Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/5392b9-7f23-4740-9123-69c72f168689/1/t5im6ZG5VaKTURGf9312hksNOEo.mft
File: t5im6ZG5VaKTURGf9312hksNOEo.mft (raw, json)
Hash identifier: odza68EB58n7VsB6eW3nm6psxkxJtGlTtLJjOQxzu9w=
Subject key identifier: E8:BD:83:3A:57:7A:DD:0C:03:58:29:F9:D5:3D:CE:AB:D8:30:E5:BE
Authority key identifier: B7:98:A6:E9:91:B9:55:A2:93:51:11:9F:F7:7D:76:86:4B:0D:38:4A
Certificate issuer: /CN=b798a6e991b955a29351119ff77d76864b0d384a
Certificate serial: 019CAD59A21B5BD0EF41B40B1A0AF7069059
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t5im6ZG5VaKTURGf9312hksNOEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/5392b9-7f23-4740-9123-69c72f168689/1/t5im6ZG5VaKTURGf9312hksNOEo.mft
Manifest number: 0F6A
Signing time: Mon 02 Mar 2026 07:00:58 +0000
Manifest this update: Mon 02 Mar 2026 07:00:58 +0000
Manifest next update: Tue 03 Mar 2026 07:00:58 +0000
Files and hashes: 1: t5im6ZG5VaKTURGf9312hksNOEo.crl (hash: 7DsUJHkzLVSiv7CJ/XXlG3XTznabncR8y+XJRA5xav8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/5392b9-7f23-4740-9123-69c72f168689/1/t5im6ZG5VaKTURGf9312hksNOEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/5392b9-7f23-4740-9123-69c72f168689/1/t5im6ZG5VaKTURGf9312hksNOEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/t5im6ZG5VaKTURGf9312hksNOEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:a2:1b:5b:d0:ef:41:b4:0b:1a:0a:f7:06:90:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b798a6e991b955a29351119ff77d76864b0d384a
Validity
Not Before: Mar 2 07:00:58 2026 GMT
Not After : Mar 3 07:00:58 2026 GMT
Subject: CN=e8bd833a577add0c035829f9d53dceabd830e5be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b5:fc:a1:0c:a1:0b:7d:08:ef:91:81:16:a9:
1e:a6:2d:b5:2e:a7:c9:87:be:86:7d:a7:15:51:d3:
18:65:0a:f2:72:d3:b2:94:09:a0:dd:a4:0e:fe:4a:
7b:92:7b:ec:c9:52:11:fd:50:a0:4c:7f:e0:77:28:
ee:e4:0e:8d:b3:2d:14:70:73:74:d0:5b:f0:06:95:
b0:50:bf:84:3b:d4:27:47:19:04:fe:d8:6d:59:6f:
1f:d2:93:ff:1b:79:50:a3:21:89:07:4d:09:5e:02:
70:b1:32:95:a9:b7:b9:a2:a6:ce:98:b8:72:5b:2d:
f3:1d:a8:8a:52:ba:1c:8e:12:ca:9d:c6:80:a6:2c:
f2:df:dc:18:3f:22:16:26:9c:b9:6b:6c:b6:99:d9:
fa:2b:fe:c3:01:ac:28:40:65:c7:6e:3f:d2:0d:dc:
62:2c:07:bd:2e:eb:70:52:fc:e3:a1:fb:22:36:47:
24:b6:0d:41:b0:88:8c:2b:13:41:04:da:1e:7e:8f:
fb:fe:a0:33:3b:d1:32:15:9b:9d:c4:31:1a:34:08:
b5:27:3a:1e:3a:ff:db:f3:01:c1:46:2b:2f:61:17:
c1:89:92:36:70:8b:11:57:86:43:db:48:ca:cc:27:
6d:63:1e:ab:c1:b7:f7:7f:36:40:68:b6:b1:61:da:
7a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:BD:83:3A:57:7A:DD:0C:03:58:29:F9:D5:3D:CE:AB:D8:30:E5:BE
X509v3 Authority Key Identifier:
keyid:B7:98:A6:E9:91:B9:55:A2:93:51:11:9F:F7:7D:76:86:4B:0D:38:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t5im6ZG5VaKTURGf9312hksNOEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/5392b9-7f23-4740-9123-69c72f168689/1/t5im6ZG5VaKTURGf9312hksNOEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/5392b9-7f23-4740-9123-69c72f168689/1/t5im6ZG5VaKTURGf9312hksNOEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d5:cd:36:d5:a9:fe:51:9c:81:b4:e9:3b:05:a4:50:77:0e:a6:
a2:9d:97:f0:52:34:74:0d:bb:3f:26:0a:a8:c5:2b:30:ac:e9:
11:78:ee:b3:fb:3e:97:c0:65:85:15:e3:03:ab:8f:e5:68:7f:
cc:7a:85:5c:52:f3:ad:e7:f4:8b:46:99:d7:39:93:0f:d1:8b:
73:fd:61:af:40:39:ea:02:15:93:9d:6d:bf:b2:c1:e5:cf:d8:
4d:d9:55:fe:9c:b7:00:4b:b7:7f:99:08:e2:f6:7e:a7:ab:cc:
82:a5:9f:64:fc:ef:f8:4c:4f:d2:69:42:07:fb:be:fa:eb:c2:
2a:77:fe:4a:e9:50:ff:05:6d:a0:84:c6:86:06:49:c0:81:db:
97:59:80:f3:8b:83:f0:9c:ff:15:dd:14:21:3d:35:e9:76:cf:
7c:de:0a:c0:d1:9b:de:b9:bd:89:fb:d6:f8:68:13:8b:ac:38:
62:25:b9:5f:a6:3c:45:03:c8:ab:9a:3e:65:65:38:27:aa:83:
4e:c9:de:7d:e6:b4:90:72:0b:99:f5:8e:5b:02:9a:62:d8:15:
12:03:60:75:48:87:9a:5c:0c:6d:29:87:45:16:f6:19:01:5a:
30:0e:fc:06:92:ed:bf:58:98:0b:35:21:93:0a:5c:d6:91:68:
cf:55:4f:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:49:45 2026 by rpki-client