Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/5P9bv1QMZZVLmROmjCTRdN6X2Ck.mft
File: 5P9bv1QMZZVLmROmjCTRdN6X2Ck.mft (raw, json)
Hash identifier: zVQgtXPXj8mJFgIXBi0e3Sjw++ZlgqYDLdtC6Xl/H38=
Subject key identifier: B0:E9:44:BC:EF:AF:1B:95:0B:F6:DA:22:FE:77:14:24:54:E4:87:ED
Authority key identifier: E4:FF:5B:BF:54:0C:65:95:4B:99:13:A6:8C:24:D1:74:DE:97:D8:29
Certificate issuer: /CN=e4ff5bbf540c65954b9913a68c24d174de97d829
Certificate serial: 019D2AE114CA119E36AC65CE6265E5328F5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5P9bv1QMZZVLmROmjCTRdN6X2Ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/5P9bv1QMZZVLmROmjCTRdN6X2Ck.mft
Manifest number: 1009
Signing time: Thu 26 Mar 2026 16:01:26 +0000
Manifest this update: Thu 26 Mar 2026 16:01:26 +0000
Manifest next update: Fri 27 Mar 2026 16:01:26 +0000
Files and hashes: 1: 5P9bv1QMZZVLmROmjCTRdN6X2Ck.crl (hash: ymcP1ebgoPKOT0y1yyJrMoAqP2l8UNVobNoBwypr5P0=)
2: IJhmUCiFKkEWauTpmApnTpFj-SE.roa (hash: kLeSqMguXmeNnm1rZ9r4cMOYIPZfo29ixEQEwX6dLeM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/5P9bv1QMZZVLmROmjCTRdN6X2Ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/5P9bv1QMZZVLmROmjCTRdN6X2Ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/5P9bv1QMZZVLmROmjCTRdN6X2Ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e1:14:ca:11:9e:36:ac:65:ce:62:65:e5:32:8f:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4ff5bbf540c65954b9913a68c24d174de97d829
Validity
Not Before: Mar 26 16:01:26 2026 GMT
Not After : Mar 27 16:01:26 2026 GMT
Subject: CN=b0e944bcefaf1b950bf6da22fe77142454e487ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:0a:e8:9f:97:90:04:25:34:54:b8:04:6b:fe:
aa:ea:8b:68:09:cf:48:12:bb:94:e9:05:be:2b:d0:
c4:c2:52:97:22:56:9d:5e:87:f2:ed:28:9f:77:55:
85:b4:05:89:2c:65:1f:8f:1c:d4:1d:0a:40:e7:b3:
93:78:56:48:9a:ea:23:fe:25:f0:45:b2:0c:87:f5:
27:68:1b:05:b9:d2:3d:f6:c0:92:3b:9c:85:70:00:
f0:b2:ce:cb:90:c7:ef:b4:f8:93:86:e4:05:2d:b4:
9a:ca:2a:9b:98:93:96:b0:7d:ae:2c:07:b5:9a:3c:
3a:8b:28:08:8b:89:c5:95:91:62:97:21:67:4c:f5:
51:2e:fa:4d:d1:bf:ea:8e:c9:7b:80:c7:db:e4:e2:
a9:a7:aa:a3:43:5c:3a:e4:8f:e2:3d:c8:bd:48:92:
06:e3:ba:24:d6:d4:fc:c6:89:3a:fe:a8:ed:c7:39:
7c:a9:bb:19:58:88:27:c1:32:ed:4c:78:40:e5:5c:
6a:15:86:6c:80:e1:c8:5f:b6:25:32:1b:f9:71:39:
ce:0f:df:ca:fb:12:d1:c9:cc:8d:5f:6b:31:91:01:
4e:cd:f5:c3:e7:1a:e6:79:1b:28:51:ac:74:c6:e7:
ec:df:03:f5:f2:b7:64:1e:59:7e:e0:8c:82:72:4e:
72:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:E9:44:BC:EF:AF:1B:95:0B:F6:DA:22:FE:77:14:24:54:E4:87:ED
X509v3 Authority Key Identifier:
keyid:E4:FF:5B:BF:54:0C:65:95:4B:99:13:A6:8C:24:D1:74:DE:97:D8:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5P9bv1QMZZVLmROmjCTRdN6X2Ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/5P9bv1QMZZVLmROmjCTRdN6X2Ck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/5P9bv1QMZZVLmROmjCTRdN6X2Ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:c9:64:34:56:ca:d3:b7:4b:1f:ac:21:ee:24:1b:3c:4a:e4:
f0:aa:13:37:33:57:bc:f2:53:bc:e6:21:3d:08:86:8b:35:d9:
e6:18:2c:34:73:99:65:8d:df:e7:fd:dc:5c:b9:3e:87:07:f6:
c6:d5:99:16:54:32:48:6e:19:58:65:e4:ff:4a:9d:4e:07:bb:
82:b3:7f:84:35:fa:2c:6a:70:fb:cf:d2:7d:08:1f:5d:13:6e:
5f:84:fa:4c:63:90:22:10:d5:a2:ef:f0:8d:07:89:40:0b:72:
5f:bf:26:9e:ec:70:cf:e4:de:b1:44:19:04:03:39:5e:84:9a:
4a:03:3b:ac:b0:f5:9b:a2:16:27:b9:1e:fc:71:df:39:ab:d2:
c2:c3:1c:87:93:7a:68:04:44:dd:28:97:a6:17:88:60:9e:fa:
5d:86:f5:73:53:be:42:d4:d9:03:4c:91:f9:56:8e:c2:f8:90:
90:e0:68:82:e5:ea:ac:32:c2:9b:35:fe:72:c5:93:b0:97:d9:
d1:0e:99:0b:a6:88:65:37:10:1e:1e:c1:05:c1:d9:a2:c3:93:
87:11:9c:67:fc:f5:40:27:a5:00:74:bc:1a:f2:f4:4b:a2:85:
d6:74:59:20:f0:d2:c1:e8:6c:87:40:2a:25:e7:7f:3c:84:6a:
f6:11:c8:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:14:54 2026 by rpki-client