Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/e39f5f-2568-4222-b5ea-2a157f7cf3a3/1/5u3M-9t7nhk-y-gVL7WilruJ1-k.mft
File: 5u3M-9t7nhk-y-gVL7WilruJ1-k.mft (raw, json)
Hash identifier: F6M9zYyD3ILYVOMsv0wuRk69v+Z5gU3fAqSAreKMsnE=
Subject key identifier: 3B:D3:1A:EB:E7:97:D1:00:88:77:99:66:7A:80:0A:EE:DA:4C:38:43
Authority key identifier: E6:ED:CC:FB:DB:7B:9E:19:3E:CB:E8:15:2F:B5:A2:96:BB:89:D7:E9
Certificate issuer: /CN=e6edccfbdb7b9e193ecbe8152fb5a296bb89d7e9
Certificate serial: 019D36E50F59244A3F4A34A4D4F9E44AA7F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5u3M-9t7nhk-y-gVL7WilruJ1-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/e39f5f-2568-4222-b5ea-2a157f7cf3a3/1/5u3M-9t7nhk-y-gVL7WilruJ1-k.mft
Manifest number: 61
Signing time: Sun 29 Mar 2026 00:01:14 +0000
Manifest this update: Sun 29 Mar 2026 00:01:14 +0000
Manifest next update: Mon 30 Mar 2026 00:01:14 +0000
Files and hashes: 1: 5u3M-9t7nhk-y-gVL7WilruJ1-k.crl (hash: U7J4hwuWtOV3Xm70OwvLsbxCm+0ww8aL+C1hahj6eZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/e39f5f-2568-4222-b5ea-2a157f7cf3a3/1/5u3M-9t7nhk-y-gVL7WilruJ1-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/e39f5f-2568-4222-b5ea-2a157f7cf3a3/1/5u3M-9t7nhk-y-gVL7WilruJ1-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/5u3M-9t7nhk-y-gVL7WilruJ1-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 00:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:36:e5:0f:59:24:4a:3f:4a:34:a4:d4:f9:e4:4a:a7:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6edccfbdb7b9e193ecbe8152fb5a296bb89d7e9
Validity
Not Before: Mar 29 00:01:14 2026 GMT
Not After : Mar 30 00:01:14 2026 GMT
Subject: CN=3bd31aebe797d100887799667a800aeeda4c3843
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e9:e5:6b:97:da:c5:35:5f:19:ea:f0:94:94:
7a:98:bd:bd:37:a0:c2:30:9c:6c:f5:0a:fe:37:dc:
a2:e1:70:43:08:e3:a6:fe:71:0a:d0:4d:fb:28:1d:
e1:ba:dc:ab:c2:2d:ba:8c:d0:9c:d1:8a:c0:65:d8:
14:20:9e:fa:60:76:24:eb:a9:a0:55:1f:5b:7e:b3:
bf:50:6d:64:40:fd:d7:52:fc:70:91:dc:3b:b2:f2:
ae:e2:05:35:3d:47:f7:9b:bb:08:4d:d6:97:cc:95:
0c:58:15:e5:28:2c:1f:fa:1f:75:4f:5e:78:cf:89:
fe:e9:26:95:7d:cd:d7:e0:ff:d7:13:07:67:fc:0c:
22:57:ad:0d:b3:f4:70:c9:f9:f4:8f:ae:8b:05:0b:
c0:37:a0:dd:55:cd:6e:7a:6d:75:62:72:74:17:3b:
e0:f3:8c:00:e7:11:50:e2:70:07:39:14:17:cd:23:
bf:b2:22:96:b7:d2:dc:b0:60:ff:f8:12:12:4f:d3:
a6:bf:50:3c:e7:16:a1:f1:f1:e7:80:e5:1c:7b:1d:
8e:8d:ae:c3:22:c6:22:86:78:ee:39:ee:72:92:6f:
ae:a7:fb:64:29:f6:4f:43:35:4a:68:af:b1:70:33:
83:49:93:17:af:5a:dd:89:aa:38:3b:74:58:4b:e9:
73:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:D3:1A:EB:E7:97:D1:00:88:77:99:66:7A:80:0A:EE:DA:4C:38:43
X509v3 Authority Key Identifier:
keyid:E6:ED:CC:FB:DB:7B:9E:19:3E:CB:E8:15:2F:B5:A2:96:BB:89:D7:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5u3M-9t7nhk-y-gVL7WilruJ1-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e39f5f-2568-4222-b5ea-2a157f7cf3a3/1/5u3M-9t7nhk-y-gVL7WilruJ1-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e39f5f-2568-4222-b5ea-2a157f7cf3a3/1/5u3M-9t7nhk-y-gVL7WilruJ1-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:9a:24:6f:cb:34:88:09:63:b2:25:ba:b7:6b:7e:22:0e:03:
eb:a0:0a:0f:00:a4:a6:6f:41:e1:d2:f4:48:cc:67:5a:60:17:
16:7e:e6:33:91:99:54:18:ff:2a:d8:dd:58:44:c5:f9:84:ea:
dc:68:2f:d5:28:a0:1a:97:2d:ae:92:0e:4c:3b:5f:3f:4d:ea:
ba:3e:05:6d:8b:a6:3e:57:fc:12:51:0a:d7:6c:40:cf:b0:56:
3a:bd:a1:ec:52:27:e2:b2:0f:20:42:c6:0a:ec:b7:a8:e4:cb:
cc:17:7f:b1:a3:a9:53:87:9c:ea:eb:66:fc:32:f0:01:4b:2a:
c8:42:4a:e3:6d:b9:a0:6f:68:1e:c7:00:e5:28:21:52:c0:d8:
eb:cd:b1:6b:d1:c4:6d:0e:be:82:7d:4c:f8:f1:5b:60:35:0d:
61:a9:a4:fe:73:95:be:5c:ea:76:7f:3c:fc:61:c6:43:2a:6b:
d3:9a:86:0c:fc:73:86:5c:c9:13:ce:d1:59:09:b5:79:3b:0b:
bc:38:6f:fe:12:02:17:08:86:4e:48:76:75:3d:6e:4d:23:a1:
38:1c:15:8e:61:0c:2b:1f:51:69:a7:e9:46:4b:0f:fb:92:e2:
0a:24:8a:1f:02:34:5d:51:4e:ce:a8:8c:41:78:42:97:bc:ff:
f2:c6:22:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:07:20 2026 by rpki-client