Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/8ae730-ae5e-4be9-978b-00b520875376/1/5UmH5s-8zliuDJbnZmqyGrPi4JA.mft
File: 5UmH5s-8zliuDJbnZmqyGrPi4JA.mft (raw, json)
Hash identifier: 7u4X8D8m5UA6NeyUJ9+DIVN08jX4hs8eEfVvg4cLIqc=
Subject key identifier: 19:15:94:72:9F:EF:B2:BB:79:DD:3A:CE:91:C8:92:1D:5F:FD:E2:D6
Authority key identifier: E5:49:87:E6:CF:BC:CE:58:AE:0C:96:E7:66:6A:B2:1A:B3:E2:E0:90
Certificate issuer: /CN=e54987e6cfbcce58ae0c96e7666ab21ab3e2e090
Certificate serial: 019CAA582DA0DF7C00D666006CAAA825DAED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5UmH5s-8zliuDJbnZmqyGrPi4JA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/8ae730-ae5e-4be9-978b-00b520875376/1/5UmH5s-8zliuDJbnZmqyGrPi4JA.mft
Manifest number: 04E9
Signing time: Sun 01 Mar 2026 17:00:31 +0000
Manifest this update: Sun 01 Mar 2026 17:00:31 +0000
Manifest next update: Mon 02 Mar 2026 17:00:31 +0000
Files and hashes: 1: 5UmH5s-8zliuDJbnZmqyGrPi4JA.crl (hash: cjy5BL1GWCrxosBMscXr1WUD9IY8ALTEARWhaNyg/AA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/8ae730-ae5e-4be9-978b-00b520875376/1/5UmH5s-8zliuDJbnZmqyGrPi4JA.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/8ae730-ae5e-4be9-978b-00b520875376/1/5UmH5s-8zliuDJbnZmqyGrPi4JA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5UmH5s-8zliuDJbnZmqyGrPi4JA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:2d:a0:df:7c:00:d6:66:00:6c:aa:a8:25:da:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e54987e6cfbcce58ae0c96e7666ab21ab3e2e090
Validity
Not Before: Mar 1 17:00:31 2026 GMT
Not After : Mar 2 17:00:31 2026 GMT
Subject: CN=191594729fefb2bb79dd3ace91c8921d5ffde2d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:4e:96:c5:d3:31:79:8f:32:8a:1f:a6:35:9a:
f5:2e:83:31:2e:92:a1:14:8b:8c:e0:99:fb:f0:92:
1c:ee:bb:22:d9:cd:8a:9a:3a:63:97:2c:3e:b0:a5:
31:a4:0c:6c:7b:b1:dd:54:aa:e5:d9:e8:4c:4b:d4:
7c:fd:8d:de:c6:8f:7f:bf:e6:4a:dc:c3:3d:a2:32:
9b:57:16:c3:06:73:d2:e6:85:ff:bc:c9:40:80:6a:
b0:52:8a:6b:55:f2:80:5b:d1:e2:20:d1:de:e2:42:
2c:9a:fd:e5:c3:c1:38:15:7b:9b:f1:06:df:46:e0:
57:af:0f:10:ee:f5:1d:54:dd:ae:0d:d1:f5:38:ba:
89:eb:bb:59:94:da:5b:a8:7c:f4:51:cb:d2:b0:22:
ea:ef:ab:01:78:48:d0:c6:65:c0:ad:f7:da:4d:dd:
b3:63:01:59:3e:84:52:6d:e3:b9:4e:67:86:bd:ff:
ce:d6:2b:7c:c7:35:22:e2:40:1c:00:91:58:c4:a3:
9e:0a:23:c8:df:36:7c:0d:50:be:d5:91:46:8e:6b:
53:14:58:aa:62:33:6b:5a:4c:94:4c:f8:ef:93:08:
ee:bf:27:d1:7c:e4:95:2f:d3:a2:ea:39:e7:b0:4a:
93:3c:4a:db:d9:81:4b:73:37:0b:1d:62:90:a2:c3:
67:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:15:94:72:9F:EF:B2:BB:79:DD:3A:CE:91:C8:92:1D:5F:FD:E2:D6
X509v3 Authority Key Identifier:
keyid:E5:49:87:E6:CF:BC:CE:58:AE:0C:96:E7:66:6A:B2:1A:B3:E2:E0:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5UmH5s-8zliuDJbnZmqyGrPi4JA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/8ae730-ae5e-4be9-978b-00b520875376/1/5UmH5s-8zliuDJbnZmqyGrPi4JA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/8ae730-ae5e-4be9-978b-00b520875376/1/5UmH5s-8zliuDJbnZmqyGrPi4JA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:c0:9a:6b:0e:9a:6b:f8:42:85:b0:ca:37:f9:93:90:35:26:
e2:2b:ad:49:54:8a:1f:9c:da:b9:2e:07:9f:22:a8:3c:41:c8:
d7:d9:80:b6:8c:54:3d:03:92:95:f7:46:c8:12:7e:59:55:fe:
c1:0e:4f:17:e8:80:38:2c:e1:d0:5e:00:e0:47:2d:e9:13:b0:
71:c0:ec:07:49:11:5c:f4:3e:05:1b:9e:ab:eb:ba:c5:09:8c:
c4:3c:ca:59:ea:88:21:af:12:c0:15:bd:6a:83:b8:1d:26:ef:
0e:6c:56:1c:44:16:47:b7:1f:26:9a:28:ef:07:c2:b7:2d:d0:
7b:c8:c3:4d:0f:83:7e:ea:7c:de:df:9b:80:58:26:3e:7f:29:
72:54:e8:51:f1:1a:19:c9:8d:f3:cc:0c:38:4e:6b:00:8e:6e:
1f:99:87:60:e1:c2:97:b8:fa:54:0d:b2:fa:a9:97:63:9a:a6:
c2:95:e1:99:0f:a8:09:e3:79:71:d2:d8:fc:29:c0:69:09:46:
f9:cc:66:5f:f3:f6:13:dc:a5:76:52:1b:c4:e4:27:6d:4c:6f:
67:43:8f:59:e1:9c:f4:bb:91:88:76:7b:13:2e:82:f1:67:6c:
57:67:54:ed:c4:b4:56:68:a7:c9:e4:d4:fa:b8:f3:f3:76:00:
f9:ec:67:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:56:09 2026 by rpki-client