Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/1R5nmbxcooWjdjcvC2NF3_yHuMA.mft
File: 1R5nmbxcooWjdjcvC2NF3_yHuMA.mft (raw, json)
Hash identifier: AIIkj00/+xQGpZbjnrMN07I27YcOoQaBNDUuFTaNLWc=
Subject key identifier: 5B:AF:40:0D:82:4D:7E:8E:C0:C9:35:96:DB:32:DE:AA:59:88:60:CC
Authority key identifier: D5:1E:67:99:BC:5C:A2:85:A3:76:37:2F:0B:63:45:DF:FC:87:B8:C0
Certificate issuer: /CN=d51e6799bc5ca285a376372f0b6345dffc87b8c0
Certificate serial: 019D3A8AFB19602097228E02FEB6AE41C237
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1R5nmbxcooWjdjcvC2NF3_yHuMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/1R5nmbxcooWjdjcvC2NF3_yHuMA.mft
Manifest number: 1702
Signing time: Sun 29 Mar 2026 17:01:19 +0000
Manifest this update: Sun 29 Mar 2026 17:01:19 +0000
Manifest next update: Mon 30 Mar 2026 17:01:19 +0000
Files and hashes: 1: 1R5nmbxcooWjdjcvC2NF3_yHuMA.crl (hash: 8P+BOKg6nitOaA7Ms32CfmDOu/aJvv/KQoIICO7er08=)
2: GllxanRi9edQc4SoJ1p-sRQjjuU.roa (hash: Om+DeQOxMRS5RnhUZBxqORnDtsjXB3ZQzZG6mlBEotI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/1R5nmbxcooWjdjcvC2NF3_yHuMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/1R5nmbxcooWjdjcvC2NF3_yHuMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1R5nmbxcooWjdjcvC2NF3_yHuMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:8a:fb:19:60:20:97:22:8e:02:fe:b6:ae:41:c2:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d51e6799bc5ca285a376372f0b6345dffc87b8c0
Validity
Not Before: Mar 29 17:01:19 2026 GMT
Not After : Mar 30 17:01:19 2026 GMT
Subject: CN=5baf400d824d7e8ec0c93596db32deaa598860cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:78:6e:8d:77:88:f2:cb:11:34:54:4b:ac:d4:
ab:16:79:cd:ab:6a:11:e0:6b:26:59:69:0c:55:a8:
e3:c5:16:f1:06:97:d9:ca:ac:9a:7c:ac:40:eb:d7:
95:44:08:92:81:55:77:d0:6e:91:b2:30:46:06:85:
ad:d1:f9:7c:7e:22:c7:a2:91:68:21:bc:27:10:f9:
36:b7:64:e1:fb:e6:bc:eb:16:9d:76:2a:59:13:48:
d7:d7:98:01:c3:ee:79:2f:ee:69:3d:94:e3:8f:06:
e7:87:3f:ae:4d:ba:dc:b4:10:f1:bd:f3:30:1e:39:
15:3b:a0:b5:78:fc:45:52:42:c9:25:17:70:d3:d5:
06:d1:3c:4f:d0:31:2f:57:69:92:6d:ce:20:09:a9:
73:57:30:7e:cc:ab:04:6a:a9:78:7e:f5:7f:5b:cd:
9c:87:9f:2e:fd:78:45:13:81:1b:b2:6d:ff:c1:8d:
a3:5a:d2:0c:53:1e:99:40:70:49:99:2b:5b:34:79:
86:24:8b:e8:38:a2:9d:ff:64:c9:1b:c6:50:68:60:
e2:b8:93:36:3d:43:98:e0:ec:eb:0d:04:67:d4:0e:
f9:01:23:cf:f4:90:52:b3:fe:13:63:90:aa:72:fc:
2e:cb:28:95:be:26:2d:dd:0a:bf:66:28:06:2a:69:
9c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:AF:40:0D:82:4D:7E:8E:C0:C9:35:96:DB:32:DE:AA:59:88:60:CC
X509v3 Authority Key Identifier:
keyid:D5:1E:67:99:BC:5C:A2:85:A3:76:37:2F:0B:63:45:DF:FC:87:B8:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1R5nmbxcooWjdjcvC2NF3_yHuMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/1R5nmbxcooWjdjcvC2NF3_yHuMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/1R5nmbxcooWjdjcvC2NF3_yHuMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:b8:32:13:7e:2f:6c:40:0c:94:0c:d9:b3:ba:67:6c:89:62:
1d:3b:bb:5a:bc:c7:d0:bc:34:e4:54:ac:1f:e3:dd:46:19:a6:
aa:1f:03:e1:12:11:ed:6c:09:ae:7c:3e:b8:43:3b:27:77:f1:
b6:f9:d6:34:c6:1e:1d:10:ce:12:5b:e7:8d:8b:30:7b:c7:bf:
77:fd:4b:46:f5:72:d8:e7:3e:d4:70:54:a8:0f:e6:22:47:d8:
17:a8:9e:62:b1:23:52:9b:60:7c:d3:83:10:b9:d0:6e:5a:2d:
ab:ac:e5:ce:bc:57:1d:ef:d4:8f:da:41:60:98:b3:76:da:ba:
c5:72:87:99:99:3f:3e:96:e1:6e:e4:db:dc:5e:19:49:c8:b2:
91:10:07:2d:19:0c:da:c6:fd:d8:4f:8e:58:90:0c:cb:52:6b:
a5:4c:e9:90:a4:90:29:15:75:52:f1:4b:04:1f:1c:3c:39:9b:
5a:85:2f:a5:0e:0c:21:e6:78:23:28:5a:f2:05:4d:47:e4:50:
34:4d:ce:ee:1b:1f:db:45:96:1b:ed:4b:1d:dd:58:76:48:bc:
98:fd:5b:4b:15:59:67:d7:97:d7:35:42:68:46:03:75:8d:d6:
91:f0:ee:84:87:08:b2:9c:e0:c0:fd:80:bb:06:bc:8a:ae:d5:
81:45:3f:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:51:32 2026 by rpki-client