Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/c727bf-7709-4b33-b618-a6c5000c7184/1/l5SL1vKtFY5iT9jonp718b2x05o.mft
File: l5SL1vKtFY5iT9jonp718b2x05o.mft (raw, json)
Hash identifier: AOcVvgJqxIYbSaXbRvgoCKczEflmnvRacvKI/uPRkYc=
Subject key identifier: 8F:58:D6:25:1F:A1:65:61:8B:4E:AA:6E:6E:E8:C8:17:0D:46:54:0E
Authority key identifier: 97:94:8B:D6:F2:AD:15:8E:62:4F:D8:E8:9E:9E:F5:F1:BD:B1:D3:9A
Certificate issuer: /CN=97948bd6f2ad158e624fd8e89e9ef5f1bdb1d39a
Certificate serial: 019D9AE3A8D6B58DFCC1715CC5F124716BA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l5SL1vKtFY5iT9jonp718b2x05o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/c727bf-7709-4b33-b618-a6c5000c7184/1/l5SL1vKtFY5iT9jonp718b2x05o.mft
Manifest number: 05F1
Signing time: Fri 17 Apr 2026 10:01:44 +0000
Manifest this update: Fri 17 Apr 2026 10:01:44 +0000
Manifest next update: Sat 18 Apr 2026 10:01:44 +0000
Files and hashes: 1: l5SL1vKtFY5iT9jonp718b2x05o.crl (hash: wWc5NPHIf5QXkgMYSAZo5wCDxmSf1FtGqDiQa6mS5uE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/c727bf-7709-4b33-b618-a6c5000c7184/1/l5SL1vKtFY5iT9jonp718b2x05o.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/c727bf-7709-4b33-b618-a6c5000c7184/1/l5SL1vKtFY5iT9jonp718b2x05o.mft
rsync://rpki.ripe.net/repository/DEFAULT/l5SL1vKtFY5iT9jonp718b2x05o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 10:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:a8:d6:b5:8d:fc:c1:71:5c:c5:f1:24:71:6b:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97948bd6f2ad158e624fd8e89e9ef5f1bdb1d39a
Validity
Not Before: Apr 17 10:01:44 2026 GMT
Not After : Apr 18 10:01:44 2026 GMT
Subject: CN=8f58d6251fa165618b4eaa6e6ee8c8170d46540e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:26:27:68:d6:33:27:c4:f2:e5:04:c3:32:2f:
33:02:bc:36:27:7e:8b:25:80:32:84:a3:74:28:06:
f1:ee:6c:3a:e8:9e:68:27:a8:c5:e9:ab:46:07:82:
60:b2:7f:1f:4b:8d:4a:59:50:9f:22:56:d1:5c:e8:
ce:d0:7c:7e:af:a5:3a:a6:ab:bd:14:fd:4a:8a:30:
32:d4:90:3c:8a:29:5a:31:18:02:9c:92:27:ec:0b:
db:25:6d:24:4e:06:71:df:bc:29:32:2f:d3:d0:1f:
1f:a6:04:e3:25:ea:da:74:36:b6:68:86:79:8c:9a:
ef:0e:df:65:65:24:db:91:42:e6:0b:da:75:a6:32:
82:25:f5:f2:8c:a0:66:95:6b:9c:ee:60:a8:6e:66:
d4:1a:1f:9d:28:11:d3:37:46:ef:5e:2e:bd:9c:4b:
30:98:39:02:13:db:41:b9:d3:00:ad:a9:43:1c:5e:
04:4c:11:1a:7a:17:28:2c:ca:de:e1:d5:51:b1:bf:
9b:d5:6b:ac:e9:32:55:41:f7:17:44:f1:67:cf:29:
0a:ab:fa:71:c8:fa:37:c9:ce:d6:e4:00:85:34:e1:
eb:af:30:6a:04:57:c7:e3:e7:c9:10:2d:eb:05:19:
eb:26:a2:b5:57:85:77:de:ae:20:4a:52:90:ed:d5:
f1:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:58:D6:25:1F:A1:65:61:8B:4E:AA:6E:6E:E8:C8:17:0D:46:54:0E
X509v3 Authority Key Identifier:
keyid:97:94:8B:D6:F2:AD:15:8E:62:4F:D8:E8:9E:9E:F5:F1:BD:B1:D3:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5SL1vKtFY5iT9jonp718b2x05o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c727bf-7709-4b33-b618-a6c5000c7184/1/l5SL1vKtFY5iT9jonp718b2x05o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c727bf-7709-4b33-b618-a6c5000c7184/1/l5SL1vKtFY5iT9jonp718b2x05o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:0b:3f:e6:fe:5a:96:f9:3a:b7:d1:6e:e0:6a:64:46:7f:2d:
16:7d:6e:c9:56:8c:dd:ae:3d:88:d4:63:1f:81:78:a6:ee:94:
d3:a0:69:be:fe:d0:ba:42:68:63:38:ea:ee:cb:92:ce:ce:74:
12:74:03:b2:ad:45:1b:19:e9:94:d9:90:3c:15:16:dc:2f:f9:
f3:1a:2d:00:37:d8:40:9f:c1:f9:8f:49:4b:e9:69:7f:9c:d6:
41:93:6f:37:77:a9:2f:14:1c:d3:5a:5b:ee:10:f7:0a:1b:9e:
ef:4c:24:5f:35:51:57:f1:5c:ba:03:08:2d:3c:22:08:d2:68:
26:75:cb:14:73:a3:e2:ea:a0:39:c1:19:46:ff:f9:e0:9e:35:
dc:65:e9:55:8f:9d:d6:98:d2:d6:02:d7:71:4a:b7:4f:a5:94:
69:ee:d0:7a:5b:07:7a:51:52:78:0d:7c:a7:8b:78:ac:1e:0b:
dd:ed:c8:4e:9b:d2:80:9d:d7:c4:15:e8:74:dd:18:27:c8:60:
4f:7a:22:36:23:d1:ed:88:8c:e0:37:48:52:92:bd:b7:eb:33:
65:31:fe:1e:a5:5d:79:38:2a:fd:5f:8f:de:d1:cf:5e:fe:19:
3e:49:98:3e:a5:c0:91:1b:29:1c:ea:0f:a1:dd:ab:5a:b9:46:
8d:46:05:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:26:21 2026 by rpki-client