8d:ca:5b:70:aa:c2:60:38:
63:42:b5:99:a9:65:ba:7f:5e:17:dd:ea:40:1f:24:
aa:d5:1a:1b:00:b8:ce:ed:8f:c8:eb:85:dc:57:ef:
dd:c2:90:89:f5:b5:a9:fa:28:08:ed:72:88:d8:ff:
16:19:d1:4f:4e:69:65:b2:7a:3d:91:88:b6:98:d0:
13:1b:a3:e9:57:35:84:87:c6:a1:77:a9:6b:11:7f:
44:c1:ae:af:7a:97:47:79:1f:91:3b:f8:88:3f:d0:
c5:cc:eb:10:15:23:4f:20:49:48:4c:84:ee:e3:7b:
da:5a:01:52:af:2a:41:5c:e3:6a:95:1d:f7:1c:61:
98:dd:75:3a:b9:40:da:53:3f:02:f9:d7:f6:cf:8c:
9f:4d:a4:69:ba:61:61:77:1a:ff:d7:7d:f8:ef:ce:
60:10:ee:bd:9a:9d:4d:4b:cf:00:88:69:30:55:f3:
3b:1a:48:58:99:60:d2:33:b4:9a:37:5a:55:1d:99:
55:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:AC:9F:6B:83:AD:AC:12:69:A4:18:85:D3:15:20:CD:26:F1:77:B3
X509v3 Authority Key Identifier:
keyid:8F:98:05:F6:48:01:DD:93:59:94:14:A6:25:09:B1:2A:54:02:F8:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/53f9bd-7f54-4bd2-b5a4-e584cd5f8d11/1/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/53f9bd-7f54-4bd2-b5a4-e584cd5f8d11/1/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:aa:d7:4b:9c:ad:1a:68:67:73:f7:91:a3:2e:c0:30:3d:50:
66:5d:2d:40:34:f6:ac:b7:bb:ec:08:00:b1:f4:9d:2e:35:18:
de:7e:3a:aa:f5:19:78:da:a6:26:f4:b4:f1:fa:6b:69:d8:13:
07:3b:e4:7a:67:17:1a:7a:5d:54:48:35:74:1d:ee:a3:d8:7b:
55:8b:ae:4c:72:26:63:f7:cc:08:83:cf:9d:b2:a7:aa:70:7a:
6d:12:a1:aa:bf:60:da:ab:ed:5a:6e:21:47:d3:0f:f7:4e:aa:
78:c6:02:5f:82:cd:ad:1c:65:a5:31:76:5a:54:ce:35:ba:15:
17:37:73:a7:26:f0:36:fd:32:7a:b5:0d:53:6b:5f:a4:88:11:
d7:58:1d:e2:92:88:f6:46:7e:a3:7f:2a:2a:f6:a8:f4:e4:a0:
10:2f:5e:cd:ba:b0:d5:98:60:19:a8:31:de:ac:d0:13:f1:45:
bf:68:7e:41:ba:31:a8:6d:48:bc:4e:37:a4:c9:83:50:d5:91:
af:da:6a:55:bf:44:ba:9a:0e:4b:3b:23:a4:9a:ee:53:77:31:
40:85:06:e1:df:95:32:ab:84:88:3c:2d:2f:ca:d3:ab:92:d1:
31:e0:de:6a:c3:d0:34:d8:9a:e4:de:b6:81:fa:76:de:84:0a:
32:8d:d9:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:00:45 2026 by rpki-client