Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/ca2a80-1d90-4823-b3f1-4e284cff0799/1/5nXaCc0660yTfGP1NfM_1X0MIZE.mft
File: 5nXaCc0660yTfGP1NfM_1X0MIZE.mft (raw, json)
Hash identifier: sT2vkerZeJ4fmFOmQ+GHXr6MsRssHhADDZBPclv6M7A=
Subject key identifier: 34:4F:0D:25:2E:4C:1D:91:86:DC:DF:00:AB:DC:AD:FA:04:84:AD:A0
Authority key identifier: E6:75:DA:09:CD:3A:EB:4C:93:7C:63:F5:35:F3:3F:D5:7D:0C:21:91
Certificate issuer: /CN=e675da09cd3aeb4c937c63f535f33fd57d0c2191
Certificate serial: 019D2AA9D5F210D6E31EEDD56EB767CACABE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5nXaCc0660yTfGP1NfM_1X0MIZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/ca2a80-1d90-4823-b3f1-4e284cff0799/1/5nXaCc0660yTfGP1NfM_1X0MIZE.mft
Manifest number: 16B4
Signing time: Thu 26 Mar 2026 15:01:06 +0000
Manifest this update: Thu 26 Mar 2026 15:01:06 +0000
Manifest next update: Fri 27 Mar 2026 15:01:06 +0000
Files and hashes: 1: 5nXaCc0660yTfGP1NfM_1X0MIZE.crl (hash: N9tZxzgK2/yaR04xFjAB+Q5eEKfyVY6O3TUe3KPmw/Q=)
2: IWYrbXuJb7rdaqwraiq_apy6AMA.roa (hash: abrxD3L91b+QPLIZVyKImnAT+E+aScHR2G4289W+U4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/ca2a80-1d90-4823-b3f1-4e284cff0799/1/5nXaCc0660yTfGP1NfM_1X0MIZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/ca2a80-1d90-4823-b3f1-4e284cff0799/1/5nXaCc0660yTfGP1NfM_1X0MIZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/5nXaCc0660yTfGP1NfM_1X0MIZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 15:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:a9:d5:f2:10:d6:e3:1e:ed:d5:6e:b7:67:ca:ca:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e675da09cd3aeb4c937c63f535f33fd57d0c2191
Validity
Not Before: Mar 26 15:01:06 2026 GMT
Not After : Mar 27 15:01:06 2026 GMT
Subject: CN=344f0d252e4c1d9186dcdf00abdcadfa0484ada0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:58:14:a6:08:14:17:9a:59:6a:c5:7b:52:5c:
7a:f3:97:b4:69:21:f6:71:ce:01:cf:45:e5:29:7a:
83:33:ea:52:f4:4d:7b:e3:b9:e3:0b:08:a7:ec:13:
e1:47:36:44:3a:0a:2b:d1:66:18:4a:a3:35:e4:04:
ba:6b:35:04:6d:34:82:ea:49:c2:25:a7:d5:75:e2:
07:5e:22:1e:2f:fa:79:a4:c6:33:0e:a6:e5:20:bd:
67:d8:a1:5d:67:c3:7f:c1:aa:9f:8c:80:a4:db:10:
c4:e5:b5:50:51:4f:c2:ae:bb:e7:91:67:44:0d:cd:
0b:6f:d4:7d:ad:33:6f:90:12:71:c8:8a:53:25:85:
ef:cd:f6:0c:49:66:7f:d8:c1:8a:cc:c3:76:0b:fb:
10:7a:e9:8f:1b:64:62:e3:4e:cd:61:15:6d:5f:fe:
87:b5:10:41:6f:68:bc:84:a1:43:50:2f:24:e9:64:
ab:b0:9f:45:e8:5d:3c:65:b4:84:ab:1b:b1:2c:1e:
fe:3f:f1:b1:8a:35:d7:ea:3e:89:84:ac:7c:fd:e7:
4f:3e:08:15:c6:23:06:2f:80:b9:fb:a4:06:ba:c6:
29:72:71:6a:8f:66:13:d3:d9:59:bc:b2:46:24:0c:
29:fa:ab:45:6b:4f:73:c2:86:2c:07:69:e2:20:67:
31:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:4F:0D:25:2E:4C:1D:91:86:DC:DF:00:AB:DC:AD:FA:04:84:AD:A0
X509v3 Authority Key Identifier:
keyid:E6:75:DA:09:CD:3A:EB:4C:93:7C:63:F5:35:F3:3F:D5:7D:0C:21:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5nXaCc0660yTfGP1NfM_1X0MIZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/ca2a80-1d90-4823-b3f1-4e284cff0799/1/5nXaCc0660yTfGP1NfM_1X0MIZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/ca2a80-1d90-4823-b3f1-4e284cff0799/1/5nXaCc0660yTfGP1NfM_1X0MIZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:7a:47:4f:ea:67:46:09:4c:d2:9b:dd:6d:40:d8:02:9f:a5:
bd:96:5f:0e:02:fc:66:e3:92:32:26:cc:2b:70:c0:41:30:29:
b8:6a:5c:1f:ce:57:32:6d:ea:2e:0b:af:0e:8d:9f:16:68:1e:
c5:bb:8b:19:d0:b3:45:88:eb:be:43:1d:54:6c:14:77:6d:9d:
78:ef:a7:2a:be:55:c5:8d:c3:f8:f4:1b:5b:bc:a9:4b:f1:03:
25:07:06:1b:29:b0:27:ff:6f:93:f4:b2:f9:88:bb:52:50:4a:
fd:2a:e6:61:7d:ab:8f:f9:6f:23:14:d9:3e:14:ad:b1:fd:7c:
3a:da:8f:4e:32:cb:0a:1f:a1:48:aa:02:1d:ad:73:17:95:54:
6b:e1:14:df:7c:cb:a6:e9:11:ac:f2:ea:9f:a8:99:a3:f3:b5:
91:42:05:0a:c2:3f:2b:12:2e:e0:52:0f:b4:e4:34:d1:6a:35:
ab:79:60:54:2e:dc:14:26:26:47:f4:53:9d:4a:04:be:d1:56:
b5:2c:9d:ae:7f:3a:8b:2f:a3:fc:90:38:ab:56:29:3c:c6:e4:
3c:42:41:ff:3d:ff:f1:21:62:5c:c5:94:9e:2b:1f:42:34:ff:
91:a1:e2:9c:44:a5:a1:30:c2:53:9b:12:f8:11:d8:25:1f:60:
79:97:96:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:15:24 2026 by rpki-client