Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/2f541c-ea12-446f-bea4-a82a153ab13e/1/5dfxPZFnbuwdyazIcjFtYqx3nXs.mft
File: 5dfxPZFnbuwdyazIcjFtYqx3nXs.mft (raw, json)
Hash identifier: 31mAxwT5XEnraEOjU3NnDzIkxq3mPpS5lro+0j29MJM=
Subject key identifier: D6:0D:61:10:13:12:C4:9B:28:3D:36:53:75:88:77:A6:9A:32:2C:31
Authority key identifier: E5:D7:F1:3D:91:67:6E:EC:1D:C9:AC:C8:72:31:6D:62:AC:77:9D:7B
Certificate issuer: /CN=e5d7f13d91676eec1dc9acc872316d62ac779d7b
Certificate serial: 019D2B4ED2460476600BF494AE7AF80B63D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5dfxPZFnbuwdyazIcjFtYqx3nXs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/2f541c-ea12-446f-bea4-a82a153ab13e/1/5dfxPZFnbuwdyazIcjFtYqx3nXs.mft
Manifest number: 02A9
Signing time: Thu 26 Mar 2026 18:01:19 +0000
Manifest this update: Thu 26 Mar 2026 18:01:19 +0000
Manifest next update: Fri 27 Mar 2026 18:01:19 +0000
Files and hashes: 1: 5dfxPZFnbuwdyazIcjFtYqx3nXs.crl (hash: zvXrvORcrVq+aaSPSqn/7yzi8EP9qJt95gppNvsKuEk=)
2: KbZLx2_rFtlHuG7zcnRaRaQol2w.roa (hash: +PvTCrqc0M/beR/HvEF/hRLA4hC3UuAO8zDUgE+xCOs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/2f541c-ea12-446f-bea4-a82a153ab13e/1/5dfxPZFnbuwdyazIcjFtYqx3nXs.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/2f541c-ea12-446f-bea4-a82a153ab13e/1/5dfxPZFnbuwdyazIcjFtYqx3nXs.mft
rsync://rpki.ripe.net/repository/DEFAULT/5dfxPZFnbuwdyazIcjFtYqx3nXs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:4e:d2:46:04:76:60:0b:f4:94:ae:7a:f8:0b:63:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5d7f13d91676eec1dc9acc872316d62ac779d7b
Validity
Not Before: Mar 26 18:01:19 2026 GMT
Not After : Mar 27 18:01:19 2026 GMT
Subject: CN=d60d61101312c49b283d3653758877a69a322c31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:0e:b0:d5:f2:b0:e7:37:a7:99:90:c7:71:93:
d2:b3:ca:57:0c:5b:94:40:04:84:e4:87:d0:59:61:
63:11:52:bd:5d:6f:93:6e:60:8f:10:c3:14:32:2a:
39:c5:84:98:2a:7c:c9:72:e8:1c:af:a8:f7:69:32:
41:c7:e9:b4:b0:01:f3:ac:0b:a6:28:12:46:0e:87:
07:52:ee:aa:f3:54:b7:9b:93:eb:67:bb:01:69:78:
50:26:fd:63:8e:cb:24:d8:af:26:22:be:d2:9a:2e:
44:77:a4:97:dc:27:6b:f3:46:d6:7c:c8:44:7f:2d:
53:dd:18:6d:24:a1:5d:86:7f:1a:18:98:da:02:75:
80:7c:1e:76:29:0e:26:60:47:d0:84:64:3c:9b:03:
99:ce:df:b3:8d:6f:6a:65:2f:23:07:bf:72:dd:0f:
43:ad:9e:37:e0:ce:f7:f1:4d:fe:a9:5a:ce:50:6c:
94:24:52:0c:45:69:28:c4:a6:4d:f6:d8:3f:4b:8a:
77:1b:86:e8:e6:e7:b6:82:be:57:99:6c:53:e2:2b:
62:8d:13:14:4f:64:31:f7:61:93:04:fc:54:9c:e4:
f5:23:10:0e:2e:bb:b4:9b:2d:1e:71:6d:3e:1f:9f:
ac:c3:a5:0e:96:0b:78:f4:ee:bd:92:ec:1d:f9:76:
7d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:0D:61:10:13:12:C4:9B:28:3D:36:53:75:88:77:A6:9A:32:2C:31
X509v3 Authority Key Identifier:
keyid:E5:D7:F1:3D:91:67:6E:EC:1D:C9:AC:C8:72:31:6D:62:AC:77:9D:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5dfxPZFnbuwdyazIcjFtYqx3nXs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2f541c-ea12-446f-bea4-a82a153ab13e/1/5dfxPZFnbuwdyazIcjFtYqx3nXs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2f541c-ea12-446f-bea4-a82a153ab13e/1/5dfxPZFnbuwdyazIcjFtYqx3nXs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:15:96:81:13:39:57:6f:ec:39:a6:c4:2f:06:14:fe:68:b0:
a7:2d:9c:65:a4:48:bc:2f:6e:08:69:22:73:f0:fc:0a:ed:63:
b7:d9:e0:9d:a5:a3:1d:c4:f8:f6:dd:7d:bf:03:a0:1f:94:2d:
4d:74:56:da:6d:47:bc:83:02:e6:aa:8a:af:70:83:e0:63:3b:
e7:8e:de:0f:d7:e7:4f:0a:b5:0d:9b:b0:60:d9:35:fe:7d:24:
87:42:a0:72:78:b1:1b:a5:bf:68:e3:69:27:a1:9a:dc:54:b4:
52:7a:6f:45:64:7d:17:56:b9:29:9b:44:3f:93:13:50:0b:fa:
5e:81:5b:b9:a9:12:43:31:0e:e0:2e:62:9a:10:e8:c8:b6:e2:
5f:47:7d:a2:2e:fe:09:78:f4:20:b4:6e:5b:0c:cf:83:8d:51:
11:9a:61:70:15:65:c6:cf:01:9e:f1:dd:9c:7f:31:0d:c1:82:
4b:e8:7a:61:59:a1:a9:d8:f0:e5:01:dd:9b:f0:ca:c5:a1:8e:
4f:f6:0e:be:13:17:fb:e6:bb:ab:70:95:7a:71:28:20:5c:37:
a5:89:53:a2:c0:9b:82:64:a2:2e:ed:47:96:4e:a9:74:54:71:
fc:73:df:86:81:b6:85:91:04:62:76:65:bf:8c:67:d3:6c:fd:
14:ed:9e:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:37:34 2026 by rpki-client