Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/0ca287-3eef-414c-883a-081691257a26/1/5lluFVL8CliEqIGzUoF9C3MAkIM.mft
File: 5lluFVL8CliEqIGzUoF9C3MAkIM.mft (raw, json)
Hash identifier: /IwlCsA4JDy+JpqBQo8bc9hI/S/ahPBs9JFfWvxLQmo=
Subject key identifier: 2E:D3:D0:D4:31:FA:03:35:6F:2C:A7:83:55:F5:86:E1:B9:74:A4:31
Authority key identifier: E6:59:6E:15:52:FC:0A:58:84:A8:81:B3:52:81:7D:0B:73:00:90:83
Certificate issuer: /CN=e6596e1552fc0a5884a881b352817d0b73009083
Certificate serial: 019D37893ADDAF6028393C083A307DAEA2F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5lluFVL8CliEqIGzUoF9C3MAkIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/0ca287-3eef-414c-883a-081691257a26/1/5lluFVL8CliEqIGzUoF9C3MAkIM.mft
Manifest number: 07EF
Signing time: Sun 29 Mar 2026 03:00:33 +0000
Manifest this update: Sun 29 Mar 2026 03:00:33 +0000
Manifest next update: Mon 30 Mar 2026 03:00:33 +0000
Files and hashes: 1: 1bqNsOJJ8fekiGjNmHIxOifScpk.roa (hash: awuwmLZI74s+JrAhvYcfSETsMAtPOVKMZXnh9sFIapk=)
2: 5lluFVL8CliEqIGzUoF9C3MAkIM.crl (hash: dq4dM8GHHDVH1jyDahg29qatT8OLqnLDqGdMsl92WOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/0ca287-3eef-414c-883a-081691257a26/1/5lluFVL8CliEqIGzUoF9C3MAkIM.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/0ca287-3eef-414c-883a-081691257a26/1/5lluFVL8CliEqIGzUoF9C3MAkIM.mft
rsync://rpki.ripe.net/repository/DEFAULT/5lluFVL8CliEqIGzUoF9C3MAkIM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:3a:dd:af:60:28:39:3c:08:3a:30:7d:ae:a2:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6596e1552fc0a5884a881b352817d0b73009083
Validity
Not Before: Mar 29 03:00:33 2026 GMT
Not After : Mar 30 03:00:33 2026 GMT
Subject: CN=2ed3d0d431fa03356f2ca78355f586e1b974a431
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:97:d7:ca:9d:76:dd:27:4b:4a:a3:18:95:7e:
b4:ca:6e:76:ff:62:7d:b6:da:4a:a8:65:aa:11:a4:
56:7b:69:f9:b2:18:44:76:c8:14:ec:e9:b8:76:c0:
0d:20:6c:d6:7c:92:ca:84:96:a6:3d:08:2c:f6:96:
84:9e:95:0b:0b:dc:ce:41:d8:b3:cb:52:c2:0f:ab:
7b:51:c5:16:49:8b:ef:ad:ca:fc:85:e0:a2:ca:31:
3f:aa:5e:0d:22:74:b1:32:ac:44:53:e7:84:f5:3e:
52:6f:6e:7f:9b:cc:95:ed:c8:4b:dd:1d:ef:eb:e9:
50:2c:67:7c:b5:7d:a3:5b:32:65:b7:4e:69:b7:e2:
b0:e7:7a:f8:64:99:de:02:45:8a:06:72:01:94:fa:
57:e8:8e:86:39:5b:53:9f:8d:15:bd:91:da:93:c3:
8f:78:b4:20:75:66:27:ea:f1:f6:cd:3d:72:62:94:
b0:b1:71:3f:5b:af:fb:92:1f:f1:8c:a3:75:ee:19:
ea:42:15:67:d3:35:09:18:43:cf:53:e9:a1:d1:13:
82:da:e1:f6:b6:96:b4:9e:f7:ec:bf:eb:67:28:7c:
93:1a:8b:9a:4d:64:5e:2b:d7:46:a4:31:64:ff:20:
1f:0f:1d:8f:69:b1:bf:74:46:82:be:9d:e2:63:df:
c7:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:D3:D0:D4:31:FA:03:35:6F:2C:A7:83:55:F5:86:E1:B9:74:A4:31
X509v3 Authority Key Identifier:
keyid:E6:59:6E:15:52:FC:0A:58:84:A8:81:B3:52:81:7D:0B:73:00:90:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5lluFVL8CliEqIGzUoF9C3MAkIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/0ca287-3eef-414c-883a-081691257a26/1/5lluFVL8CliEqIGzUoF9C3MAkIM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/0ca287-3eef-414c-883a-081691257a26/1/5lluFVL8CliEqIGzUoF9C3MAkIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:20:de:4d:dc:35:b0:e7:ce:e6:b8:0d:3c:ce:1c:04:a1:84:
7a:94:8b:82:c9:0d:84:d6:0d:fa:ba:de:37:42:8f:7d:83:c4:
cc:33:bd:d1:e5:2c:4b:86:61:75:0e:ac:80:01:fe:88:42:ab:
ab:73:54:b5:3e:89:f2:b6:ec:b9:1a:0e:91:7b:d6:50:b6:25:
a5:09:10:4a:b7:8d:db:19:64:28:20:c1:40:b7:20:fb:23:e5:
1b:af:fa:b5:4a:09:2e:ac:8b:3f:6e:31:aa:9a:06:8c:fc:13:
0c:70:01:cd:15:e2:64:fc:f4:fa:97:d5:cb:0a:e7:7e:09:1b:
2b:65:c0:36:60:c7:d8:42:cc:06:b4:2e:b1:7a:b8:82:a3:14:
c8:ec:45:48:8b:c4:27:9d:31:54:60:3b:5a:08:38:8f:ac:b1:
ea:28:6b:f9:fe:b2:0f:a4:05:b7:cf:9e:43:f7:66:7e:b1:84:
f8:9e:d3:7e:3e:df:af:b4:15:60:13:d8:e4:f7:55:06:a3:d4:
3b:fc:07:61:28:e3:ca:17:c5:fc:6a:93:97:d7:c7:58:52:fe:
e4:7b:62:aa:39:2e:47:02:a1:ab:2d:eb:36:07:8e:d8:bc:42:
48:33:7b:19:95:92:d0:23:6e:03:1c:e4:9a:e0:f4:9c:51:92:
7d:39:41:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:35 2026 by rpki-client