Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/48/698339-5905-4637-b983-cdb3a657d9ee/1/5_y3rNVfY0m52BRheGwSRY-G9y4.mft
File: 5_y3rNVfY0m52BRheGwSRY-G9y4.mft (raw, json)
Hash identifier: iS+GzHuRxCUVxsJnjqKOLcTUConvnDAhFVJv8493k4w=
Subject key identifier: D6:E2:E5:56:D0:05:01:8B:25:9F:96:8F:7E:22:D1:8C:F0:08:74:44
Authority key identifier: E7:FC:B7:AC:D5:5F:63:49:B9:D8:14:61:78:6C:12:45:8F:86:F7:2E
Certificate issuer: /CN=e7fcb7acd55f6349b9d81461786c12458f86f72e
Certificate serial: 01A13559F25863FC90536FF8F8040D182660
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_y3rNVfY0m52BRheGwSRY-G9y4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/698339-5905-4637-b983-cdb3a657d9ee/1/5_y3rNVfY0m52BRheGwSRY-G9y4.mft
Manifest number: 1A9C
Signing time: Tue 13 Oct 2026 13:00:49 +0000
Manifest this update: Tue 13 Oct 2026 13:00:49 +0000
Manifest next update: Wed 14 Oct 2026 13:00:49 +0000
Files and hashes: 1: 5_y3rNVfY0m52BRheGwSRY-G9y4.crl (hash: Y7S1g/I4gvvInQH3ZdHdrHU4cIrSOwcRoAwZBlw33zQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/698339-5905-4637-b983-cdb3a657d9ee/1/5_y3rNVfY0m52BRheGwSRY-G9y4.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/698339-5905-4637-b983-cdb3a657d9ee/1/5_y3rNVfY0m52BRheGwSRY-G9y4.mft
rsync://rpki.ripe.net/repository/DEFAULT/5_y3rNVfY0m52BRheGwSRY-G9y4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:35:59:f2:58:63:fc:90:53:6f:f8:f8:04:0d:18:26:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7fcb7acd55f6349b9d81461786c12458f86f72e
Validity
Not Before: Oct 13 13:00:49 2026 GMT
Not After : Oct 14 13:00:49 2026 GMT
Subject: CN=d6e2e556d005018b259f968f7e22d18cf0087444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ab:34:01:6b:a6:52:6a:b7:ca:7c:67:31:83:
42:5a:c8:c2:00:96:3e:c0:83:5b:25:13:98:3d:53:
6b:01:ce:a7:f7:86:f9:08:f2:1c:2a:80:af:03:f9:
f8:07:a2:c2:6d:e8:be:86:7f:07:d7:f5:cf:e8:1f:
13:ae:c0:4e:8e:73:80:10:10:9a:f1:72:6a:39:90:
4a:31:de:93:de:23:a2:1c:f0:7f:71:67:88:ad:9b:
1a:1d:ad:eb:3f:06:47:6e:a1:c3:d9:50:13:d0:d3:
24:e3:ed:fa:e2:44:72:32:35:b1:4e:b7:34:dd:8b:
88:c4:5c:db:5b:05:99:79:33:1b:c7:d4:d1:23:8b:
f1:63:2f:f9:d4:fa:65:2b:a1:85:c9:a8:1e:23:0d:
87:a1:d1:e8:23:ce:c6:ec:3b:56:87:5c:3e:41:a7:
20:9d:fd:88:cc:a4:79:7a:d3:d4:a6:8e:2d:46:8d:
46:77:02:71:47:e2:9c:b7:0c:dc:1f:3f:ae:a0:ba:
57:d0:e8:8f:0f:59:c3:94:f0:37:78:da:65:d4:9d:
da:4c:e3:eb:76:4d:42:38:0c:13:3f:8a:57:ff:de:
d2:c1:c2:3f:18:9f:ff:ac:f5:6d:ab:fd:15:1c:b1:
00:dd:0f:f8:81:33:1f:10:85:b0:8d:e6:e6:d4:ba:
15:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:E2:E5:56:D0:05:01:8B:25:9F:96:8F:7E:22:D1:8C:F0:08:74:44
X509v3 Authority Key Identifier:
keyid:E7:FC:B7:AC:D5:5F:63:49:B9:D8:14:61:78:6C:12:45:8F:86:F7:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_y3rNVfY0m52BRheGwSRY-G9y4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/698339-5905-4637-b983-cdb3a657d9ee/1/5_y3rNVfY0m52BRheGwSRY-G9y4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/698339-5905-4637-b983-cdb3a657d9ee/1/5_y3rNVfY0m52BRheGwSRY-G9y4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:be:36:19:39:1e:e4:82:bf:84:00:bf:02:cf:5b:11:b1:21:
d5:e2:72:09:26:85:f2:23:53:7f:e5:31:41:92:81:c0:35:d2:
91:38:bc:8b:8c:04:96:2f:e8:f5:26:63:a3:7c:ae:8d:46:c8:
00:71:d1:6f:ef:60:b0:57:e0:49:47:60:b5:e1:26:8d:2b:c7:
59:8b:df:3a:f0:dc:0d:0c:88:ec:e5:76:73:ed:c2:45:12:3a:
ef:39:e9:ab:40:f6:ce:dd:35:25:b9:ac:6b:be:c5:8e:ed:ee:
8f:d0:67:b5:2c:4b:f2:30:52:d0:a8:e0:05:8c:bc:bb:fd:ad:
bc:b0:20:d0:a8:0e:2e:e5:30:fd:53:be:70:3d:f8:14:d2:78:
e0:b7:3e:78:67:ca:2f:30:c6:1b:88:79:ef:3a:1e:0b:a1:ed:
5b:65:d1:48:6d:6b:a3:a5:6d:3b:7a:3b:b7:ee:a3:89:ac:44:
2f:aa:e2:b6:20:97:af:c1:3e:f8:16:2a:1d:ac:6b:3b:89:4e:
7e:f8:6e:fd:96:24:a0:03:ab:eb:68:11:27:b2:33:0c:78:48:
e1:7d:60:11:b0:0e:b9:ca:ee:0c:dc:8f:57:03:92:b6:65:d0:
53:68:6b:ce:3d:55:56:7a:8c:fd:0d:f4:e4:57:31:50:1b:90:
f2:a4:16:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 21:17:10 2026 by rpki-client