
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/17f634-fbbc-4f8f-b6d2-e32e36d51e12/1/5HbpsSF9PIXySHce9G2zprVr-EY.mft
File: 5HbpsSF9PIXySHce9G2zprVr-EY.mft (raw, json)
Hash identifier: 3thFHSMLOEB/GWpQ0Nm/hyTyQnGxkKyjD5VIEpgdifk=
Subject key identifier: 56:26:6D:DB:06:71:CB:60:7A:6B:6C:7D:37:83:88:F8:A6:42:90:9E
Authority key identifier: E4:76:E9:B1:21:7D:3C:85:F2:48:77:1E:F4:6D:B3:A6:B5:6B:F8:46
Certificate issuer: /CN=e476e9b1217d3c85f248771ef46db3a6b56bf846
Certificate serial: 019D3A8ABBE89208AE9579E9702085A79EFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5HbpsSF9PIXySHce9G2zprVr-EY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/17f634-fbbc-4f8f-b6d2-e32e36d51e12/1/5HbpsSF9PIXySHce9G2zprVr-EY.mft
Manifest number: 1C
Signing time: Sun 29 Mar 2026 17:01:03 +0000
Manifest this update: Sun 29 Mar 2026 17:01:03 +0000
Manifest next update: Mon 30 Mar 2026 17:01:03 +0000
Files and hashes: 1: 5HbpsSF9PIXySHce9G2zprVr-EY.crl (hash: o49GX338hhpXwRuzFVCfogJTur/eDtlFFrXq9srcMA0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/17f634-fbbc-4f8f-b6d2-e32e36d51e12/1/5HbpsSF9PIXySHce9G2zprVr-EY.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/17f634-fbbc-4f8f-b6d2-e32e36d51e12/1/5HbpsSF9PIXySHce9G2zprVr-EY.mft
rsync://rpki.ripe.net/repository/DEFAULT/5HbpsSF9PIXySHce9G2zprVr-EY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:8a:bb:e8:92:08:ae:95:79:e9:70:20:85:a7:9e:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e476e9b1217d3c85f248771ef46db3a6b56bf846
Validity
Not Before: Mar 29 17:01:03 2026 GMT
Not After : Mar 30 17:01:03 2026 GMT
Subject: CN=56266ddb0671cb607a6b6c7d378388f8a642909e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d1:7d:7f:ae:fb:16:08:cb:cc:79:d7:74:ed:
13:db:41:02:d1:c9:f0:b3:d7:ad:b5:d7:98:8f:fd:
55:7e:12:76:89:d2:c7:3d:98:d1:a9:5f:35:2d:7f:
a4:df:7b:15:83:7b:46:37:40:b9:74:8c:99:94:c1:
dc:60:b5:bb:1a:c2:aa:fe:ba:ec:d7:05:63:01:13:
3f:e6:fc:67:eb:c7:a1:87:39:fd:df:dd:d4:ed:00:
aa:b6:e7:f4:20:a0:46:2d:07:ba:fc:3f:11:2d:a3:
3b:59:34:63:70:a2:9c:e4:24:a4:73:90:43:b2:82:
08:46:60:ee:d9:9f:81:84:b7:72:7b:8f:3d:f9:b8:
8a:2b:49:e1:9e:31:d1:3a:11:f5:2b:54:7a:cc:94:
da:8f:b0:07:2e:ad:b9:8a:eb:a3:30:96:69:a0:28:
47:66:66:43:75:c6:ad:82:f1:f3:8d:4e:74:b0:b0:
4e:41:8e:62:ad:ba:46:33:2b:1a:6d:7e:b6:05:b3:
fd:6b:0f:15:03:50:4c:60:63:73:3a:e3:1c:94:40:
8a:1d:5c:c6:49:34:c3:f8:68:00:92:29:1c:f9:3c:
f0:51:88:02:30:0c:aa:29:8c:8f:f8:a3:fe:95:2b:
6c:c1:a1:69:b2:51:ce:cf:ca:ca:19:e4:e2:02:be:
ee:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:26:6D:DB:06:71:CB:60:7A:6B:6C:7D:37:83:88:F8:A6:42:90:9E
X509v3 Authority Key Identifier:
keyid:E4:76:E9:B1:21:7D:3C:85:F2:48:77:1E:F4:6D:B3:A6:B5:6B:F8:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5HbpsSF9PIXySHce9G2zprVr-EY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/17f634-fbbc-4f8f-b6d2-e32e36d51e12/1/5HbpsSF9PIXySHce9G2zprVr-EY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/17f634-fbbc-4f8f-b6d2-e32e36d51e12/1/5HbpsSF9PIXySHce9G2zprVr-EY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:6b:ab:f3:6b:89:84:1d:6f:6a:5f:cd:ce:b0:bd:c5:2e:73:
94:96:ae:e8:3a:ba:ba:9e:e7:b2:a6:cb:8b:a0:a0:0d:d7:ab:
47:a2:92:86:12:80:0c:03:cc:01:a5:16:92:eb:66:79:b7:69:
d3:4e:f0:37:27:12:74:de:65:45:a0:87:42:35:80:48:19:89:
01:ea:d3:ba:7e:b3:e2:41:77:af:d7:8d:6e:e9:3f:49:29:37:
f5:6d:cb:51:3e:82:c2:bb:76:46:43:89:8e:a3:84:3f:4f:44:
1f:6f:ae:30:d7:d5:c5:f9:2f:6f:e8:8c:eb:74:5b:9d:c4:6b:
53:34:90:e4:a6:08:0a:f4:da:ef:6e:94:3f:b6:2d:fa:fb:27:
7a:87:5c:de:93:83:ac:da:5e:2d:fd:2b:ae:79:ca:88:c5:71:
b6:46:21:2d:66:39:dd:c5:14:bd:bf:88:a0:1d:82:bb:12:b4:
5c:fc:0c:98:c3:8e:24:dc:7d:7b:c2:21:f4:ce:bb:77:70:f8:
7e:6c:ea:67:29:22:3c:a0:3c:9d:5d:26:1b:e4:32:da:0b:21:
2f:67:f0:b0:49:25:6c:88:0d:d4:40:a8:a6:78:c8:58:33:8b:
4f:21:8e:c1:f7:7a:f0:d3:b2:84:24:2b:0f:cc:78:a9:46:e1:
c7:8b:26:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:11:49 2026 by rpki-client