Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/9ce597-c7f7-424a-97b4-71a7850585e5/1/X5f6xRCj4ehznjgS_ApcrgJX3yY.mft
File: X5f6xRCj4ehznjgS_ApcrgJX3yY.mft (raw, json)
Hash identifier: hIs0SxOIQaDRg+INra5BGkuoeo7+GocWEwu/cCtXjf8=
Subject key identifier: 56:C3:0C:26:B1:8F:40:FC:3D:A5:95:7A:6A:B2:47:6B:2B:93:6C:B2
Authority key identifier: 5F:97:FA:C5:10:A3:E1:E8:73:9E:38:12:FC:0A:5C:AE:02:57:DF:26
Certificate issuer: /CN=5f97fac510a3e1e8739e3812fc0a5cae0257df26
Certificate serial: 019CAA8F4F3F3DB4F34072B98AC8F0B7D4F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X5f6xRCj4ehznjgS_ApcrgJX3yY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/9ce597-c7f7-424a-97b4-71a7850585e5/1/X5f6xRCj4ehznjgS_ApcrgJX3yY.mft
Manifest number: 0832
Signing time: Sun 01 Mar 2026 18:00:44 +0000
Manifest this update: Sun 01 Mar 2026 18:00:44 +0000
Manifest next update: Mon 02 Mar 2026 18:00:44 +0000
Files and hashes: 1: X5f6xRCj4ehznjgS_ApcrgJX3yY.crl (hash: gvjSMGwoz8itMdWrOSpKB24dympgonDrnr90HWCyhig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/9ce597-c7f7-424a-97b4-71a7850585e5/1/X5f6xRCj4ehznjgS_ApcrgJX3yY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/9ce597-c7f7-424a-97b4-71a7850585e5/1/X5f6xRCj4ehznjgS_ApcrgJX3yY.mft
rsync://rpki.ripe.net/repository/DEFAULT/X5f6xRCj4ehznjgS_ApcrgJX3yY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:4f:3f:3d:b4:f3:40:72:b9:8a:c8:f0:b7:d4:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f97fac510a3e1e8739e3812fc0a5cae0257df26
Validity
Not Before: Mar 1 18:00:44 2026 GMT
Not After : Mar 2 18:00:44 2026 GMT
Subject: CN=56c30c26b18f40fc3da5957a6ab2476b2b936cb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:4e:81:8e:7f:9c:2c:c0:20:e9:be:7a:b2:2a:
af:a8:ff:d8:93:98:d3:73:b0:c1:94:25:c6:24:8a:
57:d7:85:3f:b7:ab:3e:ea:74:3f:d2:54:80:44:46:
d9:90:e6:41:ea:35:10:3e:14:f8:87:4f:7a:a2:75:
1f:c6:41:c2:6d:e3:82:77:5c:6d:12:4d:ee:43:54:
2c:de:0c:36:34:2b:7b:af:a6:69:ae:05:d2:bd:49:
24:c6:28:67:ef:e8:58:b0:4d:76:c9:ef:c5:a3:7d:
1c:27:52:51:68:cd:45:cc:1c:97:31:76:32:0e:1c:
b4:76:a0:e6:b6:05:35:83:9d:ea:22:e6:f2:6e:27:
45:a5:82:b1:57:9e:37:4e:1e:7c:2d:ae:15:ac:59:
92:0b:b3:b2:d8:03:c1:15:55:d4:ca:83:ee:f3:b4:
42:b3:0c:70:48:f9:cc:39:d1:03:5d:5a:ae:96:cf:
58:9e:cc:1c:4e:30:9c:3a:7a:18:fe:28:60:cd:3d:
7f:85:70:b5:d0:7b:47:2c:08:f5:12:c1:34:d1:8c:
9d:83:f9:bb:0b:0a:76:c3:39:2c:51:2a:03:3f:9c:
c1:dc:f8:45:af:14:a9:35:71:f4:93:fd:5f:88:bd:
76:d5:c8:26:2e:18:94:4d:c2:89:ed:08:63:69:79:
67:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:C3:0C:26:B1:8F:40:FC:3D:A5:95:7A:6A:B2:47:6B:2B:93:6C:B2
X509v3 Authority Key Identifier:
keyid:5F:97:FA:C5:10:A3:E1:E8:73:9E:38:12:FC:0A:5C:AE:02:57:DF:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X5f6xRCj4ehznjgS_ApcrgJX3yY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9ce597-c7f7-424a-97b4-71a7850585e5/1/X5f6xRCj4ehznjgS_ApcrgJX3yY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9ce597-c7f7-424a-97b4-71a7850585e5/1/X5f6xRCj4ehznjgS_ApcrgJX3yY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:a2:de:72:d1:9d:aa:e3:13:66:1d:bd:0f:c3:77:49:21:c6:
3b:28:01:92:6d:1d:17:fe:1f:38:66:2b:3b:18:07:5a:27:c9:
fd:92:86:69:eb:30:ad:70:1e:a7:04:82:88:ea:67:20:79:94:
e2:36:f9:e0:aa:a4:ef:19:2c:de:d7:f6:ab:8e:25:bf:86:bd:
d2:ab:62:c4:d0:c0:62:c5:c3:dc:8c:7a:9b:30:95:f4:fa:37:
87:35:ad:7b:9c:07:14:ed:08:c6:92:98:ac:d4:3a:23:31:92:
c0:ab:a9:65:a0:5a:fc:64:30:26:2f:37:88:c9:f4:4b:95:30:
37:2a:93:64:e7:04:5f:64:c1:1f:73:0d:75:8c:f9:f1:fe:1c:
4c:b2:08:04:f6:83:83:6c:e5:5d:a8:63:9f:d6:bf:af:87:f1:
61:03:fd:ee:a6:57:fb:c5:40:9f:da:97:d8:29:a5:f8:eb:35:
79:49:b9:c2:0d:f0:d8:cd:2a:65:ed:de:a3:57:b4:11:a0:70:
23:51:93:ba:e5:e2:36:5e:27:84:d5:91:28:f7:34:44:51:5f:
09:d4:3c:85:80:a0:f5:01:95:91:c6:bc:50:ee:0a:9c:c2:e0:
04:9f:8b:79:e9:1a:9f:f0:2a:b6:f0:64:ce:a8:96:6c:fd:19:
4f:e8:13:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:50:36 2026 by rpki-client