Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/cb5183-d8d8-4425-b0ed-c2097031ed4b/1/at5urfJFy3ply0wF09VLzSYKB18.mft
File: at5urfJFy3ply0wF09VLzSYKB18.mft (raw, json)
Hash identifier: guXC4foJXKws4tn48kmnm8LE2eY4pmBrUV/DEy/rAys=
Subject key identifier: 34:9F:28:71:48:6D:2E:C4:CC:50:D0:AE:5A:E1:20:63:F4:7C:9C:EE
Authority key identifier: 6A:DE:6E:AD:F2:45:CB:7A:65:CB:4C:05:D3:D5:4B:CD:26:0A:07:5F
Certificate issuer: /CN=6ade6eadf245cb7a65cb4c05d3d54bcd260a075f
Certificate serial: 019D37C05FC4E54EB2854182BC218F509161
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/at5urfJFy3ply0wF09VLzSYKB18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/cb5183-d8d8-4425-b0ed-c2097031ed4b/1/at5urfJFy3ply0wF09VLzSYKB18.mft
Manifest number: 05DD
Signing time: Sun 29 Mar 2026 04:00:47 +0000
Manifest this update: Sun 29 Mar 2026 04:00:47 +0000
Manifest next update: Mon 30 Mar 2026 04:00:47 +0000
Files and hashes: 1: at5urfJFy3ply0wF09VLzSYKB18.crl (hash: XZQoraV8TWw6sBoGM6WIJaF8WfH02xdzv3jbkdAbPVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/cb5183-d8d8-4425-b0ed-c2097031ed4b/1/at5urfJFy3ply0wF09VLzSYKB18.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/cb5183-d8d8-4425-b0ed-c2097031ed4b/1/at5urfJFy3ply0wF09VLzSYKB18.mft
rsync://rpki.ripe.net/repository/DEFAULT/at5urfJFy3ply0wF09VLzSYKB18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:5f:c4:e5:4e:b2:85:41:82:bc:21:8f:50:91:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ade6eadf245cb7a65cb4c05d3d54bcd260a075f
Validity
Not Before: Mar 29 04:00:47 2026 GMT
Not After : Mar 30 04:00:47 2026 GMT
Subject: CN=349f2871486d2ec4cc50d0ae5ae12063f47c9cee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3c:81:32:ab:9e:d2:ce:ac:3e:77:18:28:3c:
a7:28:2d:0e:df:91:3e:f0:7f:a9:d3:d1:3e:49:b9:
a8:f9:b1:aa:8c:aa:10:a1:92:24:89:2f:24:69:fb:
c3:ab:8c:b3:54:98:9f:95:54:be:dd:6f:14:29:ac:
2d:e0:ce:d1:1f:52:62:c4:08:d8:32:a7:40:27:86:
ce:0b:aa:82:9c:2d:4a:e4:25:ad:97:d1:fa:69:82:
a0:9e:54:98:d8:ac:70:31:84:c3:f8:31:9e:dc:ea:
89:c2:ba:66:3b:3c:c1:90:59:56:51:ad:11:2b:b5:
00:d6:87:b9:20:15:c6:ac:0b:37:0a:5c:3b:ad:f0:
11:4a:77:0a:39:32:b6:fe:be:ee:8a:10:b3:f7:be:
fc:3d:3c:b7:00:62:fd:35:68:f7:79:26:e2:f9:00:
fd:d4:92:6c:55:64:e5:57:9d:af:dd:37:f3:e6:e0:
5c:a2:39:90:4a:53:09:ab:b4:7f:d8:fa:63:b6:29:
95:39:5e:cb:f8:5f:60:07:94:8c:90:2a:88:86:bf:
85:1e:a6:12:d3:88:82:fa:26:84:ad:e1:1e:3b:ec:
0d:2e:2e:02:1f:f3:85:db:22:a0:15:3b:c6:14:6e:
30:53:9a:16:c8:f3:e2:28:cd:26:17:20:50:c9:d4:
5c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:9F:28:71:48:6D:2E:C4:CC:50:D0:AE:5A:E1:20:63:F4:7C:9C:EE
X509v3 Authority Key Identifier:
keyid:6A:DE:6E:AD:F2:45:CB:7A:65:CB:4C:05:D3:D5:4B:CD:26:0A:07:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/at5urfJFy3ply0wF09VLzSYKB18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cb5183-d8d8-4425-b0ed-c2097031ed4b/1/at5urfJFy3ply0wF09VLzSYKB18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cb5183-d8d8-4425-b0ed-c2097031ed4b/1/at5urfJFy3ply0wF09VLzSYKB18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:0b:44:4c:8c:1b:17:f2:ac:c5:f3:ad:f0:d5:60:39:16:92:
b7:a5:73:cd:e0:d2:cf:35:40:e8:df:87:8e:5f:11:f7:30:a0:
80:2f:3d:b5:d7:45:c7:47:31:73:92:71:f1:95:e3:3d:95:76:
82:60:99:a1:0d:7e:50:b9:66:8a:f3:35:c7:a0:9d:4a:f8:f9:
fa:68:33:d4:6d:34:b3:dc:1f:94:75:25:7e:9e:6e:c2:a7:fa:
24:db:6e:63:d7:9c:48:3c:33:cd:8d:bc:ee:97:3a:6b:bf:4f:
bb:88:8e:45:27:e7:f5:70:72:fd:2c:c6:30:23:68:18:48:84:
03:ba:e9:ca:f8:9a:f4:62:29:f9:11:42:7d:c9:4b:a4:5f:2a:
8a:a7:a0:fa:f3:fa:2f:d6:41:2d:4d:bb:86:56:80:27:08:bc:
b6:c5:a5:51:89:e3:0b:0d:3e:ec:04:01:fe:11:26:c6:c4:94:
de:b1:fb:18:0c:0f:ca:19:3a:ea:72:5d:38:40:c8:20:fd:46:
94:e7:f0:75:e4:0c:62:af:a6:f6:41:3a:42:ca:ed:84:8c:c9:
69:15:4c:0b:55:f0:4e:03:5f:e5:ea:df:f6:d6:90:dd:23:b5:
d6:53:93:d0:59:e2:8c:7c:41:6f:be:5d:6c:24:76:bd:e9:c8:
75:27:a1:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:44:12 2026 by rpki-client