Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/dc3294-bd4f-4fef-b9f7-3662785baaad/1/v5r7gj8fivhy55Pye2St74zU3Bs.mft
File: v5r7gj8fivhy55Pye2St74zU3Bs.mft (raw, json)
Hash identifier: jYx/JGP6uHNN7uFQLaDGmgQMPKzdn16+SQvzkGbF964=
Subject key identifier: 71:C8:44:9C:03:CA:52:99:78:EB:EF:50:0E:F3:45:50:D4:66:9C:AF
Authority key identifier: BF:9A:FB:82:3F:1F:8A:F8:72:E7:93:F2:7B:64:AD:EF:8C:D4:DC:1B
Certificate issuer: /CN=bf9afb823f1f8af872e793f27b64adef8cd4dc1b
Certificate serial: 019CAC7E0CC3EF0D1DB84158ABBEC32826D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v5r7gj8fivhy55Pye2St74zU3Bs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/dc3294-bd4f-4fef-b9f7-3662785baaad/1/v5r7gj8fivhy55Pye2St74zU3Bs.mft
Manifest number: 0603
Signing time: Mon 02 Mar 2026 03:01:07 +0000
Manifest this update: Mon 02 Mar 2026 03:01:07 +0000
Manifest next update: Tue 03 Mar 2026 03:01:07 +0000
Files and hashes: 1: v5r7gj8fivhy55Pye2St74zU3Bs.crl (hash: 4alP61gvGoMHYwpdquILurwkm1Z50OxD7m6UzqFZx1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/dc3294-bd4f-4fef-b9f7-3662785baaad/1/v5r7gj8fivhy55Pye2St74zU3Bs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/dc3294-bd4f-4fef-b9f7-3662785baaad/1/v5r7gj8fivhy55Pye2St74zU3Bs.mft
rsync://rpki.ripe.net/repository/DEFAULT/v5r7gj8fivhy55Pye2St74zU3Bs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:0c:c3:ef:0d:1d:b8:41:58:ab:be:c3:28:26:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf9afb823f1f8af872e793f27b64adef8cd4dc1b
Validity
Not Before: Mar 2 03:01:07 2026 GMT
Not After : Mar 3 03:01:07 2026 GMT
Subject: CN=71c8449c03ca529978ebef500ef34550d4669caf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b6:bd:d0:f9:99:01:bf:e6:cc:ab:a1:5c:74:
45:e5:b1:69:26:69:1b:d3:7e:d4:2d:79:43:67:25:
40:78:86:55:49:63:bd:d3:5e:71:1e:60:46:5b:5a:
0a:ad:d2:2f:d0:07:dc:82:45:59:95:02:ef:52:36:
a5:da:2b:21:88:83:08:21:32:9a:04:f7:9d:ca:24:
e4:f9:55:3b:a8:5f:ed:52:22:80:8f:53:ef:d5:01:
ba:a6:d7:db:28:1e:c7:7d:41:c1:f9:2a:5f:7c:f9:
8c:4e:31:58:ec:96:8f:3c:d6:a3:fa:77:a9:23:c5:
3d:5f:67:62:1e:3c:21:32:fe:8c:25:69:85:07:d0:
dc:72:c9:43:fe:00:d8:57:0b:ab:97:a2:2f:02:a2:
57:a8:b6:46:ce:0b:ab:b1:23:fc:65:77:90:6c:24:
1e:08:4c:3a:70:c9:26:83:bc:8f:d8:0c:df:47:60:
7f:34:7f:bb:55:37:4d:94:3f:3a:76:3e:a7:8a:0f:
a3:16:cd:e0:c1:b0:db:48:fb:17:5e:a2:55:2b:3d:
46:ad:05:9c:67:63:d3:06:89:7b:d2:da:7c:40:1f:
5e:f9:b0:27:a8:6b:41:03:91:96:d2:f9:fd:7c:b1:
b5:34:1a:fc:08:7d:56:08:d5:d3:1c:9f:39:1a:93:
43:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:C8:44:9C:03:CA:52:99:78:EB:EF:50:0E:F3:45:50:D4:66:9C:AF
X509v3 Authority Key Identifier:
keyid:BF:9A:FB:82:3F:1F:8A:F8:72:E7:93:F2:7B:64:AD:EF:8C:D4:DC:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v5r7gj8fivhy55Pye2St74zU3Bs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/dc3294-bd4f-4fef-b9f7-3662785baaad/1/v5r7gj8fivhy55Pye2St74zU3Bs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/dc3294-bd4f-4fef-b9f7-3662785baaad/1/v5r7gj8fivhy55Pye2St74zU3Bs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:b7:50:2d:45:52:1c:dd:f2:e5:d3:8d:98:e9:95:37:e7:7d:
43:da:78:d7:df:8b:da:7f:bc:ff:04:6a:e8:4d:04:06:16:a2:
47:e6:11:1f:98:b2:14:2d:f6:a7:7f:2b:f2:f4:a5:73:d0:1e:
38:c3:cf:29:8d:f5:4b:98:79:58:5a:e8:e8:76:ad:e2:95:75:
3f:7a:c6:3a:0f:33:50:5a:7e:8d:e4:60:52:ea:60:d0:19:a5:
15:85:c8:29:7d:5a:da:28:b6:01:c7:8e:ce:91:1c:21:a0:f1:
94:f3:42:e5:25:dd:24:30:ed:fd:52:56:15:fc:b5:4a:dc:d8:
82:5d:2f:8f:df:5a:55:6d:e5:bd:a8:bd:57:cc:d4:bb:86:45:
e1:9b:60:5c:1b:a4:d9:e1:e9:9c:83:64:81:f4:c2:41:27:4a:
b6:fa:f1:67:d6:dc:0a:e9:2d:28:2d:21:07:a2:b0:f6:70:be:
f3:af:c1:1c:9a:b1:d9:51:40:82:b2:68:96:99:e5:d1:52:a7:
2d:e0:dd:56:04:e5:62:ea:62:27:d4:8f:77:40:fa:a6:6b:23:
a4:ec:db:13:bd:c0:dd:9f:48:0e:ad:17:bc:2a:89:c3:ac:8f:
bd:61:70:d5:46:4f:89:cf:08:a8:cc:15:4b:5b:af:97:24:aa:
f8:7a:ae:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:20:18 2026 by rpki-client