Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.mft
File: i5zFfKhHI67ChBFF9vfTAb3zW6w.mft (raw, json)
Hash identifier: ZAAWr/CgbqX0J0mFAp7JMvjBjXlNaNv2k4E3AorTI+k=
Subject key identifier: 5F:95:5F:31:39:71:CF:3A:4A:B0:F7:26:78:BE:E7:92:4D:5D:C1:2D
Authority key identifier: 8B:9C:C5:7C:A8:47:23:AE:C2:84:11:45:F6:F7:D3:01:BD:F3:5B:AC
Certificate issuer: /CN=8b9cc57ca84723aec2841145f6f7d301bdf35bac
Certificate serial: 019D2B4E1278DE106EB5BCA5399B9E9616F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5zFfKhHI67ChBFF9vfTAb3zW6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.mft
Manifest number: 06B7
Signing time: Thu 26 Mar 2026 18:00:29 +0000
Manifest this update: Thu 26 Mar 2026 18:00:29 +0000
Manifest next update: Fri 27 Mar 2026 18:00:29 +0000
Files and hashes: 1: ReYuRGqP1WRrzh_ImF48CcDJ3RI.roa (hash: ufYZ4Au1+4D7CL0qz6B/FUig9GN1b/FI0Eb2tprJPcI=)
2: i5zFfKhHI67ChBFF9vfTAb3zW6w.crl (hash: KgR9SnMWzB68SGeVJ21yxVMWn24qUDA3YY1SynQP/Zw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/i5zFfKhHI67ChBFF9vfTAb3zW6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 18:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:4e:12:78:de:10:6e:b5:bc:a5:39:9b:9e:96:16:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b9cc57ca84723aec2841145f6f7d301bdf35bac
Validity
Not Before: Mar 26 18:00:29 2026 GMT
Not After : Mar 27 18:00:29 2026 GMT
Subject: CN=5f955f313971cf3a4ab0f72678bee7924d5dc12d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:96:e0:07:d5:99:ae:b0:8c:f7:81:2f:82:b4:
e3:cd:c0:25:94:1c:41:5b:f7:3b:57:14:f7:2a:16:
23:a9:7e:2d:0a:24:4d:3a:12:9f:2a:8b:1d:e7:b0:
79:30:70:40:cf:5f:90:ae:4f:9e:4b:1e:a8:b4:01:
63:d0:46:0e:be:d1:dd:2e:23:e9:9a:18:a8:f7:1c:
d3:ac:3a:99:81:75:fb:38:20:3e:cb:21:34:6b:3e:
f2:aa:d5:f1:d6:cb:80:88:30:21:75:a9:a8:d8:24:
59:51:53:e0:3b:f0:03:5f:a7:64:70:52:41:be:c9:
4e:2e:ac:f4:58:86:91:e2:d3:b0:ec:5f:92:9e:a8:
68:5a:01:a8:da:3f:45:0d:77:4e:77:55:ba:db:b4:
55:27:2f:d3:29:9d:66:53:68:5f:6b:d0:dd:4e:fa:
e8:06:6c:12:73:f0:34:5a:c9:d2:8e:6b:5c:4d:3b:
2f:14:78:00:4c:9f:89:e3:33:11:40:e4:2f:5d:5d:
19:26:43:4f:e9:a3:10:37:dd:46:b7:39:b1:48:8a:
04:f4:c2:13:6b:ba:98:2b:3d:d2:b8:71:62:4b:87:
7d:c6:76:10:26:d8:3e:b1:95:02:65:82:55:f4:75:
32:fb:e2:62:30:ff:f9:e5:e7:eb:de:d2:ad:69:88:
f3:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:95:5F:31:39:71:CF:3A:4A:B0:F7:26:78:BE:E7:92:4D:5D:C1:2D
X509v3 Authority Key Identifier:
keyid:8B:9C:C5:7C:A8:47:23:AE:C2:84:11:45:F6:F7:D3:01:BD:F3:5B:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5zFfKhHI67ChBFF9vfTAb3zW6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:54:f2:9e:ac:80:28:e2:d9:05:10:1e:67:c9:60:99:56:6c:
f8:a0:0d:aa:1f:1d:ab:7d:a9:45:85:2e:36:06:49:4d:72:8a:
b6:d2:eb:d0:4f:b5:ba:46:4b:be:8f:28:2a:97:10:e9:44:3c:
9a:3b:7e:ad:89:5f:48:85:96:36:f8:10:9e:75:85:f6:02:d7:
4a:83:39:bb:46:5b:b9:56:45:1f:8f:48:77:50:77:19:24:0b:
6c:b1:80:3b:67:ce:a3:aa:97:95:8f:9d:a8:b0:57:61:33:b7:
ba:d2:71:c0:b6:98:a9:49:48:c3:ef:81:7c:c1:8b:b6:b2:b0:
12:64:1f:51:da:5a:8f:47:7c:74:c5:f2:ee:91:88:6a:19:53:
db:67:3e:11:a6:c7:8d:a4:d3:4a:56:37:61:b0:45:94:5a:34:
57:98:b9:aa:6d:2f:8d:b4:12:02:9f:22:35:eb:18:58:ad:d3:
94:65:34:10:27:4f:16:30:05:9e:ae:b2:d9:c0:50:4f:df:b8:
37:ee:dd:35:4f:37:b7:4a:d1:0f:62:79:be:bb:7b:2e:3c:3c:
56:93:5d:af:5e:76:98:ee:aa:a8:10:06:9f:49:18:0e:41:d8:
66:a5:b8:3d:70:e4:2c:aa:4a:ce:cc:bd:d2:2c:8d:68:b4:c3:
ff:0b:d1:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 03:10:42 2026 by rpki-client