Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/1a59c9-1446-4779-be0a-d50f29308464/1/5weSQnGbdzi4P0kUerH1gp93ahU.mft
File: 5weSQnGbdzi4P0kUerH1gp93ahU.mft (raw, json)
Hash identifier: Y4nBt1thtQ3PRg+7r5Eqbru2WLADV0awCtvEIljLNgg=
Subject key identifier: 91:CA:48:AA:48:48:F2:3C:50:4F:77:7C:11:14:E5:D3:85:69:28:CF
Authority key identifier: E7:07:92:42:71:9B:77:38:B8:3F:49:14:7A:B1:F5:82:9F:77:6A:15
Certificate issuer: /CN=e7079242719b7738b83f49147ab1f5829f776a15
Certificate serial: 019D375328AD92D50AC562D10ED8D1F71E66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5weSQnGbdzi4P0kUerH1gp93ahU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/1a59c9-1446-4779-be0a-d50f29308464/1/5weSQnGbdzi4P0kUerH1gp93ahU.mft
Manifest number: 0259
Signing time: Sun 29 Mar 2026 02:01:29 +0000
Manifest this update: Sun 29 Mar 2026 02:01:29 +0000
Manifest next update: Mon 30 Mar 2026 02:01:29 +0000
Files and hashes: 1: 5weSQnGbdzi4P0kUerH1gp93ahU.crl (hash: jH7kum+Y9cf//Rgkuh3hz1ayUACmtimCyIbzlf/eX60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/1a59c9-1446-4779-be0a-d50f29308464/1/5weSQnGbdzi4P0kUerH1gp93ahU.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/1a59c9-1446-4779-be0a-d50f29308464/1/5weSQnGbdzi4P0kUerH1gp93ahU.mft
rsync://rpki.ripe.net/repository/DEFAULT/5weSQnGbdzi4P0kUerH1gp93ahU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:53:28:ad:92:d5:0a:c5:62:d1:0e:d8:d1:f7:1e:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7079242719b7738b83f49147ab1f5829f776a15
Validity
Not Before: Mar 29 02:01:29 2026 GMT
Not After : Mar 30 02:01:29 2026 GMT
Subject: CN=91ca48aa4848f23c504f777c1114e5d3856928cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0f:a7:03:02:43:39:e7:45:c4:6c:3d:1f:af:
54:b0:08:38:4c:4f:f7:f1:55:d6:21:e5:ca:3a:ce:
c0:f1:0f:a5:98:2a:29:38:15:f3:f6:9f:3b:86:de:
56:29:46:79:3e:0a:ab:2e:ac:95:a2:03:20:89:0e:
41:5a:e6:89:f5:ff:0c:06:a2:9a:f3:10:6a:6e:a8:
dd:4e:5d:0b:aa:d5:40:84:41:b9:8e:c6:6a:c2:de:
68:ab:11:12:fc:f2:37:b9:96:97:2c:75:b9:c7:d2:
b4:23:00:10:3a:21:03:cd:55:be:4e:91:65:60:7a:
3c:30:4f:dd:ac:cd:0c:10:b9:09:3b:50:ad:d6:50:
64:20:b2:9e:09:09:f6:87:33:b1:b6:5a:dd:16:6d:
6d:d0:45:91:bd:15:de:25:dd:fb:34:d7:85:55:0e:
da:00:f5:83:4b:90:24:bc:c6:24:ce:09:d3:b1:9a:
bb:84:05:12:fd:49:34:a2:be:ea:09:45:14:5e:15:
80:21:c6:bf:e7:b2:62:bf:da:34:6b:9e:97:7c:3b:
c3:7f:f0:40:49:11:0f:50:a6:ab:6e:83:b3:e9:c0:
1b:d5:ee:95:b2:f7:a5:3d:be:9a:10:23:aa:78:7d:
32:55:aa:fc:96:62:bc:55:2b:9e:ef:0a:a0:60:59:
f7:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:CA:48:AA:48:48:F2:3C:50:4F:77:7C:11:14:E5:D3:85:69:28:CF
X509v3 Authority Key Identifier:
keyid:E7:07:92:42:71:9B:77:38:B8:3F:49:14:7A:B1:F5:82:9F:77:6A:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5weSQnGbdzi4P0kUerH1gp93ahU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/1a59c9-1446-4779-be0a-d50f29308464/1/5weSQnGbdzi4P0kUerH1gp93ahU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/1a59c9-1446-4779-be0a-d50f29308464/1/5weSQnGbdzi4P0kUerH1gp93ahU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:9a:24:56:16:45:72:60:97:b6:20:3a:79:81:ae:77:bd:ab:
c1:7d:db:33:e4:f8:c3:65:4a:29:24:fd:fd:2f:34:26:c1:e9:
41:d6:a0:30:f7:be:99:11:e6:00:33:bc:07:77:e7:aa:23:34:
f2:91:0e:e8:05:c4:0d:74:bb:95:c7:00:28:1c:c7:95:fd:40:
41:54:de:48:07:23:9f:8e:4f:d4:07:8d:7a:98:69:87:98:d1:
11:58:73:b4:86:e6:37:10:53:da:4d:69:e9:b5:dc:5d:7d:0c:
d6:ef:06:ca:95:7e:49:8e:3c:fb:68:b7:ff:ce:f0:c0:af:fa:
85:ba:fe:f9:c1:22:87:e8:4c:ed:44:99:9a:f3:84:ca:47:be:
8b:1d:39:d0:2f:94:c6:cd:26:e7:86:6a:f9:10:f3:f4:f8:0e:
7b:6a:f2:b8:ca:b0:3a:e6:f5:51:c4:16:55:70:fc:c4:12:78:
31:ff:5a:69:6a:85:0b:c4:bb:f1:93:fc:f8:bf:33:ac:76:f5:
fb:ee:61:20:71:0f:a9:0a:70:4b:ca:e8:15:a5:1b:45:9e:01:
48:3a:49:35:2c:fb:c3:f2:d6:49:21:4b:35:d4:22:ef:87:1a:
ea:95:52:ae:f5:c7:46:96:c4:9e:5a:c2:d6:94:95:28:bb:cd:
45:83:71:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:05 2026 by rpki-client