Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/51ea49-7128-46e0-838d-7d5ecb4f181f/1/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.mft
File: n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.mft (raw, json)
Hash identifier: tZhXvVpZ1/DkiWJ4BQX7wLPIzaGsE1xMiqrRYcdpVts=
Subject key identifier: 3B:C1:4A:AA:4B:08:C5:65:71:29:C7:0B:78:62:DB:A1:40:49:A0:B6
Authority key identifier: 9F:97:4D:A4:5D:59:14:ED:E1:38:1E:EA:F9:C2:BB:16:45:B6:64:3A
Certificate issuer: /CN=9f974da45d5914ede1381eeaf9c2bb1645b6643a
Certificate serial: 019D26285B905610446B823121987EA84078
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/51ea49-7128-46e0-838d-7d5ecb4f181f/1/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.mft
Manifest number: 07EF
Signing time: Wed 25 Mar 2026 18:01:12 +0000
Manifest this update: Wed 25 Mar 2026 18:01:12 +0000
Manifest next update: Thu 26 Mar 2026 18:01:12 +0000
Files and hashes: 1: 1t1mh1im05R5TEOwI71Jiu37ecs.roa (hash: m9uNu74yMGw3x49FIpVoScb0nsc8GhB3C9Hq/L+dUZE=)
2: n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.crl (hash: mJdWuJTWkOuRZ0mxpmE4vOj4RK/a3maeZhjmTjfPywo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/51ea49-7128-46e0-838d-7d5ecb4f181f/1/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/51ea49-7128-46e0-838d-7d5ecb4f181f/1/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.mft
rsync://rpki.ripe.net/repository/DEFAULT/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:5b:90:56:10:44:6b:82:31:21:98:7e:a8:40:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f974da45d5914ede1381eeaf9c2bb1645b6643a
Validity
Not Before: Mar 25 18:01:12 2026 GMT
Not After : Mar 26 18:01:12 2026 GMT
Subject: CN=3bc14aaa4b08c5657129c70b7862dba14049a0b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:a7:eb:e2:dd:0a:b3:b7:c5:a5:96:93:0c:a8:
9a:8e:9c:b6:94:00:97:3a:48:9a:71:e7:51:f8:82:
1f:5f:e7:c2:b0:b5:d9:50:70:3e:59:95:4d:76:32:
e7:30:06:e2:2d:b8:fc:b9:ff:b9:2b:c7:8c:6b:c7:
ff:56:a4:97:6b:0b:2d:c8:ee:5d:ed:67:de:a3:a8:
bd:94:02:06:52:3b:74:eb:95:28:09:08:e9:5b:37:
7c:da:3a:e9:d1:e6:b9:fd:db:00:19:f1:59:c6:a6:
99:48:64:f2:d8:72:18:f7:75:4d:f9:9c:ce:09:70:
01:13:21:f6:65:7f:ec:ba:6d:0b:39:4f:ad:a8:15:
9f:fd:74:f2:a8:33:25:7d:dd:49:7e:fd:2a:5f:b2:
69:38:9b:ff:eb:1b:de:f2:40:71:63:68:0b:0a:74:
ac:23:49:55:55:75:4f:9c:38:99:6d:7b:89:7c:fe:
5c:3d:09:e1:93:db:b3:bc:7c:0e:ad:d4:76:63:97:
95:f2:8b:0b:4a:bb:6d:9b:9c:83:a8:1d:a1:d6:db:
64:84:d3:27:f6:41:8a:e1:8e:e8:29:5c:1e:f4:77:
28:f1:8b:c2:23:7a:1a:13:24:51:c3:21:80:e3:70:
ac:cf:c8:ce:4b:0c:fe:44:25:e0:2f:e6:c6:16:c1:
5b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:C1:4A:AA:4B:08:C5:65:71:29:C7:0B:78:62:DB:A1:40:49:A0:B6
X509v3 Authority Key Identifier:
keyid:9F:97:4D:A4:5D:59:14:ED:E1:38:1E:EA:F9:C2:BB:16:45:B6:64:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/51ea49-7128-46e0-838d-7d5ecb4f181f/1/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/51ea49-7128-46e0-838d-7d5ecb4f181f/1/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:24:c2:fa:5c:0f:d4:ed:f5:41:9e:fc:03:93:db:30:33:fe:
88:84:bb:40:b7:58:39:a8:90:a8:69:7e:c8:24:d5:dd:40:b5:
e5:f3:41:a2:7a:79:fc:78:f0:1c:f6:56:c4:43:68:d8:20:c6:
d0:5b:ce:2d:70:fe:f6:f3:2f:a4:7f:d4:89:11:01:35:24:66:
10:01:b4:0a:6d:9b:73:a6:64:5c:ad:8e:37:4f:ce:43:e6:8e:
a4:33:59:2c:81:58:6a:b8:38:9e:63:b4:ad:79:63:98:1e:1c:
68:93:82:3b:e3:1e:3e:8e:cd:24:3e:3b:5f:ee:5a:b4:f7:e2:
56:5d:0e:c0:99:31:fc:59:4b:11:4d:17:bd:1e:ac:05:c1:1a:
56:91:3b:60:0f:03:f2:10:0d:38:38:a5:f3:51:ac:2d:f2:db:
92:d6:46:9b:aa:16:38:e2:27:54:6c:70:3e:85:3b:e2:76:8a:
32:20:55:52:2c:d5:02:cb:9c:4c:d6:4b:5a:12:50:30:60:0b:
34:f3:ec:a0:1c:31:fc:78:77:a3:09:03:9c:71:72:95:24:a0:
d9:a1:da:2e:4e:c0:83:79:36:94:2d:9d:76:63:a7:e4:ee:2d:
77:03:8c:9b:ce:f7:a5:65:71:11:6f:d7:1a:a1:00:36:37:f4:
4f:41:a4:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:38 2026 by rpki-client