Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/8246eb-8469-42df-a08f-90c421f55adb/1/f5tM_cmw2ePDHg67gebxscu9yeQ.mft
File: f5tM_cmw2ePDHg67gebxscu9yeQ.mft (raw, json)
Hash identifier: xGBDQyIl0UkqQCzRxH3QvjmVEdns+xhHy0qfIT/C1m4=
Subject key identifier: BF:5C:CE:46:02:FE:F0:4C:F6:20:A9:6F:C3:B5:14:B7:07:F8:D6:38
Authority key identifier: 7F:9B:4C:FD:C9:B0:D9:E3:C3:1E:0E:BB:81:E6:F1:B1:CB:BD:C9:E4
Certificate issuer: /CN=7f9b4cfdc9b0d9e3c31e0ebb81e6f1b1cbbdc9e4
Certificate serial: 019D29CE3B62AC1E84E3B819FD2DEA10AE09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f5tM_cmw2ePDHg67gebxscu9yeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/8246eb-8469-42df-a08f-90c421f55adb/1/f5tM_cmw2ePDHg67gebxscu9yeQ.mft
Manifest number: 0E67
Signing time: Thu 26 Mar 2026 11:01:14 +0000
Manifest this update: Thu 26 Mar 2026 11:01:14 +0000
Manifest next update: Fri 27 Mar 2026 11:01:14 +0000
Files and hashes: 1: f5tM_cmw2ePDHg67gebxscu9yeQ.crl (hash: ysFTh4R3OCzusHF2SI1ffiC1boW/pMsUCktZHmFTjAM=)
2: xuPytDWWOm0n5Q8kqhQeYQRc770.roa (hash: nV8TEsZ35qIOpq9/LxSQCX5axEhmxxpZi06Zd6Qworo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/8246eb-8469-42df-a08f-90c421f55adb/1/f5tM_cmw2ePDHg67gebxscu9yeQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/8246eb-8469-42df-a08f-90c421f55adb/1/f5tM_cmw2ePDHg67gebxscu9yeQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/f5tM_cmw2ePDHg67gebxscu9yeQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:3b:62:ac:1e:84:e3:b8:19:fd:2d:ea:10:ae:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f9b4cfdc9b0d9e3c31e0ebb81e6f1b1cbbdc9e4
Validity
Not Before: Mar 26 11:01:14 2026 GMT
Not After : Mar 27 11:01:14 2026 GMT
Subject: CN=bf5cce4602fef04cf620a96fc3b514b707f8d638
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:84:b5:a2:43:21:20:13:a7:8b:37:cb:54:d5:
81:33:54:60:c7:a0:32:df:8f:c0:86:07:fc:ea:a0:
f7:ef:4d:a5:2c:d6:1c:03:89:c8:c9:4d:54:60:e5:
f6:0d:2a:1a:73:68:31:79:2e:1d:2e:50:57:7b:07:
9c:28:6e:bf:79:db:e1:4f:f8:8a:f4:12:81:21:b0:
6e:e5:03:c9:ff:f2:f4:e1:ba:be:81:47:80:ac:2a:
bb:5f:73:da:f6:df:7c:db:99:28:72:ad:b3:50:8b:
d4:98:54:dd:4b:37:7f:64:33:35:4b:d5:dc:5c:4b:
47:81:c9:ea:31:3b:4c:5d:a9:8f:46:c3:11:c7:e6:
9b:11:66:31:a7:5c:05:d8:b2:4b:8d:62:a4:92:a5:
cc:e3:94:9d:22:51:c2:fc:a0:22:d0:dd:c6:1e:aa:
2d:a2:47:71:6c:90:e2:16:2d:d7:d8:10:91:6e:f2:
68:c7:73:85:47:23:2a:56:17:ff:f5:fb:3c:09:d5:
3f:a9:21:69:56:68:f0:04:3d:bc:56:13:4e:14:8a:
42:a8:9c:f8:cd:0f:04:96:99:73:22:bf:39:84:80:
84:a8:af:2c:11:b0:37:d3:75:6c:e5:67:bd:8b:6e:
20:26:44:d1:42:46:18:4d:59:53:f6:11:31:c2:1d:
16:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:5C:CE:46:02:FE:F0:4C:F6:20:A9:6F:C3:B5:14:B7:07:F8:D6:38
X509v3 Authority Key Identifier:
keyid:7F:9B:4C:FD:C9:B0:D9:E3:C3:1E:0E:BB:81:E6:F1:B1:CB:BD:C9:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5tM_cmw2ePDHg67gebxscu9yeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/8246eb-8469-42df-a08f-90c421f55adb/1/f5tM_cmw2ePDHg67gebxscu9yeQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/8246eb-8469-42df-a08f-90c421f55adb/1/f5tM_cmw2ePDHg67gebxscu9yeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:b4:7c:8b:a1:97:30:0f:83:14:23:ec:c4:87:36:27:22:9c:
66:3b:91:24:8c:48:f6:79:98:e0:67:f7:26:5f:6f:58:be:0f:
89:b6:44:2a:a1:5b:ad:4d:f0:89:19:c8:c8:99:b4:f5:ba:db:
3b:40:1f:f3:35:25:80:83:c1:6a:41:39:21:67:ba:2e:b9:00:
da:c9:f8:e5:65:f7:6b:15:80:f9:a5:9a:5c:4d:e2:ad:09:ad:
d8:81:17:1b:12:d5:c7:ac:a3:2b:b7:c6:72:7c:f9:9c:9e:17:
e2:8d:c6:4a:79:c0:8c:77:ad:df:79:ab:c1:ba:76:fa:a7:39:
3b:0f:af:b2:95:95:0d:1d:39:6c:3e:9f:4a:49:e3:d6:b3:0d:
97:a5:26:28:39:9c:07:d4:50:77:cb:3c:08:4e:a0:2a:4a:45:
d5:eb:9d:d3:d4:fc:50:18:2a:66:bc:07:a2:da:33:b8:ad:e9:
b9:e9:de:7a:26:c8:82:6d:79:d4:58:f4:64:fe:d2:18:e0:f3:
c7:4b:0f:84:22:9d:9d:ed:bb:97:26:f1:77:b1:f7:95:ed:e1:
07:d6:5e:b4:e7:05:1d:1f:25:43:60:94:56:1a:d8:44:7a:bd:
9d:1e:31:69:e4:a7:c8:21:1e:41:2b:32:94:e7:2a:bd:50:e1:
33:2e:36:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:53:59 2026 by rpki-client