Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/020b7a-74a3-4594-9c46-d5bdb639fbca/1/5frVG_rdJFMhvgkuaB2N5uLSdcM.mft
File: 5frVG_rdJFMhvgkuaB2N5uLSdcM.mft (raw, json)
Hash identifier: awm9qPW9Zx4JuGQjcIKZlq1M+roIdGvSiDvOL9/2DcM=
Subject key identifier: BF:A6:02:F2:9D:7B:02:A1:F6:34:D4:45:8B:E1:07:DC:C5:A7:87:E9
Authority key identifier: E5:FA:D5:1B:FA:DD:24:53:21:BE:09:2E:68:1D:8D:E6:E2:D2:75:C3
Certificate issuer: /CN=e5fad51bfadd245321be092e681d8de6e2d275c3
Certificate serial: 01A1DEDE415B6C22B5A823A1F337803D8D6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5frVG_rdJFMhvgkuaB2N5uLSdcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/020b7a-74a3-4594-9c46-d5bdb639fbca/1/5frVG_rdJFMhvgkuaB2N5uLSdcM.mft
Manifest number: 0A7B
Signing time: Sun 15 Nov 2026 11:01:09 +0000
Manifest this update: Sun 15 Nov 2026 11:01:09 +0000
Manifest next update: Mon 16 Nov 2026 11:01:09 +0000
Files and hashes: 1: 5frVG_rdJFMhvgkuaB2N5uLSdcM.crl (hash: WBrGMikyEM2aRhL5TTqPwzobdVhp4IhKhhRi8utXXvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/020b7a-74a3-4594-9c46-d5bdb639fbca/1/5frVG_rdJFMhvgkuaB2N5uLSdcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/020b7a-74a3-4594-9c46-d5bdb639fbca/1/5frVG_rdJFMhvgkuaB2N5uLSdcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/5frVG_rdJFMhvgkuaB2N5uLSdcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 11:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:de:41:5b:6c:22:b5:a8:23:a1:f3:37:80:3d:8d:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5fad51bfadd245321be092e681d8de6e2d275c3
Validity
Not Before: Nov 15 11:01:09 2026 GMT
Not After : Nov 16 11:01:09 2026 GMT
Subject: CN=bfa602f29d7b02a1f634d4458be107dcc5a787e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ea:6c:74:ab:bc:d4:0b:ae:8b:1a:7c:65:ab:
43:a0:2b:b0:00:6f:21:20:35:8e:c9:a6:59:13:e0:
8e:8e:22:30:8c:a5:c9:a5:65:31:72:f9:58:2e:8c:
b1:3a:54:b3:f6:ff:78:29:47:e0:35:e7:d6:8a:53:
0f:92:e0:d1:6a:2c:40:ff:7a:48:96:e7:a9:7b:24:
5a:ef:93:d5:d0:81:a4:d7:19:ef:37:5d:e4:9d:2b:
15:81:3a:4d:2c:44:54:7a:a0:e0:c1:d9:d6:85:67:
05:3d:7f:77:a2:9e:98:e1:fc:24:56:65:ef:51:72:
d4:27:34:15:49:e0:1c:c2:03:c9:cc:6c:30:47:49:
8d:ab:d1:41:97:57:f4:31:c7:29:ce:f1:9c:e5:b2:
4c:75:55:4f:4f:b1:cc:78:7e:23:cb:3a:79:75:8e:
81:31:af:c5:e5:29:fc:6f:81:83:39:83:32:76:c4:
69:8f:d1:22:a3:06:d8:73:b8:08:02:e3:dd:57:a0:
e8:2d:e7:ef:19:82:93:c8:f1:47:44:69:60:16:34:
06:fb:84:b2:1d:2c:95:b7:62:25:d5:b0:30:bd:3e:
45:43:39:48:39:db:63:45:5f:49:7b:eb:ae:fa:18:
e9:1f:de:ef:ef:5c:f1:9c:bf:f9:36:fd:1a:0c:44:
90:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:A6:02:F2:9D:7B:02:A1:F6:34:D4:45:8B:E1:07:DC:C5:A7:87:E9
X509v3 Authority Key Identifier:
keyid:E5:FA:D5:1B:FA:DD:24:53:21:BE:09:2E:68:1D:8D:E6:E2:D2:75:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5frVG_rdJFMhvgkuaB2N5uLSdcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/020b7a-74a3-4594-9c46-d5bdb639fbca/1/5frVG_rdJFMhvgkuaB2N5uLSdcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/020b7a-74a3-4594-9c46-d5bdb639fbca/1/5frVG_rdJFMhvgkuaB2N5uLSdcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:76:74:51:82:8d:e0:ba:1c:48:97:2a:65:a8:e8:91:26:f8:
25:89:80:6e:f8:6b:5d:f7:3d:41:16:2b:1e:3a:30:a7:93:13:
30:73:35:50:da:5d:c3:2a:54:13:70:07:a9:56:0f:cc:c5:67:
70:55:35:5e:9a:a3:9a:0c:5c:7f:e6:b2:8c:0f:7b:a1:9d:0b:
c9:d3:4a:3b:42:31:10:66:ce:0e:05:c8:5b:05:b3:96:2f:d8:
33:b4:c8:aa:6d:04:a9:b8:15:82:d2:37:0a:1c:8f:70:e1:b8:
91:b3:90:cf:a3:13:68:de:17:49:e2:02:e7:75:ea:da:41:00:
87:5d:0b:b6:07:ab:95:13:e0:9d:ff:ee:a1:26:0b:b6:02:19:
c6:53:12:33:b1:2d:b7:a4:79:19:78:b3:06:14:a6:c2:92:0b:
7f:d9:04:37:d2:62:fd:ee:be:ce:88:0d:83:ea:94:a5:7c:09:
75:e4:dc:e2:e8:03:b1:6d:5d:f8:99:b2:da:f3:53:6f:a7:04:
e5:23:bc:5e:c3:f7:97:20:df:35:3d:41:45:11:cc:86:09:67:
e2:2a:46:d5:76:04:5d:2c:f1:6a:91:21:db:2a:bc:ef:08:c4:
a5:7d:7c:3c:a1:bd:9d:cf:4c:c1:06:c2:af:fc:3c:f2:76:0d:
66:08:7e:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:14:19 2026 by rpki-client