Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/931545-cf7b-4d58-bed7-04b528fae03a/1/5rkbGfS9vW_x1_Ny06DdE5AFAAY.mft
File: 5rkbGfS9vW_x1_Ny06DdE5AFAAY.mft (raw, json)
Hash identifier: TvmPvksItImJPvGB2e3v0tvCkQXndszoy8nRpoLxuAk=
Subject key identifier: D0:21:E7:DB:0A:7B:4D:FC:9A:0B:B9:CA:F5:5D:F8:11:E7:90:48:0A
Authority key identifier: E6:B9:1B:19:F4:BD:BD:6F:F1:D7:F3:72:D3:A0:DD:13:90:05:00:06
Certificate issuer: /CN=e6b91b19f4bdbd6ff1d7f372d3a0dd1390050006
Certificate serial: 019D3789430A21CCDB319697E0BC2F2F0DF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5rkbGfS9vW_x1_Ny06DdE5AFAAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/931545-cf7b-4d58-bed7-04b528fae03a/1/5rkbGfS9vW_x1_Ny06DdE5AFAAY.mft
Manifest number: 0F6E
Signing time: Sun 29 Mar 2026 03:00:35 +0000
Manifest this update: Sun 29 Mar 2026 03:00:35 +0000
Manifest next update: Mon 30 Mar 2026 03:00:35 +0000
Files and hashes: 1: 5rkbGfS9vW_x1_Ny06DdE5AFAAY.crl (hash: FqefWMufE0tHXn7//7xCIiET6ZzTHYPcmgpG0XZIzRw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/931545-cf7b-4d58-bed7-04b528fae03a/1/5rkbGfS9vW_x1_Ny06DdE5AFAAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/931545-cf7b-4d58-bed7-04b528fae03a/1/5rkbGfS9vW_x1_Ny06DdE5AFAAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/5rkbGfS9vW_x1_Ny06DdE5AFAAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:43:0a:21:cc:db:31:96:97:e0:bc:2f:2f:0d:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6b91b19f4bdbd6ff1d7f372d3a0dd1390050006
Validity
Not Before: Mar 29 03:00:35 2026 GMT
Not After : Mar 30 03:00:35 2026 GMT
Subject: CN=d021e7db0a7b4dfc9a0bb9caf55df811e790480a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:67:08:d6:3c:f5:76:30:3e:ae:65:98:e2:2b:
c3:de:4e:7d:82:4d:d5:0d:e2:9c:f8:b2:f2:7d:92:
d7:56:2d:93:36:7e:c0:fd:ac:4c:24:1f:e4:27:2a:
b4:3e:6a:a7:2a:bd:17:b9:0a:7f:73:50:70:98:a1:
ed:06:04:bb:60:48:37:50:71:9d:f1:d0:65:df:b3:
cd:9a:e3:38:08:87:03:e5:ae:f3:18:bc:24:51:91:
38:a4:e4:38:01:5a:b9:8f:0b:c3:d0:fc:5a:e3:dc:
26:f6:5b:24:51:66:eb:9a:0b:b4:71:14:62:cf:1c:
9e:33:48:7f:9e:51:e2:b8:ae:ad:1c:16:cc:95:0d:
1e:c0:37:e1:99:3b:a7:e4:72:13:57:3b:78:44:e5:
3d:f9:ad:12:2d:5c:5c:20:71:e2:6b:00:8e:e4:72:
da:23:23:1e:f2:62:8b:8a:46:2f:36:b9:39:ef:c8:
2b:92:49:9d:0a:25:f0:3f:3f:8a:37:bd:c3:3b:01:
e3:59:f6:2b:c6:eb:b7:f8:3a:9b:c4:9a:1c:d5:6c:
9b:ba:1d:c9:ad:3c:c2:06:11:0f:5e:7c:40:c4:a1:
90:56:6d:3d:06:d2:23:5c:23:8a:3c:1f:75:0c:68:
09:18:28:44:30:a7:66:96:d1:26:9d:81:fa:61:db:
14:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:21:E7:DB:0A:7B:4D:FC:9A:0B:B9:CA:F5:5D:F8:11:E7:90:48:0A
X509v3 Authority Key Identifier:
keyid:E6:B9:1B:19:F4:BD:BD:6F:F1:D7:F3:72:D3:A0:DD:13:90:05:00:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5rkbGfS9vW_x1_Ny06DdE5AFAAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/931545-cf7b-4d58-bed7-04b528fae03a/1/5rkbGfS9vW_x1_Ny06DdE5AFAAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/931545-cf7b-4d58-bed7-04b528fae03a/1/5rkbGfS9vW_x1_Ny06DdE5AFAAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:95:ed:89:74:d8:7b:49:22:df:30:df:ca:c0:66:1a:66:77:
8c:a4:ef:bc:fb:9d:c6:65:7a:3b:af:99:d5:2f:fa:21:ac:8d:
03:6e:d2:7d:0e:02:9f:db:00:41:1e:e9:6e:a9:33:17:a2:96:
54:db:82:00:73:44:1d:44:28:46:11:39:85:21:62:4a:1c:d3:
08:bc:47:01:fc:7e:f8:11:ce:49:a8:59:dd:1d:50:8e:e6:e9:
f9:f4:6f:89:b9:80:d1:7b:91:ec:57:0d:83:e4:13:93:5f:ca:
29:66:29:32:c2:9e:7b:3c:e0:11:70:8d:ee:a3:d0:39:15:db:
bb:3d:c2:1a:44:a5:51:97:e5:2c:03:b8:61:7f:53:1b:e6:0a:
41:d4:1f:28:dc:7a:8a:f1:72:eb:d7:9b:aa:2f:8b:6d:ae:8b:
19:5d:25:d7:76:fb:57:8f:af:b5:56:75:b2:d5:d9:69:e1:65:
c5:99:7f:e2:31:f5:03:ac:ab:6f:9c:c9:6b:11:6f:e3:24:ac:
05:5a:6b:99:dc:bf:a1:6a:6b:61:82:58:27:28:65:1f:90:93:
89:b9:f6:e0:be:86:bc:47:78:5f:a9:ea:9b:1e:2f:27:ce:47:
e7:81:64:b2:be:8b:25:fd:7b:99:83:ad:f2:1c:e3:51:76:bf:
d1:22:55:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:30 2026 by rpki-client