Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/39a3dd-2d26-4753-a180-56d611720224/1/R5jSPWIery3VeYDVoA-8zJhYgvI.mft
File: R5jSPWIery3VeYDVoA-8zJhYgvI.mft (raw, json)
Hash identifier: G3UPT5Jkc1fVDa9UKLF9cYRZ0+4nBW3uKpZsTrB9LpY=
Subject key identifier: C6:0F:BA:A4:FA:A9:E9:2F:06:1E:C5:33:50:07:2B:02:1C:F8:6F:59
Authority key identifier: 47:98:D2:3D:62:1E:AF:2D:D5:79:80:D5:A0:0F:BC:CC:98:58:82:F2
Certificate issuer: /CN=4798d23d621eaf2dd57980d5a00fbccc985882f2
Certificate serial: 019D3A540AEE56B6B000B0B6F3A790C16691
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R5jSPWIery3VeYDVoA-8zJhYgvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/39a3dd-2d26-4753-a180-56d611720224/1/R5jSPWIery3VeYDVoA-8zJhYgvI.mft
Manifest number: 128B
Signing time: Sun 29 Mar 2026 16:01:19 +0000
Manifest this update: Sun 29 Mar 2026 16:01:19 +0000
Manifest next update: Mon 30 Mar 2026 16:01:19 +0000
Files and hashes: 1: R5jSPWIery3VeYDVoA-8zJhYgvI.crl (hash: pYhAxsjtoZ3cpBsmERvE0ePACN5Udzdj4wgQ64S/dqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/39a3dd-2d26-4753-a180-56d611720224/1/R5jSPWIery3VeYDVoA-8zJhYgvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/39a3dd-2d26-4753-a180-56d611720224/1/R5jSPWIery3VeYDVoA-8zJhYgvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/R5jSPWIery3VeYDVoA-8zJhYgvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:54:0a:ee:56:b6:b0:00:b0:b6:f3:a7:90:c1:66:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4798d23d621eaf2dd57980d5a00fbccc985882f2
Validity
Not Before: Mar 29 16:01:19 2026 GMT
Not After : Mar 30 16:01:19 2026 GMT
Subject: CN=c60fbaa4faa9e92f061ec53350072b021cf86f59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:93:fb:ce:6a:58:b9:bc:7b:8a:45:48:30:8e:
41:b1:c4:dc:fb:5b:dc:db:1b:65:f1:92:2a:0a:2a:
33:3a:7f:2e:fd:eb:6b:29:72:2a:bf:73:62:fa:5a:
db:bb:b8:9b:eb:91:d6:a9:59:ae:8e:05:25:3d:17:
05:91:95:0f:25:59:f0:aa:17:69:d0:30:66:a2:86:
36:9a:46:42:6c:c4:7c:6a:cd:22:82:2a:a8:0b:7e:
a7:5f:5f:aa:8c:cb:81:25:fa:3e:da:48:8e:ac:b4:
ff:69:54:0c:41:e1:13:ad:75:0b:9f:42:cb:94:ce:
92:7c:d4:51:9a:54:eb:f2:de:e8:c1:87:36:a5:61:
0c:22:2a:25:78:3e:f8:2f:f2:19:f1:92:bc:4f:09:
8a:4b:1f:90:18:3a:e3:36:d2:df:d5:82:f9:3d:85:
a2:55:6f:9a:13:04:0f:3e:1c:3d:ef:a1:44:3e:44:
ff:28:3b:b7:23:1a:d1:5f:8d:72:26:dc:dc:17:90:
8b:92:c9:6e:56:27:db:e0:cb:b4:f4:c4:b0:5f:f5:
35:0a:21:b9:38:cb:ff:76:43:1e:1b:4c:d5:52:3d:
ae:08:63:6d:bd:36:48:76:eb:0f:3a:68:5b:ec:fc:
15:39:a6:18:e5:f2:04:b0:5c:d6:7a:a7:11:43:fb:
82:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:0F:BA:A4:FA:A9:E9:2F:06:1E:C5:33:50:07:2B:02:1C:F8:6F:59
X509v3 Authority Key Identifier:
keyid:47:98:D2:3D:62:1E:AF:2D:D5:79:80:D5:A0:0F:BC:CC:98:58:82:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R5jSPWIery3VeYDVoA-8zJhYgvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/39a3dd-2d26-4753-a180-56d611720224/1/R5jSPWIery3VeYDVoA-8zJhYgvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/39a3dd-2d26-4753-a180-56d611720224/1/R5jSPWIery3VeYDVoA-8zJhYgvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:e2:be:3c:ce:96:ef:83:1d:12:28:ec:d8:36:8d:32:34:81:
12:42:4a:dd:1f:cd:d6:1d:c0:69:6c:2a:68:4c:41:e8:0f:d5:
86:c1:ec:44:51:9f:a6:50:6f:60:3b:e0:63:3c:3e:91:ad:f5:
15:bd:01:87:cc:b9:ff:3a:3a:a3:8a:19:85:d1:8e:f1:db:e0:
22:34:f3:03:c4:70:d1:d2:b4:4b:22:cb:ba:79:16:f0:4c:7e:
04:9c:5e:2c:c2:41:2c:a2:68:be:e2:2e:9f:ec:4a:ed:60:30:
03:eb:42:66:9f:e2:7e:0b:59:5d:30:c3:1e:c6:d1:55:42:29:
91:2f:2e:5f:1d:06:21:dd:8f:68:5a:59:ec:06:f5:de:f2:9e:
e3:4e:e9:38:40:97:07:f5:99:01:35:f0:84:c5:06:b7:4a:d7:
e2:c5:71:84:5a:a4:85:fc:7c:8b:5e:4a:67:0a:ea:29:dc:d2:
d7:e7:aa:8f:f5:fd:af:38:c6:a0:8e:5a:12:33:7d:2e:71:5e:
2c:c8:6e:b0:0c:49:4c:10:95:cb:a3:9f:0a:a3:73:b0:72:88:
cb:b0:c5:16:4f:dd:6a:11:cc:7e:02:cc:c0:7d:a1:92:a3:9f:
68:b3:57:23:e2:2e:72:67:3f:c2:43:f6:6e:de:7c:90:1d:27:
77:0a:54:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:36:30 2026 by rpki-client