Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/5f8881-8a44-4842-8009-1165d1d1564f/1/5Mx247VHf_1CoP5LjHg6rS-W_nA.mft
File: 5Mx247VHf_1CoP5LjHg6rS-W_nA.mft (raw, json)
Hash identifier: CKxDFb6fugIDd/yTCKspch9XBuBpDnC+OQtQ4bIwkQQ=
Subject key identifier: 05:52:F9:E0:59:79:67:38:3B:F8:7C:0C:9B:4A:16:76:E2:08:F4:F6
Authority key identifier: E4:CC:76:E3:B5:47:7F:FD:42:A0:FE:4B:8C:78:3A:AD:2F:96:FE:70
Certificate issuer: /CN=e4cc76e3b5477ffd42a0fe4b8c783aad2f96fe70
Certificate serial: 019D284DCC324894934D3551F2A6CD7C9683
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Mx247VHf_1CoP5LjHg6rS-W_nA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/5f8881-8a44-4842-8009-1165d1d1564f/1/5Mx247VHf_1CoP5LjHg6rS-W_nA.mft
Manifest number: 0BA9
Signing time: Thu 26 Mar 2026 04:01:20 +0000
Manifest this update: Thu 26 Mar 2026 04:01:20 +0000
Manifest next update: Fri 27 Mar 2026 04:01:20 +0000
Files and hashes: 1: 5Mx247VHf_1CoP5LjHg6rS-W_nA.crl (hash: 9NfGt6EAi+rROOalkizuBEI1nAD8mupCbhI9uiVQDBE=)
2: BSGPWmtsgwbJGnKFG5brSPXj4hk.roa (hash: KGxIkg0MS8XaKz2jRrsvog2q0vQwaAcswUFzEf/VLTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/5f8881-8a44-4842-8009-1165d1d1564f/1/5Mx247VHf_1CoP5LjHg6rS-W_nA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/5f8881-8a44-4842-8009-1165d1d1564f/1/5Mx247VHf_1CoP5LjHg6rS-W_nA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Mx247VHf_1CoP5LjHg6rS-W_nA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:cc:32:48:94:93:4d:35:51:f2:a6:cd:7c:96:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4cc76e3b5477ffd42a0fe4b8c783aad2f96fe70
Validity
Not Before: Mar 26 04:01:20 2026 GMT
Not After : Mar 27 04:01:20 2026 GMT
Subject: CN=0552f9e0597967383bf87c0c9b4a1676e208f4f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:68:3c:ca:37:c8:55:a0:8e:ec:25:66:d5:43:
ed:b1:f4:bd:f7:c5:14:c8:fc:8f:3b:09:99:38:0c:
31:d3:dd:62:61:e6:a7:cd:5d:74:38:5d:dd:27:79:
99:19:28:eb:1c:ef:f1:ff:bf:4f:28:7a:47:82:05:
91:9f:65:45:b0:69:a0:46:2e:a5:82:db:94:2b:d6:
8a:72:ee:a6:e0:ef:9f:a7:37:59:58:96:c4:1e:94:
a8:1d:46:1a:b4:64:8f:b2:26:83:c8:5d:80:12:37:
26:75:36:b3:96:7a:89:67:70:24:7a:36:b9:6a:42:
32:6f:8f:69:47:b7:0b:61:23:19:7a:ef:cd:3e:f0:
1c:66:b7:a5:7b:25:97:50:57:4a:c1:f4:d2:80:e1:
ad:16:d7:c9:54:b6:86:6b:5c:4a:7f:5b:9d:b7:59:
28:20:6b:aa:6b:63:8c:6b:fa:56:3f:3e:29:c5:b3:
5d:19:2e:8f:01:e6:13:d0:21:28:32:1b:2e:f7:6d:
d8:d8:0b:33:61:68:7a:f2:85:cd:98:5a:8f:02:b4:
d3:22:09:f8:cf:ea:f8:74:01:46:9a:e5:0a:5b:33:
68:db:e8:73:cd:3e:83:77:ff:c9:a5:5b:7c:d9:8d:
0d:67:6d:4e:8a:01:ad:c7:2b:7c:39:2a:41:e8:12:
04:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:52:F9:E0:59:79:67:38:3B:F8:7C:0C:9B:4A:16:76:E2:08:F4:F6
X509v3 Authority Key Identifier:
keyid:E4:CC:76:E3:B5:47:7F:FD:42:A0:FE:4B:8C:78:3A:AD:2F:96:FE:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Mx247VHf_1CoP5LjHg6rS-W_nA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/5f8881-8a44-4842-8009-1165d1d1564f/1/5Mx247VHf_1CoP5LjHg6rS-W_nA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/5f8881-8a44-4842-8009-1165d1d1564f/1/5Mx247VHf_1CoP5LjHg6rS-W_nA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:62:47:49:41:bb:0e:dd:08:be:55:e1:23:7e:81:47:66:67:
d2:a7:bd:a6:80:15:09:06:35:f1:38:97:aa:b4:7d:cf:4c:2c:
95:e4:bc:c8:22:c7:7d:7d:54:56:f1:4a:8a:82:e9:b3:f7:e5:
9d:b4:b7:2c:61:90:ac:e6:12:4d:94:04:ed:92:ba:5e:98:2e:
5b:42:b4:0f:e7:d1:2b:c8:35:2c:52:3d:52:a4:75:0a:73:02:
9a:4f:0f:06:71:65:99:27:b7:cc:0d:5e:e3:57:7d:3d:0e:d3:
6f:fc:08:db:6d:53:f7:44:4a:5b:f2:83:e9:f4:ec:e3:a8:ab:
49:3e:85:7d:a5:88:d4:fe:f9:41:9e:64:23:25:81:93:7d:45:
aa:60:5e:21:a0:fb:99:08:ea:0d:ef:d0:24:80:6f:9d:e8:a5:
8f:91:20:57:cb:69:0a:a8:ec:2d:4f:2f:11:bd:f5:87:87:58:
88:b7:cb:59:cd:f4:e6:c2:d3:0e:3b:c5:10:5c:a3:28:8b:ba:
55:55:7f:b8:5c:ff:67:89:60:f8:95:8c:47:c8:07:40:ab:36:
e4:15:31:1d:50:4e:7c:ae:bb:71:c4:17:51:cc:99:42:9b:5b:
7d:40:f3:95:22:6d:e1:eb:11:40:8f:7b:f6:d4:0a:00:db:cf:
be:f3:b0:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:08:43 2026 by rpki-client