Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/d73541-3b4d-44a9-82ac-29e53eda6e1c/1/_5zoM1_DdnayDsFlXFPWfbyG6LM.mft
File: _5zoM1_DdnayDsFlXFPWfbyG6LM.mft (raw, json)
Hash identifier: roegzHBniHbv+cXF6WDDcmhQ9K8uaPWFg0t1YmSeOmw=
Subject key identifier: 29:00:27:59:99:3B:05:6E:04:ED:55:D2:84:C7:CC:27:C4:40:2E:CB
Authority key identifier: FF:9C:E8:33:5F:C3:76:76:B2:0E:C1:65:5C:53:D6:7D:BC:86:E8:B3
Certificate issuer: /CN=ff9ce8335fc37676b20ec1655c53d67dbc86e8b3
Certificate serial: 019D39AE84E8B0D6D2E3E55A182FAFA33A60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_5zoM1_DdnayDsFlXFPWfbyG6LM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/d73541-3b4d-44a9-82ac-29e53eda6e1c/1/_5zoM1_DdnayDsFlXFPWfbyG6LM.mft
Manifest number: 110A
Signing time: Sun 29 Mar 2026 13:00:31 +0000
Manifest this update: Sun 29 Mar 2026 13:00:31 +0000
Manifest next update: Mon 30 Mar 2026 13:00:31 +0000
Files and hashes: 1: _5zoM1_DdnayDsFlXFPWfbyG6LM.crl (hash: xgAyaTFy2HOuc6hhLeEtL+jvPiCUOKthD7vcG51UQLI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/d73541-3b4d-44a9-82ac-29e53eda6e1c/1/_5zoM1_DdnayDsFlXFPWfbyG6LM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/d73541-3b4d-44a9-82ac-29e53eda6e1c/1/_5zoM1_DdnayDsFlXFPWfbyG6LM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_5zoM1_DdnayDsFlXFPWfbyG6LM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:84:e8:b0:d6:d2:e3:e5:5a:18:2f:af:a3:3a:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff9ce8335fc37676b20ec1655c53d67dbc86e8b3
Validity
Not Before: Mar 29 13:00:31 2026 GMT
Not After : Mar 30 13:00:31 2026 GMT
Subject: CN=29002759993b056e04ed55d284c7cc27c4402ecb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a5:0f:4c:15:82:ac:5e:bb:ad:a7:46:0a:cd:
ed:1b:93:df:f9:ea:ff:5c:bd:e6:59:64:f7:83:9d:
05:9a:6e:12:0f:4a:60:3a:55:72:da:2f:41:aa:db:
36:65:19:b7:12:e9:1c:0d:49:02:05:89:8f:99:a8:
ee:43:79:34:e2:c5:05:48:0f:5b:8a:e1:21:34:65:
29:a5:c8:cf:63:46:68:c5:2a:16:29:66:80:7a:59:
9e:43:30:e0:72:eb:72:df:8e:c9:4d:3a:2d:8c:0b:
cf:33:10:65:e4:8f:1a:ea:ab:25:1d:21:d9:73:4d:
1b:10:3b:88:e3:6d:57:70:fe:15:88:67:f5:e4:60:
34:83:db:76:00:8c:c5:2b:79:e2:b9:8e:59:5e:34:
2c:89:13:4e:0b:01:d7:e8:11:d1:21:aa:eb:dd:5e:
a7:1a:60:4e:d0:c3:7d:1a:30:95:33:33:17:ea:e9:
03:d9:79:d6:59:5f:a3:40:b6:98:04:c6:2b:1f:31:
ed:5f:0b:b5:15:94:10:42:7e:24:55:e0:f1:42:1a:
53:22:37:2b:06:6e:4c:67:c0:3d:dd:2b:c3:cd:9e:
c5:59:c6:bd:8c:f9:82:7c:6f:6c:f0:bf:30:2e:bd:
5d:ac:f1:d4:5c:9b:02:57:bb:93:29:5a:f4:6f:37:
f3:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:00:27:59:99:3B:05:6E:04:ED:55:D2:84:C7:CC:27:C4:40:2E:CB
X509v3 Authority Key Identifier:
keyid:FF:9C:E8:33:5F:C3:76:76:B2:0E:C1:65:5C:53:D6:7D:BC:86:E8:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_5zoM1_DdnayDsFlXFPWfbyG6LM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d73541-3b4d-44a9-82ac-29e53eda6e1c/1/_5zoM1_DdnayDsFlXFPWfbyG6LM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d73541-3b4d-44a9-82ac-29e53eda6e1c/1/_5zoM1_DdnayDsFlXFPWfbyG6LM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:77:70:dc:86:ce:9f:53:4c:ae:b7:76:41:b4:61:51:9c:a0:
c2:a8:3f:b4:43:f5:c9:1a:2e:be:75:9b:37:8a:95:ce:65:83:
ff:43:3c:28:62:46:e2:e8:a6:d4:6a:47:d5:81:42:67:24:88:
68:09:12:f7:7d:72:ec:fd:61:89:15:5f:39:c8:a9:a5:fe:54:
9f:47:0b:93:be:25:df:08:e5:ec:19:d2:3c:57:44:56:d5:39:
df:e1:66:0c:48:0b:dd:90:be:27:42:50:64:0d:5e:fa:35:a9:
f9:12:2a:87:c3:c1:5b:a2:9d:2d:84:d8:ae:3e:3b:5f:d9:4a:
4e:ac:48:c8:f1:8c:7d:80:97:6a:b3:61:82:f6:63:38:fd:de:
67:13:52:72:04:6b:05:12:7d:03:69:86:f8:f5:b0:68:4b:58:
b0:a3:12:cd:52:17:75:66:a1:23:1c:c0:cb:1d:58:83:8a:27:
ce:8f:f3:c4:88:96:ee:9e:fd:0e:74:66:d7:ee:9a:5d:5b:96:
de:a1:22:ee:3f:38:5c:1a:99:92:6b:29:a6:4a:bf:2e:fd:1b:
43:97:6c:8b:b4:9a:cb:4b:8d:4e:87:8e:e2:61:9b:fc:1c:34:
ee:e0:7e:e3:0a:7f:e9:2a:ca:1c:0b:b2:4b:51:fa:53:d3:97:
5d:47:d0:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:57:30 2026 by rpki-client