Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/87e558-093f-4150-928d-48233117178c/1/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.mft
File: Id5ZR9m99rCBVqk5vSDZNJLHEQQ.mft (raw, json)
Hash identifier: ATbdGFewj95GbAAT4bEZeWx2tPPQhPhLL8oXPVCj83w=
Subject key identifier: 8E:8C:05:96:6F:5A:84:44:CA:7C:34:98:CC:B5:78:C5:46:A0:4F:50
Authority key identifier: 21:DE:59:47:D9:BD:F6:B0:81:56:A9:39:BD:20:D9:34:92:C7:11:04
Certificate issuer: /CN=21de5947d9bdf6b08156a939bd20d93492c71104
Certificate serial: 019D2583D072CA52F2A7A39A6B362837B89E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/87e558-093f-4150-928d-48233117178c/1/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.mft
Manifest number: 0E5F
Signing time: Wed 25 Mar 2026 15:01:28 +0000
Manifest this update: Wed 25 Mar 2026 15:01:28 +0000
Manifest next update: Thu 26 Mar 2026 15:01:28 +0000
Files and hashes: 1: Id5ZR9m99rCBVqk5vSDZNJLHEQQ.crl (hash: qPbs2R48J6gvy2+Af+mEVo6wqdXPUHY0fs3YpGCAFWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/87e558-093f-4150-928d-48233117178c/1/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/87e558-093f-4150-928d-48233117178c/1/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:d0:72:ca:52:f2:a7:a3:9a:6b:36:28:37:b8:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21de5947d9bdf6b08156a939bd20d93492c71104
Validity
Not Before: Mar 25 15:01:28 2026 GMT
Not After : Mar 26 15:01:28 2026 GMT
Subject: CN=8e8c05966f5a8444ca7c3498ccb578c546a04f50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:08:4e:bd:84:cb:7e:17:6d:06:dc:0c:d7:9d:
62:9d:7f:c5:65:52:13:93:c8:d4:c4:fd:84:31:41:
f5:84:fe:bd:ac:05:e8:55:ca:36:d4:d0:85:ca:d7:
6f:20:f0:a4:ba:6e:ab:91:76:f3:19:93:46:4b:05:
20:4b:d8:47:94:89:af:eb:43:b4:5a:60:2f:2e:34:
4d:bb:60:04:91:c5:ce:f7:99:8b:71:8e:b4:0e:e9:
2d:44:46:75:f2:3c:c8:76:84:94:cc:0a:fb:be:e5:
93:f0:2f:5f:76:c5:ad:5f:a2:06:1e:56:5c:2f:7b:
7c:0b:26:b6:db:8b:60:14:ef:91:24:19:a1:45:60:
ab:70:8e:c8:7b:80:0c:bf:a9:b0:e5:cb:a0:d9:88:
33:88:62:6d:db:0a:d3:61:64:16:1c:49:99:71:fb:
be:8c:fc:55:14:fa:47:b1:3d:f5:e1:12:83:de:22:
51:60:9b:6d:b6:d1:60:2b:20:14:cc:03:f8:d3:45:
25:ae:ab:d1:ba:d7:8b:03:fe:67:94:f4:5e:48:73:
da:e8:d9:17:0f:30:31:41:7c:50:ed:2e:a8:11:16:
ed:d0:60:c3:0f:fd:c6:66:e0:5e:18:a7:40:c6:aa:
ba:14:29:05:3e:aa:50:5d:9d:1a:f7:fc:f3:8c:24:
52:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:8C:05:96:6F:5A:84:44:CA:7C:34:98:CC:B5:78:C5:46:A0:4F:50
X509v3 Authority Key Identifier:
keyid:21:DE:59:47:D9:BD:F6:B0:81:56:A9:39:BD:20:D9:34:92:C7:11:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/87e558-093f-4150-928d-48233117178c/1/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/87e558-093f-4150-928d-48233117178c/1/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:2e:78:95:df:90:46:91:e0:87:a8:af:7d:24:1e:7f:27:da:
46:2f:06:69:be:7c:5c:06:df:93:49:03:64:af:f7:c0:3e:29:
0f:a5:81:9b:a4:a4:fc:32:9d:b8:94:80:94:8b:5b:f1:3c:e3:
4f:b1:3d:de:ae:ff:2c:6c:b8:e3:57:74:1d:9c:85:a6:22:cd:
b6:72:cc:b6:36:e8:16:9e:55:d1:e4:bc:cd:20:9b:ed:99:7b:
2d:3d:4e:9f:ea:50:5f:f1:f7:78:fb:4b:fb:4f:e6:ba:11:de:
63:7b:02:b5:20:44:2e:5f:98:cb:50:4c:04:4d:c6:86:aa:99:
0a:dd:04:f4:51:77:63:00:38:e1:3b:cf:8f:13:69:04:7d:57:
7d:30:6b:e0:0d:01:16:d0:05:33:54:7b:94:80:97:d4:d5:64:
b5:1a:ff:18:d8:a5:59:26:62:2a:db:fa:74:d2:d8:16:55:f9:
9f:ac:db:e9:7c:fb:5c:70:f0:ed:ba:7d:57:c9:a2:45:3c:22:
f4:d9:51:9a:69:4e:3e:6c:69:47:53:ed:86:67:67:8b:88:71:
8a:32:75:1c:39:53:e7:8f:71:f6:96:be:41:a1:7d:f0:89:60:
e4:61:86:6b:48:79:71:0f:66:4b:4d:58:a6:89:d8:91:88:1a:
db:b3:2f:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:22:31 2026 by rpki-client