Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.mft
File: 5R1xf7LUN9QR2HGve5-8sB6J-Ww.mft (raw, json)
Hash identifier: W9Vn7RE4zZ7LWIt6jKH1gTkYPFKnEd47oMqrEfX9Or8=
Subject key identifier: C8:74:95:C8:A9:7F:F6:BE:4E:5C:52:88:AD:1F:6D:DD:9D:25:6F:87
Authority key identifier: E5:1D:71:7F:B2:D4:37:D4:11:D8:71:AF:7B:9F:BC:B0:1E:89:F9:6C
Certificate issuer: /CN=e51d717fb2d437d411d871af7b9fbcb01e89f96c
Certificate serial: 019D37C02F9902EDE98FE7C2AE69F8DF37C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5R1xf7LUN9QR2HGve5-8sB6J-Ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.mft
Manifest number: 0DB1
Signing time: Sun 29 Mar 2026 04:00:35 +0000
Manifest this update: Sun 29 Mar 2026 04:00:35 +0000
Manifest next update: Mon 30 Mar 2026 04:00:35 +0000
Files and hashes: 1: 5R1xf7LUN9QR2HGve5-8sB6J-Ww.crl (hash: 63XoN2uApdDK2AvCPnfVswxgGac6jvRTHHVdiu3TFjA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.mft
rsync://rpki.ripe.net/repository/DEFAULT/5R1xf7LUN9QR2HGve5-8sB6J-Ww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:2f:99:02:ed:e9:8f:e7:c2:ae:69:f8:df:37:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e51d717fb2d437d411d871af7b9fbcb01e89f96c
Validity
Not Before: Mar 29 04:00:35 2026 GMT
Not After : Mar 30 04:00:35 2026 GMT
Subject: CN=c87495c8a97ff6be4e5c5288ad1f6ddd9d256f87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9b:2b:ba:f5:49:07:8f:e8:3b:e5:25:e3:a1:
ca:70:aa:e1:39:0c:9f:cc:ea:13:5e:c4:0b:dd:b8:
74:8b:00:fa:c9:20:92:01:35:2d:e0:93:d8:10:d2:
ef:3a:8d:f9:4d:cd:55:da:ae:c7:3b:dc:f2:12:6a:
16:c5:cb:3a:2f:a7:c4:5b:f5:55:44:92:e8:d4:05:
74:19:58:2c:c5:6e:a6:fc:c9:79:c2:f8:2f:b5:af:
24:a4:58:8f:85:36:85:d9:98:c3:84:06:64:d0:93:
f3:fb:65:b3:9c:22:71:4c:fc:3e:8b:31:af:81:00:
a1:94:69:65:b5:4d:7a:02:be:c6:c8:22:28:3b:be:
61:07:3c:84:34:86:f3:37:ed:6d:c5:7a:ed:65:82:
39:84:9f:48:a6:df:07:68:61:19:30:ad:f9:e9:49:
2c:98:9b:1c:c0:a3:a4:5b:2e:fb:9f:d5:eb:d9:33:
7d:cc:56:3f:29:1b:81:bf:75:c3:49:ed:56:94:14:
3e:71:3d:01:4a:a6:9b:35:29:16:b7:88:a1:38:a2:
28:10:db:35:81:63:85:c6:94:5f:4d:1f:f2:4f:84:
07:a1:5b:e8:95:4f:f5:a9:a5:4c:82:c6:b0:be:71:
3b:d1:61:8d:8c:63:97:26:3f:5b:69:31:97:f2:2a:
46:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:74:95:C8:A9:7F:F6:BE:4E:5C:52:88:AD:1F:6D:DD:9D:25:6F:87
X509v3 Authority Key Identifier:
keyid:E5:1D:71:7F:B2:D4:37:D4:11:D8:71:AF:7B:9F:BC:B0:1E:89:F9:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5R1xf7LUN9QR2HGve5-8sB6J-Ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:c1:93:ec:86:60:1d:30:31:e8:5e:92:2c:09:2a:07:b7:1d:
3c:96:78:27:0c:bb:77:a8:98:a2:9a:78:32:f8:34:d1:0a:4c:
c1:61:1e:57:ae:63:6e:c0:e6:46:8e:ac:1e:2b:f2:ee:25:df:
65:4a:45:1e:a2:2e:34:63:23:73:ae:27:1f:a9:e1:22:2b:2b:
8c:af:41:26:11:68:e4:12:73:40:f8:0f:9b:bf:fe:ee:4c:f9:
7a:e6:62:e3:bf:d2:08:14:60:23:a7:37:f7:9c:56:32:d2:8e:
56:e3:19:9e:cb:89:fd:5d:de:5b:92:4e:83:8b:a2:5c:5f:7a:
b1:31:6c:97:f7:a3:83:3b:93:31:26:5d:b3:58:b4:b4:13:04:
5e:6b:2f:4a:42:f0:b4:78:e9:0f:57:b7:5a:ae:3e:61:89:39:
67:b7:b4:6d:2a:a4:fb:d1:4c:8b:0f:2e:4f:98:4e:a1:c8:e5:
d2:05:9d:df:7d:91:55:a6:f4:4a:f6:26:41:f0:9a:a4:bb:70:
5f:b3:f5:e0:92:f9:4b:e3:37:87:48:ea:47:7d:a2:79:a8:58:
74:04:f7:8c:fa:b5:0a:6a:ad:1d:62:80:6b:e2:d1:01:10:04:
be:fd:0c:ea:25:92:00:e8:8a:0a:0e:fe:fe:37:d8:b1:58:3e:
74:95:6c:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:01 2026 by rpki-client