Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.mft
File: J5FZ7yL4K5NnMWZO5nw7bqlu9EM.mft (raw, json)
Hash identifier: B69Lc3vbBr4NJI/6WtiEjilmyWCCLQGuULJQf614wKI=
Subject key identifier: 51:E8:92:89:E7:B0:23:56:84:A6:03:B3:50:4C:9B:97:7A:AC:5C:0C
Authority key identifier: 27:91:59:EF:22:F8:2B:93:67:31:66:4E:E6:7C:3B:6E:A9:6E:F4:43
Certificate issuer: /CN=279159ef22f82b936731664ee67c3b6ea96ef443
Certificate serial: 019D2628A27DF1592184BD2F9C9309B51EB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.mft
Manifest number: 13A8
Signing time: Wed 25 Mar 2026 18:01:30 +0000
Manifest this update: Wed 25 Mar 2026 18:01:30 +0000
Manifest next update: Thu 26 Mar 2026 18:01:30 +0000
Files and hashes: 1: J5FZ7yL4K5NnMWZO5nw7bqlu9EM.crl (hash: fU7NFS4++F4ka3vtVR/I96MYfHV7BFcfIc726rFjdlc=)
2: hWkmko9vUlZH-VtlGHJ4hUuAaoY.roa (hash: WFu8HTGZdnXJYLpBmsk/WG3sNIIitKWRuo38WyAjDOU=)
3: rHfKeO-9l9W24wGxoHPVca3O4oc.roa (hash: DOnDxDR60+CHvKP7QQ/+3OYee8LrWlLSO/yOlx6md0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.mft
rsync://rpki.ripe.net/repository/DEFAULT/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 18:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:a2:7d:f1:59:21:84:bd:2f:9c:93:09:b5:1e:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279159ef22f82b936731664ee67c3b6ea96ef443
Validity
Not Before: Mar 25 18:01:30 2026 GMT
Not After : Mar 26 18:01:30 2026 GMT
Subject: CN=51e89289e7b0235684a603b3504c9b977aac5c0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:6a:49:a5:fa:99:78:23:0f:fb:44:69:46:66:
21:16:b6:f0:c0:7e:9f:bf:6b:17:27:75:e9:68:22:
88:6c:c9:d5:94:99:73:5b:69:47:70:d2:0f:0d:b6:
8a:b9:d4:fb:0f:20:a4:0c:e5:a9:38:e7:19:14:8d:
ef:c0:a6:ff:51:0a:3b:ed:b9:7a:9b:b5:2a:ef:cf:
d7:94:cf:99:57:9e:a6:c2:c2:07:93:33:d9:8f:e7:
6b:40:48:9e:c7:99:6b:1c:46:32:a5:da:7f:cf:ee:
31:17:f7:1f:17:db:10:c2:cb:9e:e0:83:43:3e:f9:
13:52:18:33:ab:f2:c8:cc:e6:15:05:c9:7f:b1:d8:
b7:47:10:e1:ac:d4:ce:fe:a4:32:7e:b8:a5:9c:7e:
7f:fa:19:b3:29:9d:9c:93:22:07:22:af:02:25:a0:
1d:6e:10:0f:0e:05:fa:a8:25:f5:91:84:62:c3:97:
33:f4:7a:a5:ed:69:91:1e:fc:b2:b8:78:9d:42:4c:
ad:c6:c5:c6:01:05:79:df:7b:27:bc:57:4c:43:c4:
2a:9f:ee:43:26:33:82:d2:86:8c:ab:46:a8:c9:1c:
02:b0:43:29:75:2b:3b:80:0f:ad:ff:ab:06:28:0f:
4e:af:fc:b4:19:3f:79:1c:84:cc:fb:6d:ce:ec:de:
78:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:E8:92:89:E7:B0:23:56:84:A6:03:B3:50:4C:9B:97:7A:AC:5C:0C
X509v3 Authority Key Identifier:
keyid:27:91:59:EF:22:F8:2B:93:67:31:66:4E:E6:7C:3B:6E:A9:6E:F4:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:87:be:fe:0c:e4:35:7e:48:0e:0c:96:a1:b2:52:d3:d5:0f:
c1:ea:42:e6:34:1e:4d:19:3a:63:ed:fe:be:f6:84:b9:65:31:
91:f2:f3:cc:55:a7:ed:ac:a6:6d:01:dc:a6:0e:cb:e1:a1:a5:
af:40:9b:ac:51:a5:75:10:2c:bd:3f:d4:00:7a:59:62:3c:03:
4d:0e:76:37:b4:fe:11:99:1a:a4:5e:b4:8f:a2:42:44:1c:5c:
1f:3b:64:b3:5a:5a:54:7f:eb:d5:5c:f6:b3:10:e4:57:04:7d:
cf:90:40:10:2a:87:e7:79:3c:44:91:6a:8b:ed:8e:d4:0d:61:
b5:09:de:e8:1d:9e:4e:94:dc:e7:7f:6f:06:61:4a:86:76:53:
1e:f3:d4:6a:67:07:ef:0f:df:13:0c:10:e8:a0:ed:86:bc:c3:
d9:0d:3c:e0:52:71:d2:86:e8:08:8f:bc:60:95:79:02:3e:f1:
dd:63:e9:ce:15:80:77:e8:e3:b8:68:85:1b:57:e0:8e:cd:6a:
78:2a:fe:d1:84:aa:ed:9e:d5:39:46:e4:3b:b2:87:c1:d3:e0:
be:a5:82:22:b3:e3:b7:87:22:74:8d:aa:eb:74:38:60:61:be:
d3:dc:03:e1:34:4f:c1:61:64:62:b0:c7:aa:43:21:97:cf:0c:
08:3f:a1:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:05:06 2026 by rpki-client