Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/fbc8b5-c5f5-40b8-8a74-bfafb29371cf/1/v5ulghwIWljj4dM6TvQem3YQXuU.mft
File: v5ulghwIWljj4dM6TvQem3YQXuU.mft (raw, json)
Hash identifier: RrHnnRYcybI9xOnO4SwbXEC/mWaz+Q4Z6CUEDnY/PbA=
Subject key identifier: 00:54:D7:AE:DD:E0:38:F2:11:48:B8:4E:72:66:01:CD:52:7A:6D:2B
Authority key identifier: BF:9B:A5:82:1C:08:5A:58:E3:E1:D3:3A:4E:F4:1E:9B:76:10:5E:E5
Certificate issuer: /CN=bf9ba5821c085a58e3e1d33a4ef41e9b76105ee5
Certificate serial: 019CAB6B20A7456B66CC886535424C9BA479
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v5ulghwIWljj4dM6TvQem3YQXuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/fbc8b5-c5f5-40b8-8a74-bfafb29371cf/1/v5ulghwIWljj4dM6TvQem3YQXuU.mft
Manifest number: 140A
Signing time: Sun 01 Mar 2026 22:00:50 +0000
Manifest this update: Sun 01 Mar 2026 22:00:50 +0000
Manifest next update: Mon 02 Mar 2026 22:00:50 +0000
Files and hashes: 1: v5ulghwIWljj4dM6TvQem3YQXuU.crl (hash: FO96Jd7pYYBZciGZ6aesCOpEslOA5gtzRUEBL/147Q8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/fbc8b5-c5f5-40b8-8a74-bfafb29371cf/1/v5ulghwIWljj4dM6TvQem3YQXuU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/fbc8b5-c5f5-40b8-8a74-bfafb29371cf/1/v5ulghwIWljj4dM6TvQem3YQXuU.mft
rsync://rpki.ripe.net/repository/DEFAULT/v5ulghwIWljj4dM6TvQem3YQXuU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:20:a7:45:6b:66:cc:88:65:35:42:4c:9b:a4:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf9ba5821c085a58e3e1d33a4ef41e9b76105ee5
Validity
Not Before: Mar 1 22:00:50 2026 GMT
Not After : Mar 2 22:00:50 2026 GMT
Subject: CN=0054d7aedde038f21148b84e726601cd527a6d2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d5:f1:40:7e:2a:c8:97:02:b2:03:09:31:12:
5d:26:97:32:04:77:c6:c4:d0:5c:06:9a:8c:92:4f:
c5:3a:e7:39:c1:c1:df:e2:91:ad:5a:9b:7f:cd:45:
2a:79:37:e5:2b:16:f4:99:5e:07:ff:0a:3a:e4:40:
0f:09:37:a7:81:42:46:29:3a:48:f9:e7:28:45:3e:
7f:b9:c7:a3:23:36:6e:b0:a1:ea:f2:6b:76:12:06:
1e:8b:4d:2b:66:7a:69:00:b4:fd:e3:b1:9a:91:e2:
74:9b:b4:0c:e1:da:68:b1:f1:e7:4b:42:58:60:bf:
4e:e1:6f:0c:fb:a8:4a:6f:48:95:4e:fd:67:f9:9f:
ff:2d:b1:06:b7:78:38:2a:65:df:9b:89:c8:79:3d:
e4:12:29:76:27:b4:6d:92:5b:35:25:3a:d9:82:15:
11:1e:9c:f5:61:8f:7f:c7:46:c8:96:d5:fb:33:ba:
17:ad:5d:aa:b1:26:71:f7:7e:ad:23:8d:53:b3:69:
b3:ba:6f:d5:e6:e0:a3:bc:6d:43:0c:10:c8:7d:7b:
a8:20:65:de:47:28:f8:44:e8:66:f0:bb:d0:1a:47:
c4:4b:7c:66:f9:de:0e:48:f2:c0:64:37:f3:b1:ea:
7c:b7:5e:17:71:fc:57:78:da:25:24:73:1c:b7:79:
33:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:54:D7:AE:DD:E0:38:F2:11:48:B8:4E:72:66:01:CD:52:7A:6D:2B
X509v3 Authority Key Identifier:
keyid:BF:9B:A5:82:1C:08:5A:58:E3:E1:D3:3A:4E:F4:1E:9B:76:10:5E:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v5ulghwIWljj4dM6TvQem3YQXuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/fbc8b5-c5f5-40b8-8a74-bfafb29371cf/1/v5ulghwIWljj4dM6TvQem3YQXuU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/fbc8b5-c5f5-40b8-8a74-bfafb29371cf/1/v5ulghwIWljj4dM6TvQem3YQXuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:68:fc:ac:75:64:7c:1b:25:76:3d:0b:03:f6:c5:f9:ff:48:
4a:92:d2:70:88:c4:5c:d5:34:e9:a1:ff:d9:a9:d1:49:6c:47:
7e:33:57:ac:11:03:19:f6:bf:ce:91:ba:60:4d:d3:6c:56:53:
ad:92:4f:f0:38:1f:62:e9:76:10:22:63:4c:86:23:f8:53:30:
44:56:10:d8:c4:6c:0c:e5:5d:0d:67:60:2a:03:27:b8:21:35:
a0:44:fa:c4:16:40:f8:f9:ba:74:b7:60:a7:a0:bf:e4:e0:0c:
bc:e3:8f:ce:85:87:20:34:92:9f:3d:1b:b7:d7:e0:6f:8a:67:
3e:26:6e:eb:7f:f5:34:e5:1f:6e:01:46:2c:37:a5:42:8d:a6:
54:87:74:04:4d:01:56:45:b9:bb:0e:05:8d:e6:ed:cd:3c:55:
d9:44:ac:97:af:15:c8:9d:08:33:d9:81:7a:f4:5e:2c:23:5f:
b9:e9:7c:d8:11:37:9e:30:80:ea:16:b0:ae:e1:0b:42:db:d4:
3b:a7:dd:28:83:9e:31:85:41:4f:60:6e:6e:8b:0c:51:c2:94:
76:94:e2:4b:9d:16:47:22:fb:96:80:c6:63:f1:5f:0c:e5:e1:
30:5f:fa:6a:0d:87:84:38:eb:8a:0d:4a:e5:7b:5d:4d:5b:59:
a9:a5:11:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:04:04 2026 by rpki-client