Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/b3961c-3f68-45c1-a04e-95469bf09340/1/To25ZDiURsq8r3lBzRmDQsIzbdA.mft
File: To25ZDiURsq8r3lBzRmDQsIzbdA.mft (raw, json)
Hash identifier: Cr6HKuO15O5FOjohb4dJc+3m3nKqkC8x2jpBbsUj79I=
Subject key identifier: 5E:E3:52:2D:F2:96:85:18:E4:93:C7:A7:24:CE:3E:5E:F4:49:30:33
Authority key identifier: 4E:8D:B9:64:38:94:46:CA:BC:AF:79:41:CD:19:83:42:C2:33:6D:D0
Certificate issuer: /CN=4e8db964389446cabcaf7941cd198342c2336dd0
Certificate serial: 019D29610DA29DAFE984F1F8F49BB8702ACF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/To25ZDiURsq8r3lBzRmDQsIzbdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/b3961c-3f68-45c1-a04e-95469bf09340/1/To25ZDiURsq8r3lBzRmDQsIzbdA.mft
Manifest number: 0A39
Signing time: Thu 26 Mar 2026 09:01:59 +0000
Manifest this update: Thu 26 Mar 2026 09:01:59 +0000
Manifest next update: Fri 27 Mar 2026 09:01:59 +0000
Files and hashes: 1: COE1l5AcJpUIj8VESfwwNIX_aqE.roa (hash: Xk4fQMZM2kqvaeEiNYmxxopzI51Y0bhYgcMl+wQt2Ak=)
2: To25ZDiURsq8r3lBzRmDQsIzbdA.crl (hash: b3C1J4a/vrrfkCtAzAq6f7n8wnwldJAk+7f+juw+x7Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/b3961c-3f68-45c1-a04e-95469bf09340/1/To25ZDiURsq8r3lBzRmDQsIzbdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/b3961c-3f68-45c1-a04e-95469bf09340/1/To25ZDiURsq8r3lBzRmDQsIzbdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/To25ZDiURsq8r3lBzRmDQsIzbdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:0d:a2:9d:af:e9:84:f1:f8:f4:9b:b8:70:2a:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e8db964389446cabcaf7941cd198342c2336dd0
Validity
Not Before: Mar 26 09:01:59 2026 GMT
Not After : Mar 27 09:01:59 2026 GMT
Subject: CN=5ee3522df2968518e493c7a724ce3e5ef4493033
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:40:89:69:66:13:b8:98:a2:45:6e:ea:1b:1c:
c9:ae:ce:a4:bc:0b:17:f1:a5:6a:47:a0:1f:dc:0f:
2d:c4:74:1f:94:7c:15:6d:d1:7b:96:6f:f5:3c:f0:
c8:25:9f:62:3c:c0:1f:9d:1e:6d:d5:34:8c:77:55:
30:2c:9d:cf:3e:c3:a3:94:10:7c:c3:dc:88:03:43:
96:c5:4a:ab:db:6a:64:79:f2:77:75:df:8c:6a:d1:
b7:42:52:65:ab:43:91:6d:40:e1:26:2d:0e:ec:4f:
7b:33:0b:d0:9f:a5:0c:59:7b:06:9a:23:cb:8e:e3:
0d:62:6a:69:12:e9:d6:68:05:08:87:65:c3:2d:28:
6a:96:dc:b9:c7:82:d3:be:61:8c:e5:e6:98:47:66:
54:57:bd:e7:cf:55:e0:c7:0a:e3:37:5e:2f:6d:6d:
8b:d4:27:1b:10:cf:c8:24:8c:df:20:5a:00:45:68:
9f:eb:19:2b:54:bb:66:08:f9:30:f0:f2:57:a6:9a:
85:ef:65:ea:f3:a9:d7:a7:74:84:88:97:52:dc:c6:
61:c8:93:08:9d:51:ae:fe:c5:36:eb:4c:e3:89:43:
ca:d3:76:e1:a5:09:46:55:28:9f:22:3c:74:f7:cf:
44:be:1b:34:63:27:a0:ba:99:5b:5e:ec:5a:ff:e4:
df:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:E3:52:2D:F2:96:85:18:E4:93:C7:A7:24:CE:3E:5E:F4:49:30:33
X509v3 Authority Key Identifier:
keyid:4E:8D:B9:64:38:94:46:CA:BC:AF:79:41:CD:19:83:42:C2:33:6D:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/To25ZDiURsq8r3lBzRmDQsIzbdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/b3961c-3f68-45c1-a04e-95469bf09340/1/To25ZDiURsq8r3lBzRmDQsIzbdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/b3961c-3f68-45c1-a04e-95469bf09340/1/To25ZDiURsq8r3lBzRmDQsIzbdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:1e:1a:8f:fd:e5:7e:b8:84:26:2c:ca:02:18:8c:a1:56:96:
1a:19:e3:5d:b0:e1:4b:92:63:95:1e:0c:b5:23:b6:43:a6:ea:
ea:23:7d:b8:80:31:86:1f:5a:22:a2:65:bd:b7:ef:57:0c:30:
79:46:d5:83:0a:3a:a2:14:b7:7e:35:3c:92:69:5a:d0:53:6b:
d3:8b:96:35:d9:f7:87:39:49:09:69:d8:7d:71:72:57:34:45:
e9:2f:a8:b2:06:b7:03:67:05:4a:69:e2:68:2e:08:b3:c5:fc:
02:dd:55:8b:ac:b0:43:19:a0:0b:70:df:8c:6d:01:3e:fc:22:
9a:71:2a:6c:92:08:32:43:36:14:7f:d1:39:57:3c:c8:b0:3b:
4a:65:9b:85:9d:80:83:e2:9a:3f:a3:21:8b:1f:bb:f8:fc:69:
40:28:53:8a:46:e3:3b:b4:59:72:6f:e3:64:18:c6:45:f5:25:
53:64:84:41:f5:18:16:f0:f9:3a:e5:46:ba:d6:e7:e2:06:f2:
be:33:7e:ab:0e:0e:7c:35:60:32:97:9f:17:52:10:95:39:8b:
36:be:38:43:1a:b3:91:31:37:50:27:cf:4c:8f:60:98:f6:c0:
63:d5:a1:5e:b5:9d:7f:84:ad:b1:c4:08:3a:ea:d2:47:cf:88:
a4:12:3b:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:54:38 2026 by rpki-client