Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8d8307-4a0e-4453-a94b-6866a401a67d/1/5ZRpVl9xm-2Grcc_tubIhvYL2qs.mft
File: 5ZRpVl9xm-2Grcc_tubIhvYL2qs.mft (raw, json)
Hash identifier: +ozfZbwnjvBdCs6/ssfHnNqyR0a7ioTx8WU29pXycqA=
Subject key identifier: BC:2F:EE:D8:A7:95:A6:5C:4C:82:86:66:ED:E9:C6:BB:09:D9:7B:1A
Authority key identifier: E5:94:69:56:5F:71:9B:ED:86:AD:C7:3F:B6:E6:C8:86:F6:0B:DA:AB
Certificate issuer: /CN=e59469565f719bed86adc73fb6e6c886f60bdaab
Certificate serial: 019CA8D8679EF7D1D429AF8296CE4E055A0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5ZRpVl9xm-2Grcc_tubIhvYL2qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8d8307-4a0e-4453-a94b-6866a401a67d/1/5ZRpVl9xm-2Grcc_tubIhvYL2qs.mft
Manifest number: 7D
Signing time: Sun 01 Mar 2026 10:01:20 +0000
Manifest this update: Sun 01 Mar 2026 10:01:20 +0000
Manifest next update: Mon 02 Mar 2026 10:01:20 +0000
Files and hashes: 1: 5ZRpVl9xm-2Grcc_tubIhvYL2qs.crl (hash: iK3S8KCpFNgA7eDb1VdbM2MbUWc5jwtuIq6YGIscEq0=)
2: k_j9kCZuBTWuvSVZ-WdJ_g1t6wY.asa (hash: dESwUIcXPpUiW9oc03it11tJGDFnuCkshgfLGftBad8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/8d8307-4a0e-4453-a94b-6866a401a67d/1/5ZRpVl9xm-2Grcc_tubIhvYL2qs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/8d8307-4a0e-4453-a94b-6866a401a67d/1/5ZRpVl9xm-2Grcc_tubIhvYL2qs.mft
rsync://rpki.ripe.net/repository/DEFAULT/5ZRpVl9xm-2Grcc_tubIhvYL2qs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a8:d8:67:9e:f7:d1:d4:29:af:82:96:ce:4e:05:5a:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e59469565f719bed86adc73fb6e6c886f60bdaab
Validity
Not Before: Mar 1 10:01:20 2026 GMT
Not After : Mar 2 10:01:20 2026 GMT
Subject: CN=bc2feed8a795a65c4c828666ede9c6bb09d97b1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e8:b7:c3:e9:c9:8a:d5:9e:47:4c:52:3e:35:
01:94:1b:8f:d8:27:92:f9:0e:63:43:7d:7b:60:42:
8e:5d:c4:2c:1b:09:24:2c:67:7a:4d:1a:d2:8b:20:
99:e0:1e:ac:58:7f:0a:51:a8:42:3e:42:58:51:d7:
e0:c5:2e:96:76:8d:a0:91:57:3b:f4:ca:89:31:9f:
0e:dc:e3:b1:63:15:ed:a6:0f:f1:00:52:ef:98:6c:
a9:b5:94:00:52:e8:1c:5b:49:16:7a:f2:e5:03:ec:
a5:d5:4b:3a:ab:b7:6e:45:4f:d0:df:70:92:63:37:
f2:ae:e8:68:5a:1b:b8:55:e7:77:20:3c:ae:2f:c2:
59:fb:c4:b8:23:76:06:f9:cc:ed:42:df:f9:1c:4d:
9a:44:21:bc:57:f6:31:13:d5:98:01:71:b3:35:d5:
9c:b1:1d:9d:bc:32:2b:94:27:60:d8:2a:0d:29:44:
30:a8:08:87:c7:b1:25:df:23:38:d4:ca:ea:6d:15:
82:6a:96:d0:0a:c6:bf:ab:9b:ba:3d:83:7f:c6:54:
ce:6c:eb:98:02:5a:b0:60:a8:66:e5:57:8c:55:64:
c1:4c:ab:17:07:11:44:72:dd:44:c8:4c:2d:9b:10:
d2:dc:45:9e:fe:83:e3:19:d1:30:6e:d4:c4:f1:ce:
c8:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:2F:EE:D8:A7:95:A6:5C:4C:82:86:66:ED:E9:C6:BB:09:D9:7B:1A
X509v3 Authority Key Identifier:
keyid:E5:94:69:56:5F:71:9B:ED:86:AD:C7:3F:B6:E6:C8:86:F6:0B:DA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5ZRpVl9xm-2Grcc_tubIhvYL2qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8d8307-4a0e-4453-a94b-6866a401a67d/1/5ZRpVl9xm-2Grcc_tubIhvYL2qs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8d8307-4a0e-4453-a94b-6866a401a67d/1/5ZRpVl9xm-2Grcc_tubIhvYL2qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:1d:6e:71:06:a0:22:9e:d7:c1:49:4c:a3:82:52:3a:5f:09:
81:38:9c:c9:87:b4:81:10:ca:39:ac:33:60:70:92:3c:57:05:
13:fa:99:14:a7:3e:1a:8c:b5:3a:08:46:28:c3:a1:96:7e:1d:
2f:ff:5c:5d:42:16:37:1e:87:15:23:42:0c:30:0a:dd:60:66:
ad:7a:3f:dd:f0:4a:f5:50:64:22:92:69:46:66:a5:b9:a0:86:
f6:da:94:ed:42:99:97:d0:af:8c:de:2f:81:2e:e2:d5:ce:bf:
f4:65:3b:28:09:09:52:20:3a:fd:a2:76:ab:ab:9a:8d:aa:dd:
61:ed:42:dd:05:62:47:d6:4c:8a:01:17:32:a3:df:72:ed:d6:
95:52:ac:c3:c9:08:b7:11:97:32:15:99:ec:a2:33:40:39:fa:
03:df:fd:d8:ba:d1:5d:61:b6:43:3e:6a:f8:31:09:be:91:8f:
22:60:a1:fe:77:42:e7:3e:b1:8a:20:69:9b:36:6b:f0:45:24:
b5:b6:2d:a0:bf:1a:bc:cb:d1:39:e7:60:19:19:6e:3c:b8:95:
3a:4a:5d:69:4c:04:37:30:78:78:e4:08:96:8c:9a:d8:13:cb:
63:fa:a8:b3:f4:47:72:9f:d4:85:60:74:bd:55:b3:68:a4:db:
2b:6c:4a:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:24:50 2026 by rpki-client