Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/047dec-d844-467a-a01a-fc03ef794718/1/rsr5Su3_76Q2a8or65GZLB2zTMw.mft
File: rsr5Su3_76Q2a8or65GZLB2zTMw.mft (raw, json)
Hash identifier: WvXPeK3SABYXnD/4+YkyyZx4MStwNwseBCHiCfQQORA=
Subject key identifier: CB:72:AE:4B:EE:F8:91:19:E7:33:AC:E6:3E:74:89:3C:0B:4D:D4:04
Authority key identifier: AE:CA:F9:4A:ED:FF:EF:A4:36:6B:CA:2B:EB:91:99:2C:1D:B3:4C:CC
Certificate issuer: /CN=aecaf94aedffefa4366bca2beb91992c1db34ccc
Certificate serial: 019D2961DBB9CF6C6F1747012DDDE49993D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rsr5Su3_76Q2a8or65GZLB2zTMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/047dec-d844-467a-a01a-fc03ef794718/1/rsr5Su3_76Q2a8or65GZLB2zTMw.mft
Manifest number: 0C1F
Signing time: Thu 26 Mar 2026 09:02:52 +0000
Manifest this update: Thu 26 Mar 2026 09:02:52 +0000
Manifest next update: Fri 27 Mar 2026 09:02:52 +0000
Files and hashes: 1: UG6rGpMCRGYwc6M9y1VhChB7D-o.roa (hash: PZpY+UE6o2ohwLTnt0nTubnygJyEIP8h+jg+Dy/lOic=)
2: rsr5Su3_76Q2a8or65GZLB2zTMw.crl (hash: 0DsEAFHSKtJFdVuvvp8qcSU3aJICrqZ50MugVwrC+O4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/047dec-d844-467a-a01a-fc03ef794718/1/rsr5Su3_76Q2a8or65GZLB2zTMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/047dec-d844-467a-a01a-fc03ef794718/1/rsr5Su3_76Q2a8or65GZLB2zTMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/rsr5Su3_76Q2a8or65GZLB2zTMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:db:b9:cf:6c:6f:17:47:01:2d:dd:e4:99:93:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aecaf94aedffefa4366bca2beb91992c1db34ccc
Validity
Not Before: Mar 26 09:02:52 2026 GMT
Not After : Mar 27 09:02:52 2026 GMT
Subject: CN=cb72ae4beef89119e733ace63e74893c0b4dd404
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:fc:7e:0d:1b:50:27:69:c5:b3:0e:b7:23:fb:
df:de:f7:cc:df:0a:ca:05:b6:01:ac:66:4c:c2:42:
51:62:d8:17:93:5d:5c:50:08:0d:38:74:a1:e6:85:
01:2f:74:51:30:5b:01:8d:cc:83:0e:30:18:bf:3d:
c1:1e:bc:25:96:8e:32:01:01:e9:88:79:63:25:39:
52:fe:cd:3c:d0:62:5b:22:6e:30:2f:0c:dd:13:19:
5a:c2:1d:8e:8b:82:1d:96:66:f3:f5:a3:67:b7:e9:
4a:3c:10:92:d0:09:48:91:86:6a:9f:81:4e:57:99:
6b:53:20:8e:8f:92:d3:f6:a7:5a:f3:0f:a4:cc:7b:
2c:81:9d:e6:e7:47:ae:6d:a9:4d:b6:d3:01:74:3d:
bd:b0:8c:a8:7f:e9:64:43:0c:a6:fd:4d:a4:43:df:
b1:da:81:f5:52:b1:70:cb:6f:e6:e8:fb:87:fa:48:
1a:2b:97:27:5d:59:f8:8d:1d:e3:64:d8:a5:de:ec:
a0:0d:42:f6:95:c5:ca:b9:08:02:16:4a:e8:86:cb:
4a:45:6d:bc:f6:42:ce:b6:c9:89:15:68:44:d0:af:
42:96:46:e8:aa:4e:0a:1c:81:bb:58:3d:1b:06:83:
fd:fe:1b:f6:b4:9c:33:03:22:72:40:fb:71:89:2d:
0c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:72:AE:4B:EE:F8:91:19:E7:33:AC:E6:3E:74:89:3C:0B:4D:D4:04
X509v3 Authority Key Identifier:
keyid:AE:CA:F9:4A:ED:FF:EF:A4:36:6B:CA:2B:EB:91:99:2C:1D:B3:4C:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rsr5Su3_76Q2a8or65GZLB2zTMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/047dec-d844-467a-a01a-fc03ef794718/1/rsr5Su3_76Q2a8or65GZLB2zTMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/047dec-d844-467a-a01a-fc03ef794718/1/rsr5Su3_76Q2a8or65GZLB2zTMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:0b:fe:90:b2:08:1d:e2:9d:9b:83:45:9e:3b:a8:7c:7e:05:
47:56:80:4c:a5:40:b0:c2:88:7a:08:84:23:45:05:31:9e:8b:
6c:5f:90:a9:f0:03:bd:de:ae:ff:5f:ba:f2:dc:04:83:ac:1c:
8e:5b:3a:7d:5b:52:9d:c9:86:bb:79:3a:37:60:06:4b:0a:77:
b9:cd:2a:21:0a:3f:b9:a0:f0:05:98:f2:80:9a:a4:75:f4:2c:
a9:cf:d8:91:6b:ed:1d:dc:fa:6b:8a:ad:f1:6e:a9:b3:ee:16:
c1:b0:73:9b:cb:11:fb:d2:3e:dd:b9:c3:c5:cb:81:e9:7e:86:
9d:2c:6d:0a:9e:3d:b6:fa:81:6e:12:6b:8b:82:98:1c:11:f1:
cf:d1:af:7f:0f:f5:9d:00:33:18:28:22:52:ec:51:d2:74:af:
f0:90:c7:ab:4e:26:4d:32:ff:fa:fa:37:63:a2:6f:d6:d1:ef:
03:00:4b:ce:c5:5b:3d:28:64:85:eb:c6:92:37:41:40:8e:06:
38:7d:f3:7d:1b:da:eb:32:ce:6c:35:1d:2b:b4:4f:73:a3:41:
3a:69:27:9e:c8:b4:74:d7:42:0a:b6:4a:62:2d:50:c9:bd:8d:
0e:4b:a7:65:f8:1f:b5:cd:65:17:27:ae:a5:05:8a:1f:f3:1a:
b1:5a:5a:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:58:14 2026 by rpki-client