Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/52b48d-28a8-48f5-a4df-4db40a36563e/1/d5LD_GkVSsfVFbysnaoH54vCKcw.mft
File: d5LD_GkVSsfVFbysnaoH54vCKcw.mft (raw, json)
Hash identifier: 3PoY7w6O8037viZ/R6RsvUKG2pZnxUcEPyvagi/2j0E=
Subject key identifier: 14:AB:65:74:C2:A1:87:14:A8:EC:89:AE:B4:41:CE:6B:AE:C3:2A:56
Authority key identifier: 77:92:C3:FC:69:15:4A:C7:D5:15:BC:AC:9D:AA:07:E7:8B:C2:29:CC
Certificate issuer: /CN=7792c3fc69154ac7d515bcac9daa07e78bc229cc
Certificate serial: 019D36E4866254BF24A604B52909CB207F80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d5LD_GkVSsfVFbysnaoH54vCKcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/52b48d-28a8-48f5-a4df-4db40a36563e/1/d5LD_GkVSsfVFbysnaoH54vCKcw.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 00:00:39 +0000
Manifest this update: Sun 29 Mar 2026 00:00:39 +0000
Manifest next update: Mon 30 Mar 2026 00:00:39 +0000
Files and hashes: 1: d5LD_GkVSsfVFbysnaoH54vCKcw.crl (hash: BmwX+wL/gR6AY0vymqjMVQERvn1JBcg7MmaOwQ90Ehk=)
2: ycQ9UZI7n07LVhcSojHNBe-1YKE.roa (hash: lff+KvYO2g0/AePrhAZf5pu7/6YYDH+6BXgpxI3UwiA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/52b48d-28a8-48f5-a4df-4db40a36563e/1/d5LD_GkVSsfVFbysnaoH54vCKcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/52b48d-28a8-48f5-a4df-4db40a36563e/1/d5LD_GkVSsfVFbysnaoH54vCKcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/d5LD_GkVSsfVFbysnaoH54vCKcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 00:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:36:e4:86:62:54:bf:24:a6:04:b5:29:09:cb:20:7f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7792c3fc69154ac7d515bcac9daa07e78bc229cc
Validity
Not Before: Mar 29 00:00:39 2026 GMT
Not After : Mar 30 00:00:39 2026 GMT
Subject: CN=14ab6574c2a18714a8ec89aeb441ce6baec32a56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0f:ed:07:e9:51:71:28:85:2d:be:06:7a:3a:
38:99:40:76:e8:fd:4d:39:76:04:f3:64:7f:95:90:
cf:e8:55:69:c3:2a:a3:f3:6c:bb:d8:47:42:7f:6c:
96:78:7e:8c:15:c9:f1:c9:eb:65:77:af:39:2f:3f:
4c:5b:fc:fc:6d:a9:5c:75:80:4e:7a:3f:84:f7:25:
12:ca:b1:e2:6a:9e:28:4f:94:7c:1a:12:17:9a:f7:
cb:46:4e:1e:9e:97:04:c0:0d:16:fc:de:50:48:4b:
e2:a7:fb:0c:d1:df:1a:87:a6:78:4e:1f:62:8f:99:
ce:5e:0f:dd:c4:4c:8c:6a:6e:cd:39:a9:c1:e7:ff:
7c:9c:21:5d:85:7a:d0:ca:4c:8a:ec:9a:af:c8:f1:
b7:08:ce:e2:4f:47:65:3d:6e:55:02:a1:67:6d:92:
be:3f:3c:b0:58:c6:76:81:79:7d:10:98:5b:0c:94:
e1:6c:fd:db:e0:02:cf:32:f3:30:03:f6:ae:eb:d2:
4c:d5:ac:1e:c6:e7:eb:ef:c2:25:ef:f4:41:ba:39:
e2:17:62:56:9e:b4:28:51:8c:db:c0:bf:8a:67:49:
e1:ea:3c:5e:fc:40:07:ee:d7:9b:ac:4f:e6:69:66:
9b:04:e0:1d:17:e7:d5:ec:b8:85:2c:5a:73:dd:4c:
1d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:AB:65:74:C2:A1:87:14:A8:EC:89:AE:B4:41:CE:6B:AE:C3:2A:56
X509v3 Authority Key Identifier:
keyid:77:92:C3:FC:69:15:4A:C7:D5:15:BC:AC:9D:AA:07:E7:8B:C2:29:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5LD_GkVSsfVFbysnaoH54vCKcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/52b48d-28a8-48f5-a4df-4db40a36563e/1/d5LD_GkVSsfVFbysnaoH54vCKcw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/52b48d-28a8-48f5-a4df-4db40a36563e/1/d5LD_GkVSsfVFbysnaoH54vCKcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:5f:2b:06:fb:ab:8b:b2:a3:44:8a:b2:17:06:58:ee:33:7a:
43:1e:43:09:6d:08:5d:46:38:9a:7a:dc:57:9e:e0:be:98:17:
e2:6f:ea:99:66:8b:54:83:06:b1:73:99:fc:3f:90:a3:4e:6b:
a1:b5:b5:c3:17:31:ef:0d:e4:69:91:82:3b:11:3a:a7:72:b9:
64:87:ee:46:58:b8:94:3b:fd:13:97:33:79:6a:10:bf:dd:fb:
0d:73:6a:f8:10:de:83:57:37:84:e3:9d:c1:d0:6c:fd:c1:7c:
a4:80:05:a7:25:c4:9b:cf:52:7e:a8:1d:71:f4:67:72:75:5c:
70:44:2d:bc:1a:92:19:c3:45:a7:12:ac:63:e4:37:41:6f:95:
52:3f:4c:61:e5:1a:56:79:5e:99:30:65:92:4a:10:7d:a2:7f:
ba:cc:7f:6a:f1:76:12:96:96:83:ec:86:c7:9c:da:17:33:26:
b9:fb:4e:81:66:d1:39:3c:65:c0:d9:b9:23:45:54:c1:34:58:
28:18:bc:21:78:4c:4c:6b:75:e6:7d:34:26:a4:d5:0c:a9:be:
e3:56:92:63:4d:24:f5:e9:d2:95:1a:f5:18:18:21:44:30:73:
67:08:17:3b:e3:06:fa:a1:29:48:b3:01:7d:a6:8a:d5:1f:54:
83:87:36:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:19:26 2026 by rpki-client