Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/2fc007-361d-4f47-aaf7-484d843e6de3/1/B5602MZfOntFTKKl5fZAlOnYi9M.mft
File: B5602MZfOntFTKKl5fZAlOnYi9M.mft (raw, json)
Hash identifier: fmyoxNF0NHZOPBCYebQe6scVYtxmgGeKPpLq2PyfTpI=
Subject key identifier: 9D:25:6B:32:D2:81:C9:AD:DB:F7:E8:51:0C:3F:A5:CE:31:44:EA:21
Authority key identifier: 07:9E:B4:D8:C6:5F:3A:7B:45:4C:A2:A5:E5:F6:40:94:E9:D8:8B:D3
Certificate issuer: /CN=079eb4d8c65f3a7b454ca2a5e5f64094e9d88bd3
Certificate serial: 019D25843DF36138D339323CEB4AC9A2040C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B5602MZfOntFTKKl5fZAlOnYi9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/2fc007-361d-4f47-aaf7-484d843e6de3/1/B5602MZfOntFTKKl5fZAlOnYi9M.mft
Manifest number: 1889
Signing time: Wed 25 Mar 2026 15:01:56 +0000
Manifest this update: Wed 25 Mar 2026 15:01:56 +0000
Manifest next update: Thu 26 Mar 2026 15:01:56 +0000
Files and hashes: 1: B5602MZfOntFTKKl5fZAlOnYi9M.crl (hash: bnTWCXPpU6OjHraREmSja0p01ymyQco5tuLYslInR0o=)
2: UG82JYjOL5Jql3nxWvN-Xh4Nr4A.roa (hash: 05+0vfIPDLVFjVB3L2D7iJWPXu6x5fdq82fKXp61A0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/2fc007-361d-4f47-aaf7-484d843e6de3/1/B5602MZfOntFTKKl5fZAlOnYi9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/2fc007-361d-4f47-aaf7-484d843e6de3/1/B5602MZfOntFTKKl5fZAlOnYi9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/B5602MZfOntFTKKl5fZAlOnYi9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:84:3d:f3:61:38:d3:39:32:3c:eb:4a:c9:a2:04:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=079eb4d8c65f3a7b454ca2a5e5f64094e9d88bd3
Validity
Not Before: Mar 25 15:01:56 2026 GMT
Not After : Mar 26 15:01:56 2026 GMT
Subject: CN=9d256b32d281c9addbf7e8510c3fa5ce3144ea21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:61:65:60:48:01:e9:49:86:5d:24:0b:bc:f0:
af:8c:1b:42:ec:d6:05:0c:fb:29:75:3c:42:27:9b:
f0:62:61:85:df:ff:41:e4:c0:2e:e3:5c:56:74:bc:
bc:8c:ea:af:f9:db:e3:e5:da:86:8e:33:01:0f:47:
04:8f:5f:0e:e8:8f:67:f1:27:5c:8d:8e:92:a0:64:
91:fa:67:8c:07:48:fc:d9:9c:01:00:12:f2:65:de:
ca:2e:ab:22:83:19:90:8c:3e:63:d5:78:ba:32:c1:
21:a0:01:05:15:20:ea:62:5e:6c:97:a1:87:92:92:
b3:46:d4:77:f5:a9:1e:a8:9a:7f:55:4d:60:a2:82:
58:22:f5:30:34:be:91:ba:12:5d:e9:a5:ff:f2:5a:
c0:24:c1:dd:8f:3e:40:50:9b:be:85:c9:e9:65:17:
67:46:fa:fd:a1:ee:54:bd:04:cb:15:61:c0:01:fd:
ae:2e:8e:00:b5:2b:35:67:87:76:0b:06:5c:9b:00:
d3:00:8d:64:df:f3:ba:6f:42:d8:97:90:4b:f2:fe:
8d:d3:5a:f6:7c:cc:17:84:61:c4:33:ce:6b:af:77:
85:9a:46:d1:fb:3a:ef:82:7b:c3:da:86:d8:60:81:
e5:42:ef:5e:f9:2c:9c:f6:78:71:28:7b:1d:6f:8f:
54:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:25:6B:32:D2:81:C9:AD:DB:F7:E8:51:0C:3F:A5:CE:31:44:EA:21
X509v3 Authority Key Identifier:
keyid:07:9E:B4:D8:C6:5F:3A:7B:45:4C:A2:A5:E5:F6:40:94:E9:D8:8B:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B5602MZfOntFTKKl5fZAlOnYi9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2fc007-361d-4f47-aaf7-484d843e6de3/1/B5602MZfOntFTKKl5fZAlOnYi9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2fc007-361d-4f47-aaf7-484d843e6de3/1/B5602MZfOntFTKKl5fZAlOnYi9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:a0:4c:d8:33:2b:40:49:43:20:86:e9:be:8c:f9:c1:f8:21:
8c:77:ef:ea:20:8d:cd:ed:cc:f5:e1:70:38:c1:62:fc:61:c1:
e7:e4:3c:78:49:c2:53:f9:40:8c:55:47:ee:35:4f:4e:7a:4d:
60:f8:ab:5a:18:6d:7d:84:35:0c:14:7b:cd:a1:c5:2e:7e:b7:
d7:fb:43:74:62:93:16:8c:9d:59:bd:db:c6:a1:0f:35:5a:5e:
7d:b5:8c:c4:b2:e3:e3:31:fd:81:c3:8d:49:26:45:c8:6f:78:
0c:39:d1:ef:9a:a4:19:a2:69:86:c3:45:0c:ce:58:0b:29:2d:
c4:29:15:6c:2d:cf:9c:0d:9f:45:c7:ae:3d:43:92:5d:83:c6:
4f:f3:69:a4:18:b1:e7:1c:38:de:32:59:be:40:92:3a:58:09:
d6:46:2b:8c:94:68:0e:b8:a7:5c:14:71:b5:55:83:c4:d9:8b:
23:06:35:9e:80:6b:7d:1a:76:7a:27:db:73:f4:44:96:44:a9:
bc:6e:ab:b5:8e:20:a4:d4:42:d6:0d:9e:e6:34:e5:6d:1c:49:
9f:e1:c5:66:14:5c:37:50:0a:8b:2f:d6:13:83:7b:d4:a4:cc:
d3:f3:8a:89:36:38:74:5d:79:98:0f:62:e9:87:23:a8:f0:05:
2c:74:6f:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:43 2026 by rpki-client