Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/dc3294-bd4f-4fef-b9f7-3662785baaad/1/v5r7gj8fivhy55Pye2St74zU3Bs.mft
File: v5r7gj8fivhy55Pye2St74zU3Bs.mft (raw, json)
Hash identifier: n9agSzYbRUYHWSBXHOtPLpZv4IKw15qCnSc6MO3058E=
Subject key identifier: 12:93:E6:37:16:A5:2D:90:2F:D5:BD:FF:13:74:F5:53:A2:3E:87:78
Authority key identifier: BF:9A:FB:82:3F:1F:8A:F8:72:E7:93:F2:7B:64:AD:EF:8C:D4:DC:1B
Certificate issuer: /CN=bf9afb823f1f8af872e793f27b64adef8cd4dc1b
Certificate serial: 019D28167006E6CA04A1318E171DF5E97A9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v5r7gj8fivhy55Pye2St74zU3Bs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/dc3294-bd4f-4fef-b9f7-3662785baaad/1/v5r7gj8fivhy55Pye2St74zU3Bs.mft
Manifest number: 0643
Signing time: Thu 26 Mar 2026 03:00:52 +0000
Manifest this update: Thu 26 Mar 2026 03:00:52 +0000
Manifest next update: Fri 27 Mar 2026 03:00:52 +0000
Files and hashes: 1: v5r7gj8fivhy55Pye2St74zU3Bs.crl (hash: 5iM8eg/Ig32bQ0nWnDZPsB+G/0MRCpKz/6HCl91HIoA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/dc3294-bd4f-4fef-b9f7-3662785baaad/1/v5r7gj8fivhy55Pye2St74zU3Bs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/dc3294-bd4f-4fef-b9f7-3662785baaad/1/v5r7gj8fivhy55Pye2St74zU3Bs.mft
rsync://rpki.ripe.net/repository/DEFAULT/v5r7gj8fivhy55Pye2St74zU3Bs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:70:06:e6:ca:04:a1:31:8e:17:1d:f5:e9:7a:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf9afb823f1f8af872e793f27b64adef8cd4dc1b
Validity
Not Before: Mar 26 03:00:52 2026 GMT
Not After : Mar 27 03:00:52 2026 GMT
Subject: CN=1293e63716a52d902fd5bdff1374f553a23e8778
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ca:8e:db:d0:95:07:df:f0:9c:2a:a6:68:22:
66:98:99:09:11:a7:c4:8b:27:11:4b:21:61:ec:f6:
f4:d2:8e:2c:3d:7f:2e:8e:d3:0f:4d:37:ef:2e:d7:
e7:80:58:33:bd:c2:5b:f8:95:c2:99:d8:15:7e:fd:
dc:b2:0a:03:9c:dd:bb:6c:29:f1:54:4c:57:19:96:
41:e2:6b:15:a7:68:9c:fb:e7:c4:9b:ef:1a:08:60:
06:f5:d3:a8:d5:e1:9b:46:4c:5f:70:ad:1f:84:8e:
64:78:cb:66:da:e4:76:b7:39:e5:7f:1b:84:d1:85:
46:5b:f5:d9:ed:33:fc:1d:01:80:5f:95:a4:bb:65:
30:e7:fc:64:8d:83:70:91:9e:11:40:e9:b9:4c:54:
78:59:a8:1e:b3:56:0f:39:7e:ec:ae:75:ac:a0:33:
86:aa:de:32:53:d7:d9:21:f8:ac:31:0e:79:57:46:
4d:55:40:85:f8:72:8b:05:11:71:8b:a8:8b:54:02:
c8:f5:ae:62:6c:fc:71:b4:9b:7d:65:98:f0:25:bc:
a4:ef:58:43:7b:e2:29:84:dd:db:28:0f:b4:a3:0e:
4e:ea:f1:e2:6a:7a:e0:fc:bc:9a:bf:95:dd:42:f8:
69:87:0a:22:1c:3f:0f:5b:67:46:d8:03:8d:00:e6:
8a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:93:E6:37:16:A5:2D:90:2F:D5:BD:FF:13:74:F5:53:A2:3E:87:78
X509v3 Authority Key Identifier:
keyid:BF:9A:FB:82:3F:1F:8A:F8:72:E7:93:F2:7B:64:AD:EF:8C:D4:DC:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v5r7gj8fivhy55Pye2St74zU3Bs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/dc3294-bd4f-4fef-b9f7-3662785baaad/1/v5r7gj8fivhy55Pye2St74zU3Bs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/dc3294-bd4f-4fef-b9f7-3662785baaad/1/v5r7gj8fivhy55Pye2St74zU3Bs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:73:fe:3c:d5:6d:d5:40:9f:a8:0e:79:14:76:d8:4e:b6:66:
ed:fb:bf:cb:22:d0:df:71:3b:07:2d:ae:0f:bb:09:b4:78:78:
e9:3e:e7:48:e1:2f:83:8e:3a:c1:3c:c6:50:b8:cc:b3:14:95:
18:39:34:45:5d:4b:95:4d:29:cc:17:46:e0:92:f3:98:7f:a4:
44:39:36:2a:fb:5f:f9:93:a9:50:5f:d1:cc:79:30:83:48:c2:
af:e1:60:fa:80:85:75:04:89:e1:6e:4a:3f:fd:65:8b:4a:56:
7b:ed:3c:ce:b8:a5:7a:8e:aa:71:c8:09:93:a3:e9:43:03:29:
4c:4e:83:f2:3c:9b:8a:51:c5:2a:52:d0:db:d3:51:8d:cf:51:
e4:39:3c:21:49:d9:e7:dc:4e:34:15:e7:6a:82:0d:79:61:8d:
d8:9c:b6:22:6f:c1:f8:f9:e2:16:00:59:55:8a:5a:81:bd:97:
57:8c:5e:e8:89:67:3c:9d:bf:f3:7a:79:80:72:ee:26:78:81:
48:a9:3a:95:54:7a:92:ea:64:03:01:2a:52:20:77:68:e9:32:
ea:a2:40:34:a7:37:1c:3a:a3:7d:0f:e2:f2:99:9b:72:7a:c8:
df:cb:6a:65:a3:d4:2b:df:e7:43:29:cc:ef:55:63:9c:bc:cf:
cd:8e:d7:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:40:18 2026 by rpki-client