Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/_5JbpaQQRnlkY0z_SvrXelbaRyI.mft
File: _5JbpaQQRnlkY0z_SvrXelbaRyI.mft (raw, json)
Hash identifier: ZzqDVKbWXtYLz0ePaE4LrdcFDS5bj0F0ifEHA2hMNIc=
Subject key identifier: 79:57:83:46:8F:4B:DA:49:FF:3F:7E:A4:D3:18:F2:22:F7:1D:10:05
Authority key identifier: FF:92:5B:A5:A4:10:46:79:64:63:4C:FF:4A:FA:D7:7A:56:DA:47:22
Certificate issuer: /CN=ff925ba5a410467964634cff4afad77a56da4722
Certificate serial: 019D38667D71F2D0AAED691F058362157BCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_5JbpaQQRnlkY0z_SvrXelbaRyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/_5JbpaQQRnlkY0z_SvrXelbaRyI.mft
Manifest number: 0720
Signing time: Sun 29 Mar 2026 07:02:13 +0000
Manifest this update: Sun 29 Mar 2026 07:02:13 +0000
Manifest next update: Mon 30 Mar 2026 07:02:13 +0000
Files and hashes: 1: 2l3jy0ks1GMTVrjjYXvE6dhr2UM.roa (hash: L4oxBugG8SBzHeTSIckApzq3w111E1/nbM2VYS8YHuw=)
2: _5JbpaQQRnlkY0z_SvrXelbaRyI.crl (hash: g4byVtx4JFOYy2HZfCWqDEeyq8jkivZjAVxXlzPwV7w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/_5JbpaQQRnlkY0z_SvrXelbaRyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/_5JbpaQQRnlkY0z_SvrXelbaRyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_5JbpaQQRnlkY0z_SvrXelbaRyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:7d:71:f2:d0:aa:ed:69:1f:05:83:62:15:7b:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff925ba5a410467964634cff4afad77a56da4722
Validity
Not Before: Mar 29 07:02:13 2026 GMT
Not After : Mar 30 07:02:13 2026 GMT
Subject: CN=795783468f4bda49ff3f7ea4d318f222f71d1005
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d6:e9:7b:0f:6b:a2:71:c6:e6:2b:15:df:a8:
c4:bd:bd:28:0d:ae:9b:9e:cb:ac:dc:c1:72:97:f0:
00:0a:23:c4:f3:f9:5c:a6:d6:56:8f:77:e2:72:a3:
85:c2:ff:21:2d:da:62:77:d9:d3:86:73:e5:3d:be:
64:82:c7:6a:0d:dd:7a:30:62:00:06:f6:d0:25:ed:
93:f8:b4:c8:6d:e8:7c:a7:98:7b:38:f3:c6:6b:b4:
d1:47:87:2f:55:1c:68:8c:c0:f8:f5:f7:e1:74:a3:
1a:b0:3b:14:fe:18:48:1d:bc:b6:db:3d:ea:9a:26:
23:9e:13:5f:d3:8d:3c:9e:d3:6c:0f:0c:48:f3:22:
40:39:74:0f:48:64:31:5f:b1:19:30:1e:ef:fe:e7:
62:8b:2c:b5:cf:79:ae:01:e1:45:83:f2:91:8c:65:
aa:61:1e:a7:de:3d:c5:88:94:11:a3:51:ea:43:1c:
f8:97:a6:b2:55:03:60:56:b1:99:d5:5a:9c:75:b4:
c9:29:ae:2c:16:9f:97:11:5d:be:e0:50:c8:0e:3a:
d3:d9:55:b4:95:db:a6:49:6f:65:33:07:74:49:ef:
c0:31:be:8a:5c:4a:b1:d1:23:7c:0c:2f:8b:f4:fe:
6f:7e:e0:0d:dd:2c:b0:2c:67:eb:47:8c:36:88:a8:
1e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:57:83:46:8F:4B:DA:49:FF:3F:7E:A4:D3:18:F2:22:F7:1D:10:05
X509v3 Authority Key Identifier:
keyid:FF:92:5B:A5:A4:10:46:79:64:63:4C:FF:4A:FA:D7:7A:56:DA:47:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_5JbpaQQRnlkY0z_SvrXelbaRyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/_5JbpaQQRnlkY0z_SvrXelbaRyI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/_5JbpaQQRnlkY0z_SvrXelbaRyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:b5:8e:7e:86:58:02:3c:b7:e5:e9:83:37:9c:11:8d:c1:78:
c6:e1:7f:64:90:a3:aa:de:f6:30:05:a7:b7:cd:dd:7c:07:21:
81:a4:6e:22:0d:05:de:58:4d:ce:48:20:57:8e:9b:a4:f4:4c:
b1:ed:39:52:94:1d:cc:e1:ba:a6:8e:63:cb:c5:38:73:06:07:
32:07:a0:a7:98:4f:dd:dc:cb:fb:70:42:1c:0c:4a:bf:8a:37:
75:b7:3a:d0:e2:bf:d2:a4:02:45:f1:2f:58:1a:f6:e9:b6:cf:
53:f2:b1:cb:85:44:90:5b:85:2c:3f:2d:2d:fb:df:59:9b:0b:
6a:2d:13:7d:8e:62:f2:23:f0:aa:4c:57:cf:49:38:da:b7:00:
26:26:9e:4c:19:1a:ec:e7:33:1a:d2:c8:0c:4b:c1:31:ab:7c:
1a:44:a4:ac:70:f4:63:b4:1b:25:e6:fb:a0:0e:6a:24:10:f5:
30:21:75:e9:d1:ad:6c:f2:44:5f:ae:0a:ff:fa:dd:bd:40:0f:
f9:de:82:41:2b:83:d4:20:10:33:73:4b:4e:7a:fe:21:f8:5c:
31:5f:bd:9f:2c:44:21:c4:2f:45:85:f7:d8:43:e8:2c:9a:40:
08:8d:82:67:13:47:91:f3:ed:86:b3:1d:90:d3:7d:b4:09:6c:
d4:c3:6d:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:44:07 2026 by rpki-client