Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/020b7a-74a3-4594-9c46-d5bdb639fbca/1/5frVG_rdJFMhvgkuaB2N5uLSdcM.mft
File: 5frVG_rdJFMhvgkuaB2N5uLSdcM.mft (raw, json)
Hash identifier: ZYiEVQmnrrLTLqZ050tlt6yMUqzp3O1SWa0p+gDdOVE=
Subject key identifier: 63:C4:4C:D3:D3:7D:63:7E:A5:53:71:DD:F2:F0:1B:AB:6F:6B:1B:15
Authority key identifier: E5:FA:D5:1B:FA:DD:24:53:21:BE:09:2E:68:1D:8D:E6:E2:D2:75:C3
Certificate issuer: /CN=e5fad51bfadd245321be092e681d8de6e2d275c3
Certificate serial: 019D37531CD2260BEA72EB00B5EF9B29C4F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5frVG_rdJFMhvgkuaB2N5uLSdcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/020b7a-74a3-4594-9c46-d5bdb639fbca/1/5frVG_rdJFMhvgkuaB2N5uLSdcM.mft
Manifest number: 0812
Signing time: Sun 29 Mar 2026 02:01:26 +0000
Manifest this update: Sun 29 Mar 2026 02:01:26 +0000
Manifest next update: Mon 30 Mar 2026 02:01:26 +0000
Files and hashes: 1: 5frVG_rdJFMhvgkuaB2N5uLSdcM.crl (hash: 252gORV8cyX73pkXPWEvIf2HafF0AGgjXAUCi+RyKrw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/020b7a-74a3-4594-9c46-d5bdb639fbca/1/5frVG_rdJFMhvgkuaB2N5uLSdcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/020b7a-74a3-4594-9c46-d5bdb639fbca/1/5frVG_rdJFMhvgkuaB2N5uLSdcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/5frVG_rdJFMhvgkuaB2N5uLSdcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:53:1c:d2:26:0b:ea:72:eb:00:b5:ef:9b:29:c4:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5fad51bfadd245321be092e681d8de6e2d275c3
Validity
Not Before: Mar 29 02:01:26 2026 GMT
Not After : Mar 30 02:01:26 2026 GMT
Subject: CN=63c44cd3d37d637ea55371ddf2f01bab6f6b1b15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:80:17:dc:f8:c6:21:d8:b4:f2:27:74:95:51:
59:69:51:bd:e4:3c:13:9f:8a:cf:a8:59:1b:4a:51:
1b:9e:69:35:2a:0a:f5:27:49:12:d1:cf:c7:fd:9d:
aa:86:c7:78:c3:9d:ae:f2:e0:0e:1a:ce:ef:d8:c1:
4f:5f:78:a3:59:8a:09:74:4b:83:8e:ff:1f:5a:2f:
a4:9a:ab:06:76:28:90:3e:8f:f6:0a:b9:00:9d:ba:
6b:80:46:78:e5:8b:f0:ed:dc:3c:1b:da:27:77:4b:
27:76:1c:ae:87:68:8b:9b:0c:8f:c8:97:2d:e6:ad:
3f:c0:2a:1b:ad:80:62:12:a0:dc:ca:44:93:63:e2:
e1:b0:40:5e:84:80:e5:c5:6f:4a:9e:02:8b:47:d4:
7d:c5:ea:54:f0:7c:50:55:f0:27:ae:d4:c9:42:b4:
b4:2a:91:63:43:8b:b6:f1:7e:46:15:9b:84:1f:3d:
f2:38:dd:9e:1f:6d:93:83:0c:ad:40:b7:6c:00:78:
1f:e1:04:c4:fe:69:a1:6c:c4:7e:f6:94:56:ff:2d:
9a:d0:ca:69:62:71:df:fe:22:74:c5:ee:19:78:66:
28:c5:a6:f3:40:ca:fb:80:16:ec:02:20:db:8f:08:
b2:0b:7b:2b:cf:56:52:b2:2a:fd:a1:56:a5:cc:f8:
e0:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:C4:4C:D3:D3:7D:63:7E:A5:53:71:DD:F2:F0:1B:AB:6F:6B:1B:15
X509v3 Authority Key Identifier:
keyid:E5:FA:D5:1B:FA:DD:24:53:21:BE:09:2E:68:1D:8D:E6:E2:D2:75:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5frVG_rdJFMhvgkuaB2N5uLSdcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/020b7a-74a3-4594-9c46-d5bdb639fbca/1/5frVG_rdJFMhvgkuaB2N5uLSdcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/020b7a-74a3-4594-9c46-d5bdb639fbca/1/5frVG_rdJFMhvgkuaB2N5uLSdcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:1b:8e:3b:54:f4:8e:dd:cc:68:54:c7:3a:0b:b2:59:10:d6:
52:bc:6b:9f:5f:f2:c3:2c:df:ca:4f:4b:03:c6:22:da:cb:2f:
e3:4c:f2:33:4c:6a:9d:90:6e:e4:b8:af:4d:8b:c1:08:f3:39:
09:81:34:19:99:52:63:6c:33:d5:17:e8:8b:d9:2a:55:57:45:
bd:6b:b7:2f:6d:44:90:fc:9d:0b:77:88:69:01:9d:ad:81:3d:
3c:9e:72:8e:28:4a:d4:83:04:5f:b1:68:7c:d8:8b:55:ef:6c:
69:25:a0:1f:a4:64:b3:46:f2:ee:0d:32:d8:58:b4:66:c1:0e:
d2:da:96:0e:2b:5d:7a:c7:51:ce:59:1c:3b:b2:c5:82:cc:78:
c8:62:c1:29:eb:63:81:af:4a:fe:8d:1f:61:5d:e1:e8:9e:7e:
04:b2:82:1b:9c:c8:78:8c:7c:b8:72:ec:8e:df:ae:df:e7:84:
e8:83:04:54:c6:d4:38:bc:3c:58:f0:be:db:a4:89:72:e3:ec:
c5:b5:2f:c8:bf:2d:96:b8:0d:b3:70:46:0a:c9:ed:26:b9:88:
e6:fa:a5:51:1d:e6:e5:88:c6:77:56:f2:58:23:31:50:da:03:
7d:57:ca:26:1d:24:af:50:a5:b4:50:31:87:b5:4c:58:3a:9c:
6c:da:f2:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:31:51 2026 by rpki-client