Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/d8a024-6c06-4f98-a834-e63362098c70/1/5DlX3rqBbJYAzgpNB_yn0wbv7mE.mft
File: 5DlX3rqBbJYAzgpNB_yn0wbv7mE.mft (raw, json)
Hash identifier: MkAwmz+XFm9k8c8HW+KTYwIHyYEEZfM5oXs+hpkFI68=
Subject key identifier: F1:E8:9F:E7:32:7D:4C:38:EF:10:F2:F0:41:E8:C7:9B:B9:E7:5F:AA
Authority key identifier: E4:39:57:DE:BA:81:6C:96:00:CE:0A:4D:07:FC:A7:D3:06:EF:EE:61
Certificate issuer: /CN=e43957deba816c9600ce0a4d07fca7d306efee61
Certificate serial: 019D28BBFD14608688FDD3C6296E3CF51431
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5DlX3rqBbJYAzgpNB_yn0wbv7mE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/d8a024-6c06-4f98-a834-e63362098c70/1/5DlX3rqBbJYAzgpNB_yn0wbv7mE.mft
Manifest number: 033D
Signing time: Thu 26 Mar 2026 06:01:41 +0000
Manifest this update: Thu 26 Mar 2026 06:01:41 +0000
Manifest next update: Fri 27 Mar 2026 06:01:41 +0000
Files and hashes: 1: 5DlX3rqBbJYAzgpNB_yn0wbv7mE.crl (hash: lJRk7xzeqkRHJFCfasgkfTIxRuo94qst9Um1y6kHtNU=)
2: jXP7E3ZhCPS-nhI96RhyBYQFCsE.roa (hash: TPYf0iiW2OcHHUnh4b/qsDWeDvydotieDoi8cPyorB4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/d8a024-6c06-4f98-a834-e63362098c70/1/5DlX3rqBbJYAzgpNB_yn0wbv7mE.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/d8a024-6c06-4f98-a834-e63362098c70/1/5DlX3rqBbJYAzgpNB_yn0wbv7mE.mft
rsync://rpki.ripe.net/repository/DEFAULT/5DlX3rqBbJYAzgpNB_yn0wbv7mE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:fd:14:60:86:88:fd:d3:c6:29:6e:3c:f5:14:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e43957deba816c9600ce0a4d07fca7d306efee61
Validity
Not Before: Mar 26 06:01:41 2026 GMT
Not After : Mar 27 06:01:41 2026 GMT
Subject: CN=f1e89fe7327d4c38ef10f2f041e8c79bb9e75faa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a1:fb:99:83:03:d8:d9:93:88:4b:24:63:9e:
6e:32:e9:35:03:40:d3:fb:98:5f:24:b0:40:12:33:
07:dd:a1:8e:2f:a7:30:79:ba:e1:d6:01:af:ba:48:
44:e9:42:81:91:0a:99:57:e4:d3:b6:ef:28:5f:11:
26:b6:65:c3:ec:61:ad:1d:f4:65:d8:f4:52:0a:57:
5d:0c:8c:f8:10:f8:a0:68:da:80:50:be:96:07:47:
c8:a4:f4:56:12:50:2b:e5:e6:78:39:a5:43:75:78:
9f:35:3c:34:01:ab:c6:e3:4a:5b:8e:f4:d0:ba:7f:
7c:4a:ad:59:fd:0b:8e:fa:95:12:4b:d5:82:af:05:
6d:a8:9a:49:a2:02:a0:08:36:00:21:87:86:3d:33:
86:cc:6c:05:4e:f9:13:a8:19:65:f1:93:4f:8f:3f:
86:22:cb:24:37:53:89:de:77:be:4e:f6:5b:ce:83:
41:24:6a:08:a6:63:b0:c9:be:9f:69:62:a5:00:0b:
e3:14:24:10:06:74:b1:79:80:b6:4d:5f:16:8e:b5:
d8:1d:5a:8a:ce:a8:3f:35:eb:41:db:65:46:40:17:
7d:f4:62:5c:a3:02:8b:75:aa:76:84:59:63:fe:0c:
59:2f:67:c7:17:48:d7:ca:46:0b:d4:c1:13:53:74:
59:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:E8:9F:E7:32:7D:4C:38:EF:10:F2:F0:41:E8:C7:9B:B9:E7:5F:AA
X509v3 Authority Key Identifier:
keyid:E4:39:57:DE:BA:81:6C:96:00:CE:0A:4D:07:FC:A7:D3:06:EF:EE:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5DlX3rqBbJYAzgpNB_yn0wbv7mE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/d8a024-6c06-4f98-a834-e63362098c70/1/5DlX3rqBbJYAzgpNB_yn0wbv7mE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/d8a024-6c06-4f98-a834-e63362098c70/1/5DlX3rqBbJYAzgpNB_yn0wbv7mE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:7b:e5:cd:63:36:6f:da:e0:4f:7a:cc:d8:8c:56:5d:7e:86:
dc:67:fa:fb:fd:20:9b:b2:55:8f:de:27:23:c5:e0:37:cc:1a:
d4:c5:82:5b:08:f1:36:01:10:be:c2:fe:d3:44:15:72:7f:99:
0c:2f:ff:16:a6:28:9b:3d:3c:25:51:61:f3:f2:ae:aa:67:f9:
e7:41:9a:b8:6a:9a:86:4f:bc:85:70:1b:d6:2e:7a:48:b7:c1:
76:45:27:70:9c:bc:18:dd:e2:ee:d6:0d:04:4f:05:fb:8f:9d:
62:2f:6e:92:94:a0:7b:c9:c8:4b:95:74:8e:37:62:df:e5:3d:
24:83:43:37:9e:45:cb:20:84:f6:fd:fb:80:c6:4b:44:7d:24:
67:b2:7c:36:cf:5a:4a:74:6f:a7:2c:6c:03:1a:c2:fd:15:36:
56:5f:0e:b5:e6:69:66:82:0b:ac:c2:4d:01:f3:04:e5:c2:c8:
18:70:fe:47:33:40:6b:f8:97:ab:21:da:20:d3:db:26:bc:9c:
13:03:12:72:da:a1:b1:c1:a9:64:8e:92:b4:5b:28:73:b3:b2:
88:7d:fe:5b:b1:1b:a5:ec:a4:e1:a1:60:93:f5:52:e6:71:ce:
a3:54:bf:0c:29:76:ca:c0:93:5a:77:c5:70:9e:4d:38:b4:67:
ce:08:6b:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:11:50 2026 by rpki-client