Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/fd8ef9-7833-4974-9257-65b4a69fbbce/1/0-5NbhwEoPWClbKpchCs1Hv32Wo.mft
File: 0-5NbhwEoPWClbKpchCs1Hv32Wo.mft (raw, json)
Hash identifier: PvH90/SKpjnA2IvDvx0jqwHSCq78jJsjzVdXijWC3DE=
Subject key identifier: A7:32:03:3D:65:A6:BA:ED:C5:63:8B:E8:9E:51:C6:82:A3:BE:4B:CA
Authority key identifier: D3:EE:4D:6E:1C:04:A0:F5:82:95:B2:A9:72:10:AC:D4:7B:F7:D9:6A
Certificate issuer: /CN=d3ee4d6e1c04a0f58295b2a97210acd47bf7d96a
Certificate serial: 019D269640B58B873D67EBD6DE809ECC0256
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0-5NbhwEoPWClbKpchCs1Hv32Wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/fd8ef9-7833-4974-9257-65b4a69fbbce/1/0-5NbhwEoPWClbKpchCs1Hv32Wo.mft
Manifest number: 014F
Signing time: Wed 25 Mar 2026 20:01:14 +0000
Manifest this update: Wed 25 Mar 2026 20:01:14 +0000
Manifest next update: Thu 26 Mar 2026 20:01:14 +0000
Files and hashes: 1: 0-5NbhwEoPWClbKpchCs1Hv32Wo.crl (hash: RwkoQm0ddjhDeOgU0wK/T7PfVEKyZLwx/ldMWulq6PI=)
2: _5oe6VqZsqBT0LMhmKV2LIl_uf8.roa (hash: /SkExJhWDQiBSVIh+Uw/CkRQN60+0HSnourFk+/DB2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/fd8ef9-7833-4974-9257-65b4a69fbbce/1/0-5NbhwEoPWClbKpchCs1Hv32Wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/fd8ef9-7833-4974-9257-65b4a69fbbce/1/0-5NbhwEoPWClbKpchCs1Hv32Wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0-5NbhwEoPWClbKpchCs1Hv32Wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:40:b5:8b:87:3d:67:eb:d6:de:80:9e:cc:02:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3ee4d6e1c04a0f58295b2a97210acd47bf7d96a
Validity
Not Before: Mar 25 20:01:14 2026 GMT
Not After : Mar 26 20:01:14 2026 GMT
Subject: CN=a732033d65a6baedc5638be89e51c682a3be4bca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:55:2d:71:f4:92:1f:ef:70:67:78:45:63:50:
e8:41:20:dc:cd:0c:95:c4:7c:52:99:0e:86:3e:f0:
fa:aa:29:3b:8d:6d:40:2d:bc:d0:96:e3:31:eb:2d:
e3:d0:e4:ba:c7:9a:a3:70:34:ba:25:3c:b9:db:33:
d1:41:92:c9:2c:ae:c2:ae:7d:91:06:cf:d1:95:77:
a6:99:49:72:95:53:ab:ce:14:05:69:be:cc:4b:30:
a1:ff:b1:dd:67:de:20:88:10:80:aa:f6:73:be:68:
c8:99:99:e3:96:b1:47:50:d5:cb:2c:34:4a:5f:f0:
e9:27:44:5f:68:ae:22:2c:b2:5e:02:2a:1f:ce:cf:
3d:0c:16:19:e6:05:4b:47:96:2f:db:aa:b8:14:75:
61:60:d5:39:1f:5f:3a:e1:93:29:75:77:e1:68:9a:
44:5f:90:43:59:41:84:31:a2:fd:20:cf:af:fb:83:
d2:ae:9e:78:af:99:5c:82:aa:2c:52:44:fe:31:27:
96:13:a0:3b:c6:87:4f:53:e5:5c:39:6e:36:fd:3b:
2f:db:f7:0f:82:bd:b4:f6:4b:57:32:e7:1e:ee:8c:
d1:f6:d8:ce:2a:65:00:90:87:ec:96:01:ed:c0:8a:
3c:30:37:a0:ac:39:b8:b4:9b:6c:b4:cd:da:b6:9e:
f0:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:32:03:3D:65:A6:BA:ED:C5:63:8B:E8:9E:51:C6:82:A3:BE:4B:CA
X509v3 Authority Key Identifier:
keyid:D3:EE:4D:6E:1C:04:A0:F5:82:95:B2:A9:72:10:AC:D4:7B:F7:D9:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-5NbhwEoPWClbKpchCs1Hv32Wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/fd8ef9-7833-4974-9257-65b4a69fbbce/1/0-5NbhwEoPWClbKpchCs1Hv32Wo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/fd8ef9-7833-4974-9257-65b4a69fbbce/1/0-5NbhwEoPWClbKpchCs1Hv32Wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:ba:2c:6b:0c:ef:12:b2:04:c9:e0:85:71:ea:7b:9e:8a:48:
62:b1:28:89:25:5f:f4:21:ce:68:80:44:e5:46:84:ce:c5:1d:
a9:94:56:ba:c4:24:f1:7a:47:4b:cb:66:22:40:b7:c3:5c:e0:
32:a1:9c:5a:f9:dd:39:b4:9a:cf:0d:11:35:b3:e6:56:2f:3d:
60:70:cc:79:eb:fd:f3:ed:3c:8b:ac:c3:0b:2c:5e:3a:b0:36:
2e:6f:e4:6c:28:11:fc:76:fe:cf:72:9c:e8:bc:52:9e:77:d6:
3d:22:2a:a3:e0:56:1e:bb:ce:ef:43:0b:27:07:e9:80:07:1d:
a4:de:c7:98:18:28:63:f1:41:2f:c8:d9:78:56:68:f1:8b:88:
b9:1d:9c:e0:2a:08:1d:a6:1e:2d:01:b6:f1:3a:48:0f:8b:f0:
7d:de:1b:09:05:ed:55:e1:0b:25:50:97:5f:a2:3d:71:b9:26:
c9:cd:1a:1b:bb:89:97:b4:04:e9:26:f6:65:4d:52:2a:d0:38:
a2:fa:6d:7f:9c:28:d0:97:7d:8b:84:50:39:de:57:2c:5d:1a:
4c:c7:4e:48:1b:29:1d:a0:dd:61:53:3c:49:17:f2:c1:d2:3a:
a6:23:4a:68:3a:aa:67:29:33:f8:79:6b:d4:e2:11:b7:6e:a0:
58:1c:bd:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:54 2026 by rpki-client