Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/d9b450-729d-48de-ab8f-cec40e425264/1/P5R8T9I5bZ7bi8RUQF5XVY2LlQI.mft
File: P5R8T9I5bZ7bi8RUQF5XVY2LlQI.mft (raw, json)
Hash identifier: ZsShe/grJkrGuYbcRmLevjJOWZGCGFQYToZIh8S6hwk=
Subject key identifier: E0:97:02:F7:22:D0:AD:89:0C:A6:10:A0:F7:FB:31:51:C7:E4:0A:C3
Authority key identifier: 3F:94:7C:4F:D2:39:6D:9E:DB:8B:C4:54:40:5E:57:55:8D:8B:95:02
Certificate issuer: /CN=3f947c4fd2396d9edb8bc454405e57558d8b9502
Certificate serial: 019D25BA4DFA2F75ACFDB86E03D9D5916B9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P5R8T9I5bZ7bi8RUQF5XVY2LlQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/d9b450-729d-48de-ab8f-cec40e425264/1/P5R8T9I5bZ7bi8RUQF5XVY2LlQI.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 16:00:59 +0000
Manifest this update: Wed 25 Mar 2026 16:00:59 +0000
Manifest next update: Thu 26 Mar 2026 16:00:59 +0000
Files and hashes: 1: 4rItdFCAXyTHzax5zB2EQ6OhwBM.roa (hash: q25Gmt6B02xtO+B5GemXY9TeBKKJKUx9rShQhMwe5HQ=)
2: Ascb1T5MRl8oo-kehh_BRkLaHrA.asa (hash: W9WHd/i0tHzguizYbyV14C4Ft3qCu8gI4uA0bUVEKZ4=)
3: P5R8T9I5bZ7bi8RUQF5XVY2LlQI.crl (hash: HPwflrGrOPgYC0AbqWdQyUcDs3Ku8rjNItmGroJU0X4=)
4: fSbObenQqMh0-me9W8aCUmvq5EI.roa (hash: zKguKMkuYjbS+U0PhiTMN3CNe4E1jQXYVJh/03csrHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/d9b450-729d-48de-ab8f-cec40e425264/1/P5R8T9I5bZ7bi8RUQF5XVY2LlQI.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/d9b450-729d-48de-ab8f-cec40e425264/1/P5R8T9I5bZ7bi8RUQF5XVY2LlQI.mft
rsync://rpki.ripe.net/repository/DEFAULT/P5R8T9I5bZ7bi8RUQF5XVY2LlQI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:4d:fa:2f:75:ac:fd:b8:6e:03:d9:d5:91:6b:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f947c4fd2396d9edb8bc454405e57558d8b9502
Validity
Not Before: Mar 25 16:00:59 2026 GMT
Not After : Mar 26 16:00:59 2026 GMT
Subject: CN=e09702f722d0ad890ca610a0f7fb3151c7e40ac3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:39:de:22:62:0c:13:a4:cf:89:dd:f2:68:eb:
c2:4d:14:f8:4e:bd:1a:3e:62:c8:cc:b4:0d:7c:62:
57:a7:f0:78:9e:ac:af:27:23:91:71:bf:c5:83:08:
be:90:89:f7:b5:ea:6d:41:5e:82:69:f3:3f:37:da:
26:a8:d7:7a:24:7e:04:ea:0e:e2:01:0e:29:df:a2:
5a:fe:76:1b:45:f7:38:49:91:b0:e3:4c:ef:6d:45:
db:dd:ec:e8:e8:c0:ba:50:08:8a:8c:c8:f8:80:a7:
4f:bd:8c:8b:0a:f7:94:47:85:f8:6a:98:b9:26:b5:
50:03:fe:8f:f4:9a:d7:0c:f1:96:7d:4f:f0:92:17:
da:9f:a4:8a:21:d3:4b:91:d8:55:f6:ac:28:4b:40:
fd:52:44:f3:86:04:18:cf:dd:a4:be:4a:e0:ba:a9:
3b:b8:ef:b9:87:2d:11:59:a2:46:62:7c:6a:27:ba:
71:fc:80:b1:53:f2:f7:cc:7e:12:dc:02:74:b2:6b:
2a:3d:b1:1e:49:77:33:d9:3e:a6:2d:cc:f3:18:31:
6b:32:04:6e:97:4c:bc:d7:1d:0f:22:c4:d6:ef:a5:
f5:53:6e:32:0d:6b:32:5b:23:96:1f:c7:07:b3:54:
44:0b:b2:2f:bc:4c:02:a0:f0:7e:34:c8:bd:e8:0c:
17:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:97:02:F7:22:D0:AD:89:0C:A6:10:A0:F7:FB:31:51:C7:E4:0A:C3
X509v3 Authority Key Identifier:
keyid:3F:94:7C:4F:D2:39:6D:9E:DB:8B:C4:54:40:5E:57:55:8D:8B:95:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P5R8T9I5bZ7bi8RUQF5XVY2LlQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d9b450-729d-48de-ab8f-cec40e425264/1/P5R8T9I5bZ7bi8RUQF5XVY2LlQI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d9b450-729d-48de-ab8f-cec40e425264/1/P5R8T9I5bZ7bi8RUQF5XVY2LlQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:32:d4:e7:17:f7:19:90:95:23:58:a4:ad:88:65:19:54:d3:
b4:66:2d:05:b1:dc:31:63:e7:a8:57:e1:dc:97:7b:fa:79:36:
ca:57:a4:91:2b:4a:d5:06:eb:36:77:eb:b7:bb:bf:a7:a5:4b:
04:3f:ed:d8:f3:71:4f:7c:b5:ea:22:db:52:29:25:bd:01:62:
55:8e:46:b4:a3:40:03:4b:71:66:c9:cb:ad:d7:1a:61:7d:6a:
c2:37:dd:9e:be:16:19:4d:a8:fd:ac:61:c2:a0:b3:6c:79:7c:
7c:ce:3b:77:4d:70:81:2f:85:8c:74:ba:bd:6d:f2:bb:1d:6c:
c2:cb:12:fb:89:b2:fb:db:6b:6e:7b:62:4c:06:c7:d0:73:d1:
5a:70:64:d5:63:1c:6e:d4:0a:79:fd:02:6c:9e:fd:5c:92:d5:
a2:ad:ae:13:fd:a8:0f:09:c5:9b:e3:7d:5e:ce:86:00:3b:41:
3b:34:d3:d5:8d:fd:94:76:f4:5b:2e:3e:4c:b3:77:d7:16:e5:
31:ec:51:13:02:98:2f:30:44:77:2f:b5:e8:f1:73:68:34:4a:
d0:95:c7:6c:0b:44:69:2b:f4:ac:d2:a8:1e:3f:a4:79:7e:b9:
b4:74:ee:89:97:61:0e:4e:cd:23:e8:1f:51:b1:11:f8:60:44:
43:b5:a4:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:26:06 2026 by rpki-client