Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/ede36d-bf5b-4435-b3e5-c4508b555071/1/5MdIJDSkV7BIt9YmHd2AlcXAkCA.mft
File: 5MdIJDSkV7BIt9YmHd2AlcXAkCA.mft (raw, json)
Hash identifier: UXr7pUE9tZcWsWI1GkToZvpYx25TDrPKyCHsnYnA+nQ=
Subject key identifier: 58:9A:CF:B4:AE:D7:1D:89:78:7A:EF:64:76:48:0B:C5:DD:A0:89:72
Authority key identifier: E4:C7:48:24:34:A4:57:B0:48:B7:D6:26:1D:DD:80:95:C5:C0:90:20
Certificate issuer: /CN=e4c7482434a457b048b7d6261ddd8095c5c09020
Certificate serial: 019CAB6B45069AB214C2C7B3FB18B95D84BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5MdIJDSkV7BIt9YmHd2AlcXAkCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/ede36d-bf5b-4435-b3e5-c4508b555071/1/5MdIJDSkV7BIt9YmHd2AlcXAkCA.mft
Manifest number: 0A78
Signing time: Sun 01 Mar 2026 22:00:59 +0000
Manifest this update: Sun 01 Mar 2026 22:00:59 +0000
Manifest next update: Mon 02 Mar 2026 22:00:59 +0000
Files and hashes: 1: 5MdIJDSkV7BIt9YmHd2AlcXAkCA.crl (hash: +ZIiVrgXlm7WWBnlJIpn4HwxgFuhKG5BPTu/GfujxqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/ede36d-bf5b-4435-b3e5-c4508b555071/1/5MdIJDSkV7BIt9YmHd2AlcXAkCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/ede36d-bf5b-4435-b3e5-c4508b555071/1/5MdIJDSkV7BIt9YmHd2AlcXAkCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5MdIJDSkV7BIt9YmHd2AlcXAkCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:45:06:9a:b2:14:c2:c7:b3:fb:18:b9:5d:84:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4c7482434a457b048b7d6261ddd8095c5c09020
Validity
Not Before: Mar 1 22:00:59 2026 GMT
Not After : Mar 2 22:00:59 2026 GMT
Subject: CN=589acfb4aed71d89787aef6476480bc5dda08972
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:79:02:07:8a:89:fb:27:43:37:c0:e0:47:39:
c2:7a:49:1b:ab:a0:98:2c:34:5d:4a:e3:af:fd:10:
93:79:c0:5c:a3:42:a1:ca:13:39:dd:56:eb:fb:4c:
63:02:c6:8d:73:05:7e:3d:af:6d:94:78:5d:5e:b4:
7d:2e:d7:89:16:a7:3e:a5:46:a0:7c:3e:25:c2:cf:
2e:40:7f:64:ad:cc:cf:fd:af:5d:7b:f0:53:da:48:
09:db:bd:23:b4:4b:e5:81:9e:8d:01:1a:07:9d:40:
b1:f4:c8:12:e9:69:e4:76:d0:3f:0f:11:f7:b0:74:
e6:67:43:1f:ed:87:9d:92:94:e8:cc:79:98:ba:f4:
08:af:a5:58:f6:9b:45:d7:38:19:1d:5a:0e:5f:d3:
5a:3a:e1:94:7b:6e:12:59:e5:ee:e0:34:e1:cc:db:
e9:50:b5:c7:8c:a4:32:4c:c3:24:9a:41:ca:34:8a:
a5:5f:83:ba:9c:33:f9:af:5d:26:d0:6a:8e:af:90:
49:44:c8:20:4e:ff:ef:33:ce:68:d7:98:86:e5:e8:
05:3b:6d:32:ec:94:03:19:08:35:6c:b4:76:73:a8:
66:dd:77:99:64:cc:0c:7d:60:73:46:33:d8:68:01:
d6:86:d4:97:0f:1c:ae:c0:a1:e4:23:be:5f:46:c7:
34:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:9A:CF:B4:AE:D7:1D:89:78:7A:EF:64:76:48:0B:C5:DD:A0:89:72
X509v3 Authority Key Identifier:
keyid:E4:C7:48:24:34:A4:57:B0:48:B7:D6:26:1D:DD:80:95:C5:C0:90:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5MdIJDSkV7BIt9YmHd2AlcXAkCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ede36d-bf5b-4435-b3e5-c4508b555071/1/5MdIJDSkV7BIt9YmHd2AlcXAkCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ede36d-bf5b-4435-b3e5-c4508b555071/1/5MdIJDSkV7BIt9YmHd2AlcXAkCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:63:10:dc:01:19:23:f9:cd:34:84:22:53:85:0a:ca:1f:60:
56:ac:c3:39:aa:46:85:ed:90:f6:7d:32:5d:7e:37:83:21:08:
21:d2:73:63:99:43:c3:5a:f4:2b:ed:dd:b2:c2:cf:47:a6:fc:
8b:5f:d5:bd:46:69:34:4c:f3:8d:2d:36:82:69:57:6f:37:0f:
4a:5e:84:61:fb:4c:27:f5:43:3b:d7:75:a8:d3:0d:f8:d7:82:
24:a7:d8:b6:24:6a:4c:0c:1d:d0:76:9c:f7:92:d0:eb:42:6f:
c2:81:d7:6c:6e:0a:b0:43:fc:fb:70:a8:08:fe:44:45:fa:1b:
49:89:38:2a:9f:e1:98:9e:1d:74:17:2e:7b:71:42:71:42:f9:
2d:1c:4e:64:ec:c3:11:ef:21:66:7b:9c:5b:72:3e:42:90:c7:
f8:c1:b0:82:70:5b:22:30:cd:10:85:38:ec:e5:16:6e:58:63:
18:5f:75:50:a2:2b:74:04:8b:97:15:9a:a1:94:6c:85:22:a0:
59:83:b3:e5:25:f0:80:e2:c8:00:b0:75:e5:db:d2:9e:10:13:
ae:f8:ec:a0:26:f3:74:86:d1:8c:41:a2:e3:bd:c7:67:29:00:
c1:45:ae:95:ee:80:09:61:a6:0f:af:5c:73:c9:8b:e1:22:c6:
d7:d9:e5:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:39:20 2026 by rpki-client