Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/d7dc8d-e386-404c-88b4-283ec42c2c94/1/5gRDG1VUd8GaP0xcttEHNljVs-M.mft
File: 5gRDG1VUd8GaP0xcttEHNljVs-M.mft (raw, json)
Hash identifier: zFOfvfK1Wxpx8A14XYDCJwdKQstiSm10BSRn1/u/JZk=
Subject key identifier: D8:2E:59:C9:F3:DA:0E:86:DB:9C:ED:E9:E9:26:36:6D:36:49:A7:C1
Authority key identifier: E6:04:43:1B:55:54:77:C1:9A:3F:4C:5C:B6:D1:07:36:58:D5:B3:E3
Certificate issuer: /CN=e604431b555477c19a3f4c5cb6d1073658d5b3e3
Certificate serial: 019CAC103A49D571ABB3C22EDB6EC003A287
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5gRDG1VUd8GaP0xcttEHNljVs-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/d7dc8d-e386-404c-88b4-283ec42c2c94/1/5gRDG1VUd8GaP0xcttEHNljVs-M.mft
Manifest number: 0E88
Signing time: Mon 02 Mar 2026 01:01:10 +0000
Manifest this update: Mon 02 Mar 2026 01:01:10 +0000
Manifest next update: Tue 03 Mar 2026 01:01:10 +0000
Files and hashes: 1: 5gRDG1VUd8GaP0xcttEHNljVs-M.crl (hash: 3oqd1WkBhLwO868kJEaAPNieaDJHLe8e2NtgqSnOMZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/d7dc8d-e386-404c-88b4-283ec42c2c94/1/5gRDG1VUd8GaP0xcttEHNljVs-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/d7dc8d-e386-404c-88b4-283ec42c2c94/1/5gRDG1VUd8GaP0xcttEHNljVs-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/5gRDG1VUd8GaP0xcttEHNljVs-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:3a:49:d5:71:ab:b3:c2:2e:db:6e:c0:03:a2:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e604431b555477c19a3f4c5cb6d1073658d5b3e3
Validity
Not Before: Mar 2 01:01:10 2026 GMT
Not After : Mar 3 01:01:10 2026 GMT
Subject: CN=d82e59c9f3da0e86db9cede9e926366d3649a7c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ea:6c:1c:9a:07:4d:f9:e0:37:f0:2d:b6:88:
df:ac:6f:86:bd:9d:15:83:07:88:1f:ff:c1:ae:0e:
65:18:d4:52:c0:ca:d8:54:2b:d5:d2:05:6c:ea:85:
16:2e:1b:e3:6c:92:fc:d4:2b:6f:23:ea:f8:55:06:
61:fb:fe:37:a9:be:38:15:88:40:d0:32:c7:e4:4d:
48:69:bf:7a:0d:82:ba:8e:51:cb:5d:35:6f:db:b3:
dd:6a:72:68:9c:fb:ce:1e:41:a5:fc:2e:c6:4f:bc:
46:96:0f:8a:eb:66:15:fc:31:97:70:10:6c:8e:62:
a6:c1:68:d5:e2:cf:0f:93:b1:71:a8:cb:c5:41:df:
a9:78:ba:4b:1e:08:6a:09:6d:21:73:36:d8:a8:c2:
57:7b:80:b0:4f:54:45:0f:63:86:81:cd:a0:66:ca:
02:99:90:90:c0:f8:43:4f:43:d9:a0:88:c9:fa:b5:
fe:b8:64:e1:7d:c9:7b:49:bc:ee:3b:b2:d7:b8:56:
81:13:f6:78:30:91:dd:e5:39:e6:51:ce:45:e0:63:
97:7f:10:33:b4:18:11:bc:11:31:5e:1d:0f:5c:39:
ee:30:7f:26:b0:b5:f7:ad:8c:2a:cc:13:89:75:59:
30:22:9c:d0:7d:69:7b:be:e5:20:8b:3b:f2:d2:1e:
de:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:2E:59:C9:F3:DA:0E:86:DB:9C:ED:E9:E9:26:36:6D:36:49:A7:C1
X509v3 Authority Key Identifier:
keyid:E6:04:43:1B:55:54:77:C1:9A:3F:4C:5C:B6:D1:07:36:58:D5:B3:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5gRDG1VUd8GaP0xcttEHNljVs-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d7dc8d-e386-404c-88b4-283ec42c2c94/1/5gRDG1VUd8GaP0xcttEHNljVs-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d7dc8d-e386-404c-88b4-283ec42c2c94/1/5gRDG1VUd8GaP0xcttEHNljVs-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:7e:29:17:49:88:02:a3:95:6b:61:af:7e:62:98:62:dc:9b:
4d:58:2e:e7:31:ff:02:f4:29:b7:e8:97:bd:25:90:42:0d:c2:
64:ec:c5:2e:aa:24:0e:fc:75:43:81:24:55:2e:0d:df:0c:5b:
41:0d:2c:d6:87:59:f4:9f:b9:fa:7a:69:fe:29:8b:0d:9b:75:
0d:da:a1:3f:68:92:e9:96:4f:95:93:ca:94:6c:52:68:c5:f6:
df:73:3a:84:5d:ca:90:07:c3:d6:26:28:87:dc:0e:e8:7e:29:
dd:6b:a1:a9:7b:56:9c:72:de:cd:b6:c4:ee:1b:c3:8c:c6:b6:
a3:22:f8:6b:77:ce:2d:68:15:06:e1:2e:84:cd:1a:c6:6b:cb:
07:ab:f7:f6:ba:db:51:70:e3:99:e8:ed:be:97:a2:48:db:4a:
69:38:00:dd:98:d1:1c:b8:7f:cd:2b:29:6b:d8:0c:9a:d9:59:
30:e9:9b:86:c2:fc:ba:08:63:f3:7f:66:b7:73:60:28:12:92:
2b:6f:e0:e8:92:72:00:68:6c:29:b5:3f:ba:fe:a7:fc:38:1c:
c4:52:ec:0f:7d:0a:37:95:6c:c1:eb:f4:ee:19:14:ad:4b:70:
ed:d6:15:0b:f0:e7:5e:c1:21:ea:c2:df:0d:2a:c4:f1:12:99:
96:e7:91:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:00:09 2026 by rpki-client