Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/cb879b-9c96-429a-9bb3-e18d998c64ef/1/5huaXW2YcDw4cqG7P5DRA2hcvQQ.mft
File: 5huaXW2YcDw4cqG7P5DRA2hcvQQ.mft (raw, json)
Hash identifier: wUalS5GAQpHq7sgSUOZ7lfNWLhVoU4o/eJ3TsjRpiis=
Subject key identifier: 91:C1:F6:6D:95:AD:89:58:9D:02:E7:61:39:43:AE:6C:E5:51:2A:3E
Authority key identifier: E6:1B:9A:5D:6D:98:70:3C:38:72:A1:BB:3F:90:D1:03:68:5C:BD:04
Certificate issuer: /CN=e61b9a5d6d98703c3872a1bb3f90d103685cbd04
Certificate serial: 019CAA58CEF396ECDC822FDE68BE35AB50D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5huaXW2YcDw4cqG7P5DRA2hcvQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/cb879b-9c96-429a-9bb3-e18d998c64ef/1/5huaXW2YcDw4cqG7P5DRA2hcvQQ.mft
Manifest number: 1842
Signing time: Sun 01 Mar 2026 17:01:12 +0000
Manifest this update: Sun 01 Mar 2026 17:01:12 +0000
Manifest next update: Mon 02 Mar 2026 17:01:12 +0000
Files and hashes: 1: 5huaXW2YcDw4cqG7P5DRA2hcvQQ.crl (hash: h9lthjzEp4KMkNRdPVmBkFUUs2rvgS4oR2OctFP+4ss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/cb879b-9c96-429a-9bb3-e18d998c64ef/1/5huaXW2YcDw4cqG7P5DRA2hcvQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/cb879b-9c96-429a-9bb3-e18d998c64ef/1/5huaXW2YcDw4cqG7P5DRA2hcvQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5huaXW2YcDw4cqG7P5DRA2hcvQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:ce:f3:96:ec:dc:82:2f:de:68:be:35:ab:50:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e61b9a5d6d98703c3872a1bb3f90d103685cbd04
Validity
Not Before: Mar 1 17:01:12 2026 GMT
Not After : Mar 2 17:01:12 2026 GMT
Subject: CN=91c1f66d95ad89589d02e7613943ae6ce5512a3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1d:a7:99:0b:19:ce:aa:20:d4:71:5e:1b:86:
0d:b1:4c:1b:2b:e2:38:4e:ac:ea:7a:e4:88:07:5c:
e3:80:e8:5b:61:8a:76:96:e3:7d:4f:5d:4f:fa:53:
ff:79:4d:08:f6:1c:61:de:13:3d:3b:9e:52:19:a4:
30:bd:99:16:f7:3a:ef:e4:3b:f0:be:6f:0b:5b:9e:
32:7c:b3:0c:f8:9f:de:53:a6:65:7b:f0:02:92:ba:
f4:10:55:7c:26:dd:10:2f:38:0d:c4:a8:2a:0f:e9:
77:3a:1b:aa:a9:7e:0f:23:6d:da:8c:87:60:b4:a2:
bc:10:e6:7b:39:33:f8:cb:6c:66:fc:98:4e:5a:ce:
ce:51:94:dc:7e:43:36:8e:aa:4b:58:0c:de:d7:c4:
70:c6:61:3e:74:ca:31:ea:81:dc:e7:d9:81:4f:bf:
5f:02:1d:b4:d4:bb:bb:f8:2c:93:a8:06:ea:a7:e2:
75:f9:15:cb:a0:50:ff:ed:c1:ae:5a:b0:0c:45:1d:
a6:00:49:16:9d:89:1d:72:3b:c6:cd:93:e3:b5:09:
3c:15:2a:fe:3e:dc:35:fd:76:38:72:54:f6:8b:7f:
fc:aa:41:85:56:de:12:7a:e7:ce:fe:a9:92:c7:dd:
37:8e:12:90:13:4c:f7:33:ca:07:5b:1f:7c:23:f3:
b9:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:C1:F6:6D:95:AD:89:58:9D:02:E7:61:39:43:AE:6C:E5:51:2A:3E
X509v3 Authority Key Identifier:
keyid:E6:1B:9A:5D:6D:98:70:3C:38:72:A1:BB:3F:90:D1:03:68:5C:BD:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5huaXW2YcDw4cqG7P5DRA2hcvQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cb879b-9c96-429a-9bb3-e18d998c64ef/1/5huaXW2YcDw4cqG7P5DRA2hcvQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cb879b-9c96-429a-9bb3-e18d998c64ef/1/5huaXW2YcDw4cqG7P5DRA2hcvQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:d3:a5:10:99:6b:a2:68:f0:0f:2d:f9:aa:43:93:34:f6:f1:
b5:fd:75:81:f6:c5:b3:1c:cd:0d:5e:89:c8:49:af:c9:37:70:
7c:74:9c:d8:d0:fe:ce:08:a6:ed:24:45:e1:35:03:73:04:f9:
b6:09:07:26:5a:67:e6:6e:4d:29:20:e6:99:f9:44:18:48:73:
ca:15:81:95:7f:a2:c5:d1:6f:58:e0:bf:b7:0f:ea:ae:60:cd:
75:71:f2:3e:55:9d:b8:3c:e7:72:6d:fd:30:f6:24:71:c6:a5:
2a:49:d9:5e:1e:ea:98:8b:d6:cb:da:4a:06:65:10:1c:31:a1:
05:f7:f4:7c:8b:7d:6e:eb:0e:75:82:cd:fa:45:8b:7b:72:78:
37:e6:c0:29:81:fe:b7:93:ec:d2:ba:f8:16:72:4f:49:fe:8d:
7e:aa:a3:f5:e9:35:bd:f5:fb:ed:6d:8e:8c:a0:29:7b:76:14:
c6:50:2b:d7:ec:4b:e6:57:86:d9:92:a9:4a:8e:30:17:21:64:
68:ce:28:2e:90:63:bd:6c:21:fc:78:33:34:25:c9:cf:89:a3:
99:7f:e1:53:22:c2:84:72:73:3f:93:c8:61:9f:9c:79:c1:9a:
93:e3:2e:9b:4f:ff:9c:26:ca:98:9e:c0:37:7c:9b:28:16:fb:
56:4c:a7:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:05:05 2026 by rpki-client