
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/fd8ef9-7833-4974-9257-65b4a69fbbce/1/0-5NbhwEoPWClbKpchCs1Hv32Wo.mft
File: 0-5NbhwEoPWClbKpchCs1Hv32Wo.mft (raw, json)
Hash identifier: Ivd+qwignENaI4CWpcpmyGHpantYFWjYuaOyAihZgD8=
Subject key identifier: 02:DC:DE:63:DF:8D:99:80:81:FB:0F:5C:CB:84:D3:1B:90:06:CB:A8
Authority key identifier: D3:EE:4D:6E:1C:04:A0:F5:82:95:B2:A9:72:10:AC:D4:7B:F7:D9:6A
Certificate issuer: /CN=d3ee4d6e1c04a0f58295b2a97210acd47bf7d96a
Certificate serial: 019F909108579BD94646CBCC97599D845963
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0-5NbhwEoPWClbKpchCs1Hv32Wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/fd8ef9-7833-4974-9257-65b4a69fbbce/1/0-5NbhwEoPWClbKpchCs1Hv32Wo.mft
Manifest number: 028F
Signing time: Thu 23 Jul 2026 20:00:51 +0000
Manifest this update: Thu 23 Jul 2026 20:00:51 +0000
Manifest next update: Fri 24 Jul 2026 20:00:51 +0000
Files and hashes: 1: 0-5NbhwEoPWClbKpchCs1Hv32Wo.crl (hash: gvdAPoshXhoaLBl0yA6y7hdY7JOr3wrmC1CprvDPB8c=)
2: _5oe6VqZsqBT0LMhmKV2LIl_uf8.roa (hash: /SkExJhWDQiBSVIh+Uw/CkRQN60+0HSnourFk+/DB2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/fd8ef9-7833-4974-9257-65b4a69fbbce/1/0-5NbhwEoPWClbKpchCs1Hv32Wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/fd8ef9-7833-4974-9257-65b4a69fbbce/1/0-5NbhwEoPWClbKpchCs1Hv32Wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0-5NbhwEoPWClbKpchCs1Hv32Wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:91:08:57:9b:d9:46:46:cb:cc:97:59:9d:84:59:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3ee4d6e1c04a0f58295b2a97210acd47bf7d96a
Validity
Not Before: Jul 23 20:00:51 2026 GMT
Not After : Jul 24 20:00:51 2026 GMT
Subject: CN=02dcde63df8d998081fb0f5ccb84d31b9006cba8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b1:09:a3:3d:78:cd:f0:3d:95:e2:75:31:6a:
59:f8:4d:c8:af:99:ea:51:2e:0f:41:19:7c:98:40:
6a:1b:49:74:4f:d4:60:82:b6:55:77:ca:db:b6:e5:
2a:09:78:26:1d:16:23:68:16:d0:60:4a:e0:f9:b6:
19:15:6d:50:50:cf:5d:73:b2:aa:f7:9c:3f:51:fb:
95:0d:6b:06:fd:1f:44:a2:87:83:da:c6:ec:ba:78:
61:f7:67:63:0b:49:ef:13:fd:53:10:cc:2a:08:95:
d3:b8:ac:7e:25:50:5e:5e:ea:85:01:21:be:25:f2:
d6:d5:e9:8d:22:82:50:3d:2f:f7:c7:f7:6f:74:c3:
85:7e:8d:1d:f9:a9:34:cc:31:59:90:d7:21:ca:03:
db:dc:7a:86:c3:98:6f:eb:02:12:98:c4:10:c1:c9:
57:ee:93:fd:31:33:36:39:db:f4:78:46:67:03:88:
3d:e7:1f:38:ea:e7:48:01:50:f4:b6:10:35:c6:6b:
8b:03:a0:49:65:94:e5:7c:5b:91:bc:cf:be:c4:27:
98:5e:80:80:e7:fa:a9:ac:21:69:1c:8d:d6:d5:11:
f3:fa:3b:03:e9:f8:7d:45:33:59:3c:98:3e:a0:e5:
90:b4:40:89:b1:cf:9e:e8:9a:46:f8:b1:2d:bd:b8:
ba:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:DC:DE:63:DF:8D:99:80:81:FB:0F:5C:CB:84:D3:1B:90:06:CB:A8
X509v3 Authority Key Identifier:
keyid:D3:EE:4D:6E:1C:04:A0:F5:82:95:B2:A9:72:10:AC:D4:7B:F7:D9:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-5NbhwEoPWClbKpchCs1Hv32Wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/fd8ef9-7833-4974-9257-65b4a69fbbce/1/0-5NbhwEoPWClbKpchCs1Hv32Wo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/fd8ef9-7833-4974-9257-65b4a69fbbce/1/0-5NbhwEoPWClbKpchCs1Hv32Wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:5b:ab:00:4e:26:01:fc:9f:00:75:8d:c0:dc:d9:59:1e:00:
20:d3:eb:90:00:24:79:0c:d6:f9:a0:d1:69:c1:86:63:b5:5d:
65:68:56:12:1c:61:2a:01:e0:16:8c:0d:64:d3:7c:d3:73:71:
1e:02:5e:18:09:88:e0:52:4f:25:27:98:fb:e0:68:48:fe:a9:
00:4d:c8:fd:a7:f7:08:63:a2:dd:af:95:ac:70:04:7f:4f:f3:
84:2b:69:bf:9e:fd:3e:71:23:14:96:cb:fe:1f:12:c4:f9:d9:
d9:a5:69:56:2d:37:de:68:24:3d:ab:6b:f4:8a:6c:0e:f2:ee:
a9:d6:8a:6f:5f:ae:2a:c7:e1:87:73:df:ec:88:db:93:2a:3a:
a3:f5:86:9a:d0:88:2d:72:c4:ba:07:52:78:fb:73:59:ec:7c:
c9:c2:0c:bd:25:b8:b0:bd:c8:b2:a7:18:09:c7:34:07:72:ce:
d8:ca:aa:a3:9f:f0:e1:48:7e:fc:e4:3b:ba:b3:14:bf:5d:f1:
f6:78:c7:08:98:75:88:83:f6:46:8f:8d:a2:90:08:16:be:8c:
4f:fd:27:55:7e:3b:12:f2:22:fe:01:ca:7e:ac:28:3c:d6:b4:
9b:79:67:f7:6b:4d:d5:90:49:f8:09:ca:2f:d2:71:07:e7:28:
6d:0a:6f:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:02:51 2026 by rpki-client