Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/c727bf-7709-4b33-b618-a6c5000c7184/1/l5SL1vKtFY5iT9jonp718b2x05o.mft
File: l5SL1vKtFY5iT9jonp718b2x05o.mft (raw, json)
Hash identifier: fUtRm0BTLoxdsHGDdJ2O0CtvXFQmJkvE5Q7DtJCzPUE=
Subject key identifier: 9D:D4:B1:63:D8:65:59:B5:43:4B:58:CA:71:C1:55:6A:B7:05:10:B8
Authority key identifier: 97:94:8B:D6:F2:AD:15:8E:62:4F:D8:E8:9E:9E:F5:F1:BD:B1:D3:9A
Certificate issuer: /CN=97948bd6f2ad158e624fd8e89e9ef5f1bdb1d39a
Certificate serial: 019D270411CCE92B84EDD00BF854C5344CF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l5SL1vKtFY5iT9jonp718b2x05o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/c727bf-7709-4b33-b618-a6c5000c7184/1/l5SL1vKtFY5iT9jonp718b2x05o.mft
Manifest number: 05B5
Signing time: Wed 25 Mar 2026 22:01:11 +0000
Manifest this update: Wed 25 Mar 2026 22:01:11 +0000
Manifest next update: Thu 26 Mar 2026 22:01:11 +0000
Files and hashes: 1: l5SL1vKtFY5iT9jonp718b2x05o.crl (hash: OCwyVSFmw31ooJCctCvmuqTGov9BU8XzBfrVvD9/xao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/c727bf-7709-4b33-b618-a6c5000c7184/1/l5SL1vKtFY5iT9jonp718b2x05o.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/c727bf-7709-4b33-b618-a6c5000c7184/1/l5SL1vKtFY5iT9jonp718b2x05o.mft
rsync://rpki.ripe.net/repository/DEFAULT/l5SL1vKtFY5iT9jonp718b2x05o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:11:cc:e9:2b:84:ed:d0:0b:f8:54:c5:34:4c:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97948bd6f2ad158e624fd8e89e9ef5f1bdb1d39a
Validity
Not Before: Mar 25 22:01:11 2026 GMT
Not After : Mar 26 22:01:11 2026 GMT
Subject: CN=9dd4b163d86559b5434b58ca71c1556ab70510b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6d:d8:6d:e3:cf:6e:ce:eb:7c:43:dc:ff:e6:
6f:33:de:5c:93:f2:72:25:b1:c5:4b:7e:eb:80:41:
7b:5e:f9:21:f7:e0:5e:1e:a8:89:f7:69:77:45:20:
78:3d:cb:93:ed:a6:0a:85:c0:4b:00:6f:17:bf:53:
08:f6:df:29:2c:f0:8a:5f:a1:6d:82:42:3a:b8:b8:
aa:ea:cb:ed:d1:c7:36:9c:6f:c2:33:63:db:15:69:
dd:b1:84:21:52:99:6a:87:a0:27:99:9c:20:c4:bb:
25:57:7b:7a:7d:fc:0a:bc:3b:17:28:f7:f7:e8:a0:
9c:0f:31:2c:b9:70:01:87:3f:b4:a1:6b:80:d2:5d:
b2:8d:b9:95:51:c6:52:a6:dd:81:4d:ba:33:69:e9:
85:72:c8:0d:e5:08:72:77:08:6c:49:fd:6c:c1:b3:
11:ba:c8:a6:44:4b:e3:09:6a:78:69:55:3c:cd:b1:
3f:f8:64:2a:ec:da:82:b1:1a:c3:8b:9b:39:18:aa:
34:7f:b2:27:cf:0b:b5:f7:41:85:4b:43:3a:1d:25:
32:ce:20:dd:d2:5f:6b:e4:6b:95:ca:17:08:54:79:
ba:6d:cc:95:b6:77:70:c7:72:12:9b:57:45:b2:1d:
0f:0f:68:f7:31:2c:5f:a8:e2:f1:91:9e:91:b6:a0:
3a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:D4:B1:63:D8:65:59:B5:43:4B:58:CA:71:C1:55:6A:B7:05:10:B8
X509v3 Authority Key Identifier:
keyid:97:94:8B:D6:F2:AD:15:8E:62:4F:D8:E8:9E:9E:F5:F1:BD:B1:D3:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5SL1vKtFY5iT9jonp718b2x05o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c727bf-7709-4b33-b618-a6c5000c7184/1/l5SL1vKtFY5iT9jonp718b2x05o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c727bf-7709-4b33-b618-a6c5000c7184/1/l5SL1vKtFY5iT9jonp718b2x05o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:ad:9d:a1:6f:b2:11:e2:e1:bc:ca:61:aa:30:40:9c:4e:d5:
76:0b:d8:28:23:9a:5b:3d:61:c1:e9:c5:9d:3b:47:c0:46:55:
f9:ec:11:87:92:fb:df:46:b8:6f:ca:b4:c5:31:0c:aa:07:52:
84:78:2e:72:20:70:0c:e8:1c:eb:d9:c2:84:9b:8a:82:be:9b:
fb:45:b2:58:7f:3f:6c:94:44:da:4f:e0:7c:34:78:e0:2a:5f:
3a:08:48:54:16:90:52:bf:ea:7d:2e:db:06:37:fc:06:e5:12:
af:3d:ac:fe:d2:86:73:e1:09:35:c3:82:30:f4:dd:12:8e:14:
c1:9e:bf:28:14:a2:c1:61:b0:e4:dc:b5:65:bc:19:be:b9:63:
54:d0:e8:02:74:c8:47:18:34:83:fd:af:40:4d:0e:34:d6:99:
d0:d2:03:90:e4:8a:cb:dd:73:3a:bf:e5:5d:b9:d2:9d:03:56:
30:a8:77:63:0f:0b:4c:d8:8f:fa:0a:80:90:16:22:12:22:97:
88:f4:df:c9:7a:4d:15:71:63:e4:97:d6:d3:c3:10:04:b0:97:
7c:39:65:61:ba:b6:27:ee:6a:54:40:24:03:2f:8e:84:fb:e5:
de:c9:f9:5f:9a:dc:6f:42:56:24:7b:da:59:23:40:ae:d5:48:
c4:b9:a0:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:50:43 2026 by rpki-client