Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/39a3dd-2d26-4753-a180-56d611720224/1/R5jSPWIery3VeYDVoA-8zJhYgvI.mft
File: R5jSPWIery3VeYDVoA-8zJhYgvI.mft (raw, json)
Hash identifier: 5ThfuLXKV4MpB4a2AtxoE+e58vHXNu68I3m68D/41kA=
Subject key identifier: F1:07:D2:7B:43:7B:CE:80:55:4E:DA:76:0D:93:3C:63:A1:78:F6:31
Authority key identifier: 47:98:D2:3D:62:1E:AF:2D:D5:79:80:D5:A0:0F:BC:CC:98:58:82:F2
Certificate issuer: /CN=4798d23d621eaf2dd57980d5a00fbccc985882f2
Certificate serial: 019CAD5991F949C5A4DB252761D39EFB1D5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R5jSPWIery3VeYDVoA-8zJhYgvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/39a3dd-2d26-4753-a180-56d611720224/1/R5jSPWIery3VeYDVoA-8zJhYgvI.mft
Manifest number: 1242
Signing time: Mon 02 Mar 2026 07:00:54 +0000
Manifest this update: Mon 02 Mar 2026 07:00:54 +0000
Manifest next update: Tue 03 Mar 2026 07:00:54 +0000
Files and hashes: 1: R5jSPWIery3VeYDVoA-8zJhYgvI.crl (hash: 8P8ikPNxzqXRmFk+rBHQVq2XwI2rmOZ0TCLroMz6ktw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/39a3dd-2d26-4753-a180-56d611720224/1/R5jSPWIery3VeYDVoA-8zJhYgvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/39a3dd-2d26-4753-a180-56d611720224/1/R5jSPWIery3VeYDVoA-8zJhYgvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/R5jSPWIery3VeYDVoA-8zJhYgvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:91:f9:49:c5:a4:db:25:27:61:d3:9e:fb:1d:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4798d23d621eaf2dd57980d5a00fbccc985882f2
Validity
Not Before: Mar 2 07:00:54 2026 GMT
Not After : Mar 3 07:00:54 2026 GMT
Subject: CN=f107d27b437bce80554eda760d933c63a178f631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ed:c2:9a:e0:6d:6e:56:f5:cd:ea:89:97:74:
bc:2f:37:68:95:c3:b9:b0:c3:5f:f5:57:22:5b:09:
44:0f:7f:f6:79:8d:23:07:40:f3:4b:74:ee:b3:3c:
38:2a:21:fb:e7:f0:54:c1:1e:32:80:75:ce:f9:75:
af:0b:0d:1d:40:94:e6:b0:6a:7d:b5:d2:74:fb:7b:
f6:51:56:2b:ee:e8:c5:74:db:1d:c2:a8:e0:c1:98:
87:ae:44:b8:3b:ce:ff:63:08:4f:0d:79:5c:0a:c5:
e5:86:68:57:6d:3c:4f:ef:d8:d4:d3:57:29:e7:cf:
0b:cd:33:30:46:9f:d3:27:48:2c:c9:38:ad:22:78:
a5:04:16:0b:f4:32:70:51:d8:5e:e9:82:76:3d:45:
23:20:e1:c9:46:e0:9c:23:68:db:3b:ac:fa:d1:3c:
25:e9:d0:eb:71:70:3b:7f:c1:ab:0e:bd:40:d3:ad:
ec:d7:c7:cf:75:21:e1:c2:f7:09:1b:ef:6d:81:38:
b2:64:eb:c5:ca:4e:d2:32:56:ef:72:7b:c0:fa:2e:
94:09:c4:fb:a1:18:8b:5d:17:64:fb:ab:6a:99:53:
3c:4b:0d:cb:0d:11:2f:b0:2a:b4:fd:a0:06:54:14:
3c:6d:4a:f1:db:f2:06:a6:6f:24:25:6d:c6:39:57:
96:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:07:D2:7B:43:7B:CE:80:55:4E:DA:76:0D:93:3C:63:A1:78:F6:31
X509v3 Authority Key Identifier:
keyid:47:98:D2:3D:62:1E:AF:2D:D5:79:80:D5:A0:0F:BC:CC:98:58:82:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R5jSPWIery3VeYDVoA-8zJhYgvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/39a3dd-2d26-4753-a180-56d611720224/1/R5jSPWIery3VeYDVoA-8zJhYgvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/39a3dd-2d26-4753-a180-56d611720224/1/R5jSPWIery3VeYDVoA-8zJhYgvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:a3:14:78:3d:b0:01:95:0e:b9:17:16:93:9a:2c:e4:19:1b:
6d:49:4b:fc:0a:c3:0c:bc:27:18:55:81:c8:e8:42:54:df:75:
af:0d:cd:b3:c3:03:e6:df:5b:83:99:1b:19:a9:18:f3:0d:0c:
5b:94:6b:a8:02:08:51:d1:b9:75:7c:10:c1:bc:ea:f7:c1:3d:
68:f8:ba:ca:e6:89:f9:72:f3:db:28:82:6d:6d:23:06:31:16:
54:96:f6:cf:3f:34:22:06:21:02:62:b2:49:fd:f6:f5:50:38:
dd:2d:39:72:67:e9:97:81:4f:f1:2c:69:92:18:b2:e1:4f:7e:
73:fc:d4:f8:2c:bc:77:95:87:1a:6a:12:80:cf:83:c2:98:2d:
bf:46:ee:25:86:9b:c5:3f:a7:af:83:6c:cb:82:eb:be:8e:ec:
09:0a:6b:b6:f4:72:8b:6b:54:fe:63:04:a1:82:4b:e5:02:ff:
b3:4f:97:bd:9e:17:1f:e0:71:c0:09:ee:64:92:65:a9:1d:fb:
f7:5e:33:4b:32:77:d8:54:bb:73:32:4a:ac:1c:b4:92:98:9a:
c8:61:5d:24:35:fa:39:9a:bb:70:ae:c6:41:55:f9:f9:ec:2a:
f1:fe:ac:54:c0:41:95:31:07:f2:38:42:a4:1c:d4:de:da:5e:
ad:35:cc:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:52:52 2026 by rpki-client