Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/df82fa-118d-4219-ba16-1a9683c9d6cb/1/f5kYyrbx817xteWDyyg56bdIsVg.mft
File: f5kYyrbx817xteWDyyg56bdIsVg.mft (raw, json)
Hash identifier: W6/v4+bA5CgbTy60mLLsPZZVe9TofmdxgKvE/m74tYY=
Subject key identifier: 49:5E:39:19:E6:33:44:9F:E3:C8:85:08:F8:A7:07:4C:AE:DA:25:BC
Authority key identifier: 7F:99:18:CA:B6:F1:F3:5E:F1:B5:E5:83:CB:28:39:E9:B7:48:B1:58
Certificate issuer: /CN=7f9918cab6f1f35ef1b5e583cb2839e9b748b158
Certificate serial: 019D38663CB8F07C7D66D3433A94FBE2BA59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f5kYyrbx817xteWDyyg56bdIsVg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/df82fa-118d-4219-ba16-1a9683c9d6cb/1/f5kYyrbx817xteWDyyg56bdIsVg.mft
Manifest number: 1563
Signing time: Sun 29 Mar 2026 07:01:57 +0000
Manifest this update: Sun 29 Mar 2026 07:01:57 +0000
Manifest next update: Mon 30 Mar 2026 07:01:57 +0000
Files and hashes: 1: f5kYyrbx817xteWDyyg56bdIsVg.crl (hash: 9Ii4jvONwxqUfJI4Cqg1VqbB3opgSpBjm63aHcBTLnI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/df82fa-118d-4219-ba16-1a9683c9d6cb/1/f5kYyrbx817xteWDyyg56bdIsVg.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/df82fa-118d-4219-ba16-1a9683c9d6cb/1/f5kYyrbx817xteWDyyg56bdIsVg.mft
rsync://rpki.ripe.net/repository/DEFAULT/f5kYyrbx817xteWDyyg56bdIsVg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:3c:b8:f0:7c:7d:66:d3:43:3a:94:fb:e2:ba:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f9918cab6f1f35ef1b5e583cb2839e9b748b158
Validity
Not Before: Mar 29 07:01:57 2026 GMT
Not After : Mar 30 07:01:57 2026 GMT
Subject: CN=495e3919e633449fe3c88508f8a7074caeda25bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:6a:31:f0:51:b5:42:32:0e:14:ca:0a:c3:84:
e1:71:c8:99:be:f4:17:ff:b5:83:d9:18:8e:00:fd:
8e:8b:d4:61:58:e4:a3:c3:04:a6:58:a9:d0:69:e9:
6c:1b:64:1e:b7:b6:33:c7:79:81:d6:b3:a5:dc:85:
f8:92:69:90:66:51:5a:6c:2f:e3:01:23:cc:68:77:
66:d5:5e:b9:4e:80:e9:e6:88:ca:12:80:5f:10:bf:
04:d4:77:eb:ab:3e:0c:c3:2e:64:2e:25:46:fe:d0:
da:42:35:ba:58:72:83:6d:b0:ef:69:9b:de:c8:2e:
68:25:7f:90:6c:f7:cf:88:94:81:32:47:ed:3e:fe:
ce:91:da:2b:c0:76:e5:5f:ba:9c:fd:af:d6:ea:34:
6a:78:06:b5:a0:87:08:ca:7e:07:06:0f:4b:8c:57:
27:01:6a:7c:e8:12:a6:de:4b:a1:42:69:8d:ec:7f:
86:72:93:0c:50:b9:60:fe:90:53:30:65:7e:8c:a1:
5e:91:99:59:40:9e:c5:49:1f:86:ec:a2:3d:9c:89:
78:1f:66:99:95:13:6d:aa:7a:db:59:be:75:6f:a2:
8f:df:eb:18:6e:f1:6a:e6:27:fc:d3:ca:3a:eb:97:
f5:47:d9:50:9a:89:16:59:81:8e:18:de:5b:60:e0:
89:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:5E:39:19:E6:33:44:9F:E3:C8:85:08:F8:A7:07:4C:AE:DA:25:BC
X509v3 Authority Key Identifier:
keyid:7F:99:18:CA:B6:F1:F3:5E:F1:B5:E5:83:CB:28:39:E9:B7:48:B1:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5kYyrbx817xteWDyyg56bdIsVg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/df82fa-118d-4219-ba16-1a9683c9d6cb/1/f5kYyrbx817xteWDyyg56bdIsVg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/df82fa-118d-4219-ba16-1a9683c9d6cb/1/f5kYyrbx817xteWDyyg56bdIsVg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:89:13:10:fe:cc:80:53:09:f3:51:dc:d4:a2:9d:7d:fb:27:
9e:04:72:1b:e9:89:57:c1:85:8d:f7:85:1e:c9:e4:bc:4c:91:
fe:ce:b4:d0:34:fb:6e:ab:9d:95:44:c9:7d:87:98:82:3c:d2:
76:eb:8b:58:03:96:3a:41:96:81:bf:c7:2c:f8:50:99:e8:ab:
08:c3:fe:3f:a4:63:0b:35:55:83:85:7d:3b:41:39:1b:a4:4f:
04:1d:6b:57:91:70:4b:e7:5a:20:0f:e3:61:b5:7a:12:29:6b:
aa:ce:56:3c:59:35:45:63:6f:5b:ea:0a:d3:8c:5f:c0:25:c8:
47:72:67:7a:e1:44:b7:29:cd:ca:ea:57:38:f7:8f:3b:4f:15:
28:6a:cb:38:61:96:87:6f:08:17:9d:47:e8:64:02:31:c5:06:
74:d7:ff:50:ff:cd:27:ef:71:f6:b5:85:49:64:e4:c8:6e:b3:
c7:3e:9a:7a:54:65:00:52:65:38:03:ec:08:a1:15:c7:b9:10:
59:0d:83:ef:32:59:06:e5:c0:f3:1e:fb:96:f7:ba:bc:9e:01:
a0:08:29:e9:39:2d:a5:77:b9:33:31:68:5a:20:f3:c1:b0:d0:
e7:51:87:68:c0:cf:ad:ae:bb:a0:8c:25:28:10:91:a0:3e:1f:
af:4c:91:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:49:19 2026 by rpki-client