
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/def9c7-f3e5-42f7-8def-9df4bb18fb06/1/5JlaSpG8KcjX7RBKA4QBmk_lng4.mft
File: 5JlaSpG8KcjX7RBKA4QBmk_lng4.mft (raw, json)
Hash identifier: 9scxjwvLjFvfo61PK4/PXahXDoNLtTash6j+udREko8=
Subject key identifier: CE:16:86:2C:15:C4:AD:FC:AE:7D:8B:CE:32:9B:D2:6A:BF:11:6C:29
Authority key identifier: E4:99:5A:4A:91:BC:29:C8:D7:ED:10:4A:03:84:01:9A:4F:E5:9E:0E
Certificate issuer: /CN=e4995a4a91bc29c8d7ed104a0384019a4fe59e0e
Certificate serial: 019CA97C8E5E690F734FA156D3E4A6A829DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5JlaSpG8KcjX7RBKA4QBmk_lng4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/def9c7-f3e5-42f7-8def-9df4bb18fb06/1/5JlaSpG8KcjX7RBKA4QBmk_lng4.mft
Manifest number: 0B8C
Signing time: Sun 01 Mar 2026 13:00:38 +0000
Manifest this update: Sun 01 Mar 2026 13:00:38 +0000
Manifest next update: Mon 02 Mar 2026 13:00:38 +0000
Files and hashes: 1: 5JlaSpG8KcjX7RBKA4QBmk_lng4.crl (hash: FPNBwuqUkFdY83Hl3ts44FZo9o0SaOEyrPacLjhNsFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/def9c7-f3e5-42f7-8def-9df4bb18fb06/1/5JlaSpG8KcjX7RBKA4QBmk_lng4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/def9c7-f3e5-42f7-8def-9df4bb18fb06/1/5JlaSpG8KcjX7RBKA4QBmk_lng4.mft
rsync://rpki.ripe.net/repository/DEFAULT/5JlaSpG8KcjX7RBKA4QBmk_lng4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 13:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:7c:8e:5e:69:0f:73:4f:a1:56:d3:e4:a6:a8:29:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4995a4a91bc29c8d7ed104a0384019a4fe59e0e
Validity
Not Before: Mar 1 13:00:38 2026 GMT
Not After : Mar 2 13:00:38 2026 GMT
Subject: CN=ce16862c15c4adfcae7d8bce329bd26abf116c29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:54:be:71:bd:6d:9d:60:94:06:79:f5:99:10:
51:3d:6e:ce:4b:ed:ac:41:6c:72:94:8e:d9:f6:8e:
e6:0c:c9:da:45:b3:3d:02:9c:cf:84:ed:54:7a:d6:
cc:7e:8f:40:56:d7:2a:f3:3c:29:b2:ed:35:70:45:
63:e5:e7:f8:17:bf:ae:9c:2f:51:a9:20:23:12:85:
6c:ca:af:dc:85:af:ae:31:49:80:05:7c:a5:30:47:
ed:9a:94:87:a9:16:9f:8a:8b:9e:26:84:32:6d:2d:
4b:70:5a:43:39:cb:93:a7:b2:79:16:68:47:ed:60:
df:d4:a7:eb:51:95:e2:20:c6:80:2d:fc:2c:c1:bf:
76:e3:e3:4a:10:9c:17:3c:98:7f:ca:61:19:07:a5:
3c:6b:c1:27:d5:bd:3b:2d:dd:78:17:59:fa:02:34:
99:c7:b6:1a:99:fd:0c:c2:33:e1:c1:f6:45:e0:a0:
c0:79:d8:32:c9:95:65:80:f3:5b:93:29:07:58:7b:
8e:65:f2:32:9c:78:0b:cd:81:2a:5d:ef:de:01:31:
e2:c7:a3:2c:7e:97:6a:fb:94:05:00:3e:3c:9d:e7:
74:cb:b5:cb:12:11:c9:9a:82:6a:94:d0:a6:af:c9:
dc:43:95:87:f8:12:cc:a1:2f:cb:b6:36:67:e6:ff:
94:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:16:86:2C:15:C4:AD:FC:AE:7D:8B:CE:32:9B:D2:6A:BF:11:6C:29
X509v3 Authority Key Identifier:
keyid:E4:99:5A:4A:91:BC:29:C8:D7:ED:10:4A:03:84:01:9A:4F:E5:9E:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5JlaSpG8KcjX7RBKA4QBmk_lng4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/def9c7-f3e5-42f7-8def-9df4bb18fb06/1/5JlaSpG8KcjX7RBKA4QBmk_lng4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/def9c7-f3e5-42f7-8def-9df4bb18fb06/1/5JlaSpG8KcjX7RBKA4QBmk_lng4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:9a:e8:ca:bf:21:d5:1a:30:4a:b0:3d:1c:83:1a:e0:e1:10:
b1:41:76:bc:7c:24:c1:35:7c:cf:3b:fa:a2:e1:43:4b:55:f9:
bf:70:e5:89:d2:9c:f2:b4:8e:3f:3b:29:ca:f1:e2:f9:89:79:
87:1a:80:f9:fa:fa:44:3c:95:b0:08:6c:48:7b:68:04:8f:ad:
fa:0e:79:57:b5:c7:7f:53:38:da:62:aa:a1:5a:e9:a1:2e:d3:
f3:c2:f4:58:ce:72:39:36:b2:c7:00:ac:68:f6:f9:0d:c9:a0:
1a:43:f3:3b:46:3c:22:da:cb:37:60:8c:28:9c:36:19:3c:8b:
b8:17:c5:a8:2b:3c:b8:48:9e:52:7d:48:3c:99:c7:8c:de:10:
92:e9:4c:ec:57:39:35:9c:55:8b:30:7a:62:25:bb:58:ef:f9:
d9:38:1b:40:68:cf:10:a8:47:54:2b:e7:ec:43:f0:24:b9:67:
af:24:fb:5c:c4:fc:a7:86:5b:9b:65:c0:ba:88:e7:cd:e1:ad:
77:56:41:7f:42:6b:4f:5a:1e:08:d3:3d:0d:65:3c:f0:7a:24:
1d:f0:25:7c:73:9f:a1:4e:d2:0e:e0:55:91:13:3d:4a:f8:35:
b9:f1:43:90:71:c3:b4:62:df:0b:b1:ce:e0:8b:56:c9:8b:d5:
c6:24:94:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:40 2026 by rpki-client