Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/30f6cf-ef9b-493a-8394-5c200c6e7d34/1/5318qB7lnVNFA7L3tj22K11ExW4.mft
File: 5318qB7lnVNFA7L3tj22K11ExW4.mft (raw, json)
Hash identifier: La4v1YOBru7lwe2qjCg78HQmyldLsoUYjhLghwAB6SY=
Subject key identifier: 43:89:E2:AD:1E:BA:14:2A:D6:A1:E6:35:B4:B2:CD:B8:CE:3D:81:DF
Authority key identifier: E7:7D:7C:A8:1E:E5:9D:53:45:03:B2:F7:B6:3D:B6:2B:5D:44:C5:6E
Certificate issuer: /CN=e77d7ca81ee59d534503b2f7b63db62b5d44c56e
Certificate serial: 019D3865BC2A1BD97FB9F4CC4004A512BD97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5318qB7lnVNFA7L3tj22K11ExW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/30f6cf-ef9b-493a-8394-5c200c6e7d34/1/5318qB7lnVNFA7L3tj22K11ExW4.mft
Manifest number: 10F7
Signing time: Sun 29 Mar 2026 07:01:24 +0000
Manifest this update: Sun 29 Mar 2026 07:01:24 +0000
Manifest next update: Mon 30 Mar 2026 07:01:24 +0000
Files and hashes: 1: 5318qB7lnVNFA7L3tj22K11ExW4.crl (hash: ZR1jR/HvD/QSI0mwcsKXfhz8ygP54OHRudwPa39DMO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/30f6cf-ef9b-493a-8394-5c200c6e7d34/1/5318qB7lnVNFA7L3tj22K11ExW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/30f6cf-ef9b-493a-8394-5c200c6e7d34/1/5318qB7lnVNFA7L3tj22K11ExW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/5318qB7lnVNFA7L3tj22K11ExW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:bc:2a:1b:d9:7f:b9:f4:cc:40:04:a5:12:bd:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e77d7ca81ee59d534503b2f7b63db62b5d44c56e
Validity
Not Before: Mar 29 07:01:24 2026 GMT
Not After : Mar 30 07:01:24 2026 GMT
Subject: CN=4389e2ad1eba142ad6a1e635b4b2cdb8ce3d81df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:bf:2d:63:12:25:05:a5:36:6a:ac:2d:ae:23:
8f:8a:f6:75:0f:45:cf:13:90:ac:f7:94:8a:1b:15:
82:f7:b9:51:81:aa:e6:63:ee:63:11:9d:68:a7:e2:
66:40:98:83:a3:c8:7b:0d:c1:d4:ca:b9:42:e1:f9:
77:ea:df:e3:46:79:44:8d:8a:c9:f8:b8:4b:41:48:
b1:c5:7d:b3:7d:d7:45:7a:f8:44:31:6d:30:aa:fa:
0f:3a:00:80:58:3b:e9:87:cd:9a:6c:fb:bc:ae:65:
86:2b:a1:17:ad:03:f5:12:cf:9e:cd:f1:58:21:12:
84:89:8f:43:f3:f3:62:66:87:ea:30:00:98:36:3b:
af:32:f3:94:89:cc:93:3b:d1:5c:2e:2e:8f:41:20:
27:14:1f:49:38:97:7d:26:15:67:ae:12:94:8c:54:
26:d0:e1:36:67:d0:e8:ff:63:ff:7c:97:e4:c8:52:
f3:e7:63:b4:38:b8:b3:ad:c0:b9:c1:75:94:81:3e:
aa:e0:6d:a6:d6:b9:6c:c4:64:4e:46:f3:6d:40:2b:
ce:8e:eb:3a:7e:57:b7:f8:0b:3c:86:57:4b:92:31:
a6:b4:4f:6f:0d:0e:69:0b:ff:69:e7:0c:cb:a3:62:
be:6a:7e:ca:8d:80:ce:ea:c9:05:32:5f:90:80:e2:
07:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:89:E2:AD:1E:BA:14:2A:D6:A1:E6:35:B4:B2:CD:B8:CE:3D:81:DF
X509v3 Authority Key Identifier:
keyid:E7:7D:7C:A8:1E:E5:9D:53:45:03:B2:F7:B6:3D:B6:2B:5D:44:C5:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5318qB7lnVNFA7L3tj22K11ExW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/30f6cf-ef9b-493a-8394-5c200c6e7d34/1/5318qB7lnVNFA7L3tj22K11ExW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/30f6cf-ef9b-493a-8394-5c200c6e7d34/1/5318qB7lnVNFA7L3tj22K11ExW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:e1:3f:0c:55:b7:6d:ae:2f:2e:d4:47:e0:70:63:7c:c0:e4:
7b:2d:4b:e9:e3:31:93:69:42:4f:7d:70:3f:4f:45:88:53:25:
c4:9f:32:dc:a3:db:30:d0:87:9d:4f:ef:8c:2c:88:43:cb:d0:
24:d4:46:f0:f5:1d:e1:a3:2f:61:96:33:22:96:d4:11:0f:5c:
30:78:38:74:60:96:7d:3c:01:10:f3:e1:e8:58:28:77:8e:ec:
a5:fe:3f:f2:7b:a9:b6:65:23:35:bc:11:88:0b:2f:65:19:85:
c8:41:50:3a:8e:3a:7f:81:d4:f4:e0:39:39:f2:87:18:20:22:
6b:a3:b6:01:6b:23:a1:6c:c9:f7:68:ca:b1:a1:7d:44:4a:0a:
85:a3:b9:db:54:92:cb:d6:a6:5e:ec:26:77:e0:7b:3c:57:6c:
d3:44:ed:dd:3d:5b:0c:39:9c:dc:49:42:66:51:15:1d:3f:97:
f1:d9:e4:7d:01:ec:0b:0a:d3:ab:16:bf:84:a4:60:f9:15:cb:
f5:32:57:a2:5f:2e:64:de:b4:87:2a:bf:f8:a4:e6:65:ec:cc:
6f:5b:40:32:78:d4:94:30:69:93:35:a6:cb:81:d9:e5:85:e2:
79:9e:a5:74:cd:95:5f:a3:ca:17:85:c9:c1:50:5d:9f:53:66:
11:e8:0d:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:46:00 2026 by rpki-client