Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/1446aa-6e41-45c0-b09a-32c3658b25be/1/5XB6RVkqydFxmoV2lgMXeCm0bgo.mft
File: 5XB6RVkqydFxmoV2lgMXeCm0bgo.mft (raw, json)
Hash identifier: f8ty4C+kN9i/cwnKjXZHSp2cRPd/fXR0jbbevKpkMJY=
Subject key identifier: 5A:1D:34:58:23:82:3B:BB:70:BE:02:AE:96:31:79:7E:CC:17:D8:CF
Authority key identifier: E5:70:7A:45:59:2A:C9:D1:71:9A:85:76:96:03:17:78:29:B4:6E:0A
Certificate issuer: /CN=e5707a45592ac9d1719a85769603177829b46e0a
Certificate serial: 019CABA21A1DB810B1522D47EFB9BF77B7D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5XB6RVkqydFxmoV2lgMXeCm0bgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/1446aa-6e41-45c0-b09a-32c3658b25be/1/5XB6RVkqydFxmoV2lgMXeCm0bgo.mft
Manifest number: 0E44
Signing time: Sun 01 Mar 2026 23:00:53 +0000
Manifest this update: Sun 01 Mar 2026 23:00:53 +0000
Manifest next update: Mon 02 Mar 2026 23:00:53 +0000
Files and hashes: 1: 5XB6RVkqydFxmoV2lgMXeCm0bgo.crl (hash: ZsSI3Vhm/xchcOms7XmpmdjtMbwt/P/7Ev1MyYFc21E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/1446aa-6e41-45c0-b09a-32c3658b25be/1/5XB6RVkqydFxmoV2lgMXeCm0bgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/1446aa-6e41-45c0-b09a-32c3658b25be/1/5XB6RVkqydFxmoV2lgMXeCm0bgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5XB6RVkqydFxmoV2lgMXeCm0bgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:1a:1d:b8:10:b1:52:2d:47:ef:b9:bf:77:b7:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5707a45592ac9d1719a85769603177829b46e0a
Validity
Not Before: Mar 1 23:00:53 2026 GMT
Not After : Mar 2 23:00:53 2026 GMT
Subject: CN=5a1d345823823bbb70be02ae9631797ecc17d8cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9d:6d:5a:51:81:76:69:65:cd:96:46:cd:5f:
c0:75:af:ea:ac:9c:0c:3d:8b:0b:52:84:40:5e:a1:
15:0b:58:ef:79:51:8c:11:c3:07:82:73:83:3e:d4:
11:1b:23:3d:0f:e8:38:1c:60:d7:ae:b2:82:c6:b2:
9a:57:1d:f8:fd:cb:2f:98:77:1f:fa:21:d6:6b:7d:
9b:27:ec:c1:52:98:44:1d:74:2f:12:09:39:38:08:
88:b2:d2:d2:e4:be:cc:c7:c2:92:2b:f7:01:f2:8a:
21:ca:8d:b9:8b:2e:f1:10:b3:d2:16:75:48:ef:84:
29:12:9c:d7:74:20:9c:a6:37:f9:6e:98:95:65:fa:
76:f0:97:9b:66:75:c0:38:89:97:99:49:6e:6f:1a:
5e:16:c5:13:88:c4:8a:cf:78:b4:86:5c:16:9b:10:
24:28:d4:1b:d0:53:c9:a1:b4:c7:86:15:51:dd:26:
7d:b4:64:d5:07:3c:e1:ac:1f:35:14:a4:85:cd:e7:
7e:5e:aa:65:52:2c:fc:29:72:29:4b:12:96:5e:c4:
9d:03:f2:72:b2:3f:77:95:4b:a6:88:9c:8d:63:19:
f2:b6:09:39:bc:a7:61:7b:03:28:66:2f:a5:96:ee:
ae:d7:87:8f:38:aa:4f:4f:a7:ca:d0:a8:92:53:02:
d6:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:1D:34:58:23:82:3B:BB:70:BE:02:AE:96:31:79:7E:CC:17:D8:CF
X509v3 Authority Key Identifier:
keyid:E5:70:7A:45:59:2A:C9:D1:71:9A:85:76:96:03:17:78:29:B4:6E:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5XB6RVkqydFxmoV2lgMXeCm0bgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1446aa-6e41-45c0-b09a-32c3658b25be/1/5XB6RVkqydFxmoV2lgMXeCm0bgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1446aa-6e41-45c0-b09a-32c3658b25be/1/5XB6RVkqydFxmoV2lgMXeCm0bgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:17:81:5f:02:e2:0c:51:45:de:12:20:4c:83:95:dc:34:fd:
58:d1:8e:ac:a5:39:78:82:d3:cd:04:86:3c:f7:8f:2f:fe:18:
b0:b8:bb:92:6e:bb:66:d7:4b:73:08:36:39:8a:90:91:02:d7:
eb:62:1d:b4:54:0c:8a:9d:61:65:17:c0:25:5f:f5:cd:2b:74:
39:74:37:5b:7d:ff:61:d5:bd:0d:37:7d:aa:10:df:11:01:97:
1a:7f:e8:9c:4c:1c:89:67:52:75:ee:3c:02:97:40:d4:a6:fa:
f0:91:dd:b1:10:24:69:28:a5:a8:3f:0b:6c:d6:48:2e:f7:02:
77:4e:fa:31:4f:b7:f8:d3:6a:89:56:f1:85:f3:c2:3a:ac:98:
6d:f8:ec:10:f6:30:61:9a:b0:9b:6c:a7:0f:17:df:3c:ae:58:
b2:5b:25:13:d4:21:7e:c2:bf:91:e3:10:83:9b:be:0a:74:70:
d3:e2:d0:1a:4e:fb:17:32:72:1a:36:6a:b1:2a:f7:a2:53:9e:
85:61:2e:53:2d:77:52:a4:25:39:cc:a9:b7:df:e0:c0:6f:3c:
df:c7:56:46:d9:99:c9:55:1d:17:82:0b:e2:95:97:38:85:aa:
8a:92:d5:c3:87:4d:86:c1:ba:f9:1a:fa:f0:d7:6d:6c:d8:a2:
f1:c1:8c:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:42:45 2026 by rpki-client