
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/db5651-95f1-47c1-acf0-eafca5854257/1/_5lGMPx0VWzlCAJocJAVRft7BM0.mft
File: _5lGMPx0VWzlCAJocJAVRft7BM0.mft (raw, json)
Hash identifier: UkVtfOOVazESAhgvH4HybsCs2wxvaGMZ66T0OG+KBAk=
Subject key identifier: 49:AF:01:BC:C7:C8:50:81:29:FE:28:52:B3:DA:25:4B:7E:5D:10:D6
Authority key identifier: FF:99:46:30:FC:74:55:6C:E5:08:02:68:70:90:15:45:FB:7B:04:CD
Certificate issuer: /CN=ff994630fc74556ce508026870901545fb7b04cd
Certificate serial: 019CAB6BF89825242EF258C03A30173A3301
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_5lGMPx0VWzlCAJocJAVRft7BM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/db5651-95f1-47c1-acf0-eafca5854257/1/_5lGMPx0VWzlCAJocJAVRft7BM0.mft
Manifest number: 1843
Signing time: Sun 01 Mar 2026 22:01:45 +0000
Manifest this update: Sun 01 Mar 2026 22:01:45 +0000
Manifest next update: Mon 02 Mar 2026 22:01:45 +0000
Files and hashes: 1: _5lGMPx0VWzlCAJocJAVRft7BM0.crl (hash: aDfyPlC34+pFN2NTj/9RbKgiID7ldjuUhnxnwMz4v20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/db5651-95f1-47c1-acf0-eafca5854257/1/_5lGMPx0VWzlCAJocJAVRft7BM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/db5651-95f1-47c1-acf0-eafca5854257/1/_5lGMPx0VWzlCAJocJAVRft7BM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_5lGMPx0VWzlCAJocJAVRft7BM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:f8:98:25:24:2e:f2:58:c0:3a:30:17:3a:33:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff994630fc74556ce508026870901545fb7b04cd
Validity
Not Before: Mar 1 22:01:45 2026 GMT
Not After : Mar 2 22:01:45 2026 GMT
Subject: CN=49af01bcc7c8508129fe2852b3da254b7e5d10d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1d:d5:ba:99:03:cf:a4:5f:bc:25:85:aa:a1:
e3:dc:0f:56:0e:c1:c5:9d:29:fb:a7:59:dc:07:67:
e0:a6:b4:52:21:ae:74:77:9e:84:0e:db:25:24:53:
5e:ad:ae:85:90:7e:9e:c0:cc:66:da:b4:b0:8b:e4:
31:7c:1b:5e:c3:9f:b1:d1:f8:87:4f:38:60:a1:0c:
8c:e3:aa:06:3d:1c:da:ea:ed:bc:f0:2e:bc:80:c8:
29:35:e3:61:2b:0b:90:31:bc:67:79:de:38:f7:9d:
b4:18:b4:9a:c4:71:0d:d2:b8:8f:b4:1d:86:34:35:
49:6a:ff:0c:13:a5:ca:c4:ef:f6:0b:72:b2:26:e0:
42:94:18:96:65:56:65:4b:db:52:40:5d:af:b3:28:
4e:ce:57:6e:07:76:a1:c0:97:15:a1:99:51:6d:c9:
b3:dd:fb:d2:0a:5f:e6:4c:ab:a0:31:32:5c:74:0e:
fe:b0:71:3d:60:e7:c5:84:5a:42:7b:d9:53:cd:7e:
6b:f6:cc:24:c6:81:c9:3d:05:30:0a:0e:f4:9c:07:
88:af:7b:b1:ff:75:ea:a9:d0:61:a6:dd:7b:35:22:
58:be:ba:76:0b:d6:f6:a7:ba:62:1f:04:b1:b4:dd:
69:77:24:c3:35:8e:76:d8:32:6a:ee:6e:82:6f:a8:
e6:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:AF:01:BC:C7:C8:50:81:29:FE:28:52:B3:DA:25:4B:7E:5D:10:D6
X509v3 Authority Key Identifier:
keyid:FF:99:46:30:FC:74:55:6C:E5:08:02:68:70:90:15:45:FB:7B:04:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_5lGMPx0VWzlCAJocJAVRft7BM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/db5651-95f1-47c1-acf0-eafca5854257/1/_5lGMPx0VWzlCAJocJAVRft7BM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/db5651-95f1-47c1-acf0-eafca5854257/1/_5lGMPx0VWzlCAJocJAVRft7BM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:13:5b:61:a1:41:45:7e:ab:ef:43:d8:89:3f:8d:c5:93:22:
1a:3a:60:fb:96:52:bd:ab:b6:79:78:f9:13:a9:10:72:bc:50:
0e:3d:58:6d:f3:3a:ce:22:60:ad:ee:92:59:8e:48:45:e1:e9:
82:d5:77:16:b7:77:ee:27:4d:29:52:0a:8c:8f:23:03:e6:e6:
00:a8:f2:0e:35:9d:c4:c0:3a:eb:71:3c:c6:a0:da:d2:cf:af:
00:00:27:41:81:c6:2b:2b:b4:c7:44:63:20:ab:be:3d:40:4c:
9e:47:73:b3:c7:96:e2:66:dc:77:26:0f:97:45:b3:4f:64:69:
7a:47:e3:4c:75:1c:71:6a:73:b1:4c:37:0e:45:72:a6:19:97:
4c:16:c7:e0:35:d6:a6:79:ec:d0:5d:3c:2d:3f:a3:5d:3d:b8:
c1:81:cb:49:90:db:fb:54:12:27:64:fb:ff:bb:84:b8:5d:d5:
60:31:9f:59:bd:75:d2:1a:3b:51:be:9e:4e:65:f8:2f:17:69:
40:d9:79:3b:ee:ff:e6:17:59:49:f3:a9:28:9a:70:c7:ce:4a:
d3:2a:12:cf:59:d7:7c:52:44:7b:5f:4a:38:8a:8e:c3:3b:4f:
be:99:e8:e8:2e:8f:50:b4:e3:f6:7e:45:27:53:7f:e3:df:12:
46:69:f6:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:20:44 2026 by rpki-client