Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/2f503d-6cc1-435e-871a-7fa4f58c4fb9/1/5zqbo56LjiuL9OiCUq-_3czN0aE.mft
File: 5zqbo56LjiuL9OiCUq-_3czN0aE.mft (raw, json)
Hash identifier: CtJJhOaMCnX+/PjctpyZSori+iWpCrw44JdXTey496w=
Subject key identifier: 27:C3:6A:FC:5C:BA:DF:C4:D8:55:1F:8D:EB:6F:5A:3D:BE:08:FA:8C
Authority key identifier: E7:3A:9B:A3:9E:8B:8E:2B:8B:F4:E8:82:52:AF:BF:DD:CC:CD:D1:A1
Certificate issuer: /CN=e73a9ba39e8b8e2b8bf4e88252afbfddcccdd1a1
Certificate serial: 019D38668D3B21138EE1CB1E1ADC34C34B04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5zqbo56LjiuL9OiCUq-_3czN0aE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/2f503d-6cc1-435e-871a-7fa4f58c4fb9/1/5zqbo56LjiuL9OiCUq-_3czN0aE.mft
Manifest number: 11B6
Signing time: Sun 29 Mar 2026 07:02:18 +0000
Manifest this update: Sun 29 Mar 2026 07:02:18 +0000
Manifest next update: Mon 30 Mar 2026 07:02:18 +0000
Files and hashes: 1: 5zqbo56LjiuL9OiCUq-_3czN0aE.crl (hash: 6N7YkePdBCppZMESokWAngxsHKgLeId5IA0llRhrxFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/2f503d-6cc1-435e-871a-7fa4f58c4fb9/1/5zqbo56LjiuL9OiCUq-_3czN0aE.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/2f503d-6cc1-435e-871a-7fa4f58c4fb9/1/5zqbo56LjiuL9OiCUq-_3czN0aE.mft
rsync://rpki.ripe.net/repository/DEFAULT/5zqbo56LjiuL9OiCUq-_3czN0aE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:8d:3b:21:13:8e:e1:cb:1e:1a:dc:34:c3:4b:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e73a9ba39e8b8e2b8bf4e88252afbfddcccdd1a1
Validity
Not Before: Mar 29 07:02:18 2026 GMT
Not After : Mar 30 07:02:18 2026 GMT
Subject: CN=27c36afc5cbadfc4d8551f8deb6f5a3dbe08fa8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:86:a4:eb:59:b4:27:9c:27:ba:c7:05:8f:84:
6f:ee:d0:0a:ec:68:95:c8:27:18:5c:e7:a3:fa:f5:
f9:ef:e4:d1:cc:26:c8:63:06:d4:c0:a5:0b:0e:1a:
c8:d9:70:fa:cc:ed:b2:4a:ea:e9:56:f9:9c:3c:75:
84:f4:07:14:ca:2d:d5:c1:0a:94:38:c9:56:f6:4b:
f6:5e:59:31:bc:91:ae:43:7e:3c:7a:0e:9d:eb:92:
8a:91:07:58:6f:cd:4f:75:83:78:42:0b:27:fb:72:
bf:5d:18:f7:13:72:42:50:3b:3c:d8:bf:31:6f:63:
1b:42:b5:56:70:1b:51:ba:57:b8:4a:b7:6f:cf:f8:
41:90:13:3b:c5:6c:b8:16:29:59:dd:10:04:57:56:
35:87:4f:6a:ca:40:02:e8:66:8c:bd:cd:ba:fb:50:
e8:ee:48:1f:66:1e:ba:80:56:2b:0a:27:e9:61:71:
e0:e2:81:f5:e1:dc:1f:1a:6d:57:77:4b:8c:3f:f3:
8c:90:e0:64:c5:91:8a:c1:5b:35:1d:d0:3c:25:48:
6f:47:a0:8c:93:ec:7d:62:e6:3d:d8:36:3a:00:da:
34:05:8e:31:c8:27:f4:28:98:6c:46:a5:af:2a:19:
23:3e:04:74:65:61:65:29:38:3d:db:79:de:7c:ef:
b3:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:C3:6A:FC:5C:BA:DF:C4:D8:55:1F:8D:EB:6F:5A:3D:BE:08:FA:8C
X509v3 Authority Key Identifier:
keyid:E7:3A:9B:A3:9E:8B:8E:2B:8B:F4:E8:82:52:AF:BF:DD:CC:CD:D1:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zqbo56LjiuL9OiCUq-_3czN0aE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/2f503d-6cc1-435e-871a-7fa4f58c4fb9/1/5zqbo56LjiuL9OiCUq-_3czN0aE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/2f503d-6cc1-435e-871a-7fa4f58c4fb9/1/5zqbo56LjiuL9OiCUq-_3czN0aE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:d3:8e:6b:74:44:5f:20:c9:9b:e8:9b:92:17:3a:bd:96:d5:
23:44:a4:25:72:b1:af:b0:39:92:8f:49:f1:34:ce:0a:d4:cd:
47:fd:5d:34:bb:d7:20:f3:c0:d5:75:ca:31:87:9c:e9:61:8d:
4a:36:5d:62:92:0c:bc:fe:3f:e7:2c:b1:5a:c5:47:e3:04:9c:
bd:8b:c9:db:8e:af:5b:90:f0:5e:ba:52:2a:82:27:1e:3a:80:
c3:8a:73:ee:cc:c7:cd:df:a5:f0:f7:51:15:0b:c2:24:b3:59:
d5:cb:01:3c:b0:31:1c:ac:55:b2:23:6d:5d:07:f6:b6:db:f4:
fc:92:8f:c6:98:ec:b3:3f:e3:f6:eb:ba:fa:00:05:ad:12:c3:
d5:70:36:8d:54:9f:1b:a3:07:2f:80:51:64:0c:18:27:95:b2:
6a:c8:d6:f5:5c:cd:09:63:76:ca:1c:96:4d:46:2e:8a:02:35:
05:f0:29:5b:da:2b:96:07:ca:59:70:5d:52:48:e8:8b:2c:1f:
f6:84:16:db:ab:bd:19:18:53:98:6c:6a:56:83:4c:e4:3e:92:
ea:de:24:a9:eb:5e:32:87:86:5e:de:e4:0b:42:48:48:bf:19:
46:b2:ad:9e:58:ef:5e:8b:5d:e2:72:6d:03:38:fe:79:f0:d5:
80:dd:44:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:44:31 2026 by rpki-client