Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/931545-cf7b-4d58-bed7-04b528fae03a/1/5rkbGfS9vW_x1_Ny06DdE5AFAAY.mft
File: 5rkbGfS9vW_x1_Ny06DdE5AFAAY.mft (raw, json)
Hash identifier: 7fLIYzHEuxdVca3ME3Z2KEUTtBdAZP5kesPnAjfrykU=
Subject key identifier: 3E:5F:6E:34:83:65:D5:37:48:B4:DC:D9:52:3D:33:03:DE:F1:69:A7
Authority key identifier: E6:B9:1B:19:F4:BD:BD:6F:F1:D7:F3:72:D3:A0:DD:13:90:05:00:06
Certificate issuer: /CN=e6b91b19f4bdbd6ff1d7f372d3a0dd1390050006
Certificate serial: 019CAE6BED34D1BD895ABF22DE80F8CBFE33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5rkbGfS9vW_x1_Ny06DdE5AFAAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/931545-cf7b-4d58-bed7-04b528fae03a/1/5rkbGfS9vW_x1_Ny06DdE5AFAAY.mft
Manifest number: 0F27
Signing time: Mon 02 Mar 2026 12:00:34 +0000
Manifest this update: Mon 02 Mar 2026 12:00:34 +0000
Manifest next update: Tue 03 Mar 2026 12:00:34 +0000
Files and hashes: 1: 5rkbGfS9vW_x1_Ny06DdE5AFAAY.crl (hash: eLBTD9Y1O+BhHmlPBblRrQfJrcMItpS1A81COLwCtyg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/931545-cf7b-4d58-bed7-04b528fae03a/1/5rkbGfS9vW_x1_Ny06DdE5AFAAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/931545-cf7b-4d58-bed7-04b528fae03a/1/5rkbGfS9vW_x1_Ny06DdE5AFAAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/5rkbGfS9vW_x1_Ny06DdE5AFAAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 12:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:6b:ed:34:d1:bd:89:5a:bf:22:de:80:f8:cb:fe:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6b91b19f4bdbd6ff1d7f372d3a0dd1390050006
Validity
Not Before: Mar 2 12:00:34 2026 GMT
Not After : Mar 3 12:00:34 2026 GMT
Subject: CN=3e5f6e348365d53748b4dcd9523d3303def169a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:42:75:ec:b7:d4:c9:7a:43:82:6d:46:7e:34:
ee:a5:ce:26:d5:4e:2c:08:4d:ad:0b:8e:76:1f:1a:
4c:cc:5f:66:0a:a2:95:37:9a:a0:1e:70:c4:20:96:
24:5e:4f:b9:75:24:9b:24:c3:a2:36:8c:00:b4:0d:
a5:58:c9:19:84:f3:f4:c4:fe:bf:03:03:77:a3:76:
93:f3:e9:d7:8f:04:72:47:ba:50:e7:dd:dd:42:9e:
11:ab:a3:6e:1e:10:ab:0f:39:f4:e1:0b:9b:b0:ef:
42:34:98:e4:6e:07:bd:c3:16:f5:11:7d:38:bc:e5:
64:24:51:b3:09:36:23:b4:17:20:83:04:44:9a:ec:
9d:84:0f:cc:dd:1e:35:49:77:f1:eb:99:c8:13:d1:
1f:c7:2e:77:8b:cc:19:31:09:b4:e7:7b:83:d2:ad:
02:23:3b:3a:ba:bd:dc:4f:19:f6:33:23:88:23:f3:
df:0e:0a:1e:29:a3:b4:f3:6e:b3:1c:1b:6f:4f:01:
b0:b4:e3:cc:c3:c1:e2:fd:00:17:9e:72:c2:5f:a8:
38:64:c2:70:61:44:a4:88:ff:fe:d2:dd:fe:ef:54:
56:f5:1f:c9:50:7c:86:97:c9:7f:f1:c3:a9:83:0f:
dc:58:9b:50:87:ac:4e:f3:24:86:29:6d:d0:a6:65:
f7:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:5F:6E:34:83:65:D5:37:48:B4:DC:D9:52:3D:33:03:DE:F1:69:A7
X509v3 Authority Key Identifier:
keyid:E6:B9:1B:19:F4:BD:BD:6F:F1:D7:F3:72:D3:A0:DD:13:90:05:00:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5rkbGfS9vW_x1_Ny06DdE5AFAAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/931545-cf7b-4d58-bed7-04b528fae03a/1/5rkbGfS9vW_x1_Ny06DdE5AFAAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/931545-cf7b-4d58-bed7-04b528fae03a/1/5rkbGfS9vW_x1_Ny06DdE5AFAAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:6b:85:7c:69:a6:2a:60:37:92:92:56:bc:94:21:88:3e:9a:
c0:24:15:2f:b4:bc:88:13:b1:a2:5a:af:76:2f:cf:25:e1:f2:
31:13:2b:93:88:2d:3a:77:8f:ac:21:19:b2:69:e0:d7:89:83:
6e:4a:94:ae:5b:25:8b:b8:d4:27:a7:d6:0e:46:a2:55:16:ba:
1b:db:ef:32:0a:79:a0:63:c5:ba:2f:ca:63:3b:4b:b7:91:ae:
ec:c5:a3:3c:87:c6:a2:5c:a4:68:2d:29:79:3e:f7:dc:bd:36:
72:0b:dd:f0:40:f5:96:82:d7:48:19:dd:9b:23:f5:71:6c:62:
a8:f1:c5:ba:c1:c3:4b:f1:0c:58:ba:ba:d5:ef:e0:1a:fc:5c:
4d:e5:14:77:7f:53:ef:71:ce:f1:1d:09:d8:62:32:a8:18:f9:
86:8a:b8:b0:a1:59:3f:3e:19:db:47:2b:a5:ac:8e:70:a6:a4:
ff:ad:1f:56:42:0c:b1:ee:b4:94:57:12:f9:d7:cc:94:c4:30:
ef:d8:b1:f0:2e:51:05:0d:6d:0a:8e:03:3a:8f:91:20:bf:49:
b3:ea:f0:e3:bb:b9:22:b4:65:b8:66:75:56:a2:b6:48:81:a3:
57:6b:78:39:d8:5b:5b:25:3b:65:9a:73:d3:2c:9f:7b:9a:42:
a2:7a:60:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:08:58 2026 by rpki-client