Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/d7dc8d-e386-404c-88b4-283ec42c2c94/1/5gRDG1VUd8GaP0xcttEHNljVs-M.mft
File: 5gRDG1VUd8GaP0xcttEHNljVs-M.mft (raw, json)
Hash identifier: r1pfpORoO3LlxBxl8mW+qmz7rxYpi8l5hSqCntnlYvU=
Subject key identifier: B1:01:7B:7C:0C:0F:4B:55:E5:C6:7D:A0:77:F0:A8:94:01:E6:78:A3
Authority key identifier: E6:04:43:1B:55:54:77:C1:9A:3F:4C:5C:B6:D1:07:36:58:D5:B3:E3
Certificate issuer: /CN=e604431b555477c19a3f4c5cb6d1073658d5b3e3
Certificate serial: 019D9999829A1A0B20317A278D4CB315B9C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5gRDG1VUd8GaP0xcttEHNljVs-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/d7dc8d-e386-404c-88b4-283ec42c2c94/1/5gRDG1VUd8GaP0xcttEHNljVs-M.mft
Manifest number: 0F03
Signing time: Fri 17 Apr 2026 04:01:07 +0000
Manifest this update: Fri 17 Apr 2026 04:01:07 +0000
Manifest next update: Sat 18 Apr 2026 04:01:07 +0000
Files and hashes: 1: 5gRDG1VUd8GaP0xcttEHNljVs-M.crl (hash: MwCWEpoNQ3BIxVUTJ899/xQdFi5lEqM5TFy3Yx9Zpjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/d7dc8d-e386-404c-88b4-283ec42c2c94/1/5gRDG1VUd8GaP0xcttEHNljVs-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/d7dc8d-e386-404c-88b4-283ec42c2c94/1/5gRDG1VUd8GaP0xcttEHNljVs-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/5gRDG1VUd8GaP0xcttEHNljVs-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:82:9a:1a:0b:20:31:7a:27:8d:4c:b3:15:b9:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e604431b555477c19a3f4c5cb6d1073658d5b3e3
Validity
Not Before: Apr 17 04:01:07 2026 GMT
Not After : Apr 18 04:01:07 2026 GMT
Subject: CN=b1017b7c0c0f4b55e5c67da077f0a89401e678a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:d3:e6:80:0f:63:f9:b1:16:35:77:71:cc:a7:
7e:e6:97:3f:5d:0a:c3:e2:07:51:6f:cc:44:02:63:
b5:99:29:2f:44:1a:c1:8e:79:0a:85:96:a7:80:09:
ad:26:9c:b6:c7:09:25:4a:d2:e7:1d:f7:6c:b0:cf:
4b:98:19:80:7d:8f:43:66:be:fc:ce:e5:fc:e1:99:
1d:9b:89:b9:09:89:b5:5a:db:4d:15:cf:e8:f9:8d:
7a:ae:21:8e:e9:81:63:eb:37:9c:23:2f:35:81:6e:
40:0c:80:af:06:9a:3f:ed:2e:6e:c6:dd:18:0b:7a:
a6:d3:e3:83:d3:11:24:cf:cb:20:15:66:ee:d5:8f:
63:fa:5f:33:a3:b8:2d:1b:c5:15:58:64:4b:8b:26:
9f:d7:04:da:12:86:e7:a2:ad:b7:6c:5d:ff:9c:65:
6a:0e:a4:60:8f:95:38:1b:74:c9:50:8c:3e:33:f5:
6d:fb:82:9a:19:c1:6e:30:52:98:e8:0c:ee:54:d6:
fa:03:09:28:64:ce:1b:cd:ea:1a:30:20:e7:c7:b3:
06:56:f7:2d:e9:33:5d:95:5f:10:71:bc:a7:ed:54:
2e:59:ec:dc:8b:67:cb:5f:46:dc:b4:dc:db:84:62:
36:27:0e:38:d1:c4:56:91:02:2c:82:94:94:39:ee:
60:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:01:7B:7C:0C:0F:4B:55:E5:C6:7D:A0:77:F0:A8:94:01:E6:78:A3
X509v3 Authority Key Identifier:
keyid:E6:04:43:1B:55:54:77:C1:9A:3F:4C:5C:B6:D1:07:36:58:D5:B3:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5gRDG1VUd8GaP0xcttEHNljVs-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d7dc8d-e386-404c-88b4-283ec42c2c94/1/5gRDG1VUd8GaP0xcttEHNljVs-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d7dc8d-e386-404c-88b4-283ec42c2c94/1/5gRDG1VUd8GaP0xcttEHNljVs-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:86:4d:40:29:2a:fc:c5:a1:b8:f6:60:ee:ea:99:b4:29:02:
64:ba:04:5c:fb:d3:e3:e2:fb:0d:ef:db:6d:cc:ed:76:03:4f:
d1:ae:7b:d7:f5:ea:16:72:d5:14:c6:55:b9:8b:0b:d1:dd:d2:
8e:ee:a7:4f:e5:66:a8:3a:e9:71:7e:0e:3c:61:b5:dc:c6:f7:
f0:89:6f:25:0b:0a:22:df:41:94:a8:4d:0d:d8:60:16:b1:9c:
59:37:f7:c6:b1:8f:c7:21:1c:48:cb:94:4c:bd:b0:1a:0e:9a:
a6:dd:01:66:19:9a:b0:6d:8e:8c:56:38:8f:9b:59:f1:21:24:
26:c7:0f:40:19:8b:d3:13:bc:12:7b:fa:02:8a:8d:9e:64:ef:
c1:c5:cd:42:3b:08:2b:c6:d6:b8:b7:30:88:65:a3:75:0b:22:
4c:64:d7:02:36:2c:ed:9e:9a:e5:3a:dd:db:2e:b4:4b:ae:10:
a9:c9:b4:ce:b3:21:72:d2:3a:8a:05:9d:0e:ab:c2:28:1f:89:
e9:e4:4f:d6:6a:39:3b:f5:47:56:1e:7f:96:3e:1c:d8:f3:75:
48:ad:44:8d:2f:89:d9:7a:3b:6c:11:7b:02:66:99:80:6c:ef:
b6:33:1e:f9:de:52:9f:d5:98:07:c2:6a:c7:2e:4e:1a:32:f6:
2c:a9:3c:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:08:01 2026 by rpki-client