Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/73af7c-5647-42d7-aa1d-1d5bc001a1de/1/5IKZWNgAyhrebhPKeygLIpzmYC4.mft
File: 5IKZWNgAyhrebhPKeygLIpzmYC4.mft (raw, json)
Hash identifier: 7dyr1yVls9NY+zFCyuwBCnAkH4j+hwGQm2DaNkBhakY=
Subject key identifier: 65:EB:9F:BE:68:AA:1D:3E:24:69:C5:59:1C:B1:90:EB:B8:3A:4E:F7
Authority key identifier: E4:82:99:58:D8:00:CA:1A:DE:6E:13:CA:7B:28:0B:22:9C:E6:60:2E
Certificate issuer: /CN=e4829958d800ca1ade6e13ca7b280b229ce6602e
Certificate serial: 019D3865CB35A5B57D4E81F5195FDF4CA860
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5IKZWNgAyhrebhPKeygLIpzmYC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/73af7c-5647-42d7-aa1d-1d5bc001a1de/1/5IKZWNgAyhrebhPKeygLIpzmYC4.mft
Manifest number: 188C
Signing time: Sun 29 Mar 2026 07:01:28 +0000
Manifest this update: Sun 29 Mar 2026 07:01:28 +0000
Manifest next update: Mon 30 Mar 2026 07:01:28 +0000
Files and hashes: 1: 5IKZWNgAyhrebhPKeygLIpzmYC4.crl (hash: ykqd3wCsvc3QuN4I+K3qU6ra8RMQ4h4pxFOTFYeuAls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/73af7c-5647-42d7-aa1d-1d5bc001a1de/1/5IKZWNgAyhrebhPKeygLIpzmYC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/73af7c-5647-42d7-aa1d-1d5bc001a1de/1/5IKZWNgAyhrebhPKeygLIpzmYC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/5IKZWNgAyhrebhPKeygLIpzmYC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:cb:35:a5:b5:7d:4e:81:f5:19:5f:df:4c:a8:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4829958d800ca1ade6e13ca7b280b229ce6602e
Validity
Not Before: Mar 29 07:01:28 2026 GMT
Not After : Mar 30 07:01:28 2026 GMT
Subject: CN=65eb9fbe68aa1d3e2469c5591cb190ebb83a4ef7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4c:de:dd:3a:15:e7:30:95:be:79:ba:ba:a0:
fe:0e:62:cf:2d:5d:ee:72:de:9d:de:27:7c:cd:b4:
cd:30:b7:4b:c5:1b:c8:4e:ce:ed:a6:8e:d7:8c:bb:
12:31:8f:5e:c9:7f:97:e8:58:f3:82:b9:da:94:0a:
e9:b3:d2:c8:bb:16:ce:55:6a:75:56:72:c7:05:49:
71:53:69:ca:d2:cf:fc:5b:e6:5a:f7:7c:7c:3c:4a:
c7:e7:6a:c3:ff:9a:9f:73:22:d5:23:3b:07:98:42:
d1:18:41:33:31:ce:0d:3c:d9:d2:d0:3a:de:59:2a:
10:05:d1:5a:a5:ea:51:38:1e:68:bb:68:ed:c3:a5:
b0:bb:61:ab:27:fe:cb:e9:ab:55:71:b5:63:02:bd:
e9:73:98:7a:37:a3:da:81:c0:fd:97:71:94:ee:75:
78:3b:ed:6f:5c:e2:c4:73:11:41:1c:da:7d:84:eb:
56:b0:f8:57:ed:ad:c5:d7:a2:8f:9f:53:cc:a6:18:
6c:64:47:62:9d:bb:c4:8c:3e:75:37:49:bf:50:bb:
b9:33:71:72:44:7c:32:01:0c:31:5c:bd:d0:e2:71:
84:08:fb:4b:65:54:21:75:02:7c:e1:df:9f:73:75:
c0:97:73:01:93:87:06:fa:a8:c2:a5:a6:2f:ad:b8:
06:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:EB:9F:BE:68:AA:1D:3E:24:69:C5:59:1C:B1:90:EB:B8:3A:4E:F7
X509v3 Authority Key Identifier:
keyid:E4:82:99:58:D8:00:CA:1A:DE:6E:13:CA:7B:28:0B:22:9C:E6:60:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5IKZWNgAyhrebhPKeygLIpzmYC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/73af7c-5647-42d7-aa1d-1d5bc001a1de/1/5IKZWNgAyhrebhPKeygLIpzmYC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/73af7c-5647-42d7-aa1d-1d5bc001a1de/1/5IKZWNgAyhrebhPKeygLIpzmYC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:3f:82:28:db:08:ff:24:5d:69:09:42:72:b4:24:18:49:8f:
54:23:d5:23:d0:ac:26:d5:57:42:21:34:66:b0:a4:69:23:81:
dd:2f:d1:2d:8f:de:5d:ff:a0:88:0a:c2:3b:07:a6:3f:f9:2c:
c1:c4:27:57:76:f2:6e:e5:b7:ed:df:3a:9f:4f:f5:91:d5:df:
00:18:74:f5:0c:d8:a7:dc:6b:64:3c:f1:86:02:49:c7:67:74:
37:dc:a7:1f:dd:e4:08:05:49:ab:d9:35:4a:13:a4:dd:81:17:
6e:0b:b5:8e:54:e7:ba:bc:86:6c:56:83:5d:4f:9b:49:e2:02:
65:8f:75:66:9c:60:28:1e:1e:23:79:33:23:e4:47:52:a3:55:
f2:19:b4:5f:22:fb:a3:e0:d1:d1:3c:95:f9:00:41:45:86:a2:
48:9c:37:4d:40:cc:0e:1d:c6:75:12:a9:a2:d3:3b:f5:d2:ef:
6f:88:81:7e:78:5e:86:b0:d4:e3:80:3c:27:64:2b:10:ed:49:
45:2e:b8:76:61:3d:37:ec:f1:c3:43:06:34:ce:f1:36:3f:61:
b2:cd:8f:af:c9:2f:36:c7:cc:66:3c:0a:df:05:9f:45:74:45:
9c:00:02:c4:75:8f:46:c0:cf:34:f2:e7:f0:c2:1e:27:10:ab:
66:7b:a1:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:55:57 2026 by rpki-client