Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/f9afc2-9169-4a8c-8816-deb7ff1b5e6d/1/5qi5LUxZf2wET3clKFSPnJEpoNM.mft
File: 5qi5LUxZf2wET3clKFSPnJEpoNM.mft (raw, json)
Hash identifier: rIIeZHCS0aT0r01RgfMHxjR0rpmiZmWrS5wZx9wtu1k=
Subject key identifier: 87:12:E6:01:96:A0:D5:59:D9:51:BB:B7:BC:04:CD:4B:D4:68:70:44
Authority key identifier: E6:A8:B9:2D:4C:59:7F:6C:04:4F:77:25:28:54:8F:9C:91:29:A0:D3
Certificate issuer: /CN=e6a8b92d4c597f6c044f772528548f9c9129a0d3
Certificate serial: 019CADC81B104FEEB2477D788DB7EE2E44B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5qi5LUxZf2wET3clKFSPnJEpoNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/f9afc2-9169-4a8c-8816-deb7ff1b5e6d/1/5qi5LUxZf2wET3clKFSPnJEpoNM.mft
Manifest number: 1525
Signing time: Mon 02 Mar 2026 09:01:38 +0000
Manifest this update: Mon 02 Mar 2026 09:01:38 +0000
Manifest next update: Tue 03 Mar 2026 09:01:38 +0000
Files and hashes: 1: 5qi5LUxZf2wET3clKFSPnJEpoNM.crl (hash: zRsLPNCQv81XLJONFLDuNj9GLDgFFHXkFU8/aHGb6ic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/f9afc2-9169-4a8c-8816-deb7ff1b5e6d/1/5qi5LUxZf2wET3clKFSPnJEpoNM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/f9afc2-9169-4a8c-8816-deb7ff1b5e6d/1/5qi5LUxZf2wET3clKFSPnJEpoNM.mft
rsync://rpki.ripe.net/repository/DEFAULT/5qi5LUxZf2wET3clKFSPnJEpoNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c8:1b:10:4f:ee:b2:47:7d:78:8d:b7:ee:2e:44:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6a8b92d4c597f6c044f772528548f9c9129a0d3
Validity
Not Before: Mar 2 09:01:38 2026 GMT
Not After : Mar 3 09:01:38 2026 GMT
Subject: CN=8712e60196a0d559d951bbb7bc04cd4bd4687044
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:fb:59:f1:6b:92:6f:b6:ca:c5:f1:55:04:64:
36:5f:91:f9:1e:05:05:15:af:c8:f7:a2:24:64:9a:
b9:ae:0d:70:88:ba:4a:f6:7a:ea:0d:5b:20:4b:03:
8f:7d:a5:f8:7f:42:62:91:1b:77:21:d6:e7:87:4d:
cf:0d:b2:83:a6:a1:fe:d0:c4:ce:a0:fe:2f:53:18:
c3:06:2e:7b:f9:3f:65:19:e3:02:60:78:f4:3c:4b:
7a:61:a9:35:ec:6b:01:6b:58:57:3e:44:8c:f1:1f:
9a:6a:31:29:9a:b5:27:f9:e7:a4:be:5a:e2:b5:eb:
71:50:8e:52:ff:c2:17:ef:64:b0:99:72:a4:0c:71:
2f:75:e3:fb:1e:25:ac:40:42:94:c4:ca:34:88:2d:
4f:60:e6:35:fb:45:33:c7:a9:af:60:bb:d9:87:b6:
e8:59:30:a8:eb:17:33:9f:ea:7a:5b:bf:e0:51:4f:
5f:3e:ad:73:ca:82:55:99:b8:c8:fb:65:46:53:c4:
9a:44:f3:a4:2a:82:e2:7c:0c:5d:84:35:c5:8f:95:
dc:dd:15:53:50:7f:57:a5:0e:ed:b7:66:19:98:de:
45:fb:64:84:10:6b:a1:40:74:45:93:96:44:c2:03:
37:58:71:e4:d9:91:28:56:de:9a:09:5d:50:b9:9a:
9e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:12:E6:01:96:A0:D5:59:D9:51:BB:B7:BC:04:CD:4B:D4:68:70:44
X509v3 Authority Key Identifier:
keyid:E6:A8:B9:2D:4C:59:7F:6C:04:4F:77:25:28:54:8F:9C:91:29:A0:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5qi5LUxZf2wET3clKFSPnJEpoNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f9afc2-9169-4a8c-8816-deb7ff1b5e6d/1/5qi5LUxZf2wET3clKFSPnJEpoNM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f9afc2-9169-4a8c-8816-deb7ff1b5e6d/1/5qi5LUxZf2wET3clKFSPnJEpoNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:16:5d:bd:f7:6b:e2:d1:a2:0d:50:15:56:d6:15:28:51:a2:
f2:e1:fc:ad:fd:86:76:b7:d1:53:08:aa:ef:fe:a0:9a:b9:24:
16:fb:40:5f:9a:8b:3c:8a:54:41:66:80:3e:93:ab:2d:2b:ad:
a8:a3:96:d9:33:6e:27:8f:ef:20:b5:7f:bb:be:d5:9f:ef:d5:
13:49:94:2a:04:a1:4e:00:dd:cb:92:1d:b8:b2:f4:3f:ec:63:
01:15:21:4c:63:a5:04:eb:82:c8:45:b3:f0:cd:25:9c:9a:9e:
5a:bc:b1:83:0b:ca:74:23:43:50:a8:b4:0e:25:2f:a6:0b:c5:
ea:d3:4d:78:44:3f:49:ad:ad:6e:21:53:6b:7f:1a:5d:ba:bb:
40:56:57:08:f5:a6:96:3c:0a:6b:39:eb:f2:fa:62:a8:b7:1e:
13:c2:2a:55:81:7e:91:e8:a6:e3:e8:2e:55:f3:d1:d2:eb:c1:
90:0b:b7:14:c0:2a:64:c4:cf:61:6e:a7:8f:4f:49:d6:62:2b:
5a:c9:e3:3f:d1:c9:be:02:06:e3:be:6e:aa:b1:74:9c:16:28:
91:13:4a:d6:10:cb:15:22:b5:b9:c4:ce:5b:fe:54:a7:40:7a:
9a:d2:f6:e8:d0:55:60:3e:6b:fe:19:bb:58:8e:bd:30:b6:0b:
01:39:97:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:39:15 2026 by rpki-client