Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/d4751e-7534-437d-9a9f-408740420f57/1/n5SSduOmC1L8RnQdcdggr7XuYGA.mft
File: n5SSduOmC1L8RnQdcdggr7XuYGA.mft (raw, json)
Hash identifier: 1tjLp3wPdVnYA/G7L0H7njMPn4rfzuWSBZBqUnLP/o8=
Subject key identifier: 6A:8F:45:9B:12:30:03:60:E3:81:F2:6B:34:24:25:FB:F7:ED:3D:05
Authority key identifier: 9F:94:92:76:E3:A6:0B:52:FC:46:74:1D:71:D8:20:AF:B5:EE:60:60
Certificate issuer: /CN=9f949276e3a60b52fc46741d71d820afb5ee6060
Certificate serial: 019D32D0A7AD7A10F378A9858A947AFC37CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n5SSduOmC1L8RnQdcdggr7XuYGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/d4751e-7534-437d-9a9f-408740420f57/1/n5SSduOmC1L8RnQdcdggr7XuYGA.mft
Manifest number: FA
Signing time: Sat 28 Mar 2026 05:00:28 +0000
Manifest this update: Sat 28 Mar 2026 05:00:28 +0000
Manifest next update: Sun 29 Mar 2026 05:00:28 +0000
Files and hashes: 1: iphFFiELv6xBcznUl33Uh-5jbZQ.roa (hash: jkX2lE/80b0iANBbopkvd/aU0DEPtORcLex6/wv2csw=)
2: n5SSduOmC1L8RnQdcdggr7XuYGA.crl (hash: eK4KJGpyKtdVgEgNBCNAjihPeG8opObByD8kBAla8Ag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/d4751e-7534-437d-9a9f-408740420f57/1/n5SSduOmC1L8RnQdcdggr7XuYGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/d4751e-7534-437d-9a9f-408740420f57/1/n5SSduOmC1L8RnQdcdggr7XuYGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/n5SSduOmC1L8RnQdcdggr7XuYGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:d0:a7:ad:7a:10:f3:78:a9:85:8a:94:7a:fc:37:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f949276e3a60b52fc46741d71d820afb5ee6060
Validity
Not Before: Mar 28 05:00:28 2026 GMT
Not After : Mar 29 05:00:28 2026 GMT
Subject: CN=6a8f459b12300360e381f26b342425fbf7ed3d05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:32:e3:05:77:09:f5:1a:f5:8f:21:af:98:01:
a9:8a:f8:d8:c2:16:55:da:7d:84:d2:4b:ac:8c:3f:
80:fc:b8:77:f7:6e:8c:fa:b1:21:c4:ca:26:00:65:
08:8c:d5:b1:af:3a:9e:93:6d:06:76:db:a9:c4:2f:
18:75:86:39:56:b0:19:5a:8b:9b:58:fb:c8:18:ba:
bc:b4:c4:87:8d:d1:19:b4:40:52:45:94:63:65:6a:
84:5d:47:5d:90:92:6f:a8:c5:45:e5:bc:c6:73:51:
2e:16:55:ed:21:e1:41:70:13:8e:2f:58:f5:16:98:
3e:22:db:fd:30:da:7b:e0:c4:36:d3:e6:52:d1:fd:
d7:1d:77:2e:60:ca:fc:c7:5a:1b:86:8f:0f:41:e9:
ad:25:ec:98:fc:b4:31:a2:f7:bc:d4:ad:ac:02:bb:
3b:ef:4f:85:8d:a1:b7:dc:01:ee:bb:9a:0e:7d:b9:
e6:81:0e:c3:3b:b1:61:a6:76:45:fe:55:fe:89:9c:
3c:3a:8b:f3:e9:d7:af:67:44:05:55:dc:b4:2c:9e:
df:8a:67:2b:cc:8c:12:55:52:5e:3c:3c:9c:19:89:
db:ac:56:f8:99:71:dc:c5:9a:24:56:1f:bc:2b:45:
f3:fa:7d:ab:47:90:b1:ce:06:98:43:c8:df:d9:c6:
c5:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:8F:45:9B:12:30:03:60:E3:81:F2:6B:34:24:25:FB:F7:ED:3D:05
X509v3 Authority Key Identifier:
keyid:9F:94:92:76:E3:A6:0B:52:FC:46:74:1D:71:D8:20:AF:B5:EE:60:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n5SSduOmC1L8RnQdcdggr7XuYGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/d4751e-7534-437d-9a9f-408740420f57/1/n5SSduOmC1L8RnQdcdggr7XuYGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/d4751e-7534-437d-9a9f-408740420f57/1/n5SSduOmC1L8RnQdcdggr7XuYGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:d8:4c:c9:a2:ed:b4:65:d5:e7:6f:a5:91:b6:e9:61:8a:25:
93:82:2a:ba:66:ca:25:48:42:0b:eb:0d:44:f8:4a:06:7f:6b:
9b:05:62:18:cb:b7:f4:47:e2:6a:01:bb:2b:65:f4:7c:4b:4d:
b8:3c:dc:5d:f8:d2:d6:53:ac:00:30:c8:4f:c0:d3:ec:db:0b:
af:16:ad:2d:00:b1:77:bf:ea:26:3e:fa:7d:35:6c:2d:99:e5:
8d:d6:92:ca:f3:a0:93:7e:12:51:b8:da:e9:e2:5b:fe:74:c0:
b7:99:72:c7:17:10:62:13:28:51:e5:f1:c4:d5:33:8f:c5:dc:
fa:95:a1:b6:58:2a:9d:17:bd:b4:28:17:18:61:f0:6a:28:9a:
cd:14:f7:c4:8f:0d:78:c2:72:8f:79:35:fe:45:7e:3d:c1:25:
c3:b0:01:c9:4d:75:3b:91:d6:82:0d:5d:2c:ff:66:54:c6:0e:
51:d7:58:f4:56:11:90:da:44:f5:64:cb:e3:ca:cb:24:55:46:
34:49:2a:2c:57:ed:01:62:af:db:3e:1d:dc:93:9f:b1:ad:b2:
c2:13:1f:f8:10:bb:95:d3:8b:10:d4:85:d7:2e:88:46:3f:4b:
f3:0a:9f:8d:6d:55:46:9f:48:dd:de:29:b8:a0:c4:5f:e8:6e:
2c:d9:3a:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:46:44 2026 by rpki-client