Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/237dff-652d-4911-a9d6-0af26bc76421/1/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.mft
File: fk5Id7Rk5Ino4eYb5XuLvo5Q55k.mft (raw, json)
Hash identifier: jHrTJ4/glkFKgWcOJ6mFFlnVaVsKjtWR2KAzRoOJYVU=
Subject key identifier: 57:63:BD:F6:B5:61:D0:6B:25:57:EA:80:B7:3C:87:50:55:48:13:61
Authority key identifier: 7E:4E:48:77:B4:64:E4:89:E8:E1:E6:1B:E5:7B:8B:BE:8E:50:E7:99
Certificate issuer: /CN=7e4e4877b464e489e8e1e61be57b8bbe8e50e799
Certificate serial: 019CAA21EDD89487ECD3E6E173AF7B839F6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/237dff-652d-4911-a9d6-0af26bc76421/1/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.mft
Manifest number: 0A50
Signing time: Sun 01 Mar 2026 16:01:16 +0000
Manifest this update: Sun 01 Mar 2026 16:01:16 +0000
Manifest next update: Mon 02 Mar 2026 16:01:16 +0000
Files and hashes: 1: fk5Id7Rk5Ino4eYb5XuLvo5Q55k.crl (hash: dXvIAcIXB9de9FqBHFTYkN4wzURwUH+xNqFhT0klIO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/237dff-652d-4911-a9d6-0af26bc76421/1/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/237dff-652d-4911-a9d6-0af26bc76421/1/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.mft
rsync://rpki.ripe.net/repository/DEFAULT/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:ed:d8:94:87:ec:d3:e6:e1:73:af:7b:83:9f:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e4e4877b464e489e8e1e61be57b8bbe8e50e799
Validity
Not Before: Mar 1 16:01:16 2026 GMT
Not After : Mar 2 16:01:16 2026 GMT
Subject: CN=5763bdf6b561d06b2557ea80b73c875055481361
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0e:1d:b2:d9:55:73:7f:49:6e:33:41:28:b5:
7b:b6:42:80:17:74:41:ec:c4:f2:f1:05:7a:d5:51:
ed:69:85:61:ac:2f:93:a1:5c:18:20:d3:02:29:d4:
98:86:f2:6b:bc:9c:63:87:30:95:42:65:a2:6b:a1:
34:9c:7c:f0:67:6f:01:82:b3:0b:6a:a4:40:49:88:
52:1d:5f:24:da:b7:f1:d5:11:25:db:f2:11:e4:ce:
d0:94:c0:39:63:ef:01:06:30:53:fb:77:94:d9:70:
9f:10:ca:c5:76:f8:ba:59:ef:e2:e1:5c:54:fd:81:
8d:50:cc:29:0e:71:e8:10:7c:1f:92:1b:40:5e:c6:
d3:2c:b6:91:86:e8:c4:c9:a6:53:40:a7:69:f2:22:
c1:36:75:2c:d3:b7:8b:db:d8:df:e4:b2:b7:6f:a1:
dd:11:98:6b:e2:bd:cb:c1:7b:d2:a8:94:d4:48:3f:
d9:a3:3e:cb:04:aa:c9:2d:28:7b:43:66:42:2c:41:
63:e1:03:01:d0:26:46:7d:bc:1d:34:18:c6:7a:a6:
11:8f:94:59:56:45:41:00:90:b0:1c:08:e0:e8:27:
f8:a9:fd:f6:e1:cc:bf:8b:f4:2d:e4:bf:d1:10:b9:
0b:23:8d:f4:1b:42:6d:82:02:e3:f0:ac:3b:e6:d7:
34:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:63:BD:F6:B5:61:D0:6B:25:57:EA:80:B7:3C:87:50:55:48:13:61
X509v3 Authority Key Identifier:
keyid:7E:4E:48:77:B4:64:E4:89:E8:E1:E6:1B:E5:7B:8B:BE:8E:50:E7:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/237dff-652d-4911-a9d6-0af26bc76421/1/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/237dff-652d-4911-a9d6-0af26bc76421/1/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:8d:c4:61:03:ec:e9:44:6c:1f:c6:de:60:f6:03:e0:87:8e:
37:60:74:e9:47:51:bd:b5:7a:c7:d9:cf:e4:d9:d5:0f:a0:3b:
0a:04:7b:f1:3a:5e:44:cd:6c:43:b6:66:87:29:c1:a5:72:24:
2f:e8:f9:c7:57:17:b3:b6:a7:40:b3:fa:25:5f:c3:ea:ef:91:
1f:82:7f:bd:8a:af:43:02:58:fb:df:16:33:33:f5:cd:9c:f2:
7c:82:90:0b:84:02:aa:36:75:e5:d0:9c:99:ea:23:37:d8:f0:
db:95:f3:06:88:ba:a1:d7:ee:4e:89:73:fe:ed:23:23:cb:f3:
25:26:29:2a:22:84:60:0a:fd:d4:f2:21:a6:bd:91:a5:6f:7e:
33:c9:7b:e7:41:a0:52:bb:ee:4c:5a:56:03:d6:bb:48:b6:af:
67:ad:22:1a:dd:84:8e:06:37:ea:28:ce:14:03:5f:e2:22:f7:
0a:54:be:83:70:a4:b9:dd:a3:b2:ff:c9:75:98:e7:10:81:5e:
51:46:65:5e:c6:ed:ca:63:ce:4f:a3:c9:6f:6a:d6:7a:27:13:
2e:b7:3e:a2:60:33:7d:b1:02:c2:e5:89:df:49:4d:dc:ef:7b:
11:b0:74:78:38:e5:50:49:35:58:74:2d:84:da:21:83:3c:50:
20:b2:61:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:49:43 2026 by rpki-client