Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/a78ef1-c3c9-43a0-9b1c-1d9d8d004111/1/X5K_96iahZDmq7rsAoKw8k4K_rI.mft
File: X5K_96iahZDmq7rsAoKw8k4K_rI.mft (raw, json)
Hash identifier: mg7RjgQzrli88tX4PT0TQY8tqCHKJi6m80fk5+Hr47E=
Subject key identifier: DB:01:54:63:6F:3F:7D:04:55:B2:0F:88:59:CD:06:3D:8C:EC:DF:C3
Authority key identifier: 5F:92:BF:F7:A8:9A:85:90:E6:AB:BA:EC:02:82:B0:F2:4E:0A:FE:B2
Certificate issuer: /CN=5f92bff7a89a8590e6abbaec0282b0f24e0afeb2
Certificate serial: 019D292993D45115A7372070C84F7D80BEB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X5K_96iahZDmq7rsAoKw8k4K_rI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/a78ef1-c3c9-43a0-9b1c-1d9d8d004111/1/X5K_96iahZDmq7rsAoKw8k4K_rI.mft
Manifest number: 1740
Signing time: Thu 26 Mar 2026 08:01:23 +0000
Manifest this update: Thu 26 Mar 2026 08:01:23 +0000
Manifest next update: Fri 27 Mar 2026 08:01:23 +0000
Files and hashes: 1: X5K_96iahZDmq7rsAoKw8k4K_rI.crl (hash: O/jeWjSyRaJ91D1rNVvDnCmAbAN7Hbc5LflgB1DMYjc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/a78ef1-c3c9-43a0-9b1c-1d9d8d004111/1/X5K_96iahZDmq7rsAoKw8k4K_rI.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/a78ef1-c3c9-43a0-9b1c-1d9d8d004111/1/X5K_96iahZDmq7rsAoKw8k4K_rI.mft
rsync://rpki.ripe.net/repository/DEFAULT/X5K_96iahZDmq7rsAoKw8k4K_rI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:93:d4:51:15:a7:37:20:70:c8:4f:7d:80:be:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f92bff7a89a8590e6abbaec0282b0f24e0afeb2
Validity
Not Before: Mar 26 08:01:23 2026 GMT
Not After : Mar 27 08:01:23 2026 GMT
Subject: CN=db0154636f3f7d0455b20f8859cd063d8cecdfc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:78:2a:b8:50:eb:09:f2:16:b3:13:22:88:06:
c2:6c:b1:50:b9:05:46:96:d9:21:ea:9b:17:60:37:
98:66:0f:91:3b:29:64:95:4d:c4:c3:37:42:a4:06:
2c:6a:a5:cc:75:c8:a0:53:87:e5:bc:9d:dd:97:41:
ad:c1:07:d2:78:65:5c:7b:15:12:53:d3:b6:07:38:
c0:26:8b:1d:16:da:73:b4:4c:a4:be:2b:9c:a1:9d:
f7:95:36:83:f9:a8:b5:f5:11:79:b4:c1:79:d2:16:
3f:46:bf:7e:86:13:49:f9:dd:4d:9a:98:94:1d:e9:
0e:9e:bc:55:cd:f5:2d:e5:57:ee:81:96:1d:7f:40:
72:a8:9d:ac:57:3e:f1:27:bd:77:dd:0e:a3:7c:e0:
ba:6a:ee:c2:ab:bf:de:a8:a4:38:d3:33:87:d7:c9:
f3:b3:58:21:95:1d:0b:0a:d7:ca:e3:20:29:2f:e8:
f4:4f:58:6c:b6:55:2b:15:36:33:a0:c6:87:0b:32:
0f:7d:4d:15:f0:84:74:f4:4e:82:0a:58:7e:c3:f8:
97:8c:c4:e4:34:60:03:89:e5:59:89:0d:dc:c8:0f:
38:02:b3:37:e4:56:8a:86:ef:5a:d2:ea:f1:b6:41:
45:55:51:aa:90:0c:82:a1:7c:06:55:c3:4a:c6:1a:
be:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:01:54:63:6F:3F:7D:04:55:B2:0F:88:59:CD:06:3D:8C:EC:DF:C3
X509v3 Authority Key Identifier:
keyid:5F:92:BF:F7:A8:9A:85:90:E6:AB:BA:EC:02:82:B0:F2:4E:0A:FE:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X5K_96iahZDmq7rsAoKw8k4K_rI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a78ef1-c3c9-43a0-9b1c-1d9d8d004111/1/X5K_96iahZDmq7rsAoKw8k4K_rI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a78ef1-c3c9-43a0-9b1c-1d9d8d004111/1/X5K_96iahZDmq7rsAoKw8k4K_rI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:59:10:11:73:09:7c:b5:79:db:c6:04:c6:4e:dc:97:c3:6f:
5a:22:79:07:77:b9:1d:01:d0:78:90:31:d2:c3:1f:6d:b1:2b:
79:16:4f:50:d9:71:c8:b5:77:84:d8:95:ea:b5:0c:00:72:3b:
2a:a7:44:ab:f4:3d:fe:94:fc:3f:b0:35:ac:fb:a5:87:19:fb:
a3:4b:e8:2a:6d:37:71:84:e2:8e:b9:58:c7:8e:d4:bc:ab:92:
f5:9a:e6:1b:dc:76:17:18:f0:9e:e6:3e:f3:f3:00:44:31:09:
91:6d:fc:1b:c9:9a:01:d0:32:07:58:b7:fc:4e:8e:6f:33:ec:
c7:e5:51:3a:e0:d0:72:1c:dc:13:1a:13:3a:90:0e:b4:da:2f:
c8:b6:b8:e2:90:02:24:1d:82:e4:b2:72:b8:74:4c:eb:0d:66:
70:c6:13:ef:9d:c0:a0:1a:09:5c:be:b3:47:87:35:28:b4:f3:
6f:7f:54:a0:6a:e3:ed:11:9f:44:be:8f:97:d0:9c:99:68:76:
3e:1b:ec:bb:c6:c3:44:71:46:5a:40:d0:51:68:75:96:2d:d9:
fd:aa:ac:7c:8c:8c:81:4b:7f:63:b9:48:6e:79:5c:b2:d8:dc:
bc:68:08:01:72:ec:f3:d9:b7:ac:33:7c:83:2c:8b:ca:b2:40:
7e:3c:c3:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:25:10 2026 by rpki-client