Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/226b69-4a01-4e33-84a8-02b2acee3bdc/1/s5DqJ6ZUsoo4kanb-vy53i3DteQ.mft
File: s5DqJ6ZUsoo4kanb-vy53i3DteQ.mft (raw, json)
Hash identifier: FuvpkTHglzGw0aU1i2NSUa8mDOaFrDgjXanQ7CB4ljs=
Subject key identifier: 77:A6:14:8D:41:1F:3D:7C:C4:A3:EF:3C:9C:CE:40:E2:CF:2A:EA:C9
Authority key identifier: B3:90:EA:27:A6:54:B2:8A:38:91:A9:DB:FA:FC:B9:DE:2D:C3:B5:E4
Certificate issuer: /CN=b390ea27a654b28a3891a9dbfafcb9de2dc3b5e4
Certificate serial: 019D38658588C438A0402843FFB169107D1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s5DqJ6ZUsoo4kanb-vy53i3DteQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/226b69-4a01-4e33-84a8-02b2acee3bdc/1/s5DqJ6ZUsoo4kanb-vy53i3DteQ.mft
Manifest number: 01B6
Signing time: Sun 29 Mar 2026 07:01:10 +0000
Manifest this update: Sun 29 Mar 2026 07:01:10 +0000
Manifest next update: Mon 30 Mar 2026 07:01:10 +0000
Files and hashes: 1: s5DqJ6ZUsoo4kanb-vy53i3DteQ.crl (hash: tfN4BLXugloErl/c4VURISiMKMVocTzIq4pIwN2wzIk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/226b69-4a01-4e33-84a8-02b2acee3bdc/1/s5DqJ6ZUsoo4kanb-vy53i3DteQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/226b69-4a01-4e33-84a8-02b2acee3bdc/1/s5DqJ6ZUsoo4kanb-vy53i3DteQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/s5DqJ6ZUsoo4kanb-vy53i3DteQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:85:88:c4:38:a0:40:28:43:ff:b1:69:10:7d:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b390ea27a654b28a3891a9dbfafcb9de2dc3b5e4
Validity
Not Before: Mar 29 07:01:10 2026 GMT
Not After : Mar 30 07:01:10 2026 GMT
Subject: CN=77a6148d411f3d7cc4a3ef3c9cce40e2cf2aeac9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e7:85:8c:ad:76:4f:2a:86:53:66:9b:20:c0:
f7:77:30:6c:37:d0:73:40:50:b8:7f:34:51:ce:7e:
fa:13:82:26:14:e3:64:00:de:82:17:36:a5:cf:c9:
08:54:d0:7d:b3:34:45:a7:03:79:bd:a8:6c:b5:8e:
33:f5:7a:df:80:ec:71:e0:65:92:95:95:a8:0a:c4:
86:d1:64:ab:ed:cb:0f:b7:59:c2:46:6e:a0:e9:7e:
d5:be:c1:f8:44:6f:b2:d3:50:45:93:ab:44:d3:a0:
64:82:75:a0:62:02:4f:25:50:ab:9e:84:c1:0c:2c:
b2:7e:0d:6d:66:bb:a2:0b:c0:05:17:f8:66:50:bd:
60:d5:a8:75:38:eb:14:38:b9:94:3d:4d:41:9f:60:
f0:92:44:6a:f3:09:74:14:34:14:b9:ea:d5:e5:24:
1e:e1:c3:8f:9d:fd:26:24:30:7f:b6:8d:cf:4e:57:
c3:8f:7f:0d:1a:22:e9:70:da:82:ef:7c:bf:d2:70:
31:e6:c1:06:f5:08:73:98:63:92:2c:5b:95:12:c7:
0e:b4:38:1e:87:45:16:45:9e:0f:75:26:45:17:30:
80:c4:d1:17:c9:79:72:3c:41:5d:13:06:12:c6:82:
5f:36:8d:fa:cb:22:e2:46:af:4d:23:d7:17:59:4a:
43:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:A6:14:8D:41:1F:3D:7C:C4:A3:EF:3C:9C:CE:40:E2:CF:2A:EA:C9
X509v3 Authority Key Identifier:
keyid:B3:90:EA:27:A6:54:B2:8A:38:91:A9:DB:FA:FC:B9:DE:2D:C3:B5:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s5DqJ6ZUsoo4kanb-vy53i3DteQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/226b69-4a01-4e33-84a8-02b2acee3bdc/1/s5DqJ6ZUsoo4kanb-vy53i3DteQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/226b69-4a01-4e33-84a8-02b2acee3bdc/1/s5DqJ6ZUsoo4kanb-vy53i3DteQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:26:62:3c:5a:7d:2e:96:08:fa:97:2d:64:28:1c:59:10:a5:
0f:91:d1:89:f3:b2:66:91:97:53:ac:67:87:e7:1d:25:bd:7d:
14:6a:03:72:0a:cf:c8:da:83:f1:f4:89:48:86:a6:9c:3e:bb:
b2:18:bc:3b:f4:45:52:45:87:bc:a8:bb:9a:cf:6b:0a:ce:0a:
f3:ad:9f:fa:da:7b:b3:3c:72:4f:b1:da:f8:eb:fa:78:f3:bb:
ae:63:64:dd:96:48:4d:1b:08:70:da:ad:33:5a:c8:78:a4:92:
ab:6f:b2:aa:5d:dc:f8:23:d2:5f:4f:6a:46:fb:1f:e2:e8:b7:
85:1c:44:09:1b:14:f3:5c:48:cd:46:8d:65:bf:42:43:e1:9c:
9c:d3:69:8a:19:f1:7f:ec:08:12:9e:ab:1c:13:3d:13:bb:71:
89:62:68:d4:3d:06:8e:ef:ed:a5:20:f9:44:56:ec:37:0a:cf:
44:51:92:d9:b1:98:6b:8f:a6:3f:8f:7c:bc:f9:42:d4:47:90:
64:94:4a:8e:6e:ad:a5:f1:2f:c3:1b:ec:6a:b9:dd:d7:ca:9b:
5d:a7:28:90:bc:e2:6e:cc:eb:06:29:4b:cf:ec:a1:ec:4c:09:
26:fb:f4:3d:b5:de:c3:69:94:74:03:5b:bd:90:4c:9e:71:09:
9f:91:67:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:31:34 2026 by rpki-client