Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/6363ce-c8a0-4961-ae80-d5a785517bbf/1/p5860xQqLAL5krlqsLm2OQr3_gI.mft
File: p5860xQqLAL5krlqsLm2OQr3_gI.mft (raw, json)
Hash identifier: TgXS4YQPeLFlzwFfo1HkW0epCCqSE1M4f87LRBARz0A=
Subject key identifier: BE:73:A9:DC:CD:98:7E:72:F8:39:82:FD:1B:C2:F1:54:DA:78:44:73
Authority key identifier: A7:9F:3A:D3:14:2A:2C:02:F9:92:B9:6A:B0:B9:B6:39:0A:F7:FE:02
Certificate issuer: /CN=a79f3ad3142a2c02f992b96ab0b9b6390af7fe02
Certificate serial: 019D284D4477B47BD50DCEDA7FC7D81F7BA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p5860xQqLAL5krlqsLm2OQr3_gI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/6363ce-c8a0-4961-ae80-d5a785517bbf/1/p5860xQqLAL5krlqsLm2OQr3_gI.mft
Manifest number: 08DB
Signing time: Thu 26 Mar 2026 04:00:45 +0000
Manifest this update: Thu 26 Mar 2026 04:00:45 +0000
Manifest next update: Fri 27 Mar 2026 04:00:45 +0000
Files and hashes: 1: JWCAfjjh5zsM89EhT5JBBpHJm28.roa (hash: +D0zzkFTWspOvvhGzzd00EXqwAQzFC2yhaPbQUOWqZU=)
2: p5860xQqLAL5krlqsLm2OQr3_gI.crl (hash: AnQ3DRL1hnr9UbXtK0g0+PVCziRpIheRtnL4btX5kNY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/6363ce-c8a0-4961-ae80-d5a785517bbf/1/p5860xQqLAL5krlqsLm2OQr3_gI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/6363ce-c8a0-4961-ae80-d5a785517bbf/1/p5860xQqLAL5krlqsLm2OQr3_gI.mft
rsync://rpki.ripe.net/repository/DEFAULT/p5860xQqLAL5krlqsLm2OQr3_gI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:44:77:b4:7b:d5:0d:ce:da:7f:c7:d8:1f:7b:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a79f3ad3142a2c02f992b96ab0b9b6390af7fe02
Validity
Not Before: Mar 26 04:00:45 2026 GMT
Not After : Mar 27 04:00:45 2026 GMT
Subject: CN=be73a9dccd987e72f83982fd1bc2f154da784473
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9c:c6:0a:3e:23:9c:fe:51:73:9f:b6:58:c0:
16:0a:fd:b9:fa:1e:96:dd:3f:39:81:5a:8a:e7:15:
57:aa:e5:f6:e8:cb:c9:dd:c3:e1:e5:0c:77:a4:9c:
19:0e:a9:68:64:56:48:18:eb:a0:85:3e:1d:99:0d:
a9:6b:0d:d9:77:e6:83:a2:99:c1:58:63:0f:35:55:
e2:7f:f7:08:98:1f:4f:d7:e7:44:b1:1b:80:81:d2:
68:ee:e2:b2:de:35:33:42:3c:1d:01:7c:1c:80:03:
0d:82:8e:0d:01:94:2d:c0:f3:fc:d7:c4:e1:e9:27:
a7:80:b3:22:7c:66:5c:42:eb:26:6d:12:c5:48:4c:
ec:e5:ed:d5:47:1e:ca:82:a3:4a:4a:0a:99:c9:90:
d6:30:98:02:b2:dd:82:9d:67:0e:cd:37:9b:6c:f0:
8d:79:3f:d4:79:5f:7d:43:af:90:28:f4:44:07:33:
ad:3d:6e:19:f0:ad:65:ad:47:e7:96:1a:6c:42:d8:
14:e7:0d:fe:2f:91:ea:f0:d4:36:85:90:62:08:1d:
a0:b3:d5:38:cd:29:6b:bd:60:32:29:ac:01:08:c7:
60:91:cb:7c:89:9b:02:d3:5f:74:ac:78:2b:fd:e0:
c5:c2:a4:bb:1a:02:d3:48:e1:7c:5e:7c:7e:2a:83:
0c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:73:A9:DC:CD:98:7E:72:F8:39:82:FD:1B:C2:F1:54:DA:78:44:73
X509v3 Authority Key Identifier:
keyid:A7:9F:3A:D3:14:2A:2C:02:F9:92:B9:6A:B0:B9:B6:39:0A:F7:FE:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p5860xQqLAL5krlqsLm2OQr3_gI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6363ce-c8a0-4961-ae80-d5a785517bbf/1/p5860xQqLAL5krlqsLm2OQr3_gI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6363ce-c8a0-4961-ae80-d5a785517bbf/1/p5860xQqLAL5krlqsLm2OQr3_gI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:37:2a:a6:fe:63:0c:ae:63:b1:8b:d1:56:a9:67:28:19:1e:
33:7b:03:af:f1:57:9b:17:e6:5f:1c:ec:3c:5d:95:86:86:77:
20:97:c3:ca:8a:c7:c3:e2:8b:6f:6d:fc:d8:f1:1e:2a:db:98:
4c:cd:d8:46:c1:32:01:4f:51:d6:e2:83:51:d6:8f:be:25:1f:
0d:d6:2b:ff:7f:8a:b7:8f:fa:9d:6c:1f:af:e8:bc:24:5b:60:
c3:d8:de:82:ea:94:d7:45:ab:29:06:44:98:89:20:76:92:bd:
91:b7:6e:34:f4:6f:6b:2e:3a:cf:17:8e:80:3c:2b:ca:df:ff:
42:62:a2:0b:13:6e:84:de:3c:1e:c8:4e:c6:fd:68:b5:d4:2d:
82:93:0a:9f:74:e3:f7:cf:3f:d6:fb:c3:50:38:b8:d5:bf:60:
34:22:cb:12:cd:92:80:79:f8:5a:a1:1e:87:49:32:d0:16:aa:
c2:18:95:fa:8e:06:44:c6:b3:b7:eb:aa:d0:e5:52:9a:f4:42:
26:23:71:1c:77:65:60:58:ee:35:a1:29:d2:9c:26:48:13:e5:
7c:7d:39:34:a1:af:93:9a:a8:04:4c:cf:36:16:fb:7a:83:19:
f3:eb:f1:fc:09:d6:a3:45:f8:0b:67:b0:a8:36:60:bf:a7:73:
6a:19:84:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:01:48 2026 by rpki-client