Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/4f9d4c-1946-4af9-8c22-419753d3f88d/1/5tM83lfaCcfZM3ce6hQllAdvmiM.mft
File: 5tM83lfaCcfZM3ce6hQllAdvmiM.mft (raw, json)
Hash identifier: 62n2kP2Fik/UX4yi+jZlDCXGYLGwpRPJ99PzOLoTq8k=
Subject key identifier: AA:CB:37:C3:1B:9B:01:5A:76:AC:EA:24:64:37:65:1C:DB:C9:BA:11
Authority key identifier: E6:D3:3C:DE:57:DA:09:C7:D9:33:77:1E:EA:14:25:94:07:6F:9A:23
Certificate issuer: /CN=e6d33cde57da09c7d933771eea142594076f9a23
Certificate serial: 019CAAC6E8DB308F5EB8D99AC09384CCE8A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5tM83lfaCcfZM3ce6hQllAdvmiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/4f9d4c-1946-4af9-8c22-419753d3f88d/1/5tM83lfaCcfZM3ce6hQllAdvmiM.mft
Manifest number: 1842
Signing time: Sun 01 Mar 2026 19:01:28 +0000
Manifest this update: Sun 01 Mar 2026 19:01:28 +0000
Manifest next update: Mon 02 Mar 2026 19:01:28 +0000
Files and hashes: 1: 5tM83lfaCcfZM3ce6hQllAdvmiM.crl (hash: CcDzaL8OnlfcmJr4Hn5dSerKN+0WVUp3jPPP0TzDHgY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/4f9d4c-1946-4af9-8c22-419753d3f88d/1/5tM83lfaCcfZM3ce6hQllAdvmiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/4f9d4c-1946-4af9-8c22-419753d3f88d/1/5tM83lfaCcfZM3ce6hQllAdvmiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/5tM83lfaCcfZM3ce6hQllAdvmiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:e8:db:30:8f:5e:b8:d9:9a:c0:93:84:cc:e8:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6d33cde57da09c7d933771eea142594076f9a23
Validity
Not Before: Mar 1 19:01:28 2026 GMT
Not After : Mar 2 19:01:28 2026 GMT
Subject: CN=aacb37c31b9b015a76acea246437651cdbc9ba11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e5:07:9f:3b:cb:62:0a:75:51:a9:97:4a:7c:
a8:42:cc:64:30:a5:24:fb:d5:f5:18:e4:fd:a4:ef:
6b:82:e6:3a:9d:f1:4f:64:d7:bc:57:39:ab:98:a6:
2f:c0:74:6c:55:39:27:e1:cf:3c:a3:d0:d7:98:f9:
8b:a7:87:fd:54:5a:b5:41:0f:6b:34:5e:2f:6e:86:
f4:6b:ef:2a:5e:90:dd:3a:55:6c:68:3f:bd:c5:1f:
74:90:81:80:96:20:d5:f1:f8:c6:1b:70:fc:fd:9b:
2f:50:4a:bf:96:fa:e4:68:8a:af:47:64:b5:e8:35:
a0:ba:08:ae:f1:c1:92:c8:d7:5b:d4:46:99:48:d1:
e2:2b:2c:8a:d7:10:fd:b8:a4:d4:6b:fc:27:93:e7:
aa:be:c3:cb:69:03:8b:81:71:ea:9c:45:60:04:a2:
71:a4:e2:8c:8a:08:1b:ee:66:a8:c2:27:a3:df:a1:
13:fb:b5:0b:b9:ef:74:be:eb:ee:00:1f:d9:f4:ef:
6d:d5:4d:80:a6:b8:1f:96:60:4f:fc:cf:af:4b:ca:
0d:0f:64:a4:15:f4:33:f5:97:45:0a:c6:50:d6:02:
15:af:97:46:c7:47:bd:32:26:2f:a2:f4:0c:4b:4e:
12:fa:5a:a7:9a:18:2b:af:e9:78:71:86:0e:68:c0:
3a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:CB:37:C3:1B:9B:01:5A:76:AC:EA:24:64:37:65:1C:DB:C9:BA:11
X509v3 Authority Key Identifier:
keyid:E6:D3:3C:DE:57:DA:09:C7:D9:33:77:1E:EA:14:25:94:07:6F:9A:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5tM83lfaCcfZM3ce6hQllAdvmiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4f9d4c-1946-4af9-8c22-419753d3f88d/1/5tM83lfaCcfZM3ce6hQllAdvmiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4f9d4c-1946-4af9-8c22-419753d3f88d/1/5tM83lfaCcfZM3ce6hQllAdvmiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:72:67:a5:e1:60:95:90:d1:ac:23:68:c6:71:c0:33:33:45:
8e:4d:04:e8:86:79:35:28:46:e7:37:f7:f5:2a:24:13:0e:2c:
ff:88:5f:36:21:82:d3:06:80:56:34:89:3f:a1:fc:45:ec:2c:
8a:6b:c6:a3:d6:17:21:b1:80:1d:a6:b9:5e:2c:4f:29:f4:e0:
9c:86:b3:a2:75:63:15:01:16:f6:79:0c:cd:bf:53:87:46:db:
d8:d4:2a:64:b5:db:b9:77:32:8e:d7:d8:f6:35:6c:2e:7d:00:
16:d4:8a:ff:f3:47:cf:d7:f1:3f:c3:f6:88:4b:1e:b7:ca:59:
d6:b5:a6:6a:ae:de:0f:69:4f:92:1a:c6:66:cc:ba:68:19:fa:
d0:af:92:47:38:77:a5:f7:c5:46:db:df:ab:fb:53:ed:18:17:
7c:8e:99:9d:b0:37:82:98:01:c8:7b:0c:95:45:b7:81:54:c3:
42:35:44:02:5f:59:1e:d4:c1:ff:69:69:bf:b4:f1:cc:5e:75:
79:23:aa:33:4b:d0:bf:38:a6:47:82:0e:b1:b8:2c:e4:e4:95:
13:a5:f0:35:96:f4:72:79:af:0a:91:84:42:b0:f5:ea:d0:c5:
90:b6:61:e8:6a:62:fb:09:b9:f9:b6:8e:a3:fb:e2:e3:1d:c9:
79:05:d1:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:30:42 2026 by rpki-client