Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.mft
File: 5R1xf7LUN9QR2HGve5-8sB6J-Ww.mft (raw, json)
Hash identifier: MGZ0djFsdgU1PSuk+Kjp9mx/9DTQCu9F0ClUVv+AhVo=
Subject key identifier: CA:96:AE:CB:5D:2E:40:63:9C:3C:08:E4:A5:CB:23:44:AB:FD:54:14
Authority key identifier: E5:1D:71:7F:B2:D4:37:D4:11:D8:71:AF:7B:9F:BC:B0:1E:89:F9:6C
Certificate issuer: /CN=e51d717fb2d437d411d871af7b9fbcb01e89f96c
Certificate serial: 019D284D747D61D8D96FE29B8A2EA0A92BE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5R1xf7LUN9QR2HGve5-8sB6J-Ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.mft
Manifest number: 0DA9
Signing time: Thu 26 Mar 2026 04:00:57 +0000
Manifest this update: Thu 26 Mar 2026 04:00:57 +0000
Manifest next update: Fri 27 Mar 2026 04:00:57 +0000
Files and hashes: 1: 5R1xf7LUN9QR2HGve5-8sB6J-Ww.crl (hash: 22jeGCTCJf5n0qCPUxjGPiGGSqvt0Xzg/yLDauZ8Y0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.mft
rsync://rpki.ripe.net/repository/DEFAULT/5R1xf7LUN9QR2HGve5-8sB6J-Ww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:74:7d:61:d8:d9:6f:e2:9b:8a:2e:a0:a9:2b:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e51d717fb2d437d411d871af7b9fbcb01e89f96c
Validity
Not Before: Mar 26 04:00:57 2026 GMT
Not After : Mar 27 04:00:57 2026 GMT
Subject: CN=ca96aecb5d2e40639c3c08e4a5cb2344abfd5414
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b1:93:af:c6:87:71:1c:98:81:ef:df:d7:08:
b2:d1:3d:26:0e:9d:a3:49:3a:fd:06:86:d1:87:07:
67:21:f7:cb:cd:52:cf:98:59:6a:7e:7f:67:0c:b0:
97:eb:8b:16:4f:75:61:6f:4c:b2:42:8d:5e:21:30:
b3:1a:01:bc:60:39:eb:00:84:ac:cb:10:75:6f:2a:
48:33:49:47:98:7a:c3:39:cf:d2:28:81:cf:f2:56:
6a:b4:7f:cc:ef:10:11:72:08:20:8f:94:d8:e0:a2:
74:d8:d4:8c:29:2c:63:91:c3:8b:db:25:0d:66:77:
ba:5d:21:a9:79:ed:6d:13:56:78:59:cc:a2:e0:25:
4d:14:72:b9:92:03:3c:2a:c8:26:58:8f:b0:f5:0a:
c5:a8:78:72:7e:06:b0:6d:0f:79:f4:58:ec:7a:cb:
dd:66:68:99:df:96:34:22:d5:cb:02:64:21:8d:cd:
c1:62:6c:af:8a:5f:81:4d:3c:0c:07:d6:ca:78:7e:
41:5a:20:a9:ff:3a:40:30:bb:f2:82:78:41:ec:d3:
e0:79:8c:a5:c7:8d:0a:ab:54:4e:08:b2:45:e0:f1:
55:6d:ff:4e:63:cc:a3:5d:05:73:9f:3d:8d:7f:90:
5a:67:53:12:7f:85:7d:0d:e9:17:4a:24:25:b2:0b:
f4:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:96:AE:CB:5D:2E:40:63:9C:3C:08:E4:A5:CB:23:44:AB:FD:54:14
X509v3 Authority Key Identifier:
keyid:E5:1D:71:7F:B2:D4:37:D4:11:D8:71:AF:7B:9F:BC:B0:1E:89:F9:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5R1xf7LUN9QR2HGve5-8sB6J-Ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:57:90:63:52:d7:ef:93:cb:cb:be:cd:b4:bc:6a:10:08:b2:
0a:d5:01:16:74:40:a2:57:d1:7a:38:02:34:5e:4b:d2:dd:b7:
c6:7c:df:c3:f3:bf:3a:b7:c4:ad:4b:dd:68:0f:4f:b5:cf:ab:
50:97:4a:c3:41:30:6c:62:b3:e4:78:0c:ca:45:4c:45:a5:23:
2d:cb:6f:59:39:ef:29:fc:16:70:4c:35:00:a2:72:bd:50:c6:
3a:11:28:ff:ec:c3:1c:bf:d1:01:fb:81:cf:b5:97:f3:4e:44:
dd:7c:13:39:f5:f7:ed:24:b8:a6:9c:51:4e:27:5c:68:9b:d2:
6f:4b:6e:f7:54:f5:51:9a:d8:33:a2:36:d7:f0:c2:ef:68:32:
d6:26:24:1a:99:ce:5b:df:8b:c6:aa:5a:52:57:a2:f4:b2:5b:
66:b5:b1:43:7e:65:c5:0d:a3:8a:c0:e9:70:bc:2e:a2:d4:8b:
bf:23:57:d0:db:e8:95:f5:79:00:46:80:52:3d:34:a6:3c:fa:
a6:ca:bb:82:b4:ec:55:67:1c:d6:26:f2:f7:54:d5:9e:67:38:
c6:7f:1d:16:d7:61:63:ea:00:b3:d9:f4:48:67:48:d1:17:4f:
4e:07:ab:4a:5f:75:00:74:a6:44:d9:71:a4:5d:5e:96:0d:38:
14:53:d1:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:29:45 2026 by rpki-client