Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/def9c7-f3e5-42f7-8def-9df4bb18fb06/1/5JlaSpG8KcjX7RBKA4QBmk_lng4.mft
File: 5JlaSpG8KcjX7RBKA4QBmk_lng4.mft (raw, json)
Hash identifier: klShkXth2ItI/B/XN+oAIAG2RyBusOHQZdJLitJxLbE=
Subject key identifier: DC:51:2D:D1:78:C9:0B:B6:BF:9A:A8:FC:D1:6F:29:D8:57:E3:9F:98
Authority key identifier: E4:99:5A:4A:91:BC:29:C8:D7:ED:10:4A:03:84:01:9A:4F:E5:9E:0E
Certificate issuer: /CN=e4995a4a91bc29c8d7ed104a0384019a4fe59e0e
Certificate serial: 019D3A53EE80E5946B2BE51A1FEDDDAB4FAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5JlaSpG8KcjX7RBKA4QBmk_lng4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/def9c7-f3e5-42f7-8def-9df4bb18fb06/1/5JlaSpG8KcjX7RBKA4QBmk_lng4.mft
Manifest number: 0BD7
Signing time: Sun 29 Mar 2026 16:01:12 +0000
Manifest this update: Sun 29 Mar 2026 16:01:12 +0000
Manifest next update: Mon 30 Mar 2026 16:01:12 +0000
Files and hashes: 1: 5JlaSpG8KcjX7RBKA4QBmk_lng4.crl (hash: dV5CDS89GoUlzQM+99qwdI9UxAaQ8b+DgCT0CHb/N20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/def9c7-f3e5-42f7-8def-9df4bb18fb06/1/5JlaSpG8KcjX7RBKA4QBmk_lng4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/def9c7-f3e5-42f7-8def-9df4bb18fb06/1/5JlaSpG8KcjX7RBKA4QBmk_lng4.mft
rsync://rpki.ripe.net/repository/DEFAULT/5JlaSpG8KcjX7RBKA4QBmk_lng4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:53:ee:80:e5:94:6b:2b:e5:1a:1f:ed:dd:ab:4f:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4995a4a91bc29c8d7ed104a0384019a4fe59e0e
Validity
Not Before: Mar 29 16:01:12 2026 GMT
Not After : Mar 30 16:01:12 2026 GMT
Subject: CN=dc512dd178c90bb6bf9aa8fcd16f29d857e39f98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6a:6a:1d:69:7a:b1:1c:31:d7:00:62:c2:28:
07:23:3d:7d:b9:2f:92:75:de:e3:3d:62:cb:1b:aa:
fc:3c:5c:d2:1a:f6:a4:17:1b:c4:fd:e5:3c:cf:a5:
e9:71:bd:ca:3c:07:ef:12:17:45:b4:ab:7e:02:0f:
a6:00:b8:90:f8:44:0e:d8:46:f5:6c:85:b6:8a:3f:
76:4a:46:a5:75:61:4c:87:ff:f3:f5:27:af:4c:6a:
b7:e6:8f:d8:21:a3:65:e9:c9:b9:37:71:f4:72:c4:
76:47:f8:d8:c7:e6:b0:82:d3:94:a6:9b:46:83:43:
d7:a1:11:90:46:13:4f:60:df:6e:21:14:cc:c3:cc:
a8:d1:7b:fe:98:6d:b7:37:98:85:07:62:d1:8c:7e:
98:f2:81:c8:a5:cd:93:cf:8e:a3:8e:20:3c:85:01:
19:39:b8:2b:f5:fd:76:e8:25:82:8b:a8:dd:65:27:
0a:f4:39:f8:19:7d:ef:54:8a:b7:3c:b2:59:d1:9a:
a6:91:4b:53:64:e8:9a:be:8b:1f:1c:ac:4d:07:7b:
57:f1:ac:3c:67:bf:e0:74:77:64:89:d7:c0:c7:41:
4e:16:50:a0:e3:65:9a:b7:51:99:d9:39:46:ff:c5:
d2:94:b4:a4:fb:dc:81:3a:62:d1:cb:81:0c:56:e8:
ba:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:51:2D:D1:78:C9:0B:B6:BF:9A:A8:FC:D1:6F:29:D8:57:E3:9F:98
X509v3 Authority Key Identifier:
keyid:E4:99:5A:4A:91:BC:29:C8:D7:ED:10:4A:03:84:01:9A:4F:E5:9E:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5JlaSpG8KcjX7RBKA4QBmk_lng4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/def9c7-f3e5-42f7-8def-9df4bb18fb06/1/5JlaSpG8KcjX7RBKA4QBmk_lng4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/def9c7-f3e5-42f7-8def-9df4bb18fb06/1/5JlaSpG8KcjX7RBKA4QBmk_lng4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:51:8b:36:82:83:6e:66:a3:6f:4b:22:0b:bc:a8:35:d5:d3:
eb:49:1d:a5:4d:da:fc:c0:a2:c9:79:a4:9b:b0:db:e4:93:38:
6b:0b:51:73:7a:a5:73:3a:aa:ae:61:cb:1c:28:04:40:e6:ea:
d2:e7:84:5b:17:3d:f8:c0:13:f9:33:96:67:5a:da:9c:00:d0:
1f:c9:74:26:ea:ca:90:1b:73:74:2c:1c:54:73:bf:b6:a5:4a:
4e:b9:9c:a6:a6:8d:6d:18:23:3d:96:67:4b:bb:1f:33:aa:9e:
28:fc:ae:44:f5:15:2e:07:4c:f5:e7:29:e9:3b:31:b7:0e:3b:
59:8e:f9:dc:50:74:9b:a9:1e:44:f1:c0:07:de:21:82:3a:2a:
92:04:2d:7f:5a:1a:14:81:59:09:ed:44:60:90:45:b8:04:43:
22:2f:f3:ed:f7:d5:8b:42:37:b7:45:40:9f:1e:6e:36:f5:2b:
fd:c5:e2:20:1d:99:8a:fe:40:48:d0:f2:51:2e:6b:35:56:ad:
0b:3b:86:e5:fe:0b:9a:33:64:b5:18:83:20:c5:90:ef:3f:17:
38:fc:e2:c3:3a:8c:c6:a4:03:b0:0c:2a:86:7c:f3:71:2e:59:
b7:30:a5:65:42:50:1e:ed:ff:db:59:bd:e9:22:8a:c2:ec:fa:
1d:70:85:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:48:33 2026 by rpki-client