Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/020b7a-74a3-4594-9c46-d5bdb639fbca/1/5frVG_rdJFMhvgkuaB2N5uLSdcM.mft
File: 5frVG_rdJFMhvgkuaB2N5uLSdcM.mft (raw, json)
Hash identifier: bK6Xgqrr9GuSN15HGdxitTZfcb6zmaoJy3flR7UYZk8=
Subject key identifier: A9:9E:27:53:42:90:0D:2D:12:E7:9A:31:4B:91:6F:20:2E:03:2A:17
Authority key identifier: E5:FA:D5:1B:FA:DD:24:53:21:BE:09:2E:68:1D:8D:E6:E2:D2:75:C3
Certificate issuer: /CN=e5fad51bfadd245321be092e681d8de6e2d275c3
Certificate serial: 019D25F1B7207C1C1D8453ABC3EF7EC0B8FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5frVG_rdJFMhvgkuaB2N5uLSdcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/020b7a-74a3-4594-9c46-d5bdb639fbca/1/5frVG_rdJFMhvgkuaB2N5uLSdcM.mft
Manifest number: 0809
Signing time: Wed 25 Mar 2026 17:01:31 +0000
Manifest this update: Wed 25 Mar 2026 17:01:31 +0000
Manifest next update: Thu 26 Mar 2026 17:01:31 +0000
Files and hashes: 1: 5frVG_rdJFMhvgkuaB2N5uLSdcM.crl (hash: G+CKDN2Qh1QfmzmhSBaSq/fmYHpwzjGs6zGrammaM6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/020b7a-74a3-4594-9c46-d5bdb639fbca/1/5frVG_rdJFMhvgkuaB2N5uLSdcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/020b7a-74a3-4594-9c46-d5bdb639fbca/1/5frVG_rdJFMhvgkuaB2N5uLSdcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/5frVG_rdJFMhvgkuaB2N5uLSdcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:b7:20:7c:1c:1d:84:53:ab:c3:ef:7e:c0:b8:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5fad51bfadd245321be092e681d8de6e2d275c3
Validity
Not Before: Mar 25 17:01:31 2026 GMT
Not After : Mar 26 17:01:31 2026 GMT
Subject: CN=a99e275342900d2d12e79a314b916f202e032a17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c6:12:ee:f1:89:1b:8b:0c:26:e0:d8:ab:d5:
c8:7e:80:e7:9d:b9:2d:f6:8e:42:40:7e:e6:aa:99:
30:ef:8b:ac:c0:cd:12:6b:11:3f:75:fd:71:97:55:
56:03:30:c8:43:23:84:1c:80:eb:a2:97:72:62:a3:
b6:cb:aa:8d:96:fa:8e:8f:6d:2f:0f:cb:51:e9:91:
d6:73:de:d1:47:3f:dd:f7:b2:81:5d:c8:2a:fb:59:
3c:91:9f:51:5e:fa:61:b1:a1:7c:4b:4f:6f:f5:86:
36:db:c7:f6:bf:9e:be:38:4c:c6:47:2d:e3:d9:2b:
42:ac:c2:14:1a:e8:e2:43:d0:ae:9c:a3:51:1e:bc:
d3:5b:dc:39:f7:24:16:61:b8:4b:80:9d:86:60:e7:
5f:d1:4c:bb:5d:13:61:5a:68:ea:7a:eb:4d:bf:35:
68:ba:00:41:61:95:94:2c:fd:6b:14:c9:12:9f:2c:
e5:93:7f:d4:46:04:ca:c8:6a:1e:09:c1:25:43:0b:
c2:52:b8:7f:c9:f3:94:ef:5f:b5:aa:83:08:46:d5:
53:bb:2d:18:fd:04:7a:cd:8b:9d:2f:41:9c:d3:49:
bc:55:6f:ca:58:92:ac:ac:b8:b4:74:7d:9a:1b:ab:
42:6f:2a:51:41:57:9a:91:58:f8:8a:95:00:a7:36:
55:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:9E:27:53:42:90:0D:2D:12:E7:9A:31:4B:91:6F:20:2E:03:2A:17
X509v3 Authority Key Identifier:
keyid:E5:FA:D5:1B:FA:DD:24:53:21:BE:09:2E:68:1D:8D:E6:E2:D2:75:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5frVG_rdJFMhvgkuaB2N5uLSdcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/020b7a-74a3-4594-9c46-d5bdb639fbca/1/5frVG_rdJFMhvgkuaB2N5uLSdcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/020b7a-74a3-4594-9c46-d5bdb639fbca/1/5frVG_rdJFMhvgkuaB2N5uLSdcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:f6:5d:15:98:bb:5f:af:7e:ba:b7:70:27:dc:1e:86:ea:26:
69:3b:ae:93:ed:91:18:00:c7:cb:88:0b:5a:16:fe:4c:a9:e4:
ce:59:09:e1:14:3e:1f:ad:0c:e9:23:b6:5a:da:59:4e:b4:c9:
b1:f8:34:70:1d:1f:2e:1c:29:0e:34:7e:8e:6f:4c:de:c5:dc:
10:3c:4a:b4:34:e7:61:8f:12:1a:b9:8b:25:de:54:9f:47:56:
0d:e4:85:60:b5:0a:d2:2c:76:f9:2b:cb:4b:d7:bf:01:7f:4e:
a4:57:47:cf:7e:3f:ea:2c:17:b4:a3:b7:15:89:da:8f:ff:2a:
f2:20:e2:a3:b5:77:c8:34:39:bf:d8:52:5d:fe:09:e8:95:e1:
f4:75:50:07:17:7c:45:36:2b:36:48:a8:aa:7e:a5:f8:51:2e:
a2:cc:58:99:3b:7b:6a:29:2c:a9:6e:92:b1:f0:c8:20:b0:f7:
df:9b:37:84:0b:53:34:a5:26:8d:00:64:41:5d:a2:78:2d:b3:
f3:b6:e1:b4:0c:d1:15:40:f3:5d:20:f7:9f:64:c5:2d:99:86:
07:1f:0d:1d:27:50:fb:ee:9b:50:ff:30:d5:3a:b4:58:64:75:
83:84:2f:dd:76:33:1d:1e:dc:b0:95:0c:16:86:d5:3f:da:46:
7d:e3:38:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:55:57 2026 by rpki-client