Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/5392b9-7f23-4740-9123-69c72f168689/1/t5im6ZG5VaKTURGf9312hksNOEo.mft
File: t5im6ZG5VaKTURGf9312hksNOEo.mft (raw, json)
Hash identifier: 10FOLzW6aErFk6KYbS7mll/O1vOqL6l8p1lIxONOQH0=
Subject key identifier: 2B:D3:6D:22:83:E9:D6:60:23:A2:FE:04:00:79:9D:7E:0C:48:FA:44
Authority key identifier: B7:98:A6:E9:91:B9:55:A2:93:51:11:9F:F7:7D:76:86:4B:0D:38:4A
Certificate issuer: /CN=b798a6e991b955a29351119ff77d76864b0d384a
Certificate serial: 019D9AE308C7EDAEAE0154122340DCBEEDEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t5im6ZG5VaKTURGf9312hksNOEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/5392b9-7f23-4740-9123-69c72f168689/1/t5im6ZG5VaKTURGf9312hksNOEo.mft
Manifest number: 0FE5
Signing time: Fri 17 Apr 2026 10:01:03 +0000
Manifest this update: Fri 17 Apr 2026 10:01:03 +0000
Manifest next update: Sat 18 Apr 2026 10:01:03 +0000
Files and hashes: 1: t5im6ZG5VaKTURGf9312hksNOEo.crl (hash: r86wcSAt+UHQnRj5bFNRKQ7X2LILu41WU9guYl4imgI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/5392b9-7f23-4740-9123-69c72f168689/1/t5im6ZG5VaKTURGf9312hksNOEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/5392b9-7f23-4740-9123-69c72f168689/1/t5im6ZG5VaKTURGf9312hksNOEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/t5im6ZG5VaKTURGf9312hksNOEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 10:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:08:c7:ed:ae:ae:01:54:12:23:40:dc:be:ed:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b798a6e991b955a29351119ff77d76864b0d384a
Validity
Not Before: Apr 17 10:01:03 2026 GMT
Not After : Apr 18 10:01:03 2026 GMT
Subject: CN=2bd36d2283e9d66023a2fe0400799d7e0c48fa44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e6:16:dc:13:fc:34:78:81:5a:ec:78:f4:83:
41:62:85:d3:08:f5:56:b4:f8:99:72:45:32:f8:45:
6b:6f:78:9b:9c:c6:fc:a6:2e:3b:be:a1:ac:60:16:
f8:6e:94:c9:ce:51:07:bb:fa:0b:21:b3:f2:55:84:
73:1e:b9:4c:0d:1f:ab:db:13:00:80:ef:8d:3f:32:
54:d0:6a:6a:3c:22:68:05:96:5b:7d:28:86:64:c3:
3d:d7:9a:e4:88:50:1b:a1:e7:37:12:01:ae:33:9b:
e5:8f:77:5c:3f:bc:9a:4b:9f:81:5b:7b:6a:d4:08:
31:72:52:87:ce:7c:e7:b1:d7:be:3c:99:f9:8d:4a:
52:dd:e1:45:b9:cc:af:73:73:bd:d5:68:25:b7:3e:
15:60:c1:ea:3f:ef:90:89:fd:d6:93:b6:4d:3e:f9:
05:96:73:de:7f:09:cb:05:a0:78:d7:78:85:9a:16:
78:30:5d:af:0a:91:c8:ba:23:44:97:e8:f5:08:36:
a3:77:26:84:25:8e:6c:42:c1:e6:f3:1f:f4:fa:4c:
87:89:a0:d2:c7:c5:3a:2b:06:7f:82:74:86:55:bb:
43:8c:0b:8d:72:e8:ac:bd:79:87:f8:a3:b8:df:b4:
59:3d:b1:af:2e:16:cd:3d:f4:0e:e9:86:27:a1:1d:
79:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:D3:6D:22:83:E9:D6:60:23:A2:FE:04:00:79:9D:7E:0C:48:FA:44
X509v3 Authority Key Identifier:
keyid:B7:98:A6:E9:91:B9:55:A2:93:51:11:9F:F7:7D:76:86:4B:0D:38:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t5im6ZG5VaKTURGf9312hksNOEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/5392b9-7f23-4740-9123-69c72f168689/1/t5im6ZG5VaKTURGf9312hksNOEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/5392b9-7f23-4740-9123-69c72f168689/1/t5im6ZG5VaKTURGf9312hksNOEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:c4:85:99:2e:a2:32:36:c8:70:b3:b3:c3:e4:52:7c:00:b6:
3f:fa:c5:43:e7:45:48:4a:a8:c0:d3:00:9f:25:10:a6:36:ef:
3a:d9:6d:f5:4c:ba:b3:b7:0a:6e:a1:13:16:b4:b4:4e:b2:c0:
5b:43:ab:e4:a6:06:2a:ea:ba:87:d6:6d:32:1a:67:4b:1f:3b:
61:aa:32:8b:44:c1:6d:25:43:78:22:69:9f:f3:93:cf:40:51:
9c:49:59:39:33:26:a3:fb:7d:be:35:63:2d:bd:37:a9:2f:c5:
7a:af:7b:8c:ea:22:1b:ed:6b:ef:8d:1d:8f:34:31:8e:0c:75:
f6:a1:4d:3d:a1:d4:3b:b5:51:38:4f:7d:3d:1b:8a:47:1c:fb:
a3:77:c0:72:c0:4e:4c:c5:bd:c4:e3:b8:71:27:7f:af:74:30:
e2:87:6c:89:f5:98:b8:92:4d:97:0c:9a:39:ab:cc:d5:07:ee:
05:dc:a1:b3:3c:69:52:b5:82:fa:a6:a4:14:6e:7a:0c:18:3d:
a2:21:23:7e:f7:72:c3:5a:2c:4d:7e:b6:71:1e:7b:5c:0f:be:
4e:95:a7:0f:a4:a4:c5:f4:f2:52:32:49:5b:ce:e3:96:1f:38:
1e:c4:92:c4:a1:a3:26:4d:00:0e:6f:ce:5d:03:13:40:9f:52:
91:20:50:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:06:19 2026 by rpki-client