Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/ddf1e1-f07e-4bad-84a8-fe27359fd7ea/1/5F0K3ClN02bfatqIATTb0OaIzPc.mft
File: 5F0K3ClN02bfatqIATTb0OaIzPc.mft (raw, json)
Hash identifier: wL6n7LHEd82bOu0lxhX3ejKz7uMpsf6gpJTKYItHh7s=
Subject key identifier: 39:E8:62:3E:EA:14:EA:E8:39:74:14:5D:32:B7:83:15:83:D4:86:15
Authority key identifier: E4:5D:0A:DC:29:4D:D3:66:DF:6A:DA:88:01:34:DB:D0:E6:88:CC:F7
Certificate issuer: /CN=e45d0adc294dd366df6ada880134dbd0e688ccf7
Certificate serial: 019D2AA9B353882E8DC2A413D7E9365508CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5F0K3ClN02bfatqIATTb0OaIzPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/ddf1e1-f07e-4bad-84a8-fe27359fd7ea/1/5F0K3ClN02bfatqIATTb0OaIzPc.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 15:00:57 +0000
Manifest this update: Thu 26 Mar 2026 15:00:57 +0000
Manifest next update: Fri 27 Mar 2026 15:00:57 +0000
Files and hashes: 1: 5F0K3ClN02bfatqIATTb0OaIzPc.crl (hash: rpgZc44bTSmPEptRSR2tNGPmrMYc5apmbc7p2cwxvE0=)
2: eVHX86Z5BUrMshf-zyfKQYxN0ao.roa (hash: 52NfErShygwUz/Jha+lSZaO5oAHArVutPPK1QEHMLQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/ddf1e1-f07e-4bad-84a8-fe27359fd7ea/1/5F0K3ClN02bfatqIATTb0OaIzPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/ddf1e1-f07e-4bad-84a8-fe27359fd7ea/1/5F0K3ClN02bfatqIATTb0OaIzPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/5F0K3ClN02bfatqIATTb0OaIzPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 15:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:a9:b3:53:88:2e:8d:c2:a4:13:d7:e9:36:55:08:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e45d0adc294dd366df6ada880134dbd0e688ccf7
Validity
Not Before: Mar 26 15:00:57 2026 GMT
Not After : Mar 27 15:00:57 2026 GMT
Subject: CN=39e8623eea14eae83974145d32b7831583d48615
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:25:a9:00:62:fd:a7:ac:f6:86:3c:bb:bf:fd:
93:19:22:da:a2:8f:f5:33:06:f8:d0:29:6e:95:e9:
c0:c2:86:7b:55:63:bd:44:15:8a:01:b3:62:2b:16:
12:07:2f:15:76:5f:bf:19:a4:01:26:7a:a7:7a:21:
c9:0f:03:e4:a6:6d:e0:07:8a:6c:be:07:18:f5:d2:
80:0a:52:cc:43:8e:a0:53:68:03:8f:26:b3:a1:0b:
c8:8b:82:d0:34:89:06:31:e9:89:5f:a8:ab:8a:bc:
ec:9a:04:c7:14:bf:0d:5a:db:25:13:08:14:9a:42:
a8:e4:73:ca:b5:cc:1a:46:d4:23:ac:fc:29:20:4a:
2e:45:4d:85:d2:6a:85:12:74:06:b1:fe:d6:06:ea:
9b:dc:80:40:f5:22:da:6a:a5:fd:4d:cb:85:23:b2:
e8:aa:4b:cc:ca:de:7e:3e:4e:03:5a:9b:10:ec:4d:
9f:cd:56:69:d1:07:2f:49:e1:ca:6e:5d:65:18:31:
95:1b:22:6a:0f:bc:ff:95:38:b3:05:a7:a7:9f:82:
ff:49:3c:d9:1a:8f:75:4a:07:4a:08:4f:a1:23:5d:
c0:e7:ef:67:b1:04:ce:8a:4f:04:46:0e:14:3e:9a:
5f:32:1d:1c:78:cd:56:3d:10:81:7f:42:7e:22:6d:
f6:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:E8:62:3E:EA:14:EA:E8:39:74:14:5D:32:B7:83:15:83:D4:86:15
X509v3 Authority Key Identifier:
keyid:E4:5D:0A:DC:29:4D:D3:66:DF:6A:DA:88:01:34:DB:D0:E6:88:CC:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5F0K3ClN02bfatqIATTb0OaIzPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ddf1e1-f07e-4bad-84a8-fe27359fd7ea/1/5F0K3ClN02bfatqIATTb0OaIzPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ddf1e1-f07e-4bad-84a8-fe27359fd7ea/1/5F0K3ClN02bfatqIATTb0OaIzPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:03:ae:7e:6c:cc:5f:8a:04:71:db:40:c5:1b:2f:69:42:b3:
d9:1c:e7:40:00:83:26:8c:fa:ef:86:a7:78:6f:34:41:6f:c1:
6c:97:c5:cc:de:ac:ac:23:20:fa:53:ac:87:c9:df:94:af:d3:
50:5b:79:ab:16:20:dc:1d:47:e4:31:18:2d:45:1a:09:52:6e:
df:2c:26:61:89:67:cd:6c:92:e7:48:b6:80:b6:2d:2d:90:3f:
50:eb:c1:b5:d0:5c:2a:a2:94:b9:cc:fa:9d:69:3f:8e:71:c2:
3f:11:9b:3a:a0:38:4b:d5:67:e4:f4:fd:74:8f:e5:c9:80:61:
21:42:81:08:32:97:9e:61:1e:69:75:d9:d3:bd:99:8c:a8:c5:
2d:2f:eb:5c:ea:06:20:e7:c3:1c:a2:42:41:ca:a7:2e:21:70:
44:01:e6:59:94:91:ff:55:2f:c0:f6:c7:d2:dd:3c:45:2c:4a:
62:56:9f:bf:6d:aa:fd:18:b2:21:05:81:58:85:a0:b6:6e:a7:
ab:b3:d5:66:15:ca:68:e4:57:49:f6:53:02:4b:e6:97:e8:63:
6d:6d:42:04:01:d7:eb:ba:b8:b4:b2:49:ab:57:10:68:e9:dd:
47:17:c3:22:b6:53:91:0e:d2:b0:8c:07:df:64:19:7f:cd:0a:
0c:50:6d:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:15:08 2026 by rpki-client