Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/243fb0-f391-4c96-b03a-915e61433b3b/1/5jEQtJQcMhHihW_w6K39FXgqyXM.mft
File: 5jEQtJQcMhHihW_w6K39FXgqyXM.mft (raw, json)
Hash identifier: sKM//rr+JXqBHEkdO77l1NWDauZYQaor3X9093dR7K4=
Subject key identifier: C7:09:14:BB:C7:87:09:6A:0C:42:84:B8:21:A8:77:59:23:83:1C:42
Authority key identifier: E6:31:10:B4:94:1C:32:11:E2:85:6F:F0:E8:AD:FD:15:78:2A:C9:73
Certificate issuer: /CN=e63110b4941c3211e2856ff0e8adfd15782ac973
Certificate serial: 019D3A539D7AA359511105F1CB715533CE1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5jEQtJQcMhHihW_w6K39FXgqyXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/243fb0-f391-4c96-b03a-915e61433b3b/1/5jEQtJQcMhHihW_w6K39FXgqyXM.mft
Manifest number: 0FF0
Signing time: Sun 29 Mar 2026 16:00:51 +0000
Manifest this update: Sun 29 Mar 2026 16:00:51 +0000
Manifest next update: Mon 30 Mar 2026 16:00:51 +0000
Files and hashes: 1: 5jEQtJQcMhHihW_w6K39FXgqyXM.crl (hash: mDOQKBrs1KkMt+Nv222mS2wvE6EC6+RDvExdgcRr1fo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/243fb0-f391-4c96-b03a-915e61433b3b/1/5jEQtJQcMhHihW_w6K39FXgqyXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/243fb0-f391-4c96-b03a-915e61433b3b/1/5jEQtJQcMhHihW_w6K39FXgqyXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/5jEQtJQcMhHihW_w6K39FXgqyXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:53:9d:7a:a3:59:51:11:05:f1:cb:71:55:33:ce:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e63110b4941c3211e2856ff0e8adfd15782ac973
Validity
Not Before: Mar 29 16:00:51 2026 GMT
Not After : Mar 30 16:00:51 2026 GMT
Subject: CN=c70914bbc787096a0c4284b821a8775923831c42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7c:fc:04:95:fa:0c:4e:f2:66:0b:9f:5a:01:
9a:c1:87:b2:0a:e1:7e:e0:1b:b2:97:23:fe:c3:b0:
c7:bc:38:0c:83:e0:9f:a7:73:2b:79:26:94:c3:2c:
4a:6d:c8:40:17:a5:ce:2e:c3:09:61:df:6d:78:39:
b4:6a:2f:8f:78:c2:c9:5f:e1:7d:3e:3c:cc:12:ba:
0f:fb:ae:a2:f6:0f:d9:85:cc:30:90:f7:57:c0:3f:
53:be:7f:28:d1:8d:72:59:5f:47:65:e4:b0:12:e4:
e2:71:dd:5f:dd:12:80:19:fd:c5:dd:1e:3b:06:e3:
e2:49:46:ca:06:bf:74:7e:83:6b:55:1f:c4:1f:1b:
0b:1b:33:e7:14:ce:12:41:be:e2:5e:c9:86:0c:ef:
e2:31:78:77:43:5c:50:93:82:5d:44:2c:f2:43:c3:
fb:6b:97:b4:08:ef:72:81:4b:1e:da:a5:40:89:34:
94:48:9b:2d:3f:e5:fb:af:f6:b8:57:dc:ed:d9:83:
2c:f5:b5:8f:f8:c0:b5:cd:9b:5f:bf:58:f5:92:12:
2b:a6:b3:86:9c:08:32:b7:5c:fd:6d:79:6e:32:3b:
d3:b5:89:b3:0d:07:3e:17:89:1c:5c:65:59:87:f6:
f8:1d:26:b1:50:1f:00:61:74:f6:cd:ad:a3:35:dc:
90:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:09:14:BB:C7:87:09:6A:0C:42:84:B8:21:A8:77:59:23:83:1C:42
X509v3 Authority Key Identifier:
keyid:E6:31:10:B4:94:1C:32:11:E2:85:6F:F0:E8:AD:FD:15:78:2A:C9:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5jEQtJQcMhHihW_w6K39FXgqyXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/243fb0-f391-4c96-b03a-915e61433b3b/1/5jEQtJQcMhHihW_w6K39FXgqyXM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/243fb0-f391-4c96-b03a-915e61433b3b/1/5jEQtJQcMhHihW_w6K39FXgqyXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:cc:ab:c1:1d:71:5d:25:22:76:4f:4e:a7:37:4e:ae:c6:a9:
d6:bc:96:c7:cc:74:b4:7b:b7:ad:85:41:16:56:f7:54:23:1a:
5e:51:c2:7d:eb:72:bf:e9:4b:d8:2f:3b:d6:96:61:36:1a:7d:
41:a8:b4:fa:96:ef:3b:56:34:0f:a1:dd:bc:9a:10:4e:a9:9c:
57:39:92:ca:ac:57:34:95:c5:27:06:c8:66:b8:ef:39:29:23:
8d:da:8b:25:c7:02:70:e2:fc:45:72:2b:7a:a9:92:32:12:e8:
b5:df:06:13:63:47:61:a0:9d:dc:5e:74:29:8d:73:39:7d:38:
ac:61:0e:b9:f5:b1:7f:b7:55:8a:70:65:99:f4:7c:c6:fb:61:
9e:1a:91:e1:24:13:29:47:86:e7:79:c2:b0:36:22:a0:14:fb:
a8:a9:e0:17:e8:59:41:39:46:02:f7:d9:79:c8:ab:30:a3:c9:
21:ad:32:8e:ab:da:6c:ad:4c:c7:9c:7f:d1:e2:9d:80:4e:44:
fa:ee:23:ee:d9:52:9b:ca:da:33:86:ef:5c:a8:fb:3b:f7:24:
21:b4:76:4e:cf:e1:88:7f:f6:98:87:b1:1b:01:6d:58:cd:b2:
3a:8f:f0:21:88:f0:b1:9b:a2:9c:f6:5a:b1:25:69:fe:38:d5:
d7:e6:14:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:38:07 2026 by rpki-client