Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/dbd127-4b12-4f18-8dde-a3585a05ea2b/1/p5TNL5F05CFpMaEF2yYayqOTinw.mft
File: p5TNL5F05CFpMaEF2yYayqOTinw.mft (raw, json)
Hash identifier: 2y1uAhMOkX7c5Lqfkv2JErfAOwORIdRKPaangY46YPc=
Subject key identifier: 43:8C:5E:BD:4A:AF:47:7B:02:33:4A:AC:59:DC:8A:4B:F3:05:5F:19
Authority key identifier: A7:94:CD:2F:91:74:E4:21:69:31:A1:05:DB:26:1A:CA:A3:93:8A:7C
Certificate issuer: /CN=a794cd2f9174e4216931a105db261acaa3938a7c
Certificate serial: 019D2B4EB8FC003A243162BCD6A81833DD41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p5TNL5F05CFpMaEF2yYayqOTinw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/dbd127-4b12-4f18-8dde-a3585a05ea2b/1/p5TNL5F05CFpMaEF2yYayqOTinw.mft
Manifest number: 15A2
Signing time: Thu 26 Mar 2026 18:01:12 +0000
Manifest this update: Thu 26 Mar 2026 18:01:12 +0000
Manifest next update: Fri 27 Mar 2026 18:01:12 +0000
Files and hashes: 1: 90hPxplRTKd47CKZ1EGIAdjAcww.roa (hash: qjKUzT+9JY1K1fEY3iAb3iZ9WYgyejSQ6/cliebHVWs=)
2: p5TNL5F05CFpMaEF2yYayqOTinw.crl (hash: 3VLNkv2d68Pq5wychEaWnDoAit3X6xYaJKpLmgvRn6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/dbd127-4b12-4f18-8dde-a3585a05ea2b/1/p5TNL5F05CFpMaEF2yYayqOTinw.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/dbd127-4b12-4f18-8dde-a3585a05ea2b/1/p5TNL5F05CFpMaEF2yYayqOTinw.mft
rsync://rpki.ripe.net/repository/DEFAULT/p5TNL5F05CFpMaEF2yYayqOTinw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:4e:b8:fc:00:3a:24:31:62:bc:d6:a8:18:33:dd:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a794cd2f9174e4216931a105db261acaa3938a7c
Validity
Not Before: Mar 26 18:01:12 2026 GMT
Not After : Mar 27 18:01:12 2026 GMT
Subject: CN=438c5ebd4aaf477b02334aac59dc8a4bf3055f19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:61:8c:b4:13:5f:fa:d8:b4:3c:d4:a0:be:bf:
a1:b2:7e:65:4d:bf:ce:07:37:8f:d4:64:d1:46:74:
6f:9e:52:ec:13:11:3a:45:dd:da:da:5f:90:7b:32:
e8:77:af:8b:ad:cf:ac:43:a0:90:a0:bc:b7:3c:ff:
00:ea:4a:4f:67:50:16:90:98:45:1d:c3:10:c5:85:
e0:4b:06:19:5e:0b:ed:63:38:6b:c7:06:32:2f:af:
c8:05:a7:7d:c8:11:aa:f6:9d:5a:71:72:62:99:bf:
df:42:02:ad:d8:e4:37:cb:aa:5a:39:3c:1a:9b:9a:
8f:88:d9:81:b9:96:01:9a:49:d1:fb:0c:c7:64:4a:
2c:bd:f3:3b:c0:60:7c:87:71:c0:da:26:69:3d:80:
0c:3f:39:8f:ff:1d:a5:ad:dd:2f:33:60:93:0c:41:
b1:68:8c:3d:32:9b:e3:12:6b:ce:92:58:fb:31:e4:
8d:cd:aa:ad:d2:16:42:58:2c:ae:9a:f6:79:eb:09:
c7:da:84:08:d7:45:6e:35:8c:1e:3c:cb:a4:bb:0c:
3e:de:50:e6:ab:b6:a6:db:90:9b:8f:17:01:f3:fe:
e4:7b:12:cd:85:85:ff:bc:3c:b3:2f:20:83:34:d8:
49:b2:dc:b7:31:11:df:80:0e:1b:ac:86:86:96:c4:
c3:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:8C:5E:BD:4A:AF:47:7B:02:33:4A:AC:59:DC:8A:4B:F3:05:5F:19
X509v3 Authority Key Identifier:
keyid:A7:94:CD:2F:91:74:E4:21:69:31:A1:05:DB:26:1A:CA:A3:93:8A:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p5TNL5F05CFpMaEF2yYayqOTinw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/dbd127-4b12-4f18-8dde-a3585a05ea2b/1/p5TNL5F05CFpMaEF2yYayqOTinw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/dbd127-4b12-4f18-8dde-a3585a05ea2b/1/p5TNL5F05CFpMaEF2yYayqOTinw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:df:60:a3:08:7e:6d:f4:e7:6f:32:ed:1a:b8:50:a1:82:3e:
64:58:13:86:0f:1a:00:31:df:c5:23:a3:f8:e2:d6:66:34:5e:
a5:35:b3:0b:ed:4b:16:80:85:4d:10:54:c7:46:a4:1f:08:4b:
b9:03:26:8f:28:e7:2f:9f:ec:a2:68:ca:38:97:ee:31:70:c8:
4f:79:b2:bf:b1:19:9d:a5:5b:39:ae:89:51:1f:a6:86:50:ed:
7c:82:dc:8e:cd:67:25:dd:fd:be:39:7a:d2:43:bc:bc:b6:fe:
53:14:06:8e:19:dc:e6:e1:68:d8:95:ce:bd:10:f6:88:62:f9:
e8:7c:d8:96:6f:57:ef:5d:96:d2:bb:fc:06:89:6f:0d:ad:64:
fa:00:bf:b2:e6:bc:1b:34:26:27:e4:27:cc:cf:2b:4f:6c:1c:
2a:14:93:c4:21:b6:dd:04:95:10:95:d3:f2:9b:e6:18:a8:c8:
27:21:bd:33:b1:ff:0a:ef:ac:2e:93:47:b7:99:42:80:4d:0a:
19:4b:3a:d5:f1:f6:c0:11:25:9a:65:21:59:94:e1:09:b7:23:
ec:4a:e7:a8:14:d8:0a:b6:5b:0f:c0:31:bd:e1:4d:bc:10:4b:
fb:fe:aa:93:45:46:72:62:3e:be:3d:69:bc:c5:9f:e3:5a:c9:
ba:01:e7:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:27:34 2026 by rpki-client