Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/0f50bb-1fe1-4c83-8c88-e35d2d5f00f8/1/2YrAsQZtDe_LFpVkPcuqBzmXXKg.mft
File: 2YrAsQZtDe_LFpVkPcuqBzmXXKg.mft (raw, json)
Hash identifier: b6/gACuQfuEWncsR0FrAx1TAA7ULAak64/wi+pWw1l4=
Subject key identifier: F0:C1:45:10:C5:C7:3E:C0:85:05:D5:73:8E:1A:C1:3F:33:1D:1E:83
Authority key identifier: D9:8A:C0:B1:06:6D:0D:EF:CB:16:95:64:3D:CB:AA:07:39:97:5C:A8
Certificate issuer: /CN=d98ac0b1066d0defcb1695643dcbaa0739975ca8
Certificate serial: 019D38D3C4D478E4AD5E8898EE48CE281F93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2YrAsQZtDe_LFpVkPcuqBzmXXKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/0f50bb-1fe1-4c83-8c88-e35d2d5f00f8/1/2YrAsQZtDe_LFpVkPcuqBzmXXKg.mft
Manifest number: 14E7
Signing time: Sun 29 Mar 2026 09:01:35 +0000
Manifest this update: Sun 29 Mar 2026 09:01:35 +0000
Manifest next update: Mon 30 Mar 2026 09:01:35 +0000
Files and hashes: 1: 2YrAsQZtDe_LFpVkPcuqBzmXXKg.crl (hash: s9gWSnmc3kWPVZo4WhCspWdaCjjU/B0dJ76m5LoNqB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/0f50bb-1fe1-4c83-8c88-e35d2d5f00f8/1/2YrAsQZtDe_LFpVkPcuqBzmXXKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/0f50bb-1fe1-4c83-8c88-e35d2d5f00f8/1/2YrAsQZtDe_LFpVkPcuqBzmXXKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2YrAsQZtDe_LFpVkPcuqBzmXXKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:c4:d4:78:e4:ad:5e:88:98:ee:48:ce:28:1f:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d98ac0b1066d0defcb1695643dcbaa0739975ca8
Validity
Not Before: Mar 29 09:01:35 2026 GMT
Not After : Mar 30 09:01:35 2026 GMT
Subject: CN=f0c14510c5c73ec08505d5738e1ac13f331d1e83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:5e:0b:47:24:4b:9a:22:35:88:6e:50:d6:3a:
70:b5:e9:f0:80:34:b7:54:7c:d9:20:51:80:76:8e:
27:55:3b:5d:9e:3d:4a:9e:b0:38:a9:74:87:20:43:
57:bb:59:e9:42:b1:0a:17:21:e2:c5:0a:7e:3d:30:
be:aa:4c:6f:bd:dd:48:8f:a4:7a:f5:c9:99:10:0b:
a7:bf:6b:ec:e8:16:31:95:ac:77:c1:d7:fc:40:84:
d3:1e:fb:6c:3c:b6:40:86:d0:7a:ea:a3:8e:e2:e1:
c0:27:b5:55:68:52:25:8a:c6:e5:27:10:02:57:3d:
26:ed:c8:93:06:fe:fc:a4:36:f0:49:0c:38:76:7d:
ae:7d:66:78:68:f6:4b:e6:7b:a6:bc:30:ee:ef:5c:
fe:8c:12:8f:b0:86:c9:65:72:67:64:a4:f6:d8:22:
37:e2:20:35:d6:f3:60:2a:b4:04:5f:cf:43:26:1f:
ff:47:ff:43:7c:ad:84:60:53:26:9e:dd:01:a1:20:
5e:97:d7:a5:59:3b:0d:a9:73:a3:ce:76:74:e3:79:
99:9b:0b:e7:c0:db:fa:51:d3:f5:bc:8c:b7:5b:31:
ba:52:aa:b5:18:bc:5c:65:e8:1c:a9:78:6e:9c:41:
eb:78:b9:8d:77:9a:d8:65:22:be:55:70:f2:c8:d0:
dd:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:C1:45:10:C5:C7:3E:C0:85:05:D5:73:8E:1A:C1:3F:33:1D:1E:83
X509v3 Authority Key Identifier:
keyid:D9:8A:C0:B1:06:6D:0D:EF:CB:16:95:64:3D:CB:AA:07:39:97:5C:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YrAsQZtDe_LFpVkPcuqBzmXXKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0f50bb-1fe1-4c83-8c88-e35d2d5f00f8/1/2YrAsQZtDe_LFpVkPcuqBzmXXKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0f50bb-1fe1-4c83-8c88-e35d2d5f00f8/1/2YrAsQZtDe_LFpVkPcuqBzmXXKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:92:f5:d4:a4:90:2f:30:15:6d:4c:fc:29:96:a9:3e:d5:1d:
5b:2a:ab:69:5c:f9:51:30:39:d4:e6:54:b3:da:1b:b1:3b:2d:
3e:68:ff:92:07:b5:c6:3a:91:26:0b:21:5c:50:12:ca:46:38:
d1:58:f5:1d:77:23:f1:0a:73:42:25:12:ed:6c:d0:8a:95:91:
58:48:e0:5e:31:2d:ed:cb:92:fa:68:e8:78:3b:ed:43:a1:77:
3b:3c:c8:a4:c8:6d:e4:86:c5:8f:2c:ad:ae:e4:60:c8:7e:26:
34:2d:9b:43:d5:eb:1a:00:80:74:c4:31:fe:e5:ea:f6:68:3d:
5c:68:b2:06:fd:01:ba:08:2d:72:ff:92:ab:ab:09:f0:c5:8a:
75:d1:30:09:1c:77:46:e1:b9:12:07:73:0c:00:c7:5e:2c:92:
3e:f3:5f:ff:ed:f2:fb:9b:fb:96:17:83:8e:32:39:b7:e8:00:
aa:20:70:ec:87:b6:67:b7:a8:11:1c:25:9d:2b:11:0d:1c:89:
1f:5c:1a:b5:e8:0c:fd:5b:cf:9b:c6:a4:a2:a6:ea:b2:73:9d:
4b:1d:59:1f:ac:7f:09:8e:c8:8d:b4:b9:de:52:2d:30:51:32:
99:c3:86:a9:fa:58:58:99:90:1a:22:81:5c:d3:70:a5:ce:39:
79:29:7c:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:04:23 2026 by rpki-client