Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/d73541-3b4d-44a9-82ac-29e53eda6e1c/1/_5zoM1_DdnayDsFlXFPWfbyG6LM.mft
File: _5zoM1_DdnayDsFlXFPWfbyG6LM.mft (raw, json)
Hash identifier: uEKvkZq/xDKxB016OJnIwSGm46/NxburQ2DMaENIDLk=
Subject key identifier: 64:A9:69:04:8D:90:EB:85:01:FF:A2:73:3A:96:F1:97:57:88:3C:32
Authority key identifier: FF:9C:E8:33:5F:C3:76:76:B2:0E:C1:65:5C:53:D6:7D:BC:86:E8:B3
Certificate issuer: /CN=ff9ce8335fc37676b20ec1655c53d67dbc86e8b3
Certificate serial: 019CAAC7096B91BA1B8599D92B74910FF6E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_5zoM1_DdnayDsFlXFPWfbyG6LM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/d73541-3b4d-44a9-82ac-29e53eda6e1c/1/_5zoM1_DdnayDsFlXFPWfbyG6LM.mft
Manifest number: 10C0
Signing time: Sun 01 Mar 2026 19:01:36 +0000
Manifest this update: Sun 01 Mar 2026 19:01:36 +0000
Manifest next update: Mon 02 Mar 2026 19:01:36 +0000
Files and hashes: 1: _5zoM1_DdnayDsFlXFPWfbyG6LM.crl (hash: aiIdcXsSE2ChFAQWirJuIrmmMhNvQhYW3TI6YLnr84Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/d73541-3b4d-44a9-82ac-29e53eda6e1c/1/_5zoM1_DdnayDsFlXFPWfbyG6LM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/d73541-3b4d-44a9-82ac-29e53eda6e1c/1/_5zoM1_DdnayDsFlXFPWfbyG6LM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_5zoM1_DdnayDsFlXFPWfbyG6LM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c7:09:6b:91:ba:1b:85:99:d9:2b:74:91:0f:f6:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff9ce8335fc37676b20ec1655c53d67dbc86e8b3
Validity
Not Before: Mar 1 19:01:36 2026 GMT
Not After : Mar 2 19:01:36 2026 GMT
Subject: CN=64a969048d90eb8501ffa2733a96f19757883c32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:26:55:74:7b:10:69:2c:ed:1d:02:34:de:a3:
e2:cc:5c:b3:b4:a8:c2:9e:8b:0f:ec:77:84:bf:de:
a2:b9:96:7a:3e:4a:5e:07:6f:d7:8d:e9:06:c9:65:
0f:f5:7f:5d:09:38:99:f0:d1:a4:af:85:88:64:39:
46:e8:f4:95:b2:6f:1f:a5:fe:36:9b:5f:cf:a1:ea:
f7:53:aa:74:4b:5c:c3:d2:c1:f1:65:e6:b7:fb:3d:
84:76:33:c0:64:4f:da:60:81:e8:95:7c:45:39:e6:
0d:00:12:ff:26:8a:84:9f:bc:01:77:4e:8b:fc:64:
29:ce:90:96:f4:4f:e2:66:2b:5f:c7:39:91:93:61:
cb:51:44:71:34:3f:07:02:e0:00:bb:eb:ed:13:52:
d9:87:34:01:2a:cd:88:d5:b9:24:8d:dd:72:6d:20:
15:95:e1:04:b5:19:e9:42:d9:ff:23:dc:46:7c:89:
be:8c:73:ce:8e:70:39:5d:8f:6c:a1:22:fe:f6:9c:
0b:ec:dc:3b:43:92:fd:29:19:8c:48:29:57:d5:b7:
b5:f9:9e:22:54:59:08:fc:3d:c6:fc:3c:0f:bb:6b:
83:01:35:04:a9:f9:c2:4e:48:79:5e:41:44:eb:de:
11:f9:c9:0a:70:77:ec:30:61:8c:18:f6:fd:86:c7:
0d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:A9:69:04:8D:90:EB:85:01:FF:A2:73:3A:96:F1:97:57:88:3C:32
X509v3 Authority Key Identifier:
keyid:FF:9C:E8:33:5F:C3:76:76:B2:0E:C1:65:5C:53:D6:7D:BC:86:E8:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_5zoM1_DdnayDsFlXFPWfbyG6LM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d73541-3b4d-44a9-82ac-29e53eda6e1c/1/_5zoM1_DdnayDsFlXFPWfbyG6LM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d73541-3b4d-44a9-82ac-29e53eda6e1c/1/_5zoM1_DdnayDsFlXFPWfbyG6LM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:27:d9:8e:bc:a1:2a:fe:e8:3c:91:ca:cd:5a:f6:34:6c:e8:
0a:ee:8a:78:59:83:26:62:4b:12:84:86:69:3c:bc:b7:f9:e1:
93:71:3c:de:45:84:fa:3c:ce:e9:fe:05:8a:2e:68:f9:df:49:
10:d7:66:b6:17:d0:d5:2d:d4:37:8f:5e:3d:77:49:4c:69:69:
b1:e7:39:e1:db:3f:e9:ff:f2:92:95:5d:f1:3d:b5:d2:b7:3b:
99:a2:6e:43:5d:54:1a:94:ba:55:ca:48:8f:36:99:b2:1a:70:
8f:8e:e9:8d:8b:0c:d7:16:13:3f:ee:32:c8:bb:25:91:80:7e:
27:73:11:17:cb:a9:b9:91:ba:4e:08:3d:4b:20:3d:3e:cf:29:
27:ee:82:26:76:e4:fc:23:83:48:fe:22:2c:92:c3:c7:b0:b2:
82:37:40:61:ca:57:40:50:fa:5d:44:29:77:bf:1e:3e:b2:99:
4f:03:c4:e7:1d:3c:09:11:c0:9c:6b:b8:8c:8b:d8:60:9f:aa:
11:1e:e1:0e:36:7c:42:b4:de:8b:c5:27:11:59:3e:5a:4e:93:
01:34:47:16:34:c6:9c:54:7d:bb:ff:b4:88:54:1e:8d:85:84:
4a:df:a9:13:c2:c4:fb:0b:cc:06:c4:7c:12:a7:07:2c:10:62:
33:d9:59:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:48:29 2026 by rpki-client