Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/3b74f0-e753-4669-85fd-822eaf0d22b0/1/m5TSR2sxUeHn8DYNzk84USXu1fs.mft
File: m5TSR2sxUeHn8DYNzk84USXu1fs.mft (raw, json)
Hash identifier: CSyJFxMg/9ykabWuV5ebi5UnFljofa/biz3LI86OGwU=
Subject key identifier: C9:A3:5E:0D:14:93:14:4D:A4:5F:C1:86:C5:01:F5:29:7B:0E:B4:19
Authority key identifier: 9B:94:D2:47:6B:31:51:E1:E7:F0:36:0D:CE:4F:38:51:25:EE:D5:FB
Certificate issuer: /CN=9b94d2476b3151e1e7f0360dce4f385125eed5fb
Certificate serial: 019D38D3B5C5D421DCB31AEE4F330F0874D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m5TSR2sxUeHn8DYNzk84USXu1fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/3b74f0-e753-4669-85fd-822eaf0d22b0/1/m5TSR2sxUeHn8DYNzk84USXu1fs.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 09:01:31 +0000
Manifest this update: Sun 29 Mar 2026 09:01:31 +0000
Manifest next update: Mon 30 Mar 2026 09:01:31 +0000
Files and hashes: 1: m5TSR2sxUeHn8DYNzk84USXu1fs.crl (hash: fzdz4bkh83DzSLnBWquREwfcfxpJz35eo/8oStS6EuE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/3b74f0-e753-4669-85fd-822eaf0d22b0/1/m5TSR2sxUeHn8DYNzk84USXu1fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/3b74f0-e753-4669-85fd-822eaf0d22b0/1/m5TSR2sxUeHn8DYNzk84USXu1fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/m5TSR2sxUeHn8DYNzk84USXu1fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:b5:c5:d4:21:dc:b3:1a:ee:4f:33:0f:08:74:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b94d2476b3151e1e7f0360dce4f385125eed5fb
Validity
Not Before: Mar 29 09:01:31 2026 GMT
Not After : Mar 30 09:01:31 2026 GMT
Subject: CN=c9a35e0d1493144da45fc186c501f5297b0eb419
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a0:16:cc:7e:28:a9:13:0e:c3:e7:84:62:ea:
24:d9:72:29:b7:fd:f2:f8:1c:f0:17:f2:e6:f1:19:
bf:c4:54:76:98:7f:a3:f2:1d:05:14:21:b9:6e:55:
f9:ec:f6:ff:eb:db:fe:36:a5:02:72:77:07:34:22:
2a:84:51:8b:da:ba:f3:6a:79:57:2d:d0:43:16:47:
ef:fe:2d:fc:29:eb:29:32:57:6c:30:aa:4f:94:a7:
ce:4f:85:7d:ed:3a:91:7b:a1:23:e3:e4:71:32:d1:
44:4d:33:3f:64:16:7a:84:8a:e1:5d:68:8a:aa:34:
cd:3e:8a:c5:b5:d7:b8:a9:d3:ae:42:e7:1f:92:ba:
16:3d:ce:82:4f:65:01:9a:24:ee:c3:9a:0f:2a:c3:
6b:0a:17:b7:a5:76:9e:29:48:8f:31:6b:fd:a2:f9:
e2:35:da:a9:48:1e:dc:f1:9d:f6:e5:2a:40:7f:14:
fe:d4:3c:8f:6c:07:08:f7:52:d2:b3:75:28:7e:cc:
85:03:f9:07:58:f3:d7:48:6f:69:88:4b:d4:c0:e8:
d9:e0:f1:37:8b:5f:6c:56:2a:92:27:db:76:51:95:
aa:be:2a:e0:27:5a:f9:4e:58:de:b4:23:66:86:d7:
d7:18:af:e7:73:72:df:e1:b3:86:f1:fb:84:51:ed:
ee:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:A3:5E:0D:14:93:14:4D:A4:5F:C1:86:C5:01:F5:29:7B:0E:B4:19
X509v3 Authority Key Identifier:
keyid:9B:94:D2:47:6B:31:51:E1:E7:F0:36:0D:CE:4F:38:51:25:EE:D5:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m5TSR2sxUeHn8DYNzk84USXu1fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/3b74f0-e753-4669-85fd-822eaf0d22b0/1/m5TSR2sxUeHn8DYNzk84USXu1fs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/3b74f0-e753-4669-85fd-822eaf0d22b0/1/m5TSR2sxUeHn8DYNzk84USXu1fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:a9:da:cc:9f:ef:82:1b:29:e1:d8:9f:10:2d:21:e8:be:29:
82:c2:c2:06:45:77:20:a8:1b:56:47:a4:cb:c7:9b:a5:06:1b:
2a:81:0a:55:41:5e:e1:f3:aa:24:af:75:5d:c7:9f:f1:4d:8e:
a5:ff:66:ee:cd:35:2f:20:3c:51:5c:b9:7a:d6:0b:44:96:5e:
f5:50:e6:e8:ac:ac:e9:db:d2:ce:b6:44:95:a3:ce:54:43:a2:
ea:59:62:89:4b:1d:cb:38:25:05:d1:17:f8:b9:78:bb:b2:84:
fa:0c:1c:0d:82:bd:d4:4b:28:71:96:67:f2:0f:b5:d5:e5:8b:
95:5e:60:95:ad:f2:d6:3f:47:11:fd:7a:2a:a2:ce:9b:a5:fb:
31:62:01:b7:14:d1:3b:3a:0f:df:d0:49:e2:1e:7d:9a:ea:1f:
3f:65:f3:bc:4e:ed:54:37:43:04:91:8d:00:7d:08:bf:e5:25:
7a:5d:78:5c:03:72:35:1f:eb:cb:54:05:7e:7e:c6:16:8e:d1:
1c:95:1a:52:97:b2:bb:a8:09:93:17:6e:8b:23:fa:5c:e6:d2:
30:7f:02:18:48:d6:1b:7f:12:9e:57:c4:df:06:d2:47:86:51:
eb:3c:b4:7f:16:83:65:0f:18:62:78:cb:75:a9:6e:1e:dd:1a:
56:fa:57:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:52 2026 by rpki-client