Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/72e632-362a-442a-99fc-dbdda4757155/1/s5LSHrz27URUxP9GgyS97dSbqhM.mft
File: s5LSHrz27URUxP9GgyS97dSbqhM.mft (raw, json)
Hash identifier: OrEgfya/Cxhq2lr4Z1ShpFybuZWvYMqA1/Z4wmvsOMo=
Subject key identifier: C5:EC:F2:CE:55:2C:44:B3:1A:90:DB:52:58:EE:44:89:E7:E0:E3:92
Authority key identifier: B3:92:D2:1E:BC:F6:ED:44:54:C4:FF:46:83:24:BD:ED:D4:9B:AA:13
Certificate issuer: /CN=b392d21ebcf6ed4454c4ff468324bdedd49baa13
Certificate serial: 019D382E30B0A2067A90960C09EB86A101A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s5LSHrz27URUxP9GgyS97dSbqhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/72e632-362a-442a-99fc-dbdda4757155/1/s5LSHrz27URUxP9GgyS97dSbqhM.mft
Manifest number: B0
Signing time: Sun 29 Mar 2026 06:00:44 +0000
Manifest this update: Sun 29 Mar 2026 06:00:44 +0000
Manifest next update: Mon 30 Mar 2026 06:00:44 +0000
Files and hashes: 1: s5LSHrz27URUxP9GgyS97dSbqhM.crl (hash: 0y3CaO26MqkSv7hC1yTlSLNNGQ5DG7nHdunz2tMEZ28=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/72e632-362a-442a-99fc-dbdda4757155/1/s5LSHrz27URUxP9GgyS97dSbqhM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/72e632-362a-442a-99fc-dbdda4757155/1/s5LSHrz27URUxP9GgyS97dSbqhM.mft
rsync://rpki.ripe.net/repository/DEFAULT/s5LSHrz27URUxP9GgyS97dSbqhM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:30:b0:a2:06:7a:90:96:0c:09:eb:86:a1:01:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b392d21ebcf6ed4454c4ff468324bdedd49baa13
Validity
Not Before: Mar 29 06:00:44 2026 GMT
Not After : Mar 30 06:00:44 2026 GMT
Subject: CN=c5ecf2ce552c44b31a90db5258ee4489e7e0e392
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:19:24:29:30:ce:1b:f3:4d:8f:a8:2d:ef:b0:
3c:9d:65:4d:a4:4e:41:c9:c7:b1:3f:88:d9:ec:1e:
0e:27:68:54:bd:f4:06:fe:0b:4f:b6:0f:6b:26:bb:
81:64:ea:38:05:d1:c6:38:d9:cb:a9:2f:2e:bf:ec:
74:27:e4:9a:12:4f:43:50:ab:05:f6:23:a4:98:31:
41:d4:ce:00:3d:45:60:36:ab:0d:1a:2c:3d:b8:dc:
4b:3a:a4:af:5a:bb:d6:6b:bc:6d:f2:1b:00:d9:7a:
d4:f4:68:79:81:75:4a:88:48:8f:41:ed:9f:3f:61:
a6:32:12:29:41:a8:0b:69:96:5f:8f:b4:cc:e2:95:
76:1a:61:b8:be:69:a6:43:86:2c:86:2d:35:35:b8:
e4:30:40:fb:3a:52:59:7c:58:37:fa:d7:22:3c:82:
a7:0b:a9:e0:82:a3:2a:bd:61:67:8e:ce:68:67:ee:
bc:de:d5:27:90:a7:cb:8e:de:2b:0d:ee:1a:e6:f8:
75:cb:8d:58:9c:52:e2:51:5a:20:95:00:1e:a2:ca:
8f:55:c9:ac:fa:55:98:d9:8f:26:b5:39:83:e6:48:
85:cf:b9:97:ee:dd:33:f0:cf:05:61:25:a8:8f:30:
f9:ee:31:8c:a4:a3:96:36:7e:e7:53:18:3a:0a:4c:
d1:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:EC:F2:CE:55:2C:44:B3:1A:90:DB:52:58:EE:44:89:E7:E0:E3:92
X509v3 Authority Key Identifier:
keyid:B3:92:D2:1E:BC:F6:ED:44:54:C4:FF:46:83:24:BD:ED:D4:9B:AA:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s5LSHrz27URUxP9GgyS97dSbqhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/72e632-362a-442a-99fc-dbdda4757155/1/s5LSHrz27URUxP9GgyS97dSbqhM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/72e632-362a-442a-99fc-dbdda4757155/1/s5LSHrz27URUxP9GgyS97dSbqhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:74:22:61:bf:b4:23:e2:84:cc:a2:32:6e:41:11:58:bf:19:
a1:4f:a7:69:7c:70:ae:6c:0c:bc:7e:ff:5e:b7:a8:79:9f:37:
51:69:e9:fb:dd:cd:fa:a3:a0:12:46:41:1c:be:b2:2e:4e:9c:
3d:97:2e:16:6d:3a:53:ca:c5:dd:03:3b:27:7d:46:97:5d:a7:
b2:3d:b2:f6:75:97:46:10:00:f4:c8:e2:80:55:18:09:4d:8d:
9e:a9:13:c6:ec:7c:bc:95:e6:93:f1:81:8f:4a:08:71:50:49:
86:30:7e:9a:dc:38:d6:6a:c9:4e:e4:32:9a:6f:f8:7c:b2:b8:
07:b2:3a:ab:b5:f9:b8:37:a4:de:76:7e:1e:11:63:8d:d1:e1:
15:14:9c:1b:23:48:3e:96:e3:1d:3b:22:be:96:2e:f0:4a:3b:
37:06:03:38:56:37:c0:41:af:c9:41:c7:a8:59:fc:35:00:f5:
d0:55:d1:87:67:72:44:30:97:97:63:3e:7a:1b:b6:94:46:ff:
b7:ed:4b:c3:5e:21:40:03:56:3d:4e:13:7e:5c:cf:7c:4c:d7:
72:27:89:bb:e3:2d:ec:a8:0f:63:67:cc:63:39:70:3f:0b:a0:
a8:aa:5e:03:36:4a:84:40:e6:f3:0c:2b:ea:ec:c3:41:27:cc:
6b:ff:f9:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:45 2026 by rpki-client