
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/8d00c2-71db-4fee-b6cb-c75c6d20d32c/1/5cN18687kSQJ3YNgp0CRNVaTcUE.mft
File: 5cN18687kSQJ3YNgp0CRNVaTcUE.mft (raw, json)
Hash identifier: vyxChkp6ghmpaF3mcLx7FZ0prF2e741cE6Du/Xvrrkk=
Subject key identifier: 59:0F:34:4B:D4:7C:62:88:BE:A7:52:CF:0E:65:73:49:9B:85:FA:83
Authority key identifier: E5:C3:75:F3:AF:3B:91:24:09:DD:83:60:A7:40:91:35:56:93:71:41
Certificate issuer: /CN=e5c375f3af3b912409dd8360a740913556937141
Certificate serial: 019CAAC6BC911252A4B0EBC8D4634B742AF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5cN18687kSQJ3YNgp0CRNVaTcUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/8d00c2-71db-4fee-b6cb-c75c6d20d32c/1/5cN18687kSQJ3YNgp0CRNVaTcUE.mft
Manifest number: 0782
Signing time: Sun 01 Mar 2026 19:01:16 +0000
Manifest this update: Sun 01 Mar 2026 19:01:16 +0000
Manifest next update: Mon 02 Mar 2026 19:01:16 +0000
Files and hashes: 1: 5cN18687kSQJ3YNgp0CRNVaTcUE.crl (hash: NP3l/2CgI1XpUdlXkk4UvLUu5UBt1woOwkqoBOqT6uU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/8d00c2-71db-4fee-b6cb-c75c6d20d32c/1/5cN18687kSQJ3YNgp0CRNVaTcUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/8d00c2-71db-4fee-b6cb-c75c6d20d32c/1/5cN18687kSQJ3YNgp0CRNVaTcUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/5cN18687kSQJ3YNgp0CRNVaTcUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:bc:91:12:52:a4:b0:eb:c8:d4:63:4b:74:2a:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5c375f3af3b912409dd8360a740913556937141
Validity
Not Before: Mar 1 19:01:16 2026 GMT
Not After : Mar 2 19:01:16 2026 GMT
Subject: CN=590f344bd47c6288bea752cf0e6573499b85fa83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:5a:46:7a:33:0d:0b:8a:77:b7:7b:5d:f9:e5:
cc:1d:33:cf:e4:f8:fe:c4:d7:87:82:7c:8e:ca:b4:
2a:29:73:a8:ad:1c:d5:99:7a:b9:c0:43:12:1f:98:
9e:55:b2:bc:16:a0:0c:c5:b8:56:74:c0:00:86:70:
58:87:64:74:1c:40:38:ba:23:f9:af:35:95:cf:66:
ac:ac:f8:77:3e:f8:0d:37:5c:5c:44:90:23:1a:fd:
a1:d5:41:3b:10:9b:9f:49:b5:27:f6:7d:2c:9c:da:
1b:2d:67:19:ed:bf:7c:97:70:9c:6d:b2:25:1f:2f:
af:ec:30:fc:b2:76:aa:04:74:f2:86:ca:70:92:6a:
d4:31:43:fc:34:ab:0f:7d:36:ba:67:e3:a8:a2:d2:
d8:87:68:07:ae:9b:73:0b:f3:3d:da:6b:54:b6:c0:
02:8d:3e:fc:b5:c1:fa:f6:33:54:65:02:b0:d1:cd:
50:5c:23:6c:4e:ed:5e:b4:3b:61:f7:16:9c:61:bb:
e2:ef:1e:e7:b2:3a:8f:01:99:1d:6c:d7:39:6d:5a:
41:26:2c:3c:2e:79:ba:72:18:e8:81:db:1b:ea:ea:
20:00:07:d0:e0:5a:c4:09:f3:59:53:40:5f:ae:74:
cd:ff:fa:5b:01:99:03:cd:d0:58:9f:ba:6a:97:5a:
79:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:0F:34:4B:D4:7C:62:88:BE:A7:52:CF:0E:65:73:49:9B:85:FA:83
X509v3 Authority Key Identifier:
keyid:E5:C3:75:F3:AF:3B:91:24:09:DD:83:60:A7:40:91:35:56:93:71:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5cN18687kSQJ3YNgp0CRNVaTcUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/8d00c2-71db-4fee-b6cb-c75c6d20d32c/1/5cN18687kSQJ3YNgp0CRNVaTcUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/8d00c2-71db-4fee-b6cb-c75c6d20d32c/1/5cN18687kSQJ3YNgp0CRNVaTcUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:bb:cf:85:6a:d7:87:67:d1:b6:43:48:67:6d:5b:ec:13:71:
67:a0:14:1b:01:b1:51:47:6f:e0:31:cd:62:e9:b7:65:1a:2a:
23:e0:af:d6:2f:14:4e:b2:06:67:ca:99:8d:09:87:dd:ce:de:
1b:ec:ca:aa:59:89:2c:53:34:2f:dc:c4:96:33:f0:72:49:c9:
45:6a:40:e8:8a:e9:3e:b8:7c:f1:c0:bf:38:75:75:94:a8:38:
7e:b0:bd:70:7e:f9:ba:31:fe:fc:f6:d9:86:26:c9:98:a9:82:
98:1b:9a:ce:b6:d6:c5:92:52:7f:44:f2:65:b3:ff:31:87:df:
cd:e3:0b:64:72:e3:55:94:cb:3d:91:2f:7f:8a:54:e3:50:07:
44:1e:04:17:6f:ae:c2:b6:dc:19:39:3d:57:dc:ea:14:53:e1:
1e:a3:d6:e1:18:1f:15:12:a7:ab:66:b9:80:d1:41:91:e9:15:
56:25:9a:56:e3:d7:90:01:6e:9d:35:3f:0c:95:a6:ae:f0:74:
6e:53:de:fd:69:bf:2b:05:b1:c0:39:5e:06:68:a6:5b:82:02:
a3:26:a4:19:5e:39:77:7f:e3:6a:ab:10:ba:15:fb:98:c3:21:
cf:d0:47:66:4a:c4:2f:01:f6:7c:60:ca:8f:b9:21:c8:f8:5e:
bb:3b:bd:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:41:29 2026 by rpki-client