Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/71d89f-1f19-4ebe-9a02-ee8ae882c5c7/1/p5ROOKJ1k6RvXEoqli9YO49r5GA.mft
File: p5ROOKJ1k6RvXEoqli9YO49r5GA.mft (raw, json)
Hash identifier: u33ngWb+Ko/3gg3klpbCftL580qdx/pU3vmdCown9tY=
Subject key identifier: D0:8F:FF:C5:D9:91:10:1A:7D:A7:81:CE:0A:DA:A2:F7:B1:3A:D2:59
Authority key identifier: A7:94:4E:38:A2:75:93:A4:6F:5C:4A:2A:96:2F:58:3B:8F:6B:E4:60
Certificate issuer: /CN=a7944e38a27593a46f5c4a2a962f583b8f6be460
Certificate serial: 019CAB6BCFF09B3323E61BB558F1F3922CF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p5ROOKJ1k6RvXEoqli9YO49r5GA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/71d89f-1f19-4ebe-9a02-ee8ae882c5c7/1/p5ROOKJ1k6RvXEoqli9YO49r5GA.mft
Manifest number: 1433
Signing time: Sun 01 Mar 2026 22:01:35 +0000
Manifest this update: Sun 01 Mar 2026 22:01:35 +0000
Manifest next update: Mon 02 Mar 2026 22:01:35 +0000
Files and hashes: 1: p5ROOKJ1k6RvXEoqli9YO49r5GA.crl (hash: X3J6Ds+jkHuYHWSTD3TX3fet/t4xQen+L/RDJ28IvrQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/71d89f-1f19-4ebe-9a02-ee8ae882c5c7/1/p5ROOKJ1k6RvXEoqli9YO49r5GA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/71d89f-1f19-4ebe-9a02-ee8ae882c5c7/1/p5ROOKJ1k6RvXEoqli9YO49r5GA.mft
rsync://rpki.ripe.net/repository/DEFAULT/p5ROOKJ1k6RvXEoqli9YO49r5GA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:cf:f0:9b:33:23:e6:1b:b5:58:f1:f3:92:2c:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7944e38a27593a46f5c4a2a962f583b8f6be460
Validity
Not Before: Mar 1 22:01:35 2026 GMT
Not After : Mar 2 22:01:35 2026 GMT
Subject: CN=d08fffc5d991101a7da781ce0adaa2f7b13ad259
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:dd:0b:89:53:80:8f:c0:3c:ac:2d:c4:e8:52:
6b:e5:85:b5:56:5a:1e:81:cd:a0:ea:01:51:66:34:
bf:ad:28:be:36:b3:fa:f5:d9:5b:c6:54:21:cb:db:
11:79:ca:eb:4b:22:41:bc:1f:0d:a3:82:bc:59:aa:
d8:c9:50:e1:3c:c4:90:1d:0c:f2:b1:7f:d5:cb:6a:
60:c4:72:e1:91:5a:94:4d:33:63:08:5b:db:78:89:
c4:e1:ec:9c:aa:81:99:5d:25:a3:98:1e:93:ff:47:
95:2e:45:85:42:a9:34:25:8c:21:e1:5a:48:24:70:
17:dd:46:bf:4d:4a:ae:6f:49:96:1c:10:71:bf:1b:
a3:45:b1:f7:0c:20:b6:09:7d:65:a6:2f:51:61:3f:
f6:28:b5:d2:74:88:68:7b:54:fe:f4:64:bf:3e:83:
53:da:56:cc:64:98:81:00:ad:d3:f5:40:6c:ae:07:
9a:37:34:83:a8:f0:48:bb:09:9e:c9:cc:2a:37:6d:
34:e9:17:fe:45:2f:5d:58:79:9f:25:9f:bd:a6:06:
e1:cf:40:68:b2:16:0c:be:52:23:23:4f:91:7c:eb:
70:7b:c3:89:96:58:7a:b1:5b:26:a5:9d:a9:6c:78:
d3:1a:91:b3:4d:60:9b:ee:7d:b4:42:c3:a1:e6:50:
a4:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:8F:FF:C5:D9:91:10:1A:7D:A7:81:CE:0A:DA:A2:F7:B1:3A:D2:59
X509v3 Authority Key Identifier:
keyid:A7:94:4E:38:A2:75:93:A4:6F:5C:4A:2A:96:2F:58:3B:8F:6B:E4:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p5ROOKJ1k6RvXEoqli9YO49r5GA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/71d89f-1f19-4ebe-9a02-ee8ae882c5c7/1/p5ROOKJ1k6RvXEoqli9YO49r5GA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/71d89f-1f19-4ebe-9a02-ee8ae882c5c7/1/p5ROOKJ1k6RvXEoqli9YO49r5GA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:db:69:67:58:a7:49:97:53:c3:6c:1e:b3:16:d6:4c:03:49:
c0:88:f2:3f:9e:98:46:9c:4b:50:3d:39:f6:e6:e7:5c:a6:46:
dc:c2:4a:14:98:88:ed:12:c2:bd:79:b6:5a:0a:32:8e:40:fd:
74:22:10:14:75:48:8e:26:9d:58:9f:9b:8b:fb:25:da:d0:f4:
2a:a2:fb:e0:9b:90:05:6e:3c:62:8c:40:6b:bf:a1:15:5c:3c:
09:cb:ed:1e:f8:1e:82:dc:38:e1:6a:df:b6:ca:ab:cf:88:f2:
97:8c:15:d7:31:2b:7b:3f:de:61:26:c8:5f:4d:ae:6d:ff:49:
47:0c:49:64:63:d2:59:4f:62:1a:68:07:40:91:9e:04:e4:17:
1e:bd:e5:e3:62:7c:f0:45:53:a2:06:1d:78:d8:94:e5:d9:94:
24:49:d3:9c:72:97:2b:c6:b1:76:11:b9:80:3e:52:5f:5d:11:
58:50:95:ed:06:db:51:66:82:4e:25:84:4c:15:a5:9f:ba:2e:
7c:44:d2:fb:3d:e9:f0:2d:06:f8:57:ca:af:89:c0:5b:7f:1e:
19:2c:c9:bc:1f:b9:5f:7e:17:35:98:ab:1e:86:7a:a8:51:65:
07:4e:60:dc:48:07:8c:1f:39:08:b2:4f:e2:6d:1e:de:3e:fa:
f2:a2:ac:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:07:48 2026 by rpki-client