Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/dcb110-62d6-44df-bde6-9a90a7ca508d/1/5LDTQqkyMznAd8XGreEJO1pADyQ.mft
File: 5LDTQqkyMznAd8XGreEJO1pADyQ.mft (raw, json)
Hash identifier: vojL1b7gXxsbGU1bAp5VtPmfCEN+9EHnxub6veK3wAA=
Subject key identifier: F9:16:BB:73:FA:1D:8A:8D:56:95:6E:79:AD:BA:D0:D6:60:3D:4E:2D
Authority key identifier: E4:B0:D3:42:A9:32:33:39:C0:77:C5:C6:AD:E1:09:3B:5A:40:0F:24
Certificate issuer: /CN=e4b0d342a9323339c077c5c6ade1093b5a400f24
Certificate serial: 019E31175A9299C966FDAAA3B2414637939D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5LDTQqkyMznAd8XGreEJO1pADyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/dcb110-62d6-44df-bde6-9a90a7ca508d/1/5LDTQqkyMznAd8XGreEJO1pADyQ.mft
Manifest number: 0574
Signing time: Sat 16 May 2026 14:01:14 +0000
Manifest this update: Sat 16 May 2026 14:01:14 +0000
Manifest next update: Sun 17 May 2026 14:01:14 +0000
Files and hashes: 1: 5LDTQqkyMznAd8XGreEJO1pADyQ.crl (hash: Qb5DLNfna0zOoaO9hy3MBZV6qbrZPtXr3pbHIQN20F4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/dcb110-62d6-44df-bde6-9a90a7ca508d/1/5LDTQqkyMznAd8XGreEJO1pADyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/dcb110-62d6-44df-bde6-9a90a7ca508d/1/5LDTQqkyMznAd8XGreEJO1pADyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5LDTQqkyMznAd8XGreEJO1pADyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:17:5a:92:99:c9:66:fd:aa:a3:b2:41:46:37:93:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4b0d342a9323339c077c5c6ade1093b5a400f24
Validity
Not Before: May 16 14:01:14 2026 GMT
Not After : May 17 14:01:14 2026 GMT
Subject: CN=f916bb73fa1d8a8d56956e79adbad0d6603d4e2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:bc:6a:e2:30:ee:68:94:22:5a:8d:27:55:7f:
08:eb:fd:20:bf:12:3b:b8:db:eb:8c:96:04:ba:b6:
af:e8:f4:44:ff:74:6c:5a:46:e2:06:cb:a6:10:60:
a7:c9:51:21:90:ce:6a:20:4d:22:a9:cf:a7:8f:99:
02:3a:bd:8a:22:7a:6c:42:c3:b0:03:15:7f:e6:7b:
af:c1:57:db:e6:39:9e:8f:72:e6:a7:c2:14:cf:c7:
fc:5f:92:ff:ef:5e:11:9f:d0:64:2d:9d:b6:2e:86:
d0:e3:fc:c7:24:48:6f:07:fb:7c:c2:a2:87:eb:b0:
ef:6f:a5:85:9c:c6:04:7e:47:80:3e:15:a1:9b:43:
df:1c:e3:4d:47:a9:69:4d:17:9e:99:af:62:a3:12:
4a:a3:a5:ab:66:22:7e:34:c7:7c:7c:51:94:d0:fe:
8f:e5:84:b6:d9:99:71:61:3d:b7:3a:5a:23:f4:e5:
b2:27:c9:75:1a:21:cc:4e:ee:33:9d:c3:d2:10:ad:
91:62:4d:ac:c8:55:56:b2:c9:a1:e9:c6:0b:20:1c:
8d:eb:ee:a4:0b:03:9f:4d:07:cf:7a:bf:76:11:12:
c4:8e:01:64:e8:60:16:18:be:a9:14:af:0f:6c:11:
c0:67:67:25:55:ab:46:df:58:0f:b9:0d:99:82:c8:
8c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:16:BB:73:FA:1D:8A:8D:56:95:6E:79:AD:BA:D0:D6:60:3D:4E:2D
X509v3 Authority Key Identifier:
keyid:E4:B0:D3:42:A9:32:33:39:C0:77:C5:C6:AD:E1:09:3B:5A:40:0F:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5LDTQqkyMznAd8XGreEJO1pADyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/dcb110-62d6-44df-bde6-9a90a7ca508d/1/5LDTQqkyMznAd8XGreEJO1pADyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/dcb110-62d6-44df-bde6-9a90a7ca508d/1/5LDTQqkyMznAd8XGreEJO1pADyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:40:96:bc:70:3b:dd:da:b1:9b:57:b4:ed:2d:fa:91:d1:1d:
f1:fd:87:85:b9:fb:fa:0f:75:b3:9f:46:a5:14:71:66:8c:c9:
ed:2d:a5:82:1f:0c:6a:7b:43:c2:de:a0:5a:de:67:24:39:8a:
ae:c2:d0:df:b1:2a:f3:31:b3:2d:db:fd:24:73:1d:be:d8:c5:
d9:20:53:df:3d:cb:3b:c8:41:80:fe:0c:3b:50:a5:cd:5d:50:
5d:f1:c2:9f:87:66:e0:78:da:91:2b:ee:67:de:9c:02:c9:4e:
d7:f9:ba:25:a2:09:31:46:20:65:7d:8d:01:94:ca:64:a9:fe:
ec:91:7c:e9:ce:87:c7:42:2c:84:90:d2:21:1e:63:bf:60:b3:
a1:28:e3:b8:ea:c5:79:70:1c:49:e3:e2:fb:86:6d:c3:f1:9a:
f6:7e:23:e0:a4:75:99:e9:1d:4c:26:c3:24:18:07:b0:57:39:
d0:55:7a:c4:e8:5b:b0:55:cb:9c:5f:25:7d:12:08:cb:5c:76:
3d:06:cb:0d:30:e2:a3:a8:f0:c2:d9:34:05:03:44:8f:1d:f9:
3a:f5:42:9e:2b:a4:e0:e0:bb:90:1c:d5:31:2d:dc:db:01:fc:
4c:83:01:4d:6e:e0:d9:6e:ee:96:9c:d9:62:0c:94:9e:37:48:
c9:55:00:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:10:24 2026 by rpki-client