Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/_5JbpaQQRnlkY0z_SvrXelbaRyI.mft
File: _5JbpaQQRnlkY0z_SvrXelbaRyI.mft (raw, json)
Hash identifier: hOXtVw9xNyYUzVea4BxokHygDZLHAyJU7cgDq0P4Pbw=
Subject key identifier: 16:51:B6:CB:C5:59:64:C3:47:89:0E:CA:4B:D3:B2:12:94:C7:B2:93
Authority key identifier: FF:92:5B:A5:A4:10:46:79:64:63:4C:FF:4A:FA:D7:7A:56:DA:47:22
Certificate issuer: /CN=ff925ba5a410467964634cff4afad77a56da4722
Certificate serial: 019D2AE0748623928C77C4B50B3C2D5A716F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_5JbpaQQRnlkY0z_SvrXelbaRyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/_5JbpaQQRnlkY0z_SvrXelbaRyI.mft
Manifest number: 0719
Signing time: Thu 26 Mar 2026 16:00:45 +0000
Manifest this update: Thu 26 Mar 2026 16:00:45 +0000
Manifest next update: Fri 27 Mar 2026 16:00:45 +0000
Files and hashes: 1: 2l3jy0ks1GMTVrjjYXvE6dhr2UM.roa (hash: L4oxBugG8SBzHeTSIckApzq3w111E1/nbM2VYS8YHuw=)
2: _5JbpaQQRnlkY0z_SvrXelbaRyI.crl (hash: 8kYNhHl+CmxvMv7yMMI6NNC7KebCLAH/CxpxdEGoKTA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/_5JbpaQQRnlkY0z_SvrXelbaRyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/_5JbpaQQRnlkY0z_SvrXelbaRyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_5JbpaQQRnlkY0z_SvrXelbaRyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e0:74:86:23:92:8c:77:c4:b5:0b:3c:2d:5a:71:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff925ba5a410467964634cff4afad77a56da4722
Validity
Not Before: Mar 26 16:00:45 2026 GMT
Not After : Mar 27 16:00:45 2026 GMT
Subject: CN=1651b6cbc55964c347890eca4bd3b21294c7b293
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:fa:1c:15:fc:b2:1b:27:ba:f9:1a:43:d3:5b:
86:86:26:6b:1f:f8:34:31:67:1b:ac:d5:35:22:d2:
a8:eb:0e:f7:53:4f:4c:c4:bf:79:8e:ed:3e:a7:43:
8f:3d:20:35:e7:4f:48:cb:da:d5:39:1d:e0:09:ed:
56:c3:e1:de:a1:97:04:de:8b:0a:82:2a:4c:95:36:
ed:80:19:94:1d:25:5d:2b:3f:07:86:2d:10:59:63:
31:67:be:02:3b:0d:c3:8b:13:5a:e7:12:5e:54:28:
d9:56:6f:64:ed:8f:a5:35:43:65:b2:f1:ad:d5:a8:
f0:6e:f9:73:53:8f:86:e7:4c:55:cf:48:9a:d5:29:
be:df:0c:a7:8c:b8:00:98:13:29:3f:aa:61:40:ed:
98:14:bd:e8:4a:11:95:c6:b9:d9:6f:31:5b:9e:60:
f7:fc:c9:cd:0f:6a:2c:30:49:4f:f2:e2:16:3c:77:
89:b2:a3:dc:11:3d:5a:56:80:46:21:da:21:e5:d4:
bb:78:dc:f8:9b:66:b8:3e:2c:12:ff:32:c7:51:a9:
75:ee:ec:d1:42:a3:5e:f9:49:22:c9:ce:86:64:3a:
c4:e8:5a:1f:9b:a7:6a:8d:68:51:61:7c:87:29:10:
18:25:36:e4:3b:57:28:42:3c:9b:08:fd:3b:7b:d0:
e9:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:51:B6:CB:C5:59:64:C3:47:89:0E:CA:4B:D3:B2:12:94:C7:B2:93
X509v3 Authority Key Identifier:
keyid:FF:92:5B:A5:A4:10:46:79:64:63:4C:FF:4A:FA:D7:7A:56:DA:47:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_5JbpaQQRnlkY0z_SvrXelbaRyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/_5JbpaQQRnlkY0z_SvrXelbaRyI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/_5JbpaQQRnlkY0z_SvrXelbaRyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:10:2a:a1:b5:97:c0:40:da:9c:a4:f5:5a:bb:93:df:4a:e2:
93:d4:47:ba:8d:51:c9:d1:ea:99:34:85:4c:a2:69:21:75:4e:
98:31:a8:eb:11:78:9d:3c:3d:4c:bb:67:56:ad:af:db:4a:97:
d3:35:3e:e7:66:1a:43:18:bf:97:21:8e:03:98:5d:91:1c:37:
29:2d:63:97:40:45:24:14:9d:7a:84:ba:46:8b:78:fe:54:46:
85:a9:71:ef:78:f6:42:da:4c:85:64:a5:cb:2d:83:d0:53:8e:
d6:27:29:88:41:89:3f:f2:2e:bd:3e:f8:1c:78:96:92:35:95:
b5:31:e0:3d:9a:d1:e8:d0:ca:7c:42:62:23:c3:ab:66:c1:86:
ef:fd:12:f6:8e:15:14:9a:75:df:cb:ec:46:c0:47:85:d1:78:
37:6a:6c:3e:ce:0b:7f:7e:72:62:2f:5d:88:67:02:2a:6c:17:
6a:80:a9:a0:23:c3:10:9f:1a:35:f4:cf:14:fe:01:0e:0f:3a:
59:20:e2:d8:d3:e1:8c:74:08:4e:50:3d:80:44:1c:ee:63:f9:
62:80:86:52:b4:41:da:c4:93:1c:80:4f:3b:5b:2c:60:a5:f9:
85:07:a0:7d:55:eb:ea:c0:d9:ab:6c:f1:7c:cc:a3:d6:12:14:
b6:7d:49:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:40:25 2026 by rpki-client