Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/626525-6ac4-4ad3-b8d2-9c3000245676/1/L5INmRKzpyi5SBgYjvPj5X-NP5w.mft
File: L5INmRKzpyi5SBgYjvPj5X-NP5w.mft (raw, json)
Hash identifier: xbfoiiqby4B1VKhP6uW3S3fjK68z78aahOn+GRNyAvk=
Subject key identifier: 5A:76:7C:AC:72:E1:93:BE:5C:20:58:C5:02:1D:28:99:09:E3:7B:E8
Authority key identifier: 2F:92:0D:99:12:B3:A7:28:B9:48:18:18:8E:F3:E3:E5:7F:8D:3F:9C
Certificate issuer: /CN=2f920d9912b3a728b94818188ef3e3e57f8d3f9c
Certificate serial: 019D389C1A84AF1C1D7AEBB5290986D296EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L5INmRKzpyi5SBgYjvPj5X-NP5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/626525-6ac4-4ad3-b8d2-9c3000245676/1/L5INmRKzpyi5SBgYjvPj5X-NP5w.mft
Manifest number: 15CB
Signing time: Sun 29 Mar 2026 08:00:47 +0000
Manifest this update: Sun 29 Mar 2026 08:00:47 +0000
Manifest next update: Mon 30 Mar 2026 08:00:47 +0000
Files and hashes: 1: L5INmRKzpyi5SBgYjvPj5X-NP5w.crl (hash: PGj9CHCbTCBaK37bRN5mSjm/6RJF9HE8qUtH3c/q3eg=)
2: aYkOORdOjghP0b0H8Khztmylcj0.roa (hash: cftGer896cxsIKx2zfTmvwrI4NNvGaw6Mpm7/zfzAB4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/626525-6ac4-4ad3-b8d2-9c3000245676/1/L5INmRKzpyi5SBgYjvPj5X-NP5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/626525-6ac4-4ad3-b8d2-9c3000245676/1/L5INmRKzpyi5SBgYjvPj5X-NP5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/L5INmRKzpyi5SBgYjvPj5X-NP5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:1a:84:af:1c:1d:7a:eb:b5:29:09:86:d2:96:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f920d9912b3a728b94818188ef3e3e57f8d3f9c
Validity
Not Before: Mar 29 08:00:47 2026 GMT
Not After : Mar 30 08:00:47 2026 GMT
Subject: CN=5a767cac72e193be5c2058c5021d289909e37be8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:fc:05:7f:83:4c:0e:16:d6:06:83:16:8e:2a:
4a:f7:e1:c8:6f:b2:f0:cb:6d:90:db:80:e5:60:b2:
6a:bb:2f:9a:3d:67:7f:9d:57:a6:71:aa:f8:ef:2f:
55:4e:70:59:53:67:6f:3e:25:91:c7:8e:8b:04:a3:
6a:fd:d1:5d:46:28:24:6c:c9:35:73:22:26:9c:2d:
f1:9f:a7:ae:17:71:e9:22:eb:41:c4:75:4d:7b:b1:
1d:d8:2c:ad:8e:4c:f1:ea:b5:69:a3:8a:9b:fb:69:
5e:75:aa:db:a2:1c:56:6a:d5:c0:b8:25:b4:c7:0e:
a0:e2:05:3b:f6:88:dd:28:b3:f1:2e:e6:7c:f1:fd:
31:3f:44:37:c5:83:15:4a:eb:00:d6:7b:7a:9f:2c:
73:15:66:67:8e:4a:e1:04:d7:6f:c2:6e:00:5f:61:
b5:6a:eb:c3:33:57:ee:24:13:5e:59:68:de:82:ec:
dc:04:6a:01:8a:26:35:95:ea:85:75:61:34:da:ab:
50:e2:b5:43:1c:f5:9b:45:0f:c1:18:45:f1:e0:1d:
c0:30:2a:f6:db:9e:7b:26:d7:7b:ef:6b:d2:49:99:
4f:ea:a1:14:14:4d:01:fa:c6:26:8c:90:81:dd:17:
2f:86:2e:f2:86:bf:2a:1c:7c:1b:27:ff:31:a4:02:
41:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:76:7C:AC:72:E1:93:BE:5C:20:58:C5:02:1D:28:99:09:E3:7B:E8
X509v3 Authority Key Identifier:
keyid:2F:92:0D:99:12:B3:A7:28:B9:48:18:18:8E:F3:E3:E5:7F:8D:3F:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5INmRKzpyi5SBgYjvPj5X-NP5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/626525-6ac4-4ad3-b8d2-9c3000245676/1/L5INmRKzpyi5SBgYjvPj5X-NP5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/626525-6ac4-4ad3-b8d2-9c3000245676/1/L5INmRKzpyi5SBgYjvPj5X-NP5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:66:75:fa:f8:f0:5c:3e:d6:10:1e:a8:25:0d:d3:22:a5:78:
93:aa:40:9b:e8:a8:fd:39:6c:6c:c5:1c:66:1b:f8:25:f7:7f:
bc:78:0c:4b:3f:52:be:93:b9:57:75:80:20:a6:6b:dd:46:1a:
f4:3f:3b:d5:b9:cb:4b:c3:cd:d5:18:88:a9:c8:4b:73:76:cc:
8e:59:42:de:54:f2:66:3a:c5:0b:c9:32:5b:65:be:84:8f:ef:
0e:71:44:02:d5:ff:87:36:dd:a7:8d:bb:bc:30:6d:5a:6d:47:
65:b0:49:f3:2f:43:1e:c5:e9:5f:63:22:8a:f3:91:9b:a6:5d:
bb:2f:70:91:76:f1:10:d7:3b:e6:f3:f7:6b:ac:2e:48:27:5d:
81:08:86:4e:91:23:cf:f6:e6:11:16:b5:71:2e:8f:15:a9:13:
2b:d7:87:47:26:f7:9c:2e:3e:09:56:4a:82:3a:a0:12:a6:12:
a1:1b:d9:db:0d:06:90:6b:d8:08:02:7f:31:00:f2:dc:4a:e2:
bf:43:cf:6c:30:b4:80:95:25:65:16:84:9a:21:ab:b5:ea:47:
47:77:ef:7f:26:11:a1:23:94:d5:e5:a0:91:07:4f:ba:14:54:
c4:40:a0:fa:36:61:c4:8b:49:e2:dd:fe:6c:45:d5:43:26:1c:
e3:c6:ba:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:31 2026 by rpki-client