Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/b47bda-65b6-4a42-990f-024935ddb8c6/1/5e_Rhp7q_m-fA8s0GGibywxpE3A.mft
File: 5e_Rhp7q_m-fA8s0GGibywxpE3A.mft (raw, json)
Hash identifier: guDfkTJdM5bEROOA/Vx4wd4Z/8Z7AH9RpB04w+0SVQw=
Subject key identifier: DC:89:71:AF:E1:3C:8C:DC:41:79:71:BA:F9:C2:0A:BE:DE:C6:51:62
Authority key identifier: E5:EF:D1:86:9E:EA:FE:6F:9F:03:CB:34:18:68:9B:CB:0C:69:13:70
Certificate issuer: /CN=e5efd1869eeafe6f9f03cb3418689bcb0c691370
Certificate serial: 019D3A53C32199C1A601CC5EC6B27CDAA7CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5e_Rhp7q_m-fA8s0GGibywxpE3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/b47bda-65b6-4a42-990f-024935ddb8c6/1/5e_Rhp7q_m-fA8s0GGibywxpE3A.mft
Manifest number: 12AB
Signing time: Sun 29 Mar 2026 16:01:01 +0000
Manifest this update: Sun 29 Mar 2026 16:01:01 +0000
Manifest next update: Mon 30 Mar 2026 16:01:01 +0000
Files and hashes: 1: 5e_Rhp7q_m-fA8s0GGibywxpE3A.crl (hash: f1I5720AwY5ENDGrWCZw3jplvKclboCMbBfRudYm3zc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/b47bda-65b6-4a42-990f-024935ddb8c6/1/5e_Rhp7q_m-fA8s0GGibywxpE3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/b47bda-65b6-4a42-990f-024935ddb8c6/1/5e_Rhp7q_m-fA8s0GGibywxpE3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/5e_Rhp7q_m-fA8s0GGibywxpE3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:53:c3:21:99:c1:a6:01:cc:5e:c6:b2:7c:da:a7:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5efd1869eeafe6f9f03cb3418689bcb0c691370
Validity
Not Before: Mar 29 16:01:01 2026 GMT
Not After : Mar 30 16:01:01 2026 GMT
Subject: CN=dc8971afe13c8cdc417971baf9c20abedec65162
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:03:f6:90:19:d1:86:05:94:02:fc:0e:78:34:
65:88:7e:4f:ca:db:b7:16:54:a6:bf:0e:93:f6:37:
08:7b:ea:2e:71:7d:72:75:a5:07:bf:68:d8:9e:ee:
21:12:b1:45:02:7a:dd:b4:10:70:e5:05:84:d1:d3:
52:2a:a2:cc:04:66:da:6a:e2:3a:93:ac:e7:4e:b3:
79:91:97:f2:5a:d9:9a:58:1b:60:96:fa:5c:d3:0c:
e2:e2:7f:a9:2f:49:49:bf:d2:2a:79:db:e8:4a:4e:
79:f2:eb:65:18:0a:35:53:7c:17:5e:e2:94:d8:34:
99:66:14:c4:15:57:16:16:ad:e0:0d:ee:e8:34:8f:
03:0e:19:8e:93:f6:b8:73:84:24:c4:86:0e:3f:69:
d2:5c:80:57:21:c7:f6:fe:0b:67:89:35:f9:c9:8f:
17:30:d5:60:10:da:a7:43:29:c7:f4:4e:e8:45:3f:
33:ad:d9:70:8b:d0:ed:15:ff:d6:4b:2b:6d:a6:c9:
74:00:64:cd:10:22:99:58:9f:bc:09:7e:7e:60:6d:
7e:bb:84:97:22:59:7f:b4:df:b5:3b:28:e0:eb:6c:
f9:10:f3:32:7a:0b:8b:12:2b:b4:1e:95:55:f7:0f:
65:17:53:c4:c9:9c:2f:c7:34:39:18:e4:2a:36:a6:
8a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:89:71:AF:E1:3C:8C:DC:41:79:71:BA:F9:C2:0A:BE:DE:C6:51:62
X509v3 Authority Key Identifier:
keyid:E5:EF:D1:86:9E:EA:FE:6F:9F:03:CB:34:18:68:9B:CB:0C:69:13:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e_Rhp7q_m-fA8s0GGibywxpE3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/b47bda-65b6-4a42-990f-024935ddb8c6/1/5e_Rhp7q_m-fA8s0GGibywxpE3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/b47bda-65b6-4a42-990f-024935ddb8c6/1/5e_Rhp7q_m-fA8s0GGibywxpE3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:a9:07:ca:21:96:7a:d4:f6:d3:75:0b:85:5b:02:c7:4d:24:
8b:02:4d:a9:41:f1:c6:af:08:f4:b3:1c:7e:89:6a:9d:49:2e:
b1:b0:73:2c:26:5f:c9:04:23:22:59:73:2f:76:e1:a8:40:69:
d1:f3:3e:ae:56:92:85:4e:3d:fd:4d:ba:42:a0:61:ca:eb:38:
e2:17:3b:a4:0d:f3:1c:53:c9:44:b7:08:b0:fa:f0:78:19:45:
b2:3e:b7:d0:28:4f:89:b2:1c:11:22:97:68:31:ae:b0:6e:93:
1d:4c:75:92:7c:f3:03:ef:06:ac:f7:27:66:9c:3e:0b:67:1e:
28:9b:b8:8d:c2:c5:00:5a:67:55:55:d7:81:64:60:04:59:63:
8d:83:b7:ee:0c:e7:0e:9d:2d:61:c6:35:67:3c:8f:8a:81:99:
59:b6:f4:4b:37:06:a6:8a:f9:f2:cb:71:6d:78:f6:44:4c:f5:
f2:22:75:c7:70:d3:ad:fe:8c:f4:76:62:39:37:47:14:36:27:
b2:da:6c:e0:ab:4e:58:a7:f9:06:d3:c8:3e:3d:43:a9:fb:47:
d9:60:50:d3:99:8b:6a:ba:77:aa:a0:e3:a2:9f:23:9e:9a:03:
9d:7b:9f:c6:51:fa:39:79:e9:7d:49:0f:fa:ee:76:f2:b1:cf:
2d:45:de:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:38:23 2026 by rpki-client