Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/11aa8c-9591-4cc8-a76a-698e6a8e6708/1/5iL2U5eBxQvEl8egtvXVBe-IudY.mft
File: 5iL2U5eBxQvEl8egtvXVBe-IudY.mft (raw, json)
Hash identifier: ntkVhIgutWxKvBHomOlKMageFHwWuXH/rn+yyDetJtY=
Subject key identifier: EC:CB:20:58:A5:7F:DB:55:2F:DA:74:F8:35:A7:BE:20:18:73:DF:D2
Authority key identifier: E6:22:F6:53:97:81:C5:0B:C4:97:C7:A0:B6:F5:D5:05:EF:88:B9:D6
Certificate issuer: /CN=e622f6539781c50bc497c7a0b6f5d505ef88b9d6
Certificate serial: 019D390984B1F9ED645D63AF9D2BC4635F41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5iL2U5eBxQvEl8egtvXVBe-IudY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/11aa8c-9591-4cc8-a76a-698e6a8e6708/1/5iL2U5eBxQvEl8egtvXVBe-IudY.mft
Manifest number: 13E1
Signing time: Sun 29 Mar 2026 10:00:18 +0000
Manifest this update: Sun 29 Mar 2026 10:00:18 +0000
Manifest next update: Mon 30 Mar 2026 10:00:18 +0000
Files and hashes: 1: 5iL2U5eBxQvEl8egtvXVBe-IudY.crl (hash: 3PLLK1CMo6G30h9mJ1HgdA8uLTzEk+bKoHz7jhxe4g8=)
2: xyBwWE1V7pzMi_BB3s_8J8GEyes.roa (hash: taqunFOi7PSx5Yj4Rqnf0/xGpAdLHU4niJLVDbS+7yI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/11aa8c-9591-4cc8-a76a-698e6a8e6708/1/5iL2U5eBxQvEl8egtvXVBe-IudY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/11aa8c-9591-4cc8-a76a-698e6a8e6708/1/5iL2U5eBxQvEl8egtvXVBe-IudY.mft
rsync://rpki.ripe.net/repository/DEFAULT/5iL2U5eBxQvEl8egtvXVBe-IudY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:84:b1:f9:ed:64:5d:63:af:9d:2b:c4:63:5f:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e622f6539781c50bc497c7a0b6f5d505ef88b9d6
Validity
Not Before: Mar 29 10:00:18 2026 GMT
Not After : Mar 30 10:00:18 2026 GMT
Subject: CN=eccb2058a57fdb552fda74f835a7be201873dfd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:19:b7:ea:09:bc:e8:51:b9:c6:5b:07:73:f4:
91:8c:04:36:40:5a:5f:1d:d9:85:de:a4:cc:39:a0:
53:bd:bb:33:b8:f5:eb:50:42:cd:e4:33:12:25:cf:
cc:99:5c:2d:92:a0:c2:5f:2b:2e:28:5d:40:be:e5:
d4:66:9e:0a:61:52:c4:ee:50:2f:9b:e5:e7:07:6e:
40:4b:c4:2f:95:b8:76:67:2a:cc:25:66:33:85:31:
21:a6:b1:f5:61:4b:30:1b:36:ed:67:e1:95:a9:9d:
8a:fb:b9:48:5c:62:ff:18:76:75:16:93:32:19:cd:
8b:c3:87:e0:d0:c3:37:c0:15:06:51:d4:61:3c:a8:
df:41:b0:ce:0a:0c:86:8b:9f:76:b8:50:a9:1a:25:
9a:79:60:9c:80:7d:d9:32:50:26:fb:d8:de:59:d5:
36:e2:b8:57:ed:5a:47:c5:b8:58:f4:c2:d1:c1:c5:
14:92:45:9e:1d:fc:5d:04:01:4d:00:ce:e6:52:d2:
2e:af:6b:c9:bc:4a:d3:f8:85:41:f7:da:4f:31:e9:
b3:43:90:7a:eb:66:e4:b6:bc:01:ab:a6:6d:c7:9e:
43:b5:8e:ed:df:74:da:9b:aa:70:32:9b:ae:ab:6b:
be:de:e2:6b:8d:dd:08:db:1d:8b:3f:30:bd:78:4c:
21:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:CB:20:58:A5:7F:DB:55:2F:DA:74:F8:35:A7:BE:20:18:73:DF:D2
X509v3 Authority Key Identifier:
keyid:E6:22:F6:53:97:81:C5:0B:C4:97:C7:A0:B6:F5:D5:05:EF:88:B9:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5iL2U5eBxQvEl8egtvXVBe-IudY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/11aa8c-9591-4cc8-a76a-698e6a8e6708/1/5iL2U5eBxQvEl8egtvXVBe-IudY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/11aa8c-9591-4cc8-a76a-698e6a8e6708/1/5iL2U5eBxQvEl8egtvXVBe-IudY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
da:c9:49:e6:18:f5:19:8b:39:ec:18:3e:dc:a7:bf:6b:81:65:
8a:95:fe:82:df:24:e3:8c:fc:42:e4:0c:02:2a:ea:5d:bf:c6:
d6:9f:61:2c:b6:22:08:74:52:35:67:4f:41:bb:4d:84:40:60:
a1:68:54:c7:29:df:96:92:e2:10:6f:86:7e:6b:67:60:73:bc:
ac:ec:8b:67:e9:7d:28:27:a1:2b:56:4d:92:92:d7:9a:c8:28:
8d:45:36:d1:de:89:af:eb:50:83:dc:50:51:46:fc:39:b8:d8:
5d:5e:33:3d:75:34:ec:18:ca:ef:2a:4c:aa:ea:95:38:d6:a4:
89:bb:13:65:5a:fe:f4:d9:b7:06:be:d2:40:f2:29:3f:60:a0:
6f:bd:80:2a:b6:8c:d0:87:0e:ad:9a:a0:7f:39:11:dc:16:2d:
85:8f:02:db:c2:19:44:2b:d0:b5:68:3d:ca:2b:03:bc:d6:ef:
15:29:7e:16:97:e3:52:d8:29:86:07:2a:a9:79:4c:e7:b4:1f:
e9:c2:11:ad:d5:3a:35:f7:18:7a:be:a9:90:75:06:29:41:38:
b4:c5:e9:6b:6c:96:8d:46:d0:de:d3:bc:ee:2f:12:e2:11:fd:
09:95:3c:44:7c:68:fc:2f:14:a7:88:bb:48:04:7c:02:26:72:
8b:fe:5c:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:24:37 2026 by rpki-client