Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/16d14b-8824-4bb3-bdf4-26e651df3186/1/RF5JFjhV_sylL50Of079Lw8nGcU.mft
File: RF5JFjhV_sylL50Of079Lw8nGcU.mft (raw, json)
Hash identifier: p28jVx/74qGmDGz2ajYLOS75GONp9aFl/q83v2SQTF8=
Subject key identifier: 4B:CC:40:BD:9F:F9:7B:B8:46:35:40:0F:AF:08:BF:30:08:C5:F5:D8
Authority key identifier: 44:5E:49:16:38:55:FE:CC:A5:2F:9D:0E:7F:4E:FD:2F:0F:27:19:C5
Certificate issuer: /CN=445e49163855fecca52f9d0e7f4efd2f0f2719c5
Certificate serial: 019D386662ED99F89537385610AAD23466C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RF5JFjhV_sylL50Of079Lw8nGcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/16d14b-8824-4bb3-bdf4-26e651df3186/1/RF5JFjhV_sylL50Of079Lw8nGcU.mft
Manifest number: 0FFE
Signing time: Sun 29 Mar 2026 07:02:07 +0000
Manifest this update: Sun 29 Mar 2026 07:02:07 +0000
Manifest next update: Mon 30 Mar 2026 07:02:07 +0000
Files and hashes: 1: RF5JFjhV_sylL50Of079Lw8nGcU.crl (hash: fdH70SI7kLchSnE+tfdyB5AWVMfgwcFuAMlML+LhByk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/16d14b-8824-4bb3-bdf4-26e651df3186/1/RF5JFjhV_sylL50Of079Lw8nGcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/16d14b-8824-4bb3-bdf4-26e651df3186/1/RF5JFjhV_sylL50Of079Lw8nGcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/RF5JFjhV_sylL50Of079Lw8nGcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:62:ed:99:f8:95:37:38:56:10:aa:d2:34:66:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=445e49163855fecca52f9d0e7f4efd2f0f2719c5
Validity
Not Before: Mar 29 07:02:07 2026 GMT
Not After : Mar 30 07:02:07 2026 GMT
Subject: CN=4bcc40bd9ff97bb84635400faf08bf3008c5f5d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3d:3e:bb:4c:ea:dd:6e:d5:50:6c:68:9d:9e:
9d:45:e8:47:94:a8:64:e7:a0:26:86:45:27:ff:3f:
61:4f:35:a5:86:bb:89:69:26:69:bc:b7:17:1a:2b:
c5:3a:4e:56:63:bb:03:84:8d:33:f5:32:54:95:f1:
51:74:32:62:84:35:8b:7d:26:ab:0b:d0:aa:28:71:
a0:83:21:99:10:87:51:e9:d7:68:56:97:4b:8b:e4:
9d:92:50:4a:3d:7f:17:ca:1f:07:76:70:cc:a2:f7:
dc:60:2c:28:61:f4:c6:c1:82:cc:c3:96:79:05:8e:
59:23:40:e1:e1:b4:5f:34:56:62:20:31:d9:24:81:
fb:53:30:7e:00:94:51:b4:8e:73:9f:44:20:4b:60:
e5:70:bd:7d:cd:28:cf:e5:f0:5b:5b:a7:d0:0c:b9:
80:ea:45:aa:e7:43:1c:63:4c:fb:3f:c4:72:a6:88:
81:f5:bd:21:e5:57:9d:84:ec:d0:77:cc:24:05:93:
e2:21:0f:76:b6:cb:b4:e1:99:17:0e:a9:4f:6a:e0:
b0:b7:d2:63:cf:01:e0:26:b4:2d:90:e5:f0:e6:c0:
ec:d4:a5:c3:be:da:64:b4:af:a4:11:16:39:4d:29:
d8:d8:0f:75:3e:09:54:76:db:06:cd:66:1f:07:87:
7c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:CC:40:BD:9F:F9:7B:B8:46:35:40:0F:AF:08:BF:30:08:C5:F5:D8
X509v3 Authority Key Identifier:
keyid:44:5E:49:16:38:55:FE:CC:A5:2F:9D:0E:7F:4E:FD:2F:0F:27:19:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RF5JFjhV_sylL50Of079Lw8nGcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/16d14b-8824-4bb3-bdf4-26e651df3186/1/RF5JFjhV_sylL50Of079Lw8nGcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/16d14b-8824-4bb3-bdf4-26e651df3186/1/RF5JFjhV_sylL50Of079Lw8nGcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:81:7d:5e:59:f7:f5:47:77:01:6e:3d:ab:5d:91:9b:0b:3f:
38:17:97:1e:41:5e:3a:77:f8:0b:24:8a:36:c4:47:ed:bb:fe:
db:1a:1a:16:7b:4d:9a:d3:ec:5c:b2:54:1d:52:bc:d7:b9:be:
af:4c:c1:d5:32:9a:d9:d4:72:21:be:3d:ef:79:fc:43:14:80:
95:ff:8e:ab:3d:48:07:71:a9:b1:a6:fd:10:64:d8:d9:56:0f:
a8:a2:5a:d5:1e:4e:0a:f1:9c:b4:c5:55:97:d8:a9:0c:43:a5:
e9:f4:57:42:e5:9c:0d:bd:2e:77:0c:a2:7f:f0:4d:c1:38:0d:
03:f5:34:d2:62:ca:f8:b6:f4:67:07:a9:0b:37:da:f0:79:91:
11:28:cf:5e:96:89:9f:94:d2:91:14:46:2e:77:80:09:b7:e4:
bb:4c:ed:18:bc:2c:59:cc:b9:b5:82:3b:10:b2:a2:b9:c4:bb:
80:13:f3:bd:1e:90:38:b2:d8:a7:43:b4:35:ed:ff:31:f7:ff:
53:d7:ea:09:7d:22:42:f2:4b:bb:3a:aa:44:a0:28:64:d8:6a:
60:d5:62:37:39:44:e5:37:2a:b4:86:8f:80:98:56:65:60:10:
a2:4d:5f:f3:bc:5c:ce:4e:26:e5:fc:33:5d:dc:a4:48:ec:2c:
87:77:94:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:28 2026 by rpki-client