Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/eb7e0c-59a1-4f93-8b27-ac4883e47665/1/5n17NXAHcGQBPaGOKeaQzUyb1xA.mft
File: 5n17NXAHcGQBPaGOKeaQzUyb1xA.mft (raw, json)
Hash identifier: PYNc43eKnEPCoFV536Qf4q3mW3P6IsuHyFYvXi0EOz4=
Subject key identifier: 10:9F:DC:D6:66:D4:5D:26:25:0C:64:3E:1B:54:68:3B:72:89:82:40
Authority key identifier: E6:7D:7B:35:70:07:70:64:01:3D:A1:8E:29:E6:90:CD:4C:9B:D7:10
Certificate issuer: /CN=e67d7b3570077064013da18e29e690cd4c9bd710
Certificate serial: 019D25BA45A22B8A9D79879B9EC5D6F9A1DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5n17NXAHcGQBPaGOKeaQzUyb1xA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/eb7e0c-59a1-4f93-8b27-ac4883e47665/1/5n17NXAHcGQBPaGOKeaQzUyb1xA.mft
Manifest number: 0569
Signing time: Wed 25 Mar 2026 16:00:57 +0000
Manifest this update: Wed 25 Mar 2026 16:00:57 +0000
Manifest next update: Thu 26 Mar 2026 16:00:57 +0000
Files and hashes: 1: 5n17NXAHcGQBPaGOKeaQzUyb1xA.crl (hash: 3TU8yVGTUbWHNZvnRLZDYJfCCtEXs3C8PM/5F9J5ynY=)
2: wksghwYAvyyuquujhn16YlPDo6w.roa (hash: mUJnqqbbR94LX0rZEF/1N+dbXfhWkX3EPaMGmoUlRoc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/eb7e0c-59a1-4f93-8b27-ac4883e47665/1/5n17NXAHcGQBPaGOKeaQzUyb1xA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/eb7e0c-59a1-4f93-8b27-ac4883e47665/1/5n17NXAHcGQBPaGOKeaQzUyb1xA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5n17NXAHcGQBPaGOKeaQzUyb1xA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:45:a2:2b:8a:9d:79:87:9b:9e:c5:d6:f9:a1:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e67d7b3570077064013da18e29e690cd4c9bd710
Validity
Not Before: Mar 25 16:00:57 2026 GMT
Not After : Mar 26 16:00:57 2026 GMT
Subject: CN=109fdcd666d45d26250c643e1b54683b72898240
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:65:86:53:2e:d5:47:7b:92:1c:b5:5d:e8:9e:
fc:4c:6e:47:a0:62:04:a5:1e:61:7f:d3:55:ee:f8:
12:41:dd:1d:52:4f:02:a5:4f:ab:e4:4f:78:bf:19:
c0:6d:f5:89:58:59:85:3a:9d:41:d3:95:a8:20:fa:
64:e5:70:49:6b:75:0c:7a:9c:b2:84:b2:8d:1e:0c:
41:1d:3f:a5:76:43:09:2f:75:65:2b:bf:7b:ca:22:
8a:1b:a5:c1:f4:13:3a:29:b2:da:86:ca:71:c2:c6:
4f:ce:07:f6:e2:70:f2:87:c4:c8:0c:cb:4a:91:e6:
d7:ea:f8:de:34:75:5c:5c:7d:aa:67:62:46:6a:dc:
47:42:d7:00:07:ec:be:7d:21:7a:35:9b:87:fe:2d:
4f:58:20:d6:25:f4:b9:e0:58:3a:19:a1:60:7f:4d:
ea:11:e1:52:dd:d4:27:a9:0c:cd:3a:5c:65:24:b6:
65:60:4d:f3:b1:8c:14:84:b8:1d:5a:e5:6a:28:75:
f0:32:ff:7d:05:3f:2e:fe:a0:29:cf:d0:bc:70:45:
78:29:a5:9f:ce:c5:c8:0a:5b:f9:a2:9d:86:e9:f2:
27:38:a7:8e:58:4d:09:48:3b:07:95:d5:14:f4:32:
aa:3d:92:d9:37:8b:7c:e3:4a:7e:9e:15:0d:f5:a6:
56:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:9F:DC:D6:66:D4:5D:26:25:0C:64:3E:1B:54:68:3B:72:89:82:40
X509v3 Authority Key Identifier:
keyid:E6:7D:7B:35:70:07:70:64:01:3D:A1:8E:29:E6:90:CD:4C:9B:D7:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5n17NXAHcGQBPaGOKeaQzUyb1xA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/eb7e0c-59a1-4f93-8b27-ac4883e47665/1/5n17NXAHcGQBPaGOKeaQzUyb1xA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/eb7e0c-59a1-4f93-8b27-ac4883e47665/1/5n17NXAHcGQBPaGOKeaQzUyb1xA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:f6:91:b1:6f:4a:11:29:60:5a:3c:20:04:31:f2:c0:73:29:
6a:e5:ec:da:0c:21:10:1c:ba:84:d3:e6:46:63:18:8a:93:fb:
74:51:8e:d7:0f:2b:cb:c8:fd:7a:b3:bf:d1:10:6f:48:a9:b7:
1f:65:ab:bc:e4:71:d9:4c:92:8e:26:3a:52:cd:75:5d:9d:6d:
f7:3d:86:a0:79:f0:1c:62:bc:7e:28:53:37:a3:a6:ac:0e:81:
a4:be:55:1b:cc:89:2a:57:60:89:57:f4:60:3e:53:88:f0:d6:
ab:68:af:63:09:f9:18:b8:8f:ec:f4:ee:dd:9a:8a:8d:a8:97:
65:b5:82:85:88:f9:12:ea:a1:c8:99:d2:0f:e6:ed:83:02:f0:
b4:22:b1:8f:bf:3a:93:b9:64:66:2b:f4:b5:ee:7a:1f:bd:a7:
58:4c:79:8b:12:2b:b6:7a:e8:64:aa:39:b4:78:98:56:59:bf:
ed:88:a9:03:9f:9b:3a:be:46:01:e7:21:2e:d0:08:87:9c:40:
e7:97:fe:14:6f:9c:25:30:9f:22:94:5e:40:39:13:6b:4d:22:
31:c9:7f:69:4d:f1:62:09:e7:3e:cd:90:c7:98:82:e8:a8:d7:
da:56:8c:74:6d:64:fb:40:1b:36:28:10:3b:39:88:ff:e5:47:
35:ab:fe:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:40:49 2026 by rpki-client