Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/da3406-04f9-47b0-a119-b88afef13367/1/_5m8PRSR-CJfiBFk9ZMUS3olyOs.mft
File: _5m8PRSR-CJfiBFk9ZMUS3olyOs.mft (raw, json)
Hash identifier: exMJ2KVB46vphP9luYlVJUB3JDq+AhfiG9uMXe7cCvo=
Subject key identifier: 09:29:63:1E:E4:39:6B:A3:5F:F0:84:D4:5B:AC:C2:8D:AA:28:F6:60
Authority key identifier: FF:99:BC:3D:14:91:F8:22:5F:88:11:64:F5:93:14:4B:7A:25:C8:EB
Certificate issuer: /CN=ff99bc3d1491f8225f881164f593144b7a25c8eb
Certificate serial: 019D284E31203D44FA2B190035F484F9936B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_5m8PRSR-CJfiBFk9ZMUS3olyOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/da3406-04f9-47b0-a119-b88afef13367/1/_5m8PRSR-CJfiBFk9ZMUS3olyOs.mft
Manifest number: 1259
Signing time: Thu 26 Mar 2026 04:01:46 +0000
Manifest this update: Thu 26 Mar 2026 04:01:46 +0000
Manifest next update: Fri 27 Mar 2026 04:01:46 +0000
Files and hashes: 1: 04FSpzq4m-1XB6Xit5U77C8a4zQ.roa (hash: mIEzNAi8bCdeISsLWc2pP3wecbIvm3THnuOD2ckxOcM=)
2: _5m8PRSR-CJfiBFk9ZMUS3olyOs.crl (hash: scyVwU7QtqpIAtRmrDkl84l59ozr3WQUuH1K8rColcQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/da3406-04f9-47b0-a119-b88afef13367/1/_5m8PRSR-CJfiBFk9ZMUS3olyOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/da3406-04f9-47b0-a119-b88afef13367/1/_5m8PRSR-CJfiBFk9ZMUS3olyOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_5m8PRSR-CJfiBFk9ZMUS3olyOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:31:20:3d:44:fa:2b:19:00:35:f4:84:f9:93:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff99bc3d1491f8225f881164f593144b7a25c8eb
Validity
Not Before: Mar 26 04:01:46 2026 GMT
Not After : Mar 27 04:01:46 2026 GMT
Subject: CN=0929631ee4396ba35ff084d45bacc28daa28f660
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:2c:1e:67:60:2e:90:fd:ec:75:c9:5c:17:28:
41:ef:4a:be:18:54:c9:12:c3:37:a1:96:f4:f9:e5:
4a:8d:c8:d0:6d:cb:24:c0:cb:eb:c8:29:2b:6a:e3:
6a:ec:8a:5f:02:03:eb:22:05:0c:f1:b1:20:0e:4f:
0a:f1:a8:5f:2e:34:92:5b:75:c7:5e:fd:0b:51:49:
47:97:f9:ab:43:ab:f1:45:b8:0e:49:05:70:45:30:
f8:5a:be:33:c6:a8:e4:93:db:06:43:26:31:5b:f2:
a6:79:e2:97:b3:f8:7c:33:c2:ae:9f:b8:31:22:64:
e5:4e:14:a0:b7:48:b8:e2:a2:40:b1:42:ff:1d:25:
db:96:3c:79:d9:9d:91:c2:56:3c:37:ec:08:5e:bf:
77:6a:2c:96:7b:47:54:4e:e2:85:0d:02:8a:30:26:
62:63:48:fb:45:3a:70:57:22:9c:24:36:8b:d4:1f:
a7:35:2d:59:50:12:53:22:e8:46:f7:e2:02:f3:bb:
dd:91:4b:49:ce:e3:a5:e8:8f:24:0a:f7:93:e7:f3:
eb:d3:48:19:77:2f:78:12:82:ac:31:84:de:f1:88:
68:de:47:a0:3a:03:88:5c:50:ac:bb:aa:c8:51:46:
1c:26:60:68:87:bd:ba:ec:f2:57:98:18:fb:5f:c9:
0c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:29:63:1E:E4:39:6B:A3:5F:F0:84:D4:5B:AC:C2:8D:AA:28:F6:60
X509v3 Authority Key Identifier:
keyid:FF:99:BC:3D:14:91:F8:22:5F:88:11:64:F5:93:14:4B:7A:25:C8:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_5m8PRSR-CJfiBFk9ZMUS3olyOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/da3406-04f9-47b0-a119-b88afef13367/1/_5m8PRSR-CJfiBFk9ZMUS3olyOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/da3406-04f9-47b0-a119-b88afef13367/1/_5m8PRSR-CJfiBFk9ZMUS3olyOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:6c:21:11:8b:e5:fd:c5:6b:18:de:ee:43:9d:ff:7e:a4:6c:
a2:6e:6e:92:7e:4d:74:bf:66:4a:f8:b8:b7:9b:90:4c:24:8f:
b3:87:d7:19:7d:59:23:d8:c2:80:29:f6:0d:49:80:4d:a1:fc:
83:58:0b:44:b7:5e:3d:1b:84:ec:91:31:99:54:86:ea:bf:be:
b5:a2:c1:75:28:94:5b:ea:1a:50:f8:16:89:b0:d8:d7:36:01:
87:4b:65:5f:65:a1:3e:ba:c4:b6:f4:2f:0a:6d:15:d6:44:7a:
bd:08:a1:1e:0d:47:08:e1:25:9c:0d:56:a6:49:25:97:1d:3b:
3a:84:8a:b2:96:d3:df:b6:fa:98:75:50:0f:56:48:f1:a4:40:
80:95:f1:fa:fe:a7:bf:b9:0e:8e:89:02:c7:8e:ef:a1:1e:63:
0f:e1:69:93:85:00:2d:5e:bc:23:bc:a7:48:1c:5b:bf:00:c1:
78:72:d2:24:c1:ac:fc:81:a8:21:b7:67:23:7a:a6:80:33:56:
c2:f2:e7:f6:c6:09:63:83:9b:5c:0a:cc:ed:8b:cf:b4:7d:95:
37:6a:09:f8:a3:2d:54:ec:a0:48:82:ed:ff:33:63:70:1d:ab:
cc:14:01:2f:0b:0f:40:68:5d:91:95:bb:9e:94:ed:f8:b3:4b:
6f:70:61:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:23:08 2026 by rpki-client