Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/6dc121-0a6f-45ad-8af9-e1a4293520be/1/s5HsSXtk1hEkn95Zel7ofpM31e4.mft
File: s5HsSXtk1hEkn95Zel7ofpM31e4.mft (raw, json)
Hash identifier: OTGDhRZPQz7dHaJyT14LQNHbTdk/zHp7cNj8w+vut9Y=
Subject key identifier: C3:8D:35:3D:06:B0:C7:28:70:B9:F8:D5:C9:2F:09:13:36:AF:77:4B
Authority key identifier: B3:91:EC:49:7B:64:D6:11:24:9F:DE:59:7A:5E:E8:7E:93:37:D5:EE
Certificate issuer: /CN=b391ec497b64d611249fde597a5ee87e9337d5ee
Certificate serial: 019D2AE0F0D02FAEAEA03AB18CA616A8C8EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s5HsSXtk1hEkn95Zel7ofpM31e4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/6dc121-0a6f-45ad-8af9-e1a4293520be/1/s5HsSXtk1hEkn95Zel7ofpM31e4.mft
Manifest number: 082B
Signing time: Thu 26 Mar 2026 16:01:17 +0000
Manifest this update: Thu 26 Mar 2026 16:01:17 +0000
Manifest next update: Fri 27 Mar 2026 16:01:17 +0000
Files and hashes: 1: EjJrWFeTwJ_321jk-J6zSaeztUY.roa (hash: 6r9Rq2EqEC8dkR5wD5X0UhjtGuaRN59q4KgSMAlkjYI=)
2: s5HsSXtk1hEkn95Zel7ofpM31e4.crl (hash: JaiSYP8205U7cyISjXe5xv3gZjNe8xREjAcpfhM/lCE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/6dc121-0a6f-45ad-8af9-e1a4293520be/1/s5HsSXtk1hEkn95Zel7ofpM31e4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/6dc121-0a6f-45ad-8af9-e1a4293520be/1/s5HsSXtk1hEkn95Zel7ofpM31e4.mft
rsync://rpki.ripe.net/repository/DEFAULT/s5HsSXtk1hEkn95Zel7ofpM31e4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e0:f0:d0:2f:ae:ae:a0:3a:b1:8c:a6:16:a8:c8:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b391ec497b64d611249fde597a5ee87e9337d5ee
Validity
Not Before: Mar 26 16:01:17 2026 GMT
Not After : Mar 27 16:01:17 2026 GMT
Subject: CN=c38d353d06b0c72870b9f8d5c92f091336af774b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:9a:d3:6a:80:fd:05:19:a1:62:f9:e2:40:bc:
f5:64:32:2c:ae:f8:ba:32:c5:19:d9:c5:d6:ea:f5:
60:50:07:62:5c:95:dd:68:41:16:d3:cd:b5:52:24:
bb:38:93:13:94:e1:58:ef:99:c8:f7:a3:f0:d0:29:
60:3b:d9:e0:03:34:c0:5b:8e:db:b0:72:be:4d:cf:
19:db:7a:89:54:a6:9b:fd:70:fa:16:40:95:24:4c:
5c:3a:1e:38:24:f1:27:ce:af:da:5f:e8:64:a2:ec:
4a:24:c5:a1:74:4a:13:31:61:44:31:e5:06:1a:bf:
9f:47:7b:9e:24:bc:44:e0:9d:c1:19:4f:4d:d3:9c:
d6:ce:e4:50:fc:2c:a2:d4:98:d1:23:0d:9e:3b:52:
08:8e:dc:e7:87:fc:2f:84:31:9b:df:7f:82:a6:2d:
b0:fd:c9:3c:c4:c4:52:d8:86:6e:2d:f8:24:22:7f:
d0:dc:14:a8:a1:cc:e7:36:84:6e:73:7f:77:27:90:
7c:de:83:7a:d1:2b:b3:68:91:81:69:4c:5a:21:76:
f9:4e:e6:3d:08:5a:ee:2f:8b:86:8b:8c:49:09:3f:
32:08:30:da:77:ce:f6:df:05:47:b3:b4:3f:67:10:
47:27:32:9e:fd:83:29:40:34:c8:eb:61:99:72:c4:
c6:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:8D:35:3D:06:B0:C7:28:70:B9:F8:D5:C9:2F:09:13:36:AF:77:4B
X509v3 Authority Key Identifier:
keyid:B3:91:EC:49:7B:64:D6:11:24:9F:DE:59:7A:5E:E8:7E:93:37:D5:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s5HsSXtk1hEkn95Zel7ofpM31e4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/6dc121-0a6f-45ad-8af9-e1a4293520be/1/s5HsSXtk1hEkn95Zel7ofpM31e4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/6dc121-0a6f-45ad-8af9-e1a4293520be/1/s5HsSXtk1hEkn95Zel7ofpM31e4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:f6:26:95:c8:cf:8f:54:eb:78:c1:eb:d8:ef:67:4c:32:ba:
d4:2a:31:83:c5:52:b9:0a:49:2c:b0:26:47:b7:17:4f:16:6e:
b8:c3:58:cb:48:0c:62:e2:3b:f4:26:2f:f2:7b:8a:7e:02:96:
d6:3e:89:59:b5:97:86:1c:d1:04:d4:f7:18:eb:6b:8d:52:4c:
6d:ea:ee:e0:bd:d3:68:48:3a:be:0e:0a:3f:d8:70:37:0f:fe:
ab:ca:b5:d2:a8:0c:f1:8a:98:04:70:0d:95:0b:09:ad:ee:78:
e8:ed:fa:f2:5c:18:b7:09:4a:4b:5e:89:28:e0:f5:84:32:9b:
c1:85:b0:67:25:b4:75:37:20:ee:ea:53:27:8f:d7:87:c4:0a:
a6:92:3c:e0:7f:10:57:25:f7:f0:8c:9c:60:5f:3f:ba:92:3e:
a0:25:18:dc:75:47:e6:83:4f:00:54:51:5e:bc:f8:43:d0:78:
a5:6b:b8:79:c3:4a:f8:a1:24:06:d8:8b:68:a6:4a:ce:e0:a5:
fb:f3:f4:c0:4e:1e:70:ac:df:ae:3f:1d:24:4f:df:fb:f2:e6:
75:84:d9:58:c1:c8:bc:8c:e8:ee:4d:5f:b8:94:1d:d2:81:95:
12:47:63:67:41:40:ab:a8:54:c8:7d:d2:1f:2c:f6:22:9a:0c:
fc:d4:06:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:38:50 2026 by rpki-client