Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/afbb62-0098-42b3-81ae-f0bb2e15f6d0/1/5Xcx6oV7kDqkCo5f2NiERlBbUjM.mft
File: 5Xcx6oV7kDqkCo5f2NiERlBbUjM.mft (raw, json)
Hash identifier: BwNteEGafkBNVXOXs4gdLrrUHlF56Hv6G62KwtM/hds=
Subject key identifier: BA:32:74:42:40:CA:1C:6B:60:A3:C4:4B:30:74:0E:E5:E4:7B:C4:ED
Authority key identifier: E5:77:31:EA:85:7B:90:3A:A4:0A:8E:5F:D8:D8:84:46:50:5B:52:33
Certificate issuer: /CN=e57731ea857b903aa40a8e5fd8d88446505b5233
Certificate serial: 019CADFE6A5B05CFC356033DB68CE46A0B31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Xcx6oV7kDqkCo5f2NiERlBbUjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/afbb62-0098-42b3-81ae-f0bb2e15f6d0/1/5Xcx6oV7kDqkCo5f2NiERlBbUjM.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 10:00:57 +0000
Manifest this update: Mon 02 Mar 2026 10:00:57 +0000
Manifest next update: Tue 03 Mar 2026 10:00:57 +0000
Files and hashes: 1: 5Xcx6oV7kDqkCo5f2NiERlBbUjM.crl (hash: EZpiQvdVfrEVyHHQnVZrkgvkxzpwqGEJ00LAWrjC9R0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/afbb62-0098-42b3-81ae-f0bb2e15f6d0/1/5Xcx6oV7kDqkCo5f2NiERlBbUjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/afbb62-0098-42b3-81ae-f0bb2e15f6d0/1/5Xcx6oV7kDqkCo5f2NiERlBbUjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Xcx6oV7kDqkCo5f2NiERlBbUjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:6a:5b:05:cf:c3:56:03:3d:b6:8c:e4:6a:0b:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e57731ea857b903aa40a8e5fd8d88446505b5233
Validity
Not Before: Mar 2 10:00:57 2026 GMT
Not After : Mar 3 10:00:57 2026 GMT
Subject: CN=ba32744240ca1c6b60a3c44b30740ee5e47bc4ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c4:04:33:9b:57:20:9b:16:21:cc:10:18:11:
3c:98:40:83:e3:5d:06:b6:78:88:44:f3:b5:8b:37:
24:24:42:24:fc:27:3d:28:af:75:25:aa:ab:40:51:
0e:f1:78:ee:8f:b4:05:a0:8b:09:3f:f3:9b:c6:87:
5c:b7:9b:5c:71:36:f7:23:67:f9:fe:36:2c:fb:05:
1e:84:d0:dd:c1:fd:71:39:ce:5c:6c:f4:71:be:21:
0a:82:07:8e:71:d8:e0:9b:08:24:b0:a4:04:d3:e4:
c2:6d:97:01:f9:cb:9c:b0:73:1a:89:9e:0f:41:2a:
33:db:2a:4d:df:77:b0:9f:60:d2:32:be:4d:6f:5a:
65:d7:06:a3:10:2f:6a:df:8f:51:b1:b2:b4:a8:cf:
41:0c:24:03:76:10:ac:05:4a:ff:75:64:00:5e:b7:
12:35:bb:11:c0:25:21:8d:bd:3a:5f:b8:91:60:81:
48:75:b0:88:95:92:22:37:4c:37:79:8f:d6:0d:24:
fb:ee:d5:a7:a6:14:e9:ac:1b:e2:af:ce:62:96:32:
0b:c8:8f:05:3e:02:d2:6b:d2:bc:05:06:fd:41:30:
eb:f6:19:d0:0a:75:82:ef:fb:46:5c:2b:dd:1a:e3:
02:41:56:00:83:25:58:4c:5a:f6:cb:97:2c:1e:7f:
50:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:32:74:42:40:CA:1C:6B:60:A3:C4:4B:30:74:0E:E5:E4:7B:C4:ED
X509v3 Authority Key Identifier:
keyid:E5:77:31:EA:85:7B:90:3A:A4:0A:8E:5F:D8:D8:84:46:50:5B:52:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Xcx6oV7kDqkCo5f2NiERlBbUjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/afbb62-0098-42b3-81ae-f0bb2e15f6d0/1/5Xcx6oV7kDqkCo5f2NiERlBbUjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/afbb62-0098-42b3-81ae-f0bb2e15f6d0/1/5Xcx6oV7kDqkCo5f2NiERlBbUjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:3f:e0:5e:12:38:2f:dc:8f:b3:1d:45:49:1c:5b:46:ef:d9:
95:30:69:3f:5e:81:aa:1e:cf:6f:33:fc:76:88:56:52:c8:ed:
b4:0c:7b:3a:60:90:24:b6:53:fd:96:11:6c:78:b1:b0:f1:62:
6e:93:4d:92:0b:c3:9c:52:b9:eb:f8:47:94:e8:4d:09:6a:88:
83:68:1d:13:10:40:07:8f:28:31:9a:48:a4:cd:5c:45:59:e8:
09:45:a1:5f:5a:ec:0f:89:41:3a:5d:92:08:83:86:15:c9:c4:
37:1d:6e:14:e6:80:28:b7:c9:ea:43:b3:46:e1:e9:05:60:14:
a9:ba:73:a2:e2:a6:6f:d9:1b:56:39:c6:59:e2:06:a6:75:26:
7b:67:b0:bc:a8:1d:79:77:ac:cb:33:a5:09:ba:c6:6e:31:0e:
8e:cc:42:ad:22:28:7f:08:85:38:b0:15:59:60:2b:ce:78:cc:
3c:1b:fb:6a:d8:b6:9e:b0:3a:05:b2:e4:5f:7f:47:3b:92:8c:
32:ca:5e:aa:82:c2:8e:cd:fa:08:60:f6:73:40:b8:fc:af:fd:
ed:45:de:cc:d0:fe:4d:b7:a5:09:67:2d:0d:85:69:6e:10:d1:
ec:d6:d0:c8:b9:f2:f6:98:49:50:fd:15:ac:63:5f:7d:fd:b2:
80:ad:c0:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:36:27 2026 by rpki-client