Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.mft
File: bF5O9VFnmf_guxuDkxfb01W7eps.mft (raw, json)
Hash identifier: 2DZfxoLTkvwTI16xkKEUXWVBNQuStIADKEWDMvreVuM=
Subject key identifier: 45:9F:DA:69:F7:74:B3:FB:D3:71:68:45:25:BE:17:E0:D2:2E:E9:CC
Authority key identifier: 6C:5E:4E:F5:51:67:99:FF:E0:BB:1B:83:93:17:DB:D3:55:BB:7A:9B
Certificate issuer: /CN=6c5e4ef5516799ffe0bb1b839317dbd355bb7a9b
Certificate serial: 019D25F1C8B241CA89411BF7AB39269A3176
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bF5O9VFnmf_guxuDkxfb01W7eps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.mft
Manifest number: 1891
Signing time: Wed 25 Mar 2026 17:01:35 +0000
Manifest this update: Wed 25 Mar 2026 17:01:35 +0000
Manifest next update: Thu 26 Mar 2026 17:01:35 +0000
Files and hashes: 1: 5NilnHVTFvhw8pc3Lval-8HXW7Y.roa (hash: gQRKbTEYjnTPPF8SZWL9Teg705vkg8I26INqJViriWM=)
2: bF5O9VFnmf_guxuDkxfb01W7eps.crl (hash: j4jZ8BvhkxBloFGBNITCFF/8e4ase50qq5Wh8MN+3u4=)
3: hlcXZMeAMbkehrXk-27ZnwwQkjg.asa (hash: wBLQaWYKTnIqqL34G0mpW0UNwvJ6e3s2XvxRjFygR1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.mft
rsync://rpki.ripe.net/repository/DEFAULT/bF5O9VFnmf_guxuDkxfb01W7eps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:c8:b2:41:ca:89:41:1b:f7:ab:39:26:9a:31:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c5e4ef5516799ffe0bb1b839317dbd355bb7a9b
Validity
Not Before: Mar 25 17:01:35 2026 GMT
Not After : Mar 26 17:01:35 2026 GMT
Subject: CN=459fda69f774b3fbd371684525be17e0d22ee9cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:05:75:b2:ff:5e:61:4e:b5:1a:53:92:14:a4:
92:b7:65:da:94:10:cd:7d:50:c4:e5:4c:d0:a1:53:
d2:e6:e5:58:99:bc:ff:22:35:bd:c7:9f:21:e7:6f:
f1:9d:0f:f0:77:0d:a4:c0:df:46:33:3c:40:e3:95:
b8:7a:e5:6e:a6:42:28:7a:a4:42:1c:f7:e3:25:f9:
7f:93:44:9a:16:7c:13:a8:cf:bf:e4:8b:4b:8b:65:
d2:e8:ea:93:1c:a5:35:b1:6f:81:3d:f3:d0:94:69:
28:ff:b0:6c:50:6f:fa:0f:71:fe:59:da:d1:77:96:
85:e7:c6:23:64:13:46:71:46:58:c5:a5:c5:60:43:
27:37:be:52:64:73:9e:9f:a6:c3:84:a2:db:ce:93:
cf:2c:4e:01:4f:b7:ec:a3:f2:b6:f8:43:f0:b6:14:
55:3e:be:be:96:bb:e1:86:74:f5:e2:2e:ea:23:64:
51:3b:f8:85:30:ac:67:fa:52:75:6a:66:93:86:8e:
5f:81:f8:52:58:55:4b:b6:85:85:e3:94:2b:f5:0e:
60:7b:28:49:4c:ee:53:4e:a3:2d:0c:58:0a:45:2f:
cd:e2:8a:67:a1:3d:70:bc:e1:ff:d5:05:b4:86:7e:
8b:29:10:7d:fa:06:b4:72:73:71:ee:be:2f:20:28:
b0:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:9F:DA:69:F7:74:B3:FB:D3:71:68:45:25:BE:17:E0:D2:2E:E9:CC
X509v3 Authority Key Identifier:
keyid:6C:5E:4E:F5:51:67:99:FF:E0:BB:1B:83:93:17:DB:D3:55:BB:7A:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bF5O9VFnmf_guxuDkxfb01W7eps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:45:3a:7c:36:ce:37:f4:4a:02:55:b7:d9:9a:e0:b9:a9:c0:
34:92:9b:a9:1e:f6:51:16:03:14:ba:61:51:33:da:01:4c:73:
ff:94:43:18:1f:41:bb:6e:0b:fe:fe:80:f8:3d:7e:99:54:80:
5a:8c:08:48:50:34:8b:74:42:4a:ee:a7:f3:8b:c3:fc:05:6f:
49:80:0c:4a:62:3a:a0:fd:f3:85:25:98:d5:2a:8c:81:b2:3c:
0d:84:d6:99:2b:f7:5f:7a:dd:98:73:50:3a:36:7b:c9:9d:06:
95:d1:82:95:af:7e:f3:d0:42:38:08:9d:26:28:c2:8e:eb:6f:
fe:b5:5e:33:42:e5:69:3f:d0:d0:37:ad:3c:73:38:1a:05:7c:
53:d6:86:83:02:9c:21:f0:aa:e8:c6:56:ea:6f:3d:b7:47:1d:
a5:74:44:e8:46:23:78:ff:3d:1d:75:88:6a:18:19:75:9d:d1:
64:b0:7e:45:16:73:c6:77:52:b6:ab:fe:78:bd:81:ea:ff:8a:
e1:6f:a1:05:d7:96:27:c9:3d:db:27:de:73:99:f7:de:f4:73:
14:01:66:1c:35:0a:c6:19:16:a9:dc:c2:9d:5c:dd:bf:b3:a6:
27:fc:85:b9:4a:0e:b2:9a:57:98:6f:a8:5c:5b:95:d9:92:ee:
1d:71:71:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:24:42 2026 by rpki-client