Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/ede36d-bf5b-4435-b3e5-c4508b555071/1/5MdIJDSkV7BIt9YmHd2AlcXAkCA.mft
File: 5MdIJDSkV7BIt9YmHd2AlcXAkCA.mft (raw, json)
Hash identifier: WoulaE/rbP4Sy2Scdj3Hip5hiVjtlimf2ofSjctho68=
Subject key identifier: 11:95:4C:5C:6E:20:D3:29:8B:A7:83:6C:F1:D8:99:E0:B6:8E:36:71
Authority key identifier: E4:C7:48:24:34:A4:57:B0:48:B7:D6:26:1D:DD:80:95:C5:C0:90:20
Certificate issuer: /CN=e4c7482434a457b048b7d6261ddd8095c5c09020
Certificate serial: 019D38658A89205ED75985D48BF83E38A053
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5MdIJDSkV7BIt9YmHd2AlcXAkCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/ede36d-bf5b-4435-b3e5-c4508b555071/1/5MdIJDSkV7BIt9YmHd2AlcXAkCA.mft
Manifest number: 0AC1
Signing time: Sun 29 Mar 2026 07:01:11 +0000
Manifest this update: Sun 29 Mar 2026 07:01:11 +0000
Manifest next update: Mon 30 Mar 2026 07:01:11 +0000
Files and hashes: 1: 5MdIJDSkV7BIt9YmHd2AlcXAkCA.crl (hash: GL2rgBxG41lQlGdfjrDx2ehiJMV5GVaTNSRSrlHrJ2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/ede36d-bf5b-4435-b3e5-c4508b555071/1/5MdIJDSkV7BIt9YmHd2AlcXAkCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/ede36d-bf5b-4435-b3e5-c4508b555071/1/5MdIJDSkV7BIt9YmHd2AlcXAkCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5MdIJDSkV7BIt9YmHd2AlcXAkCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:8a:89:20:5e:d7:59:85:d4:8b:f8:3e:38:a0:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4c7482434a457b048b7d6261ddd8095c5c09020
Validity
Not Before: Mar 29 07:01:11 2026 GMT
Not After : Mar 30 07:01:11 2026 GMT
Subject: CN=11954c5c6e20d3298ba7836cf1d899e0b68e3671
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:86:d9:08:53:12:dc:6e:77:94:c6:27:fb:5d:
fd:7b:30:f8:af:ef:25:72:e1:1d:f6:2b:cf:10:4b:
13:74:1c:be:89:2b:98:a2:81:9d:15:2f:1c:4a:8a:
4d:64:95:3f:15:62:72:04:44:c7:2a:71:2e:00:ff:
27:e5:c4:0f:87:90:a5:44:38:f1:db:3e:ec:8e:64:
fb:72:01:28:4c:a2:32:9c:ed:65:a7:bf:f0:c6:c2:
ab:3e:55:fd:05:01:9b:d4:77:ef:4a:37:4a:a8:1b:
1a:f2:32:7a:bd:b6:fe:48:56:45:6c:ae:59:4f:88:
22:75:06:e2:76:a1:01:a5:26:12:13:40:f6:ae:b0:
9e:c7:45:e5:79:d1:a0:7d:8e:d7:13:af:d0:46:20:
a2:68:f9:86:10:27:a6:16:26:a6:2f:32:54:d5:46:
91:78:8f:70:c7:84:e4:74:ab:4e:5d:f3:12:c3:33:
7d:f3:e8:d6:0f:11:25:46:e8:88:ac:98:a3:c4:d4:
81:bd:cb:c4:29:aa:7c:10:4d:09:78:4d:a7:80:6f:
68:42:1d:0b:27:fc:c8:7a:23:b5:7b:ce:8d:e3:06:
fe:26:c5:95:83:17:43:17:c0:3a:e0:66:da:e5:74:
be:32:c3:b6:0c:89:68:46:23:4c:ab:06:11:24:8c:
6a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:95:4C:5C:6E:20:D3:29:8B:A7:83:6C:F1:D8:99:E0:B6:8E:36:71
X509v3 Authority Key Identifier:
keyid:E4:C7:48:24:34:A4:57:B0:48:B7:D6:26:1D:DD:80:95:C5:C0:90:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5MdIJDSkV7BIt9YmHd2AlcXAkCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ede36d-bf5b-4435-b3e5-c4508b555071/1/5MdIJDSkV7BIt9YmHd2AlcXAkCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ede36d-bf5b-4435-b3e5-c4508b555071/1/5MdIJDSkV7BIt9YmHd2AlcXAkCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:83:fa:72:cb:a8:31:dd:28:e7:2a:e5:95:48:37:50:e1:63:
b7:d1:dd:82:be:c1:c0:40:f9:6b:71:82:c0:70:8a:e6:eb:a5:
7e:ad:86:e0:71:a9:fd:0b:3f:42:68:1c:79:e8:bc:f4:5f:c0:
d8:8c:4b:25:42:29:ca:fe:bf:90:11:9c:38:de:98:58:8f:f6:
42:39:67:5f:39:2c:e9:ca:f6:56:0f:0d:55:de:56:1a:2b:b0:
02:42:b6:8d:70:28:93:53:94:a0:a1:d5:1b:29:23:29:2b:bc:
7e:51:49:83:90:7e:b4:bb:15:58:35:73:48:e4:4e:db:cf:6f:
6f:f5:8e:a5:b3:ed:cd:10:3c:6d:22:e0:5c:f3:79:be:04:48:
47:04:be:aa:73:8c:19:ed:9f:ac:b6:08:f4:f9:e0:49:84:24:
70:d3:2f:7d:3e:6f:ae:c2:bf:3c:e9:b0:5a:82:de:64:24:85:
c6:72:bd:b4:75:99:f5:6f:00:9e:46:b8:c3:ea:98:07:8a:ef:
b4:11:de:0f:ef:e3:bb:e2:40:ed:f6:e9:2d:00:bd:23:5c:8b:
44:9a:31:59:48:00:c9:9c:a0:65:11:8a:ab:2c:01:75:b4:4c:
37:22:5b:23:f2:79:26:61:bb:40:dc:f5:7d:d5:6a:a7:cc:0c:
f9:d3:e3:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:31 2026 by rpki-client