Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0bda4a-5c10-44db-8f62-ae4fa7f17f9c/1/5wn3YuCC6tPW1-TK4p77tNEvV14.mft
File: 5wn3YuCC6tPW1-TK4p77tNEvV14.mft (raw, json)
Hash identifier: 7UW88clDejg01BwhLyultD5E/CG3tjQE9WMbH9fVsd8=
Subject key identifier: FD:D3:F2:BA:68:16:CF:37:1D:77:51:87:18:14:E9:3A:CA:AA:AE:C0
Authority key identifier: E7:09:F7:62:E0:82:EA:D3:D6:D7:E4:CA:E2:9E:FB:B4:D1:2F:57:5E
Certificate issuer: /CN=e709f762e082ead3d6d7e4cae29efbb4d12f575e
Certificate serial: 019D2816DBBFBA5070353A73058B802F209E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5wn3YuCC6tPW1-TK4p77tNEvV14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0bda4a-5c10-44db-8f62-ae4fa7f17f9c/1/5wn3YuCC6tPW1-TK4p77tNEvV14.mft
Manifest number: 0EDE
Signing time: Thu 26 Mar 2026 03:01:19 +0000
Manifest this update: Thu 26 Mar 2026 03:01:19 +0000
Manifest next update: Fri 27 Mar 2026 03:01:19 +0000
Files and hashes: 1: 5wn3YuCC6tPW1-TK4p77tNEvV14.crl (hash: DwxmkBRkRe1NulIzqugOXdaQmeG6+h95H0/C5qAIF9U=)
2: WYQDjBxDm_OoBGcgcgmE7OCjFt0.roa (hash: eECr25yVYsujT6+QLvSz9j18MPQkn37aHPMM7Z3Jdzg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/0bda4a-5c10-44db-8f62-ae4fa7f17f9c/1/5wn3YuCC6tPW1-TK4p77tNEvV14.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/0bda4a-5c10-44db-8f62-ae4fa7f17f9c/1/5wn3YuCC6tPW1-TK4p77tNEvV14.mft
rsync://rpki.ripe.net/repository/DEFAULT/5wn3YuCC6tPW1-TK4p77tNEvV14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:db:bf:ba:50:70:35:3a:73:05:8b:80:2f:20:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e709f762e082ead3d6d7e4cae29efbb4d12f575e
Validity
Not Before: Mar 26 03:01:19 2026 GMT
Not After : Mar 27 03:01:19 2026 GMT
Subject: CN=fdd3f2ba6816cf371d7751871814e93acaaaaec0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:73:8a:c8:76:45:62:03:e0:20:00:91:e2:89:
3e:80:30:f1:96:c0:dc:2b:2b:fc:45:21:d9:ad:8b:
d8:3f:9b:8e:6c:ae:4f:88:95:3d:d5:19:f1:3f:c8:
d4:d4:e5:43:b3:46:d0:94:3b:e3:37:50:d9:a8:99:
c9:48:01:89:b5:71:3f:55:b6:39:17:c7:6a:3f:e1:
87:21:e9:a9:31:0d:b5:1c:05:32:ba:df:96:ea:69:
10:b1:7e:ee:ac:a0:43:b1:3f:2b:a9:0b:0f:d2:b2:
46:eb:c2:77:cc:d1:cd:5c:5d:20:56:7d:0c:f3:ca:
06:11:1b:1f:4b:9f:60:52:29:40:f5:39:4d:db:1c:
43:a8:5a:7c:af:6b:91:6b:bc:d6:d4:8e:89:cc:a0:
ee:80:e8:ba:e0:30:46:d2:c9:8f:92:2d:93:0b:13:
5f:84:cb:bc:7f:9b:5c:28:58:e7:00:ef:47:f6:2e:
1f:9b:a7:ec:80:29:8d:8d:b1:13:c7:9d:be:97:57:
11:3d:e7:f8:a4:32:b6:83:86:66:ba:be:79:9c:20:
24:f6:fd:d4:e2:a5:0e:39:00:20:62:57:e6:e7:8e:
1a:da:04:a6:e7:03:bb:60:33:f9:37:c9:fa:5d:19:
9a:46:e8:25:7a:7d:dc:d3:cd:af:14:b0:f6:27:bd:
55:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:D3:F2:BA:68:16:CF:37:1D:77:51:87:18:14:E9:3A:CA:AA:AE:C0
X509v3 Authority Key Identifier:
keyid:E7:09:F7:62:E0:82:EA:D3:D6:D7:E4:CA:E2:9E:FB:B4:D1:2F:57:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5wn3YuCC6tPW1-TK4p77tNEvV14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0bda4a-5c10-44db-8f62-ae4fa7f17f9c/1/5wn3YuCC6tPW1-TK4p77tNEvV14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0bda4a-5c10-44db-8f62-ae4fa7f17f9c/1/5wn3YuCC6tPW1-TK4p77tNEvV14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:13:c3:98:bd:6e:88:47:72:d0:8f:c7:a8:07:3c:fb:ec:68:
45:fc:2f:0b:dc:db:dd:51:37:3e:37:52:a3:91:b5:74:57:fd:
ae:7b:3b:e6:88:91:2d:e2:b4:33:4e:16:cf:be:fa:96:a3:00:
5c:c1:7d:1c:8a:3b:5f:06:e7:0f:85:73:17:3a:af:ab:11:20:
7b:0a:fe:a8:a2:f5:22:a7:f2:4e:6d:f2:5e:36:ad:b1:22:a8:
29:59:a3:da:1b:da:bc:8d:c9:75:ea:de:16:ca:54:56:b4:31:
18:3a:02:23:2c:e4:9d:b5:4d:af:d1:ee:29:de:dc:9c:35:39:
5b:d3:61:22:35:85:fc:38:b9:12:59:b3:1e:83:df:77:a6:f9:
f6:55:f9:96:55:de:53:8a:c8:95:e8:fb:d3:47:82:3a:a4:74:
5f:b2:45:9a:d8:21:c5:a0:72:41:cc:b6:87:2c:c9:a7:3e:47:
66:db:dd:b5:f6:29:42:e4:6e:d9:e3:e6:fe:6d:e6:e4:84:77:
c3:0b:e2:ba:d3:da:8c:c7:85:61:e4:a0:c6:5c:23:50:77:b5:
6d:51:3e:47:b4:f4:c9:9f:ba:ef:d8:10:9f:a3:7d:0f:fe:e2:
c0:df:c7:97:1d:a3:b8:a2:4c:62:f3:f4:8d:47:5d:d1:d7:cd:
be:18:7a:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:27:17 2026 by rpki-client