Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/e75f08-5dc6-46f9-af18-347ebb3975cf/1/D5_5nyJzNWVWJpW7Gk8uKxje_7A.mft
File: D5_5nyJzNWVWJpW7Gk8uKxje_7A.mft (raw, json)
Hash identifier: R21MHsVomJ266MtosceAvyciqLPpK8OCtIq7Jci68so=
Subject key identifier: AA:50:B8:17:28:67:40:5A:D1:D3:BD:21:09:11:34:14:4E:4E:24:A0
Authority key identifier: 0F:9F:F9:9F:22:73:35:65:56:26:95:BB:1A:4F:2E:2B:18:DE:FF:B0
Certificate issuer: /CN=0f9ff99f22733565562695bb1a4f2e2b18deffb0
Certificate serial: 019D389BB629CD07976ACB4063E6FEF240AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5_5nyJzNWVWJpW7Gk8uKxje_7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/e75f08-5dc6-46f9-af18-347ebb3975cf/1/D5_5nyJzNWVWJpW7Gk8uKxje_7A.mft
Manifest number: C4
Signing time: Sun 29 Mar 2026 08:00:21 +0000
Manifest this update: Sun 29 Mar 2026 08:00:21 +0000
Manifest next update: Mon 30 Mar 2026 08:00:21 +0000
Files and hashes: 1: D5_5nyJzNWVWJpW7Gk8uKxje_7A.crl (hash: eIkZCRFjW2LodXH7bTIVQmr6Zn8kKSV5oenq6nCPQJ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/e75f08-5dc6-46f9-af18-347ebb3975cf/1/D5_5nyJzNWVWJpW7Gk8uKxje_7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/e75f08-5dc6-46f9-af18-347ebb3975cf/1/D5_5nyJzNWVWJpW7Gk8uKxje_7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/D5_5nyJzNWVWJpW7Gk8uKxje_7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:b6:29:cd:07:97:6a:cb:40:63:e6:fe:f2:40:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f9ff99f22733565562695bb1a4f2e2b18deffb0
Validity
Not Before: Mar 29 08:00:21 2026 GMT
Not After : Mar 30 08:00:21 2026 GMT
Subject: CN=aa50b8172867405ad1d3bd21091134144e4e24a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:4b:88:4a:fd:33:8a:4c:b6:6e:49:b1:01:8c:
0c:02:37:f9:bc:a6:30:63:6c:3b:15:96:36:9f:5e:
d9:3e:95:0b:ed:bd:3f:35:54:08:21:62:70:d8:fa:
e2:4d:f7:f9:17:4f:d4:a4:e9:b4:f1:b9:22:20:81:
27:da:2a:f8:fc:08:14:7f:f9:d5:b5:3f:bd:d7:de:
92:a7:ae:e6:87:83:a9:91:75:1d:60:f3:76:cc:20:
a0:cd:95:a7:ed:fe:de:4c:e0:96:09:b9:99:d7:2d:
d0:61:f4:66:ec:c7:a5:95:d9:cd:41:86:af:30:a2:
29:1d:5d:39:e5:0c:1a:ba:a5:e4:e0:83:6b:74:6d:
14:f3:66:28:a8:3c:c9:65:2c:fc:ce:59:70:e9:e4:
94:16:b4:26:0d:d3:fd:8e:b9:08:0c:53:3e:fb:b2:
a9:58:e4:8a:6c:53:9d:1a:55:a7:db:db:0d:2f:7c:
c5:2e:9d:3c:21:8a:33:f8:31:b7:7a:6b:27:1e:72:
42:04:08:17:ac:1f:1a:a3:6d:81:37:52:22:6e:41:
ff:55:0e:73:6b:ce:19:a4:ee:07:fd:2c:94:87:dc:
9c:6a:f2:c9:88:8c:03:74:b7:36:a1:0c:da:49:f3:
84:5d:d9:3b:14:c5:d5:02:2c:a8:37:5f:3d:49:42:
61:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:50:B8:17:28:67:40:5A:D1:D3:BD:21:09:11:34:14:4E:4E:24:A0
X509v3 Authority Key Identifier:
keyid:0F:9F:F9:9F:22:73:35:65:56:26:95:BB:1A:4F:2E:2B:18:DE:FF:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5_5nyJzNWVWJpW7Gk8uKxje_7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e75f08-5dc6-46f9-af18-347ebb3975cf/1/D5_5nyJzNWVWJpW7Gk8uKxje_7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e75f08-5dc6-46f9-af18-347ebb3975cf/1/D5_5nyJzNWVWJpW7Gk8uKxje_7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:a5:ba:9d:65:8a:9c:50:a3:74:cc:f3:e0:c9:e7:af:0c:5c:
7d:9a:09:26:17:2a:e4:10:a5:74:ac:a6:4c:54:81:3c:96:d9:
22:90:da:aa:37:d6:3e:82:70:9f:c8:29:d6:b8:1b:58:6e:85:
1c:68:fd:6d:58:32:8a:9e:fb:e8:50:b1:14:3a:62:f4:c7:d1:
89:18:46:77:80:49:e2:60:47:b6:f7:6a:5b:5e:14:5a:f6:44:
83:bf:7b:2f:87:54:5e:37:58:38:91:66:7d:c1:1c:fb:42:89:
12:3b:99:4e:2c:42:ff:36:03:a1:ee:4a:f0:74:22:7b:b2:03:
4c:1d:fa:38:8a:ff:06:42:b6:c9:02:f6:e9:32:24:e8:61:8b:
80:dd:e0:fd:f1:d0:f2:02:27:6d:b0:14:18:e2:36:a4:fd:00:
e1:42:7b:fb:47:f8:54:4e:c7:6e:55:65:f9:75:3d:79:90:5b:
89:f3:7c:ec:4f:3e:20:06:4b:fa:ba:85:83:62:9a:c1:8f:a5:
b8:3b:ec:4d:35:89:ac:51:a3:b6:87:b0:dd:16:49:bb:cd:c6:
f3:54:dd:57:00:b0:1c:91:a6:49:ca:7d:74:3d:03:0e:ae:4c:
ac:38:f1:98:22:bb:85:dd:fb:1b:1a:1c:ce:74:d0:70:c1:ee:
c3:e1:87:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:09:45 2026 by rpki-client