
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/6bb5b1-1e6a-4455-9d75-e64c885f62ce/1/n5auJ3AmWvMufUvoa6sHoHwtM1M.mft
File: n5auJ3AmWvMufUvoa6sHoHwtM1M.mft (raw, json)
Hash identifier: DXNNQY6xdrOcE1j5VRNMAoCsIaPEnXRmIheO9PTp9h4=
Subject key identifier: 48:82:31:58:7B:58:D3:91:42:0E:2A:A4:F0:14:58:9F:B2:AF:6A:BD
Authority key identifier: 9F:96:AE:27:70:26:5A:F3:2E:7D:4B:E8:6B:AB:07:A0:7C:2D:33:53
Certificate issuer: /CN=9f96ae2770265af32e7d4be86bab07a07c2d3353
Certificate serial: 019D265F351DDFAC4C68B6E21AD3F948355A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n5auJ3AmWvMufUvoa6sHoHwtM1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/6bb5b1-1e6a-4455-9d75-e64c885f62ce/1/n5auJ3AmWvMufUvoa6sHoHwtM1M.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 19:01:06 +0000
Manifest this update: Wed 25 Mar 2026 19:01:06 +0000
Manifest next update: Thu 26 Mar 2026 19:01:06 +0000
Files and hashes: 1: KyIL3asNoQ4Ad8qGZAr89eB7ca4.roa (hash: ds+2+c6dFsxpOer7wRkA5m/ze2fRmfjRiONNK5szPXc=)
2: buiPavT-Zfx6W72yl4fFQx5DwDc.roa (hash: H3Kr3JFr7VDVGCn1y+EmkSg9SrmE8in6T0N0RwfWJLM=)
3: n5auJ3AmWvMufUvoa6sHoHwtM1M.crl (hash: zBkCz7a0TVgjciW0ebEpr4FvANuvXx05m/SgBemPJUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/6bb5b1-1e6a-4455-9d75-e64c885f62ce/1/n5auJ3AmWvMufUvoa6sHoHwtM1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/6bb5b1-1e6a-4455-9d75-e64c885f62ce/1/n5auJ3AmWvMufUvoa6sHoHwtM1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/n5auJ3AmWvMufUvoa6sHoHwtM1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:35:1d:df:ac:4c:68:b6:e2:1a:d3:f9:48:35:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f96ae2770265af32e7d4be86bab07a07c2d3353
Validity
Not Before: Mar 25 19:01:06 2026 GMT
Not After : Mar 26 19:01:06 2026 GMT
Subject: CN=488231587b58d391420e2aa4f014589fb2af6abd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:4f:c6:4b:0a:28:d1:eb:1a:45:1e:f3:a7:5e:
09:c6:74:1a:09:ca:71:69:d7:49:b4:6a:7f:11:07:
5c:e9:36:53:97:ee:b5:84:33:a5:5f:0f:9f:1c:ee:
17:52:ee:cb:c6:72:90:15:72:df:5c:f1:50:6a:fb:
be:1e:e1:33:98:e6:7a:2f:d1:c8:0b:82:86:0d:0c:
11:c9:8d:6e:87:c4:92:22:11:c7:9c:7c:44:3c:ff:
d2:ae:cc:c5:53:49:64:03:e6:d6:3d:d2:39:a6:11:
bd:32:5b:3c:91:25:bc:dd:da:42:59:83:b9:1d:60:
7d:d9:ab:7c:24:62:0f:52:ee:01:c8:f7:b1:02:f5:
dd:3e:f2:94:18:c6:8a:b9:1e:fc:5f:f4:7b:c1:9f:
2a:67:6a:83:e4:f9:99:25:ea:a2:e0:b5:f4:b3:96:
61:0e:35:e6:31:d4:e2:3c:35:56:b4:36:52:8e:a7:
d4:62:9e:16:ab:13:29:86:b6:35:38:50:79:97:1f:
e6:2e:c5:74:de:f5:3c:f5:7e:92:36:4b:24:63:5d:
58:b4:c1:ab:ad:07:a8:ca:28:30:36:e8:cc:e6:ab:
1a:39:5a:af:44:72:75:91:80:0d:df:2b:8d:43:d8:
ae:b8:03:a4:0d:41:86:d9:c0:50:0a:a9:5a:06:1d:
ae:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:82:31:58:7B:58:D3:91:42:0E:2A:A4:F0:14:58:9F:B2:AF:6A:BD
X509v3 Authority Key Identifier:
keyid:9F:96:AE:27:70:26:5A:F3:2E:7D:4B:E8:6B:AB:07:A0:7C:2D:33:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n5auJ3AmWvMufUvoa6sHoHwtM1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/6bb5b1-1e6a-4455-9d75-e64c885f62ce/1/n5auJ3AmWvMufUvoa6sHoHwtM1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/6bb5b1-1e6a-4455-9d75-e64c885f62ce/1/n5auJ3AmWvMufUvoa6sHoHwtM1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:5c:37:cf:67:c5:1c:58:8f:8d:ce:7c:4c:cd:d9:a1:7b:e1:
7c:5b:70:f0:d4:a7:cd:79:ef:ea:7c:f4:de:2f:a2:0b:d0:5f:
0b:4b:f7:d0:53:b8:80:ca:a2:3d:30:74:ae:c9:ed:fb:7c:b9:
49:2c:52:4d:d9:63:33:0e:94:56:f3:a7:06:17:45:ee:53:ce:
e1:4c:a5:19:e7:11:35:7d:fb:d9:93:32:92:bd:0c:f5:87:8f:
48:3e:5d:45:e3:ab:a9:5a:7e:a9:59:a4:66:4d:d1:59:b1:1f:
f1:28:f5:64:b9:2e:0f:b2:c7:34:bd:62:71:4e:7a:c1:d8:36:
c8:e8:8d:73:b6:f4:4a:36:b5:83:7e:8b:dd:e9:2d:23:ac:1d:
31:68:7c:4d:c4:f0:06:a6:81:4e:3f:e7:7e:1c:c9:f4:2f:b6:
e1:f6:90:5f:ea:74:ae:15:a3:b5:2b:b8:3b:2d:f1:a6:73:5d:
5e:50:a2:3c:88:72:42:20:22:6a:0f:50:3d:78:05:ba:32:ed:
06:87:81:89:ff:62:58:2f:ef:53:64:6f:3a:d6:14:2c:3b:8f:
05:d8:2a:fb:66:87:33:ef:1a:5b:af:7e:68:90:76:ce:58:bc:
d5:2f:96:5c:5e:35:89:37:b1:51:86:75:a6:ee:7a:1b:3a:9b:
7c:22:2f:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:46:01 2026 by rpki-client