Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.mft
File: 5R1xf7LUN9QR2HGve5-8sB6J-Ww.mft (raw, json)
Hash identifier: BpGhRvZn1jiNQbVbabiUSIqh7LKpc/jRV1KT602K+5o=
Subject key identifier: 74:DB:D2:4B:DC:B0:58:1F:A7:5D:DC:38:6C:A9:02:4D:4A:D7:E3:0D
Authority key identifier: E5:1D:71:7F:B2:D4:37:D4:11:D8:71:AF:7B:9F:BC:B0:1E:89:F9:6C
Certificate issuer: /CN=e51d717fb2d437d411d871af7b9fbcb01e89f96c
Certificate serial: 019CAAC63E68D329015FAA3C8CCAD8897DE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5R1xf7LUN9QR2HGve5-8sB6J-Ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.mft
Manifest number: 0D68
Signing time: Sun 01 Mar 2026 19:00:44 +0000
Manifest this update: Sun 01 Mar 2026 19:00:44 +0000
Manifest next update: Mon 02 Mar 2026 19:00:44 +0000
Files and hashes: 1: 5R1xf7LUN9QR2HGve5-8sB6J-Ww.crl (hash: aCr4S8/kqx2OSB70eLKWN+dtDRNlY4QASfhS+tmNEkU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.mft
rsync://rpki.ripe.net/repository/DEFAULT/5R1xf7LUN9QR2HGve5-8sB6J-Ww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:3e:68:d3:29:01:5f:aa:3c:8c:ca:d8:89:7d:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e51d717fb2d437d411d871af7b9fbcb01e89f96c
Validity
Not Before: Mar 1 19:00:44 2026 GMT
Not After : Mar 2 19:00:44 2026 GMT
Subject: CN=74dbd24bdcb0581fa75ddc386ca9024d4ad7e30d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:40:12:a2:7f:f3:da:e0:86:90:f4:66:20:d0:
3b:8a:f7:f3:2f:2d:40:f9:de:32:bc:d9:8e:17:5d:
c8:bf:4b:39:12:c6:3b:b6:ab:0a:b3:27:6e:ca:7e:
cd:04:92:1a:08:9e:4b:b0:1b:06:b5:14:d5:f2:0f:
1d:24:c9:48:c0:8f:2f:02:6f:75:b2:38:3e:e1:91:
63:6f:87:a2:f9:28:8b:b7:15:80:84:ce:88:6c:a4:
07:ee:5c:11:69:e3:f4:f2:be:1d:db:0f:dd:88:e6:
ab:a1:92:6e:a2:3f:dc:4b:47:b9:4e:20:91:e4:00:
30:50:40:a9:ed:04:3e:d2:bb:ef:43:4d:3e:c3:5d:
14:2d:ed:e3:bc:25:8b:18:e8:73:de:00:84:74:95:
e2:5d:1e:13:fb:d6:6e:bf:f5:ce:08:b9:79:69:24:
2a:53:c4:33:34:a7:f4:b3:00:01:19:6a:3a:e8:57:
73:34:1d:de:7e:e0:32:0a:18:9a:36:84:41:83:36:
ce:6a:2f:7b:a7:e8:3f:64:12:84:a3:0a:e5:05:5c:
99:ed:ca:a0:2f:79:4d:41:dd:5c:b8:03:d0:31:b6:
95:3c:47:f4:75:a2:bc:7f:d6:6e:f3:df:7d:4d:2d:
4f:d4:1e:df:18:66:83:fb:6d:06:3d:62:88:72:c3:
af:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:DB:D2:4B:DC:B0:58:1F:A7:5D:DC:38:6C:A9:02:4D:4A:D7:E3:0D
X509v3 Authority Key Identifier:
keyid:E5:1D:71:7F:B2:D4:37:D4:11:D8:71:AF:7B:9F:BC:B0:1E:89:F9:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5R1xf7LUN9QR2HGve5-8sB6J-Ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:1b:b8:49:09:6c:2a:f7:38:3b:21:71:3c:17:b1:77:67:f5:
dd:e8:3b:8d:3c:94:b2:84:76:5b:7d:f5:f6:bc:13:03:0a:e8:
31:f3:86:59:20:a0:fb:4e:13:3c:8c:9b:a3:99:c3:ec:66:cc:
dc:aa:24:88:42:75:de:7b:3f:24:28:a5:6b:49:95:5f:10:1d:
43:8b:63:c8:ba:cf:86:51:00:dd:27:75:1e:99:bc:59:53:4b:
df:96:70:fa:8e:2a:a4:77:37:61:73:db:e5:e6:46:9a:20:51:
93:eb:3c:06:44:c2:19:ee:2b:7e:d7:ae:e4:5b:7e:19:96:5f:
31:ab:ed:da:1e:b1:61:74:b8:ec:3e:05:e1:06:94:c7:8d:01:
80:18:c2:35:8a:c5:d2:14:ba:4c:69:14:be:89:fb:50:93:73:
07:72:c8:0b:04:04:c0:5b:ed:f7:52:77:52:ca:64:43:43:6d:
0a:d1:f3:a9:b4:d1:1f:ea:93:9b:78:95:44:a8:9b:4a:dc:0a:
f8:7e:9d:14:8a:8d:1f:14:88:5b:ee:de:18:a5:c0:55:4c:7e:
c2:bb:61:5c:cc:3d:ff:a3:d9:27:a9:a1:e0:04:df:3e:6b:be:
07:53:59:20:18:78:e1:53:a1:b2:db:08:eb:f5:0b:a3:66:d5:
42:aa:d5:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:00:47 2026 by rpki-client