Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/C5NMNrdzAIhlucn7D9SGaTlaxzA.mft
File: C5NMNrdzAIhlucn7D9SGaTlaxzA.mft (raw, json)
Hash identifier: xaU8Nb1SbronDpaMz3XVAyKVG6rRW+YP5MsW1E+PAZA=
Subject key identifier: 49:0F:43:0A:81:0C:0A:02:40:DB:8C:EB:1C:1F:B3:F3:0C:F4:D7:0C
Authority key identifier: 0B:93:4C:36:B7:73:00:88:65:B9:C9:FB:0F:D4:86:69:39:5A:C7:30
Certificate issuer: /CN=0b934c36b773008865b9c9fb0fd48669395ac730
Certificate serial: 019D28BB43B197E0664C3CD449E11C20AE36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C5NMNrdzAIhlucn7D9SGaTlaxzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/C5NMNrdzAIhlucn7D9SGaTlaxzA.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 06:00:54 +0000
Manifest this update: Thu 26 Mar 2026 06:00:54 +0000
Manifest next update: Fri 27 Mar 2026 06:00:54 +0000
Files and hashes: 1: C5NMNrdzAIhlucn7D9SGaTlaxzA.crl (hash: /+2SBvDYEOQtAZysD13o/y4qa9WntHs6qh7Krd53oXE=)
2: JcIgVRfB8cbXUGJV5jVgHdlKA-I.roa (hash: H3hUh7Lj3XT5Z/feO9iXQdqL5i8JEzQ7efNMXFvag+M=)
3: R_B2jaSZhjP35wcys5mL5Se3j8Q.roa (hash: dwMcpw95Em2A9IwZsNozR3xo42Nso6kgZ/pvjcsJhfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/C5NMNrdzAIhlucn7D9SGaTlaxzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/C5NMNrdzAIhlucn7D9SGaTlaxzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/C5NMNrdzAIhlucn7D9SGaTlaxzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:43:b1:97:e0:66:4c:3c:d4:49:e1:1c:20:ae:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b934c36b773008865b9c9fb0fd48669395ac730
Validity
Not Before: Mar 26 06:00:54 2026 GMT
Not After : Mar 27 06:00:54 2026 GMT
Subject: CN=490f430a810c0a0240db8ceb1c1fb3f30cf4d70c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:cd:b0:b1:8f:76:d2:d5:99:a7:6b:6f:e2:5a:
7b:7f:d1:72:1b:70:34:85:46:b6:19:a0:b6:95:4a:
1b:d9:31:da:bf:03:0c:8d:ba:27:fe:33:75:5e:4c:
c3:f7:ea:77:3b:2d:b9:e3:3e:dc:a4:e7:e0:b7:eb:
45:c9:e8:01:89:dc:60:ae:23:f7:5b:df:9c:06:bf:
b5:f0:60:f8:2f:0c:b8:c9:41:c7:85:1a:3c:59:aa:
f8:5f:c6:a6:86:a4:17:99:b4:f1:e9:83:ec:6a:f5:
94:a5:8f:e7:c5:fe:88:3d:0f:6e:01:e8:b8:b1:95:
99:27:f2:02:4e:ec:c4:5d:5f:3a:af:7e:2b:06:78:
1c:1f:18:6b:7e:c6:4f:96:75:d2:8b:65:46:95:aa:
bb:25:0c:93:85:22:09:42:5e:fa:52:d5:8c:b8:34:
94:5b:c5:8a:fb:96:fb:bd:39:87:0c:91:49:6d:d3:
a8:28:c4:a5:df:6f:d2:b7:f8:2c:34:07:6b:d3:b3:
27:de:b5:8f:f1:5c:e9:ec:66:73:75:44:fb:d2:9c:
35:51:96:e5:37:d8:e0:85:79:79:d7:d9:6a:11:20:
d2:c8:79:e3:eb:6e:6c:28:29:a7:f4:67:a1:09:bc:
1a:d0:1d:91:bd:d3:94:ef:93:f0:9c:95:77:68:96:
87:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:0F:43:0A:81:0C:0A:02:40:DB:8C:EB:1C:1F:B3:F3:0C:F4:D7:0C
X509v3 Authority Key Identifier:
keyid:0B:93:4C:36:B7:73:00:88:65:B9:C9:FB:0F:D4:86:69:39:5A:C7:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C5NMNrdzAIhlucn7D9SGaTlaxzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/C5NMNrdzAIhlucn7D9SGaTlaxzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/C5NMNrdzAIhlucn7D9SGaTlaxzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:c6:0f:3c:c5:6c:68:82:79:96:82:c6:56:cd:6d:d3:d0:9c:
e0:8c:e9:a7:a3:43:50:8b:ed:06:50:35:b6:e0:a7:55:60:2c:
bb:3e:f0:c6:70:00:65:82:c7:2e:77:9d:4f:27:7e:9e:c2:c7:
19:fa:7e:ff:74:5d:52:2a:e1:f3:e2:f3:98:1a:91:5f:0b:ef:
80:7e:1f:02:4f:7a:ba:f9:40:98:83:dc:ec:a2:04:a9:b9:50:
30:4f:7b:72:51:ac:3a:e2:2e:18:7c:52:41:16:c1:7b:b6:de:
a3:25:06:1d:ad:a9:30:84:4b:e8:d6:9d:62:48:3c:42:58:71:
e7:d6:45:16:b3:0c:1c:32:1f:26:8e:d0:7a:0a:6a:c5:c2:ed:
b0:cb:f6:13:01:d3:01:cf:b5:36:7f:c6:09:05:00:34:fc:ac:
d1:77:e2:50:26:71:c5:34:98:b9:d1:b2:d0:61:b3:12:3e:17:
0c:ad:d5:38:16:ce:7f:6a:2e:ae:e8:21:f8:68:7b:85:e9:fe:
89:ee:9f:c4:c6:0d:f2:6d:9c:1c:01:9a:ed:2a:68:47:64:f2:
1b:38:9d:d4:20:6c:76:23:04:a4:50:d8:49:90:fb:53:93:65:
26:c9:02:52:07:33:55:d7:22:f8:8e:76:97:7c:0d:2d:f4:42:
24:e3:8a:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:54:11 2026 by rpki-client