Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/17f634-fbbc-4f8f-b6d2-e32e36d51e12/1/5HbpsSF9PIXySHce9G2zprVr-EY.mft
File: 5HbpsSF9PIXySHce9G2zprVr-EY.mft (raw, json)
Hash identifier: 1WT+a4/H3uJjV6HgF7dFyLKWGHcE1eYhrMT57B0osbQ=
Subject key identifier: 21:F4:BB:2A:14:E7:16:CC:D7:03:BC:7B:F6:6F:B7:81:E6:46:FE:7C
Authority key identifier: E4:76:E9:B1:21:7D:3C:85:F2:48:77:1E:F4:6D:B3:A6:B5:6B:F8:46
Certificate issuer: /CN=e476e9b1217d3c85f248771ef46db3a6b56bf846
Certificate serial: 019D32D08C41F9E145A81363AFFF75ECE810
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5HbpsSF9PIXySHce9G2zprVr-EY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/17f634-fbbc-4f8f-b6d2-e32e36d51e12/1/5HbpsSF9PIXySHce9G2zprVr-EY.mft
Manifest number: 18
Signing time: Sat 28 Mar 2026 05:00:21 +0000
Manifest this update: Sat 28 Mar 2026 05:00:21 +0000
Manifest next update: Sun 29 Mar 2026 05:00:21 +0000
Files and hashes: 1: 5HbpsSF9PIXySHce9G2zprVr-EY.crl (hash: gztPgaHDKu84bo40SJUg4We2xUTDHFtvUcHhZTsCafw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/17f634-fbbc-4f8f-b6d2-e32e36d51e12/1/5HbpsSF9PIXySHce9G2zprVr-EY.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/17f634-fbbc-4f8f-b6d2-e32e36d51e12/1/5HbpsSF9PIXySHce9G2zprVr-EY.mft
rsync://rpki.ripe.net/repository/DEFAULT/5HbpsSF9PIXySHce9G2zprVr-EY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:d0:8c:41:f9:e1:45:a8:13:63:af:ff:75:ec:e8:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e476e9b1217d3c85f248771ef46db3a6b56bf846
Validity
Not Before: Mar 28 05:00:21 2026 GMT
Not After : Mar 29 05:00:21 2026 GMT
Subject: CN=21f4bb2a14e716ccd703bc7bf66fb781e646fe7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:5f:dd:6b:ae:4c:76:ba:10:6f:4d:00:80:0a:
d9:0e:1d:47:66:e1:ee:fd:36:9d:b6:b9:f0:3e:c6:
ef:f8:f6:7a:91:1a:55:9a:3c:86:bd:c7:56:c4:e9:
8d:a6:e8:d2:96:2e:8a:d9:23:5f:65:bc:e9:6f:23:
48:7f:77:15:72:96:fc:c9:a2:50:cd:00:c9:62:46:
70:f9:70:d7:41:e3:7c:9d:c9:04:37:ed:a8:75:c5:
36:82:7e:c4:2c:05:14:80:37:be:78:74:b0:27:1d:
a8:a6:7d:7a:a5:d5:e7:16:c6:cc:92:cb:0d:c5:d5:
99:13:0c:3c:cc:74:0c:9b:25:a5:02:39:3e:c2:ee:
28:8b:5e:1a:33:ba:36:30:04:3c:c4:06:fd:b1:68:
24:64:c3:63:97:3f:60:55:69:db:c3:6a:fb:82:e9:
19:f4:96:47:9a:0a:56:e2:28:d3:c2:6e:d6:4c:03:
da:8f:d6:ce:24:41:a5:1b:ae:b2:2d:bd:93:0e:8e:
16:60:ea:ea:e3:0c:a5:2a:23:f8:0a:57:a8:e8:c4:
93:d2:74:80:7a:a9:9a:56:27:74:e6:5e:89:59:eb:
e4:64:bf:15:df:65:74:1b:02:25:0c:cd:64:62:c0:
ce:e2:ba:f6:f1:0c:1f:d7:e4:dd:cc:4c:e0:a5:e3:
79:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:F4:BB:2A:14:E7:16:CC:D7:03:BC:7B:F6:6F:B7:81:E6:46:FE:7C
X509v3 Authority Key Identifier:
keyid:E4:76:E9:B1:21:7D:3C:85:F2:48:77:1E:F4:6D:B3:A6:B5:6B:F8:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5HbpsSF9PIXySHce9G2zprVr-EY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/17f634-fbbc-4f8f-b6d2-e32e36d51e12/1/5HbpsSF9PIXySHce9G2zprVr-EY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/17f634-fbbc-4f8f-b6d2-e32e36d51e12/1/5HbpsSF9PIXySHce9G2zprVr-EY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:d7:d6:bd:f1:6d:14:42:ae:40:5a:f7:00:50:2e:7f:ea:92:
da:f8:93:53:3b:6a:1b:d5:ff:06:bd:51:e1:46:a2:08:61:2f:
81:aa:cb:d6:77:19:16:58:94:78:04:12:50:4c:3c:94:6f:35:
1b:01:fa:62:f3:d0:3f:1d:16:3d:7f:53:94:bd:cb:62:e3:65:
fc:48:7f:24:1b:21:c5:66:79:2a:1b:8e:b4:dd:bb:e2:ee:e5:
3b:e0:d2:ab:04:a1:d6:bb:4f:ff:5c:af:92:8e:69:1d:ed:11:
18:6e:55:e9:7e:2a:78:32:21:7c:6e:8e:95:66:96:ca:b9:05:
c9:ca:78:fe:ec:7f:10:c8:07:5c:eb:f2:a6:a1:e1:38:94:89:
68:c7:74:8f:c9:44:90:5d:48:01:0c:cf:ef:72:9f:08:fb:82:
39:e1:a5:b8:d0:44:87:9d:f2:84:f8:80:39:78:3c:00:bf:b7:
1c:93:ef:8e:f4:30:e5:0f:24:71:ce:85:87:e1:11:1a:9f:09:
7a:ca:02:88:2f:c3:15:64:dd:73:49:6a:cb:39:13:07:27:01:
5d:54:76:05:08:41:3c:d6:c5:fa:7e:43:b5:20:43:6d:a5:1f:
99:c4:ab:c0:33:b2:6d:a0:fc:d2:06:07:db:9b:c9:95:14:e3:
eb:28:44:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:36:05 2026 by rpki-client