Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/a78ef1-c3c9-43a0-9b1c-1d9d8d004111/1/X5K_96iahZDmq7rsAoKw8k4K_rI.mft
File: X5K_96iahZDmq7rsAoKw8k4K_rI.mft (raw, json)
Hash identifier: p6gi+jJJx+DlO5H5Z+UbxrZ8D27uf1GswOgbGtKF+dQ=
Subject key identifier: 28:CD:4D:E3:2C:4D:88:14:BB:53:A8:D3:75:F6:32:0F:45:AE:82:F6
Authority key identifier: 5F:92:BF:F7:A8:9A:85:90:E6:AB:BA:EC:02:82:B0:F2:4E:0A:FE:B2
Certificate issuer: /CN=5f92bff7a89a8590e6abbaec0282b0f24e0afeb2
Certificate serial: 019D389BC9B4590E9677FB1137DA6E5BA944
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X5K_96iahZDmq7rsAoKw8k4K_rI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/a78ef1-c3c9-43a0-9b1c-1d9d8d004111/1/X5K_96iahZDmq7rsAoKw8k4K_rI.mft
Manifest number: 1748
Signing time: Sun 29 Mar 2026 08:00:26 +0000
Manifest this update: Sun 29 Mar 2026 08:00:26 +0000
Manifest next update: Mon 30 Mar 2026 08:00:26 +0000
Files and hashes: 1: X5K_96iahZDmq7rsAoKw8k4K_rI.crl (hash: wkvgYA9f55BijSZxFbJjqAQkCS98Rrgvwk/v1YRkzL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/a78ef1-c3c9-43a0-9b1c-1d9d8d004111/1/X5K_96iahZDmq7rsAoKw8k4K_rI.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/a78ef1-c3c9-43a0-9b1c-1d9d8d004111/1/X5K_96iahZDmq7rsAoKw8k4K_rI.mft
rsync://rpki.ripe.net/repository/DEFAULT/X5K_96iahZDmq7rsAoKw8k4K_rI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:c9:b4:59:0e:96:77:fb:11:37:da:6e:5b:a9:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f92bff7a89a8590e6abbaec0282b0f24e0afeb2
Validity
Not Before: Mar 29 08:00:26 2026 GMT
Not After : Mar 30 08:00:26 2026 GMT
Subject: CN=28cd4de32c4d8814bb53a8d375f6320f45ae82f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:85:46:ab:20:83:22:8e:df:21:96:fb:f4:d0:
f4:b3:1e:5b:24:f9:cd:3a:cc:f9:db:bf:49:26:c7:
ce:81:aa:c8:3d:3c:df:a9:e2:b3:d2:8d:ec:91:5e:
d0:16:6e:ea:61:8d:24:27:2e:aa:26:5d:96:ba:99:
52:7d:ba:ba:24:30:cc:89:c4:74:00:cd:be:ce:53:
3d:fb:e6:39:ae:e0:37:78:0e:ac:d4:45:fe:d2:2c:
22:24:d3:b8:01:df:28:66:4d:fe:0a:8c:05:a2:af:
ba:06:e3:cf:08:68:58:9b:1c:83:cf:85:0e:38:75:
e5:2a:90:e8:e6:cc:63:e3:6f:ed:c5:cb:75:eb:7e:
d5:61:7a:42:a4:f3:fa:44:52:07:fb:9f:26:df:dc:
23:3a:54:76:a1:b9:00:56:ab:51:8b:91:b3:f4:9f:
fb:ef:1e:06:a9:49:c0:a3:09:d9:a6:c0:76:e3:15:
33:6e:ee:39:8f:1c:ba:7a:84:45:67:0b:f9:6b:43:
f9:9d:e5:04:63:49:cd:b3:5d:09:e9:89:ea:a6:6e:
39:7a:ea:9b:2b:cc:a2:5d:a8:98:61:e9:91:de:b3:
5a:19:f2:3b:d7:fc:e8:7c:23:2c:9f:11:90:9c:0c:
af:7e:11:a9:d3:fa:90:b1:92:4f:6e:eb:75:f6:a1:
18:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:CD:4D:E3:2C:4D:88:14:BB:53:A8:D3:75:F6:32:0F:45:AE:82:F6
X509v3 Authority Key Identifier:
keyid:5F:92:BF:F7:A8:9A:85:90:E6:AB:BA:EC:02:82:B0:F2:4E:0A:FE:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X5K_96iahZDmq7rsAoKw8k4K_rI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a78ef1-c3c9-43a0-9b1c-1d9d8d004111/1/X5K_96iahZDmq7rsAoKw8k4K_rI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a78ef1-c3c9-43a0-9b1c-1d9d8d004111/1/X5K_96iahZDmq7rsAoKw8k4K_rI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:e3:22:33:1b:7d:8b:a3:31:5b:11:7e:dc:2d:d5:0b:46:11:
d4:a5:5c:a9:3e:a2:d6:6a:05:d8:a8:95:d8:df:06:07:b9:67:
e2:46:ff:66:6c:e0:36:23:d0:fc:26:16:68:c2:e9:21:96:7e:
37:e8:86:ae:7d:d8:05:9e:cd:13:09:1d:46:8a:5f:fb:40:4c:
01:7b:37:ae:d3:14:fa:0d:7d:c4:46:f3:b9:30:14:fc:97:04:
a3:b7:cc:38:86:0a:a9:e5:f0:a1:9d:cf:53:52:f8:0e:ea:5f:
4f:ab:5f:95:28:6a:e6:a6:98:e5:28:ad:81:09:56:20:b4:5c:
f1:d8:51:f4:93:f5:3a:6d:f3:6b:7a:7f:9a:0d:53:f6:6f:f9:
c5:b7:5e:e7:94:c6:46:24:3a:75:a6:a6:1f:7b:55:4d:95:4b:
62:c8:d4:e6:5c:96:30:bb:ea:74:82:9b:fb:e8:f8:1f:a5:45:
31:07:4f:be:59:87:e1:1b:a3:69:9f:c7:73:61:e1:4d:87:fd:
f6:46:a0:b7:4b:47:7b:6f:07:82:6f:84:8e:be:7b:76:35:d6:
b6:f7:53:27:80:33:dd:1e:bc:0c:c3:54:42:8b:a2:3b:c6:07:
18:a3:1b:1d:72:b6:cd:dd:4b:71:0e:47:89:cc:3e:83:c3:64:
ad:5e:97:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:02:02 2026 by rpki-client