Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/4f9d4c-1946-4af9-8c22-419753d3f88d/1/5tM83lfaCcfZM3ce6hQllAdvmiM.mft
File: 5tM83lfaCcfZM3ce6hQllAdvmiM.mft (raw, json)
Hash identifier: ofk5oOf7eeKp8wUBDppv5qdYuj5b0mNYWXaKCF+SB3w=
Subject key identifier: BD:5B:7D:44:C4:1E:01:E0:BE:F1:D8:97:79:56:C1:C3:B9:F2:AA:1E
Authority key identifier: E6:D3:3C:DE:57:DA:09:C7:D9:33:77:1E:EA:14:25:94:07:6F:9A:23
Certificate issuer: /CN=e6d33cde57da09c7d933771eea142594076f9a23
Certificate serial: 019D37C07B8EC25DA478BE400E96F5F3CCD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5tM83lfaCcfZM3ce6hQllAdvmiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/4f9d4c-1946-4af9-8c22-419753d3f88d/1/5tM83lfaCcfZM3ce6hQllAdvmiM.mft
Manifest number: 188B
Signing time: Sun 29 Mar 2026 04:00:54 +0000
Manifest this update: Sun 29 Mar 2026 04:00:54 +0000
Manifest next update: Mon 30 Mar 2026 04:00:54 +0000
Files and hashes: 1: 5tM83lfaCcfZM3ce6hQllAdvmiM.crl (hash: t7xk6USpo8sq8UL5dYGooB+7jbKVRTPZPV18ecqOIsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/4f9d4c-1946-4af9-8c22-419753d3f88d/1/5tM83lfaCcfZM3ce6hQllAdvmiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/4f9d4c-1946-4af9-8c22-419753d3f88d/1/5tM83lfaCcfZM3ce6hQllAdvmiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/5tM83lfaCcfZM3ce6hQllAdvmiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:7b:8e:c2:5d:a4:78:be:40:0e:96:f5:f3:cc:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6d33cde57da09c7d933771eea142594076f9a23
Validity
Not Before: Mar 29 04:00:54 2026 GMT
Not After : Mar 30 04:00:54 2026 GMT
Subject: CN=bd5b7d44c41e01e0bef1d8977956c1c3b9f2aa1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c5:25:91:df:3f:89:df:5a:c6:bc:af:79:c8:
54:2c:16:e1:c0:cb:6c:11:3e:dc:9f:aa:73:fe:66:
cc:ac:5e:59:68:bb:84:99:89:a6:3e:98:75:f4:18:
1c:c6:43:b0:1d:12:b7:35:99:ef:3f:3f:b2:b4:89:
52:63:b9:0f:60:11:52:c3:de:bc:d5:3f:01:27:1a:
9f:4a:a1:d7:49:86:e3:ca:da:38:41:2f:8d:21:de:
56:08:c8:33:81:3c:4b:bb:1c:75:1d:7f:e9:b8:6f:
7e:dc:44:c9:8c:ae:ee:bb:94:1e:68:0c:f1:1b:f0:
c7:05:02:16:bd:4a:82:5e:a5:13:2e:ee:11:71:bf:
37:e8:d2:9d:85:5c:88:66:a5:86:81:5c:5d:82:cb:
ba:25:01:80:82:5b:0c:99:f7:54:5c:d9:76:ef:77:
e0:d4:97:6f:b6:1e:f1:30:71:3e:a1:df:f7:bb:91:
ac:37:02:6a:af:75:6e:5b:34:3d:4a:9a:a3:0b:ad:
e6:1b:ab:c4:80:d7:e3:1c:6a:c0:07:cd:50:e0:f1:
49:de:95:21:bd:0e:f4:c0:3b:40:ee:35:23:63:e4:
ef:e4:e9:53:a2:42:36:a3:34:6b:9f:6c:34:7e:77:
51:79:a0:1e:8e:79:8b:f7:27:0e:f7:15:e9:ec:8f:
85:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:5B:7D:44:C4:1E:01:E0:BE:F1:D8:97:79:56:C1:C3:B9:F2:AA:1E
X509v3 Authority Key Identifier:
keyid:E6:D3:3C:DE:57:DA:09:C7:D9:33:77:1E:EA:14:25:94:07:6F:9A:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5tM83lfaCcfZM3ce6hQllAdvmiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4f9d4c-1946-4af9-8c22-419753d3f88d/1/5tM83lfaCcfZM3ce6hQllAdvmiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4f9d4c-1946-4af9-8c22-419753d3f88d/1/5tM83lfaCcfZM3ce6hQllAdvmiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:e2:1e:fe:74:d3:6e:8b:f1:be:63:72:d3:33:01:20:76:04:
2d:cd:75:7d:b8:d0:b2:06:c9:9a:0c:83:4c:e6:d6:b2:a1:59:
c5:b4:bd:b5:ce:c8:ef:f7:06:5a:09:66:c3:2b:60:d6:83:5d:
fa:e2:c7:c3:2a:f2:40:8c:f4:51:76:58:f0:f6:f8:f3:41:d6:
12:62:65:23:ca:57:57:37:fc:82:cf:3b:9f:36:40:d0:a7:aa:
76:7a:3b:6c:db:62:52:6a:c2:bf:5b:10:2b:70:37:4b:88:63:
4c:5b:62:d3:3e:be:47:92:13:53:55:c4:f0:8a:eb:4a:83:64:
1f:1d:da:ba:62:0e:a9:c5:8c:a3:30:45:63:9c:af:4f:fb:5a:
19:aa:32:28:cb:1e:e7:68:9e:a8:7d:7d:a6:eb:54:00:26:2f:
83:8a:1c:ab:11:09:6f:2f:17:ca:7c:a8:c4:7e:e9:b4:44:1b:
96:18:62:13:61:8d:f6:2e:b8:e1:dd:9f:1d:a0:95:5f:2c:e6:
d0:12:25:b7:ed:03:4e:27:02:eb:cc:fe:77:e9:95:9c:4a:e0:
65:e1:0b:05:a2:65:69:34:17:81:bc:8f:44:db:4b:5a:6e:23:
6c:0f:78:a0:e6:3c:59:a3:21:8f:6b:3a:bf:34:3e:97:ac:f5:
19:32:4f:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:55:54 2026 by rpki-client