Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/fd210d-d4c3-4831-a446-a00956afc469/1/5AP02ltCPYmfu1tWFk-wdpbYFZ0.mft
File: 5AP02ltCPYmfu1tWFk-wdpbYFZ0.mft (raw, json)
Hash identifier: vyXdJGwBYfXENDMTTe8jnHc+r3B8egnZhNq0pBH0Hy0=
Subject key identifier: 2F:5D:E7:A9:CA:C6:3B:0F:89:0A:4A:2F:5B:A6:C0:F6:E4:95:1C:41
Authority key identifier: E4:03:F4:DA:5B:42:3D:89:9F:BB:5B:56:16:4F:B0:76:96:D8:15:9D
Certificate issuer: /CN=e403f4da5b423d899fbb5b56164fb07696d8159d
Certificate serial: 019D38669061915D679CDFDFF6479A12E4F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5AP02ltCPYmfu1tWFk-wdpbYFZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/fd210d-d4c3-4831-a446-a00956afc469/1/5AP02ltCPYmfu1tWFk-wdpbYFZ0.mft
Manifest number: 0219
Signing time: Sun 29 Mar 2026 07:02:18 +0000
Manifest this update: Sun 29 Mar 2026 07:02:18 +0000
Manifest next update: Mon 30 Mar 2026 07:02:18 +0000
Files and hashes: 1: 5AP02ltCPYmfu1tWFk-wdpbYFZ0.crl (hash: ZhnQLNFGZFE3+xIqCZARsGUwycSy1qTd0IAaVo6qtiU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/fd210d-d4c3-4831-a446-a00956afc469/1/5AP02ltCPYmfu1tWFk-wdpbYFZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/fd210d-d4c3-4831-a446-a00956afc469/1/5AP02ltCPYmfu1tWFk-wdpbYFZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/5AP02ltCPYmfu1tWFk-wdpbYFZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:90:61:91:5d:67:9c:df:df:f6:47:9a:12:e4:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e403f4da5b423d899fbb5b56164fb07696d8159d
Validity
Not Before: Mar 29 07:02:18 2026 GMT
Not After : Mar 30 07:02:18 2026 GMT
Subject: CN=2f5de7a9cac63b0f890a4a2f5ba6c0f6e4951c41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c4:5a:20:5c:b3:a5:94:e2:0f:88:ad:1c:04:
f5:e1:7c:36:87:21:b0:34:8f:60:fa:17:bd:77:38:
4c:bf:71:94:52:8f:f3:eb:46:ea:5e:62:d7:84:88:
64:9d:14:f7:dc:31:00:08:ae:34:25:4f:5f:04:5d:
df:82:ac:d1:42:89:81:0c:98:25:35:cd:c4:c5:35:
bf:10:6a:21:50:f7:3c:1b:fe:01:06:de:0a:42:40:
b8:eb:e4:ca:2f:5f:80:13:02:9c:7a:4b:1a:3a:25:
cb:7c:79:da:c7:28:59:cc:58:71:47:66:cb:be:8c:
c8:3b:6f:2a:bf:8a:c2:85:a2:08:90:e8:bf:ab:e8:
6f:0e:ee:bb:fc:01:ed:9f:a2:6a:df:33:93:15:7c:
e5:01:56:62:41:5e:5a:68:5b:c8:c0:9d:ad:19:b1:
79:f8:e3:1e:a4:d6:74:04:ef:47:5c:cf:c3:29:b1:
b6:65:bd:05:7e:1c:1e:07:e2:9e:f6:c4:75:08:b8:
0f:55:d5:4a:f5:4b:76:72:08:5f:ca:42:ec:0b:27:
86:95:2a:65:17:f3:ef:1d:a6:e8:42:fc:65:27:ea:
7a:bc:3c:e2:0e:6d:57:90:17:6a:37:6b:0e:a4:a0:
9e:8a:03:4b:f6:17:93:53:be:eb:89:8c:ec:6e:6a:
35:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:5D:E7:A9:CA:C6:3B:0F:89:0A:4A:2F:5B:A6:C0:F6:E4:95:1C:41
X509v3 Authority Key Identifier:
keyid:E4:03:F4:DA:5B:42:3D:89:9F:BB:5B:56:16:4F:B0:76:96:D8:15:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5AP02ltCPYmfu1tWFk-wdpbYFZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/fd210d-d4c3-4831-a446-a00956afc469/1/5AP02ltCPYmfu1tWFk-wdpbYFZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/fd210d-d4c3-4831-a446-a00956afc469/1/5AP02ltCPYmfu1tWFk-wdpbYFZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:9e:f0:dc:b1:e2:01:ef:8e:dd:d9:0e:1d:af:be:a5:6c:43:
2a:68:cc:19:95:b7:a9:3a:bf:53:dd:47:90:06:ad:64:41:d5:
54:da:64:85:1d:18:bf:3d:e3:73:a4:6f:df:d1:6a:c0:f1:13:
8f:d4:f8:72:ab:fa:a0:62:ef:4b:11:45:a6:84:23:8b:f6:a1:
fe:52:22:0c:e4:78:5f:bc:67:21:77:f6:71:9b:1c:06:12:f0:
09:aa:6e:0c:26:41:40:04:8c:5c:41:49:25:91:1d:f4:cc:f6:
2f:01:a3:c2:7e:53:b3:bb:cb:69:4d:cf:fa:2f:d6:69:d9:ed:
a4:db:db:6c:0f:a3:cd:aa:b6:ac:f0:84:b7:8a:f2:3e:8a:0d:
73:a7:67:b5:a6:2d:41:c0:23:db:9d:0e:72:f3:b9:ca:65:11:
08:b9:34:67:73:6c:78:d6:44:f5:f4:2e:de:46:35:dc:f5:db:
18:01:e8:ff:af:1b:67:6d:4d:74:12:11:a2:78:17:6e:f3:ca:
75:37:2e:38:ba:76:6c:06:05:66:e6:77:19:a6:c8:11:46:7b:
53:85:1b:bb:06:0c:a3:ad:6a:c2:a4:49:a4:a8:49:94:05:81:
12:6d:3d:b8:3b:8d:c2:f8:3f:d8:37:f5:f1:5d:60:c7:7d:ce:
22:bf:b1:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:45:42 2026 by rpki-client