Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/3abc74-a84f-4c6c-af0d-70c589dd2171/1/D5_AEbXohjvPO7cq12ldMZdCuEQ.mft
File: D5_AEbXohjvPO7cq12ldMZdCuEQ.mft (raw, json)
Hash identifier: fwGJ7dY4h3aejZ4AS5aIp8MEWdhTWCsdv9/zuFLdaZc=
Subject key identifier: 6D:CB:84:F5:BB:92:B4:2D:9A:CA:D2:C3:99:E0:DD:82:71:21:DE:1B
Authority key identifier: 0F:9F:C0:11:B5:E8:86:3B:CF:3B:B7:2A:D7:69:5D:31:97:42:B8:44
Certificate issuer: /CN=0f9fc011b5e8863bcf3bb72ad7695d319742b844
Certificate serial: 019D25F158070B1911C0CDD87F17EA231345
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5_AEbXohjvPO7cq12ldMZdCuEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/3abc74-a84f-4c6c-af0d-70c589dd2171/1/D5_AEbXohjvPO7cq12ldMZdCuEQ.mft
Manifest number: 012D
Signing time: Wed 25 Mar 2026 17:01:06 +0000
Manifest this update: Wed 25 Mar 2026 17:01:06 +0000
Manifest next update: Thu 26 Mar 2026 17:01:06 +0000
Files and hashes: 1: C2alc4W0qUaR_O2dT6t7YsOa3tU.roa (hash: XKnTKvL5wXPD8yEbAMnox+MgSzxyy4w+ZP5niGbD9/U=)
2: D5_AEbXohjvPO7cq12ldMZdCuEQ.crl (hash: WDce0mXhYWH+JrhEbImw/PqXjcOaHiExqquxSooofj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/3abc74-a84f-4c6c-af0d-70c589dd2171/1/D5_AEbXohjvPO7cq12ldMZdCuEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/3abc74-a84f-4c6c-af0d-70c589dd2171/1/D5_AEbXohjvPO7cq12ldMZdCuEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/D5_AEbXohjvPO7cq12ldMZdCuEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 17:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:58:07:0b:19:11:c0:cd:d8:7f:17:ea:23:13:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f9fc011b5e8863bcf3bb72ad7695d319742b844
Validity
Not Before: Mar 25 17:01:06 2026 GMT
Not After : Mar 26 17:01:06 2026 GMT
Subject: CN=6dcb84f5bb92b42d9acad2c399e0dd827121de1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:71:9e:45:25:1f:7c:8c:9b:40:ea:f9:7c:ff:
71:9c:cd:72:6a:e8:ac:8e:b6:34:1c:ba:0e:de:8b:
c3:f4:c6:9e:b8:f4:95:71:d5:d3:e1:6f:3e:d0:0f:
0c:3b:6d:fa:cf:2f:d7:95:20:60:8e:92:d1:05:61:
69:ba:86:79:07:3a:6c:d8:7d:4d:03:f6:e5:d6:79:
91:c5:9a:10:8d:54:0f:e8:ea:28:70:de:c4:f2:fe:
3d:39:08:dd:8d:59:6a:49:e8:62:2a:0d:1a:90:73:
71:93:e3:30:72:f2:fb:26:fd:1d:78:ca:f8:52:01:
c7:14:74:0d:d6:e2:00:2f:26:4a:2a:6c:5a:2c:fa:
84:15:25:bc:dd:b9:5f:85:37:6d:ea:15:85:39:3c:
44:19:34:2c:cf:c5:b9:09:f0:d7:79:c8:ce:63:0c:
22:62:f1:37:9d:6e:76:ad:73:de:0b:87:1c:0f:21:
77:d9:7e:b8:27:b4:3f:99:f6:a7:3c:10:8d:e5:78:
3c:e7:0b:1e:8d:5b:58:af:fa:c0:54:39:f7:1f:06:
dc:9b:30:cd:76:66:b7:c7:15:a0:30:5a:6b:eb:2c:
da:95:f5:e4:d9:dd:0a:83:ac:12:7f:30:d7:6f:f5:
1d:a9:7d:89:59:6f:a5:bb:82:16:33:42:5a:2d:84:
3c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:CB:84:F5:BB:92:B4:2D:9A:CA:D2:C3:99:E0:DD:82:71:21:DE:1B
X509v3 Authority Key Identifier:
keyid:0F:9F:C0:11:B5:E8:86:3B:CF:3B:B7:2A:D7:69:5D:31:97:42:B8:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5_AEbXohjvPO7cq12ldMZdCuEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3abc74-a84f-4c6c-af0d-70c589dd2171/1/D5_AEbXohjvPO7cq12ldMZdCuEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3abc74-a84f-4c6c-af0d-70c589dd2171/1/D5_AEbXohjvPO7cq12ldMZdCuEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:d2:79:5f:9a:17:4b:00:50:4a:31:37:d1:a3:c1:88:89:cf:
aa:52:46:67:49:b3:82:00:bc:02:6e:ad:4e:cc:df:5d:75:dd:
05:60:80:a9:ad:22:a9:22:52:59:d7:ac:8e:66:b4:52:39:27:
54:cc:2c:e9:69:5e:cd:cd:7b:22:be:b9:96:d2:79:e3:43:74:
57:be:6e:21:03:16:b4:df:d7:2b:3e:30:68:14:1c:94:13:82:
a7:5d:d5:02:45:65:5d:48:7b:41:ae:49:82:fc:b1:1c:67:8a:
a2:01:82:1a:0e:f4:4e:27:0e:51:e5:10:1b:b1:98:d3:49:4c:
9e:96:38:76:7b:a2:77:e2:5c:c8:3f:4a:28:91:21:2f:b8:46:
4a:5f:f8:e9:d8:fd:fe:16:95:79:d6:72:fa:84:54:bb:b4:3f:
8e:96:da:43:af:32:34:99:60:14:ed:00:23:83:7b:38:1c:79:
d9:f1:ee:f9:98:87:4d:2b:d1:6c:4f:c8:d7:17:4e:f3:a2:02:
2b:2f:b7:5b:84:67:d3:ed:91:aa:6a:63:3c:7b:e3:b6:23:22:
d5:10:4e:b2:7e:49:b4:47:73:54:b0:77:a2:60:f5:18:b9:c2:
b3:e6:19:5c:2d:db:3e:c7:4d:29:e1:c6:54:a5:7f:89:b2:bc:
06:2b:e7:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:04:17 2026 by rpki-client