Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/aafc15-1e79-4fe9-9fad-03a4dd4a9156/1/5xHIkR7brjbfGoC76BSyWg-UOfo.mft
File: 5xHIkR7brjbfGoC76BSyWg-UOfo.mft (raw, json)
Hash identifier: DwAaRqJSEKc9IC6NCa0PHbobNe63wEK3LjvCmMN1nko=
Subject key identifier: B1:C9:12:FD:4C:C8:54:18:16:48:C6:3E:EA:78:25:E8:CB:4D:F8:61
Authority key identifier: E7:11:C8:91:1E:DB:AE:36:DF:1A:80:BB:E8:14:B2:5A:0F:94:39:FA
Certificate issuer: /CN=e711c8911edbae36df1a80bbe814b25a0f9439fa
Certificate serial: 019D3865ECFC7AF88E53000D304C2F764AD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5xHIkR7brjbfGoC76BSyWg-UOfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/aafc15-1e79-4fe9-9fad-03a4dd4a9156/1/5xHIkR7brjbfGoC76BSyWg-UOfo.mft
Manifest number: 0BAC
Signing time: Sun 29 Mar 2026 07:01:37 +0000
Manifest this update: Sun 29 Mar 2026 07:01:37 +0000
Manifest next update: Mon 30 Mar 2026 07:01:37 +0000
Files and hashes: 1: 5xHIkR7brjbfGoC76BSyWg-UOfo.crl (hash: a9KVvIiCYpKeSh7ecuUlfgVJ/zgbAxrFW+TymIByXq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/aafc15-1e79-4fe9-9fad-03a4dd4a9156/1/5xHIkR7brjbfGoC76BSyWg-UOfo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/aafc15-1e79-4fe9-9fad-03a4dd4a9156/1/5xHIkR7brjbfGoC76BSyWg-UOfo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5xHIkR7brjbfGoC76BSyWg-UOfo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:ec:fc:7a:f8:8e:53:00:0d:30:4c:2f:76:4a:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e711c8911edbae36df1a80bbe814b25a0f9439fa
Validity
Not Before: Mar 29 07:01:37 2026 GMT
Not After : Mar 30 07:01:37 2026 GMT
Subject: CN=b1c912fd4cc854181648c63eea7825e8cb4df861
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:4c:83:76:2e:5b:fb:33:f4:57:b2:0b:bc:bc:
42:e7:96:5a:fc:25:e3:31:3c:b5:d4:77:b3:f2:f8:
17:81:21:dc:27:90:92:ab:36:01:e2:aa:cd:28:15:
a1:42:91:d0:92:d5:80:1d:3d:65:00:cb:36:6e:c8:
3e:e5:13:7d:c0:3d:0e:7d:65:4c:e8:7f:2f:1b:b6:
39:91:55:95:f5:60:24:8a:9e:25:37:61:a1:6a:e6:
58:c6:d3:41:89:f0:6b:2b:9e:42:88:70:a6:12:c0:
d9:8e:b6:4d:88:3d:14:e7:57:28:b2:c6:c6:e2:60:
82:bd:9c:19:dd:17:62:72:34:2b:06:65:d4:b9:05:
c0:11:08:94:8b:d0:b8:d1:9b:f4:93:c6:5f:bc:c2:
cf:21:ff:0f:65:cc:83:39:82:86:58:0e:27:c6:bf:
f5:51:e5:a2:f9:6f:3a:89:83:80:4b:eb:e6:a2:1e:
62:e1:ef:e1:73:05:2c:8f:d0:ec:d6:87:59:d3:5f:
c0:bd:b7:7e:b7:72:cd:b4:ea:f5:90:20:51:9a:7c:
62:df:d7:13:0e:6e:10:76:24:c0:03:2d:7f:26:20:
d0:8c:ad:60:98:22:c3:30:ef:de:b2:76:ba:5c:e9:
2f:e0:2a:f6:70:b1:ac:59:1d:54:f5:95:ab:a1:ec:
4e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:C9:12:FD:4C:C8:54:18:16:48:C6:3E:EA:78:25:E8:CB:4D:F8:61
X509v3 Authority Key Identifier:
keyid:E7:11:C8:91:1E:DB:AE:36:DF:1A:80:BB:E8:14:B2:5A:0F:94:39:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5xHIkR7brjbfGoC76BSyWg-UOfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/aafc15-1e79-4fe9-9fad-03a4dd4a9156/1/5xHIkR7brjbfGoC76BSyWg-UOfo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/aafc15-1e79-4fe9-9fad-03a4dd4a9156/1/5xHIkR7brjbfGoC76BSyWg-UOfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:96:54:0c:75:33:c4:77:c1:48:a9:4f:02:23:33:7e:ba:52:
f6:2b:90:d7:a2:c0:6e:25:56:f8:3d:24:c4:68:67:ba:a8:f8:
53:62:1b:e8:00:ad:3c:16:04:e0:96:3e:fa:5d:60:fe:0c:ee:
b1:3d:6b:1b:5b:d0:ab:f3:a2:d3:69:40:c2:63:ce:c5:7a:98:
14:fb:b9:42:72:ec:a3:22:92:33:5e:1f:21:e3:0f:fa:22:16:
2d:94:75:2c:0c:12:93:38:2e:dd:52:62:64:db:0f:5f:d5:b9:
85:d9:0a:37:43:40:b6:c1:cb:1d:72:59:d6:3e:08:9d:a8:3a:
6a:ef:c3:f5:48:50:7b:1c:99:9b:48:42:2a:61:09:c2:23:7a:
b4:ae:95:6d:5e:4b:86:4a:02:66:43:c5:f4:9b:05:ad:04:07:
22:d1:29:a0:aa:f1:43:6d:a3:e3:2f:7c:47:73:a4:00:1d:b1:
1c:2d:e9:02:56:c8:4c:3f:97:76:96:a1:28:95:1e:95:17:12:
99:93:8c:97:d1:90:2f:74:f0:fb:f4:1a:34:24:be:18:de:79:
93:77:da:41:a3:8b:de:9d:e5:d7:af:67:05:a4:91:f2:64:68:
7f:fa:66:9a:d9:03:e0:c3:a0:48:be:72:72:e6:92:49:e1:81:
7b:8f:29:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:06:31 2026 by rpki-client