Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/f2ed50-4c9a-4344-9148-039c1405e175/1/5Q5mktlyjagfXE9J4VB3Phr7yAs.mft
File: 5Q5mktlyjagfXE9J4VB3Phr7yAs.mft (raw, json)
Hash identifier: 2ydfwChKQiqxhhywRwkz9IBGyGt2UPMObLY94b9tPZw=
Subject key identifier: 39:38:AF:45:F7:53:7F:DB:1C:14:59:73:5C:2A:23:27:68:82:73:27
Authority key identifier: E5:0E:66:92:D9:72:8D:A8:1F:5C:4F:49:E1:50:77:3E:1A:FB:C8:0B
Certificate issuer: /CN=e50e6692d9728da81f5c4f49e150773e1afbc80b
Certificate serial: 019D389C2A7AEABBE099F9AC967A59F3B6BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Q5mktlyjagfXE9J4VB3Phr7yAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/f2ed50-4c9a-4344-9148-039c1405e175/1/5Q5mktlyjagfXE9J4VB3Phr7yAs.mft
Manifest number: 10AE
Signing time: Sun 29 Mar 2026 08:00:51 +0000
Manifest this update: Sun 29 Mar 2026 08:00:51 +0000
Manifest next update: Mon 30 Mar 2026 08:00:51 +0000
Files and hashes: 1: 5Q5mktlyjagfXE9J4VB3Phr7yAs.crl (hash: 5v1WJV3sZuocMSooziUhWEL36VVq1dRenwQ64xZ1V1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/f2ed50-4c9a-4344-9148-039c1405e175/1/5Q5mktlyjagfXE9J4VB3Phr7yAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/f2ed50-4c9a-4344-9148-039c1405e175/1/5Q5mktlyjagfXE9J4VB3Phr7yAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Q5mktlyjagfXE9J4VB3Phr7yAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:2a:7a:ea:bb:e0:99:f9:ac:96:7a:59:f3:b6:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e50e6692d9728da81f5c4f49e150773e1afbc80b
Validity
Not Before: Mar 29 08:00:51 2026 GMT
Not After : Mar 30 08:00:51 2026 GMT
Subject: CN=3938af45f7537fdb1c1459735c2a232768827327
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:63:41:bc:8e:dc:60:4b:f6:6f:5b:76:98:f0:
0b:b8:74:48:0e:b3:87:30:d9:37:0a:e9:fb:88:c8:
84:71:57:e9:58:a3:80:f0:21:1c:c3:aa:11:df:5a:
fb:00:53:6a:5e:2b:2e:9f:19:07:54:3f:59:ad:a7:
68:3d:f7:47:83:c3:2a:25:84:5e:04:cf:ae:ce:d7:
ac:9d:11:e0:63:ce:07:6b:d0:e2:ae:c7:bf:60:ee:
30:7d:c4:37:c5:fd:bb:17:b4:f6:aa:52:ed:aa:c8:
db:ff:71:40:45:23:3c:bb:af:bc:2c:e2:d4:f9:41:
34:55:ee:d8:c9:ea:ff:76:d8:dc:7b:be:99:63:c2:
48:49:89:03:a0:cd:90:40:f8:84:22:31:a3:20:19:
84:ad:3f:51:bf:c4:0f:7d:91:bf:9c:13:0c:d9:bf:
cc:e9:e9:45:e2:d7:0a:3a:28:da:c4:20:dd:ed:6e:
78:f0:a0:6c:9f:10:c0:cf:06:44:99:c2:89:a4:a3:
9e:9a:ca:4c:31:71:97:40:36:0e:9d:a0:da:a9:02:
0f:ce:b9:cd:d9:a7:64:e6:2a:37:0d:4e:1c:c8:c8:
07:df:9e:ed:d0:d7:d1:3e:6a:e7:9e:34:26:d3:05:
2b:b1:7c:90:e4:e4:97:25:3c:0f:8b:c8:e6:39:1a:
10:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:38:AF:45:F7:53:7F:DB:1C:14:59:73:5C:2A:23:27:68:82:73:27
X509v3 Authority Key Identifier:
keyid:E5:0E:66:92:D9:72:8D:A8:1F:5C:4F:49:E1:50:77:3E:1A:FB:C8:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Q5mktlyjagfXE9J4VB3Phr7yAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/f2ed50-4c9a-4344-9148-039c1405e175/1/5Q5mktlyjagfXE9J4VB3Phr7yAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/f2ed50-4c9a-4344-9148-039c1405e175/1/5Q5mktlyjagfXE9J4VB3Phr7yAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:1e:9b:5b:bb:2f:da:3f:91:36:79:08:6c:5a:80:f0:35:a0:
28:49:a3:c3:b9:e4:9c:bb:e6:c0:88:f1:e4:93:94:f6:93:e6:
0c:bc:d4:e7:ba:a4:1f:7b:f7:e7:ba:ec:c4:3f:16:8a:8e:04:
48:70:24:8e:f3:3d:aa:5a:ef:b7:83:6e:98:c3:22:42:e6:bd:
f4:66:25:df:e6:28:67:60:6a:c2:b7:f2:b9:ff:a2:5e:1c:15:
b3:db:de:60:e8:c1:46:11:c8:ed:48:05:fc:9e:bd:73:12:69:
71:a1:18:ec:32:cd:76:58:94:90:9a:96:1a:af:63:8b:30:99:
49:65:c7:4e:04:e3:7b:d4:9d:a9:57:50:e1:86:91:82:1f:b8:
b1:25:0a:8b:25:1e:f3:d6:b7:12:00:c5:95:3e:fa:7b:b5:4b:
7c:5f:6d:aa:17:80:73:1f:f3:9e:12:38:32:96:65:0b:7f:08:
f4:10:b2:80:ee:e1:39:2d:94:89:b1:5d:11:15:c0:66:32:2e:
8b:21:9b:95:58:41:f1:43:4d:34:62:d5:03:09:36:79:dd:15:
4d:29:9d:9c:c8:e3:d5:2c:cf:ea:c3:a0:9a:df:8b:ed:56:e2:
93:93:24:66:35:31:5e:76:02:f3:fe:a1:59:98:4c:d8:34:62:
c9:25:c0:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:37:50 2026 by rpki-client