Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/9facae-fd90-4b4c-a2ec-9127e8105699/1/0x5KjNKJjF3m1mJfEMSy6F9GH3g.mft
File: 0x5KjNKJjF3m1mJfEMSy6F9GH3g.mft (raw, json)
Hash identifier: WN+R2PsmMtqrUbFs95T8EDa+fT/H3AhBy2AOacIYRYI=
Subject key identifier: 6C:04:FD:40:30:93:0D:5B:0F:D1:A2:40:0C:48:10:D5:3C:5B:91:10
Authority key identifier: D3:1E:4A:8C:D2:89:8C:5D:E6:D6:62:5F:10:C4:B2:E8:5F:46:1F:78
Certificate issuer: /CN=d31e4a8cd2898c5de6d6625f10c4b2e85f461f78
Certificate serial: 019D26960A0CC5FB30C7B8B3A720F23BA80F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0x5KjNKJjF3m1mJfEMSy6F9GH3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/9facae-fd90-4b4c-a2ec-9127e8105699/1/0x5KjNKJjF3m1mJfEMSy6F9GH3g.mft
Manifest number: 0AAC
Signing time: Wed 25 Mar 2026 20:01:00 +0000
Manifest this update: Wed 25 Mar 2026 20:01:00 +0000
Manifest next update: Thu 26 Mar 2026 20:01:00 +0000
Files and hashes: 1: 0x5KjNKJjF3m1mJfEMSy6F9GH3g.crl (hash: mlMVkCZhcfnGKqk2kqd/p3RX0PIzgtqtEa749+zdBFM=)
2: 2TC861jK8VELUxYLqwLBwJEBDQA.roa (hash: oKo7gej4ajG4+SLdtnyEgBggOZ1BZWPfVe9QrL/7Aj0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/9facae-fd90-4b4c-a2ec-9127e8105699/1/0x5KjNKJjF3m1mJfEMSy6F9GH3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/9facae-fd90-4b4c-a2ec-9127e8105699/1/0x5KjNKJjF3m1mJfEMSy6F9GH3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/0x5KjNKJjF3m1mJfEMSy6F9GH3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:0a:0c:c5:fb:30:c7:b8:b3:a7:20:f2:3b:a8:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d31e4a8cd2898c5de6d6625f10c4b2e85f461f78
Validity
Not Before: Mar 25 20:01:00 2026 GMT
Not After : Mar 26 20:01:00 2026 GMT
Subject: CN=6c04fd4030930d5b0fd1a2400c4810d53c5b9110
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:59:65:4d:fe:e1:8a:97:00:74:58:58:c7:8a:
af:7b:43:03:2d:e6:ed:90:cb:11:d6:ad:98:89:d2:
23:6d:21:e2:e6:33:c6:9b:0f:ef:ba:95:84:6b:7b:
37:cb:6b:b6:c6:c9:74:2b:76:38:e9:a0:7b:41:7d:
4a:6e:38:1a:dc:f3:31:9c:6b:33:f8:21:32:41:86:
3c:a6:d5:11:07:13:ba:37:36:a2:d4:41:4f:d6:11:
9c:b9:91:d9:8c:cd:94:ef:2e:0e:ea:e3:bc:d4:e5:
ae:4f:8a:57:e0:f9:c9:a2:bb:e1:87:00:21:e6:dd:
7d:b5:37:66:be:ac:26:a3:65:df:75:e3:aa:5f:d7:
46:1b:13:a7:8c:be:e8:0e:c6:31:a7:93:63:97:bf:
3f:47:fc:ed:e8:bc:cb:b0:b4:17:65:f5:e7:3a:dc:
94:fd:b6:eb:20:06:da:29:37:4c:43:3d:4d:bd:24:
8a:5b:a9:f9:09:3a:56:68:8d:50:2f:51:c5:51:23:
07:84:a7:9d:55:3b:ff:09:89:71:15:cb:62:76:7c:
fd:84:9e:08:6d:fb:a5:c7:6e:b7:62:69:b1:c8:b2:
c4:a7:b0:4b:6e:ff:4e:fb:0b:33:07:0d:af:a7:3b:
8c:e7:06:54:54:d7:89:6e:df:65:85:be:83:6f:1a:
66:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:04:FD:40:30:93:0D:5B:0F:D1:A2:40:0C:48:10:D5:3C:5B:91:10
X509v3 Authority Key Identifier:
keyid:D3:1E:4A:8C:D2:89:8C:5D:E6:D6:62:5F:10:C4:B2:E8:5F:46:1F:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0x5KjNKJjF3m1mJfEMSy6F9GH3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/9facae-fd90-4b4c-a2ec-9127e8105699/1/0x5KjNKJjF3m1mJfEMSy6F9GH3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/9facae-fd90-4b4c-a2ec-9127e8105699/1/0x5KjNKJjF3m1mJfEMSy6F9GH3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:36:d9:97:4b:1d:d1:75:67:fa:c2:3f:86:f4:ff:78:8b:6a:
94:c3:f7:4a:58:50:15:49:13:7b:8f:4c:81:22:68:11:5b:bb:
1b:42:7a:a6:e5:40:bf:06:7b:28:21:42:41:83:51:fe:7b:59:
55:73:f0:fb:06:86:81:90:1a:51:8f:4f:04:c7:7a:47:e3:3f:
e8:5d:23:7c:3a:24:d9:07:3c:d4:b4:5f:8c:a9:70:3a:6c:c0:
11:19:ea:f6:ba:2d:e3:7c:20:bb:89:9c:2c:5c:2a:9b:0d:71:
26:29:e0:87:20:28:49:de:c8:ef:f8:ef:40:56:90:30:bc:09:
c0:43:ad:5a:5c:be:42:81:c8:b8:41:c7:8f:d6:78:89:0f:fd:
71:93:d2:db:fd:42:14:5a:f7:54:74:1f:72:73:7f:01:80:44:
63:db:4c:f6:36:a0:ba:20:95:e9:fe:16:0c:ee:45:29:01:39:
78:db:29:e3:fc:15:f7:46:d1:1e:b7:0a:67:23:68:cb:35:45:
9f:b5:27:12:a6:d1:40:33:c2:b2:19:1d:bc:b1:07:c8:99:95:
42:e8:48:e8:cd:93:f7:85:c8:2e:6b:7b:63:af:8d:9e:e0:a9:
a0:ab:3e:b5:b9:b6:30:81:06:54:ad:e6:e7:c7:88:4c:45:34:
80:36:64:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:23:56 2026 by rpki-client