Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/dd3940-ffd6-4b69-9f01-fd8d25a263d2/1/B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.mft
File: B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.mft (raw, json)
Hash identifier: bEbKfrqb/YmbqIeKARmv8NTBeYWYQCpFeQBPCNxCTF4=
Subject key identifier: 99:BF:BE:2E:09:08:C3:B2:8A:EE:26:D3:5F:11:63:1C:F2:D1:E3:95
Authority key identifier: 07:98:89:D9:DE:4F:07:01:4B:EB:2C:0A:31:2C:D7:36:52:A3:FC:38
Certificate issuer: /CN=079889d9de4f07014beb2c0a312cd73652a3fc38
Certificate serial: 019D273AF0AFF6C2D79A7945C4656AF53C60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/dd3940-ffd6-4b69-9f01-fd8d25a263d2/1/B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 23:01:07 +0000
Manifest this update: Wed 25 Mar 2026 23:01:07 +0000
Manifest next update: Thu 26 Mar 2026 23:01:07 +0000
Files and hashes: 1: 9jxtrBZ24BvCO0-SQXkZpY2MT1w.roa (hash: 8bOhPMZyTgwp0gGxHAalkWKOgr9J3SV40Pjr84Zh1aw=)
2: B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.crl (hash: xnkk/iIE6jhFemh7yehOntMdLC0kOhFyAmQbTBjk8MY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/dd3940-ffd6-4b69-9f01-fd8d25a263d2/1/B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/dd3940-ffd6-4b69-9f01-fd8d25a263d2/1/B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.mft
rsync://rpki.ripe.net/repository/DEFAULT/B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:f0:af:f6:c2:d7:9a:79:45:c4:65:6a:f5:3c:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=079889d9de4f07014beb2c0a312cd73652a3fc38
Validity
Not Before: Mar 25 23:01:07 2026 GMT
Not After : Mar 26 23:01:07 2026 GMT
Subject: CN=99bfbe2e0908c3b28aee26d35f11631cf2d1e395
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b7:8d:4d:c2:a1:94:1f:f9:63:f6:02:9b:8e:
8b:b0:79:7c:63:8f:66:8a:a3:80:ba:71:81:36:87:
ff:e4:53:4d:fb:ac:85:7c:3a:63:01:97:cc:c9:f6:
4a:0a:c4:f2:17:c2:73:28:32:f6:c6:a4:d1:bf:c8:
52:de:ed:5e:79:55:fe:f0:56:54:31:4b:84:32:55:
8f:b9:5f:13:99:27:a6:3c:a9:12:4c:01:13:6d:66:
a9:0d:4c:b7:5a:14:b1:e1:7c:26:1e:48:7d:49:1c:
6c:b6:64:61:d0:1b:92:a9:28:de:03:9a:7e:64:2e:
1d:68:79:bc:61:16:b2:8a:d0:cf:0b:bc:52:b0:d0:
92:d5:1a:90:7b:01:3a:07:7b:9b:8f:5e:b1:68:3d:
e0:5c:4a:6d:b3:b9:aa:3b:18:ad:b9:88:43:1c:f8:
86:07:cb:dd:20:5b:a7:49:4a:0d:c4:e9:54:62:61:
3c:07:65:48:d9:12:4e:19:11:22:51:29:71:0d:7f:
78:3a:6a:be:89:93:9f:3f:20:3f:cf:93:34:fe:80:
07:13:9c:31:95:10:7a:d7:0a:f7:92:47:1d:97:81:
df:1d:6f:6c:88:68:d2:04:ec:de:03:08:f0:a3:1d:
49:b0:ae:c3:79:a0:0e:70:57:4c:5d:fd:a1:5f:ca:
07:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:BF:BE:2E:09:08:C3:B2:8A:EE:26:D3:5F:11:63:1C:F2:D1:E3:95
X509v3 Authority Key Identifier:
keyid:07:98:89:D9:DE:4F:07:01:4B:EB:2C:0A:31:2C:D7:36:52:A3:FC:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/dd3940-ffd6-4b69-9f01-fd8d25a263d2/1/B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/dd3940-ffd6-4b69-9f01-fd8d25a263d2/1/B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:b2:c8:58:8e:9c:f2:9c:46:94:81:b3:e1:8f:43:81:01:0f:
bd:2c:cb:13:80:71:e6:b5:6d:3c:1d:c0:aa:6d:8f:5b:38:c0:
b4:c6:99:74:38:6c:9e:c6:d4:f2:7d:ce:73:c6:8c:87:fb:c3:
50:6a:cc:24:0c:33:11:3a:6d:ba:2e:2e:75:23:c0:bf:c3:3f:
ed:b9:c8:ab:9d:f6:91:97:61:50:72:66:71:da:aa:f1:af:4a:
86:57:96:0c:6d:75:12:5e:1f:45:60:15:5e:7b:d6:56:a3:98:
8c:18:ef:63:37:e1:19:1a:94:cd:02:8b:d3:58:3a:8b:03:54:
eb:82:2f:6a:e5:ee:cc:d8:55:f1:95:57:93:1c:49:01:89:13:
5b:c4:0b:fb:be:0e:9e:29:03:9e:23:dc:61:3d:ac:11:ca:54:
ba:a9:d5:0c:ba:40:f0:f7:c5:42:0b:19:c0:18:92:cd:4e:49:
3c:14:dc:2d:d7:ea:b1:13:dd:66:24:98:7d:93:09:41:7c:2e:
4d:df:93:09:ee:f2:2e:ee:37:87:79:ee:2e:6d:b9:b7:ac:b2:
a4:7c:5d:f4:39:8b:36:03:db:e4:7e:4b:df:ca:01:b3:a8:c1:
84:08:7c:18:b5:e8:a3:64:46:55:93:45:93:dd:c8:35:04:5e:
04:8a:fe:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:29:29 2026 by rpki-client