Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/39a3dd-2d26-4753-a180-56d611720224/1/R5jSPWIery3VeYDVoA-8zJhYgvI.mft
File: R5jSPWIery3VeYDVoA-8zJhYgvI.mft (raw, json)
Hash identifier: aAOvzHuOTE9qI7syiOZdNHSEt2Geuavy1rOdrVku/Yg=
Subject key identifier: 96:E1:20:82:0C:21:03:DD:99:AA:90:FA:7A:FA:80:E3:73:AF:54:05
Authority key identifier: 47:98:D2:3D:62:1E:AF:2D:D5:79:80:D5:A0:0F:BC:CC:98:58:82:F2
Certificate issuer: /CN=4798d23d621eaf2dd57980d5a00fbccc985882f2
Certificate serial: 019D9AE31AEB7DE9D2DFB777A7AB53317676
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R5jSPWIery3VeYDVoA-8zJhYgvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/39a3dd-2d26-4753-a180-56d611720224/1/R5jSPWIery3VeYDVoA-8zJhYgvI.mft
Manifest number: 12BD
Signing time: Fri 17 Apr 2026 10:01:07 +0000
Manifest this update: Fri 17 Apr 2026 10:01:07 +0000
Manifest next update: Sat 18 Apr 2026 10:01:07 +0000
Files and hashes: 1: R5jSPWIery3VeYDVoA-8zJhYgvI.crl (hash: giuPHJYjGUfkcYYuMG2SnvO0SPTlqawZtc8NLKWHZCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/39a3dd-2d26-4753-a180-56d611720224/1/R5jSPWIery3VeYDVoA-8zJhYgvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/39a3dd-2d26-4753-a180-56d611720224/1/R5jSPWIery3VeYDVoA-8zJhYgvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/R5jSPWIery3VeYDVoA-8zJhYgvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:1a:eb:7d:e9:d2:df:b7:77:a7:ab:53:31:76:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4798d23d621eaf2dd57980d5a00fbccc985882f2
Validity
Not Before: Apr 17 10:01:07 2026 GMT
Not After : Apr 18 10:01:07 2026 GMT
Subject: CN=96e120820c2103dd99aa90fa7afa80e373af5405
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9d:71:57:1c:35:3d:fd:51:8c:43:67:2c:cb:
35:77:4d:f2:49:43:f2:92:82:3c:99:c5:b8:b9:16:
ff:a6:78:15:b4:24:15:1c:61:b4:1f:8d:23:06:b5:
1e:f9:4d:49:2b:e4:7a:79:cc:48:31:fa:9f:56:1f:
6e:4a:e0:2b:3a:33:05:d0:f5:fc:25:b9:a0:18:83:
39:5a:77:54:4c:a6:87:03:de:21:24:d3:dd:ca:44:
32:8f:ad:f2:16:bd:ba:99:0b:cd:31:f1:36:8e:14:
03:06:ba:9b:6d:33:74:3e:aa:bd:67:df:8e:da:ff:
a0:ea:60:9b:62:01:87:1f:d0:c6:a0:61:cb:13:bf:
3c:b1:93:55:9f:1a:83:bc:b0:84:b9:58:59:76:10:
ee:b6:12:57:9a:09:91:12:79:28:a2:de:36:fb:a9:
5e:74:d2:01:9c:ab:c9:47:e4:47:00:d9:26:1b:da:
61:8c:3a:7b:de:8c:3d:2e:58:47:57:fb:d2:49:25:
bb:c2:8a:fb:cd:e7:7e:bb:75:db:01:99:3b:fd:ab:
8d:8b:8f:51:0d:80:6e:aa:b1:d3:c4:67:f3:2c:13:
02:60:36:9e:93:14:15:be:a1:34:b7:6e:47:58:65:
1c:ee:c8:8b:a2:e9:44:7c:06:94:a2:b1:48:32:27:
1b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:E1:20:82:0C:21:03:DD:99:AA:90:FA:7A:FA:80:E3:73:AF:54:05
X509v3 Authority Key Identifier:
keyid:47:98:D2:3D:62:1E:AF:2D:D5:79:80:D5:A0:0F:BC:CC:98:58:82:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R5jSPWIery3VeYDVoA-8zJhYgvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/39a3dd-2d26-4753-a180-56d611720224/1/R5jSPWIery3VeYDVoA-8zJhYgvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/39a3dd-2d26-4753-a180-56d611720224/1/R5jSPWIery3VeYDVoA-8zJhYgvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:53:fc:f1:87:87:d6:bd:bb:7a:ba:c9:b7:d0:63:ce:5e:d7:
83:f9:7b:de:0c:17:13:73:5d:cc:59:dd:00:de:6e:38:b5:a3:
82:00:72:53:66:a6:0e:2e:cf:4e:a1:38:39:b7:a2:64:44:77:
9a:64:09:a5:e4:49:66:1e:58:76:ad:a4:3c:0c:38:9d:93:14:
f9:2b:0c:98:66:96:34:51:db:cf:dd:47:cf:af:65:15:91:a3:
0e:ca:f2:2a:74:e0:b4:57:bd:5a:32:f6:93:21:15:96:92:5e:
04:da:6f:5b:8e:a7:0b:61:09:96:b2:1a:41:4a:68:41:28:73:
37:fe:78:13:f2:8c:fc:db:23:a8:ab:70:0c:24:4c:d6:8e:79:
55:22:84:30:1f:1e:a6:ea:65:47:1b:5f:da:51:9a:ea:af:8c:
e9:15:d2:a7:72:ea:81:59:99:a0:85:2f:cd:c8:cf:46:45:74:
5e:ea:3e:9e:d7:62:53:ee:06:62:22:9a:c2:be:32:21:9d:3c:
75:66:e3:10:a6:82:50:6a:fd:10:af:c3:0e:91:fb:fa:ba:08:
98:62:a4:c4:8a:d5:12:c7:9b:e7:08:f6:22:8c:48:09:af:bc:
02:b2:2f:5f:ef:7b:68:94:29:f6:58:23:1a:52:dc:6d:0d:d1:
9b:80:4c:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:22:31 2026 by rpki-client