Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/9360f5-1deb-4b43-a32f-ac44bc569a78/1/5zOy6rfiNGh76X-MNdbmzD4t_Lo.mft
File: 5zOy6rfiNGh76X-MNdbmzD4t_Lo.mft (raw, json)
Hash identifier: 99DuWt24sVVxlfuIFR9XJ4jvlReJVbCpgZCym+1RFHg=
Subject key identifier: B3:6A:10:31:6F:3D:9A:29:ED:99:0C:A4:E7:40:38:1B:57:89:F2:68
Authority key identifier: E7:33:B2:EA:B7:E2:34:68:7B:E9:7F:8C:35:D6:E6:CC:3E:2D:FC:BA
Certificate issuer: /CN=e733b2eab7e234687be97f8c35d6e6cc3e2dfcba
Certificate serial: 019D299790237BB30C1C28DB4D2D00CC2F6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5zOy6rfiNGh76X-MNdbmzD4t_Lo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/9360f5-1deb-4b43-a32f-ac44bc569a78/1/5zOy6rfiNGh76X-MNdbmzD4t_Lo.mft
Manifest number: 1884
Signing time: Thu 26 Mar 2026 10:01:31 +0000
Manifest this update: Thu 26 Mar 2026 10:01:31 +0000
Manifest next update: Fri 27 Mar 2026 10:01:31 +0000
Files and hashes: 1: 5zOy6rfiNGh76X-MNdbmzD4t_Lo.crl (hash: tTxprAZhRcsCRrNA8IC/hfi7C7ZelGJMwWGq7jeqQs4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/9360f5-1deb-4b43-a32f-ac44bc569a78/1/5zOy6rfiNGh76X-MNdbmzD4t_Lo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/9360f5-1deb-4b43-a32f-ac44bc569a78/1/5zOy6rfiNGh76X-MNdbmzD4t_Lo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5zOy6rfiNGh76X-MNdbmzD4t_Lo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:90:23:7b:b3:0c:1c:28:db:4d:2d:00:cc:2f:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e733b2eab7e234687be97f8c35d6e6cc3e2dfcba
Validity
Not Before: Mar 26 10:01:31 2026 GMT
Not After : Mar 27 10:01:31 2026 GMT
Subject: CN=b36a10316f3d9a29ed990ca4e740381b5789f268
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:28:08:d0:6d:9c:30:46:2b:6a:2b:59:d3:78:
7d:d6:b3:00:d3:21:17:09:b5:72:59:7c:fd:85:20:
6c:ec:b8:43:74:68:0b:6f:77:40:a1:8c:86:1c:0f:
e6:0c:7c:15:0a:b6:a1:36:ac:f5:24:4c:20:d3:64:
22:67:2b:72:69:c6:7d:4a:85:4c:ad:7f:2b:18:fc:
40:8f:15:03:94:9f:aa:c1:fb:c9:40:15:f5:af:d8:
4b:4f:e5:4b:3e:9a:88:d7:aa:12:1e:d4:0c:dc:b3:
bf:39:db:9e:e8:0c:ae:46:bc:ad:c8:ed:bb:2a:c0:
b6:b7:ed:60:54:ce:8f:ef:98:cc:ad:7f:12:0d:6f:
13:73:f2:7f:18:6c:df:5c:9b:ea:39:0e:20:6c:fa:
90:4b:77:ac:98:fe:08:f5:09:56:b9:07:ff:91:e7:
1b:5f:12:a2:a4:67:20:c4:e6:02:9d:47:02:2d:a1:
f9:cb:6d:b8:d0:51:2c:98:21:09:6d:1f:d9:2d:e3:
6b:78:67:7f:be:fb:4e:f4:aa:27:e9:3d:29:5f:76:
1d:42:fa:5e:01:42:5d:cc:d8:8c:98:6d:78:b7:41:
a6:7a:17:f8:eb:67:d0:9f:3d:ec:c6:64:02:5d:2c:
45:a5:8c:23:18:89:c8:dc:fa:8e:f0:df:33:bb:58:
ac:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:6A:10:31:6F:3D:9A:29:ED:99:0C:A4:E7:40:38:1B:57:89:F2:68
X509v3 Authority Key Identifier:
keyid:E7:33:B2:EA:B7:E2:34:68:7B:E9:7F:8C:35:D6:E6:CC:3E:2D:FC:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zOy6rfiNGh76X-MNdbmzD4t_Lo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9360f5-1deb-4b43-a32f-ac44bc569a78/1/5zOy6rfiNGh76X-MNdbmzD4t_Lo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9360f5-1deb-4b43-a32f-ac44bc569a78/1/5zOy6rfiNGh76X-MNdbmzD4t_Lo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:be:e8:4f:fb:fe:2b:a3:99:fb:12:fc:bc:6f:af:b5:f4:4c:
29:8a:c5:b0:bc:8d:be:04:9c:9b:77:46:a2:f5:26:bd:cd:c3:
c5:79:d6:ff:38:3c:8e:5b:6b:c6:f3:43:8e:51:c0:5a:ea:cf:
3b:e9:10:3d:bd:15:0f:b1:14:78:5f:1b:dd:87:8f:de:6c:94:
0d:3b:1e:ae:5d:04:ad:94:8c:73:86:bd:de:45:26:34:d2:38:
ec:6d:4a:78:b2:45:c1:e9:1b:56:90:a6:ab:fa:af:cb:98:42:
9b:92:26:d4:91:7a:a9:b7:32:a3:d5:be:ff:b8:d6:c9:ab:83:
90:79:07:b6:ef:ac:06:bd:f2:25:61:86:17:fc:0c:63:94:4c:
f9:70:b4:1e:5d:68:4b:2b:85:f5:e6:f3:c2:b3:d2:f3:00:21:
45:85:59:e7:2d:12:38:57:c9:cb:25:6c:86:26:2a:0d:24:6b:
e9:f8:24:39:b6:12:58:1b:40:89:7b:70:dc:94:b5:6e:8b:bc:
1f:29:8e:84:be:53:36:c8:90:c2:21:b5:26:36:4c:14:3d:bf:
ba:f4:f0:d4:8e:5c:a4:06:8a:2c:4a:5a:bf:dd:18:c1:2a:34:
60:e7:53:e8:f7:8e:ee:2c:85:5e:3d:b9:1c:ec:ba:02:a1:e5:
6b:8d:96:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:36:43 2026 by rpki-client