Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.mft
File: B5S3AHBeC6pzal3QkKzRy5EsFxk.mft (raw, json)
Hash identifier: LakqXrUIXKCT//d3sBp/OQuKLA6iPf7IMY5/m2ebw2w=
Subject key identifier: 5C:0E:25:C5:DF:01:F6:13:56:83:08:2D:D3:3A:A3:88:BD:BA:03:B3
Authority key identifier: 07:94:B7:00:70:5E:0B:AA:73:6A:5D:D0:90:AC:D1:CB:91:2C:17:19
Certificate issuer: /CN=0794b700705e0baa736a5dd090acd1cb912c1719
Certificate serial: 019D2583C74594D1EAB4B1B4C40EF9C93548
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B5S3AHBeC6pzal3QkKzRy5EsFxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.mft
Manifest number: 15A9
Signing time: Wed 25 Mar 2026 15:01:26 +0000
Manifest this update: Wed 25 Mar 2026 15:01:26 +0000
Manifest next update: Thu 26 Mar 2026 15:01:26 +0000
Files and hashes: 1: 2XpRI5kbe2GcxnCcvXnUxOpReg8.roa (hash: er8I9IPQk+o7pRxbPQb/bNgm7tOw9wB8trgzpv++Gow=)
2: B5S3AHBeC6pzal3QkKzRy5EsFxk.crl (hash: wfPpryYGL39CHbnuFKlvmqRjEJv43g6qI2ZPC9Z6VAg=)
3: zeWDjXMa5d0w5AALex0oOqBNvc4.asa (hash: HCrT/rSODMrRMJuTFQic3exBhgbdh+nyEk9+AkA7lQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.mft
rsync://rpki.ripe.net/repository/DEFAULT/B5S3AHBeC6pzal3QkKzRy5EsFxk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:c7:45:94:d1:ea:b4:b1:b4:c4:0e:f9:c9:35:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0794b700705e0baa736a5dd090acd1cb912c1719
Validity
Not Before: Mar 25 15:01:26 2026 GMT
Not After : Mar 26 15:01:26 2026 GMT
Subject: CN=5c0e25c5df01f6135683082dd33aa388bdba03b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:94:80:ab:d8:31:6a:24:70:f1:0a:15:62:c2:
d7:bc:db:7f:3e:c8:fc:12:a6:37:29:a6:d5:5d:be:
5a:f6:6b:e6:80:bb:dc:62:00:12:e0:76:10:cb:d7:
57:17:9a:f0:77:41:b8:ef:ee:5a:d8:8e:fa:0e:1d:
6a:6c:53:1c:72:66:76:a0:bf:53:fb:61:23:92:d5:
17:da:f9:e0:b7:09:fb:bc:c8:94:6d:47:fa:75:26:
d4:a4:9b:f3:31:86:f6:7f:d4:25:61:c8:bb:4f:f0:
c0:80:02:1e:af:cb:46:89:87:4f:5e:c8:06:03:0f:
25:54:cf:23:86:23:d4:d8:fb:72:31:60:87:1d:9f:
f7:34:24:00:9d:d0:f4:00:cf:66:c0:89:8d:52:6a:
21:e6:51:5a:d0:11:13:85:05:19:ec:71:f7:67:e8:
9a:5b:fa:74:f7:03:a5:50:c7:6b:cb:41:a7:2f:4e:
6f:5e:8e:4f:fe:ad:07:c0:66:fa:55:3a:e5:fe:e6:
68:97:67:8d:c0:a4:d4:17:83:ea:50:16:ae:f9:41:
53:48:72:aa:8f:3d:6b:ce:92:b4:ec:54:50:39:a0:
c5:88:27:51:6c:10:9b:ce:8e:5d:53:e6:87:77:34:
c3:8d:00:c4:de:d5:e3:bd:ed:68:ff:0a:64:a6:93:
1f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:0E:25:C5:DF:01:F6:13:56:83:08:2D:D3:3A:A3:88:BD:BA:03:B3
X509v3 Authority Key Identifier:
keyid:07:94:B7:00:70:5E:0B:AA:73:6A:5D:D0:90:AC:D1:CB:91:2C:17:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B5S3AHBeC6pzal3QkKzRy5EsFxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:80:f8:11:3e:6b:16:23:e7:18:81:4d:24:20:3d:08:af:96:
b8:f3:fd:29:6f:65:ef:ae:04:0f:38:25:46:57:d2:f3:ea:fe:
89:a8:86:c3:9f:09:86:97:54:6a:40:04:35:37:53:d0:2c:2a:
39:b6:8a:6e:88:00:bc:fb:f5:6d:a3:a3:ad:15:d8:df:61:28:
20:d9:52:30:05:9b:09:7a:7f:13:f5:c4:51:31:8d:a7:e4:11:
9a:72:e7:96:88:15:65:1f:e6:5c:8e:0a:7c:80:8d:f2:48:5b:
d8:bf:4f:b0:b2:cf:88:c9:71:17:c7:13:70:44:ec:e3:3f:7a:
c8:e9:82:df:34:b7:8e:4f:83:15:76:8a:30:79:41:7c:42:52:
5b:3e:ed:df:e0:dc:20:93:9c:8c:41:15:90:7b:f9:0f:54:df:
c3:e0:6f:de:9e:10:04:ad:86:f6:87:60:69:66:a2:25:a9:d4:
98:5f:6f:71:70:f1:ce:6f:92:74:9c:35:a4:a8:19:fb:90:6b:
ba:2c:9f:51:14:46:97:0d:dd:96:6b:e0:98:bf:ec:33:14:cb:
ba:ff:8e:38:c3:d3:1d:66:cd:90:0b:2f:bb:e4:87:c5:bd:a8:
6c:f0:b2:6c:08:7c:b2:7c:74:e0:d4:a1:bb:21:31:e9:68:a3:
f0:2a:4e:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:22:21 2026 by rpki-client