Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/b98bda-d3c9-4d0c-a195-699621e00f46/1/5rXcl7gB-g_7kwBcy_TWcnt1GSo.mft
File: 5rXcl7gB-g_7kwBcy_TWcnt1GSo.mft (raw, json)
Hash identifier: T12oQCTZi8OGMM1s7EfnOetUpMZA/75QaD7fqBkUku8=
Subject key identifier: 68:4C:81:1C:5A:7F:4B:75:84:3F:29:FB:36:19:35:B9:B8:B2:A8:37
Authority key identifier: E6:B5:DC:97:B8:01:FA:0F:FB:93:00:5C:CB:F4:D6:72:7B:75:19:2A
Certificate issuer: /CN=e6b5dc97b801fa0ffb93005ccbf4d6727b75192a
Certificate serial: 019D2A04621C4A35259C0C16DCE52B93B45E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5rXcl7gB-g_7kwBcy_TWcnt1GSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/b98bda-d3c9-4d0c-a195-699621e00f46/1/5rXcl7gB-g_7kwBcy_TWcnt1GSo.mft
Manifest number: AF
Signing time: Thu 26 Mar 2026 12:00:23 +0000
Manifest this update: Thu 26 Mar 2026 12:00:23 +0000
Manifest next update: Fri 27 Mar 2026 12:00:23 +0000
Files and hashes: 1: 5rXcl7gB-g_7kwBcy_TWcnt1GSo.crl (hash: H+xr+7xtidhR5hka7/Q7VNNYXRXPI2XnU40eiBqbX1s=)
2: A72vNYtrAqZwGwVdWSRVIoELlNU.roa (hash: HjnhtlX3seiaGTReSxKDFImzMbn8Z77fXG9LnqCmXhA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/b98bda-d3c9-4d0c-a195-699621e00f46/1/5rXcl7gB-g_7kwBcy_TWcnt1GSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/b98bda-d3c9-4d0c-a195-699621e00f46/1/5rXcl7gB-g_7kwBcy_TWcnt1GSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5rXcl7gB-g_7kwBcy_TWcnt1GSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:62:1c:4a:35:25:9c:0c:16:dc:e5:2b:93:b4:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6b5dc97b801fa0ffb93005ccbf4d6727b75192a
Validity
Not Before: Mar 26 12:00:23 2026 GMT
Not After : Mar 27 12:00:23 2026 GMT
Subject: CN=684c811c5a7f4b75843f29fb361935b9b8b2a837
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:09:74:20:34:a2:9c:b9:c7:a1:7e:08:48:c1:
6d:a8:dc:77:b8:82:43:97:07:47:22:30:73:35:7e:
d3:97:58:fb:02:38:e5:2e:fd:9d:8d:6c:c8:a5:5d:
01:2c:17:5a:8c:ec:93:d3:32:85:38:8f:d5:91:a1:
f4:98:09:55:c7:51:6f:5c:e2:91:13:da:ee:c5:a8:
f9:2f:b2:46:a6:7d:90:d1:d2:c6:c3:ba:fc:5d:9d:
9d:a8:d1:86:4d:72:a5:69:65:e0:a5:17:d2:f8:19:
97:50:28:0d:68:da:47:35:c6:af:45:22:06:63:47:
c5:8c:14:5a:79:21:f1:06:c3:c8:53:4d:90:2a:15:
b1:ef:d1:2d:e6:15:76:77:6c:b9:68:50:ff:c5:ae:
49:ee:15:70:f4:54:cc:ac:c3:cc:7f:4c:eb:ca:c5:
1a:ee:e8:72:35:4e:8a:f9:c1:f6:cd:64:db:3b:b8:
0d:a7:ea:16:3b:1a:07:26:19:a2:93:a8:af:b9:20:
e3:8c:0a:00:3b:75:5c:ff:8d:ac:0b:af:42:f9:fb:
58:e5:01:f1:f1:0d:61:fa:c7:21:b6:bf:2d:83:7a:
e7:a5:30:27:e9:13:4c:db:f5:48:aa:12:2b:40:58:
0c:94:46:ef:81:4d:13:5f:50:9d:32:3c:c1:79:fb:
0b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:4C:81:1C:5A:7F:4B:75:84:3F:29:FB:36:19:35:B9:B8:B2:A8:37
X509v3 Authority Key Identifier:
keyid:E6:B5:DC:97:B8:01:FA:0F:FB:93:00:5C:CB:F4:D6:72:7B:75:19:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5rXcl7gB-g_7kwBcy_TWcnt1GSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/b98bda-d3c9-4d0c-a195-699621e00f46/1/5rXcl7gB-g_7kwBcy_TWcnt1GSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/b98bda-d3c9-4d0c-a195-699621e00f46/1/5rXcl7gB-g_7kwBcy_TWcnt1GSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:b2:93:20:8a:bd:80:72:cf:30:05:89:13:0d:68:2e:c8:59:
b6:51:e5:32:bb:3a:48:35:8e:63:2f:44:c6:6b:9a:91:9a:bb:
e5:a6:b5:8c:f7:dc:df:93:7a:c8:52:02:ac:03:aa:f7:e5:0d:
4e:ab:7e:1f:4f:68:91:bb:66:ab:9c:a3:27:51:44:12:3f:2d:
bd:df:67:bf:7b:e7:03:ff:c0:35:fd:be:e8:34:bd:ac:b9:20:
c7:70:af:9e:e0:e9:71:1c:2c:99:ab:51:79:fb:99:03:05:e0:
dd:86:2a:57:72:05:73:f8:c7:59:f6:44:8e:ea:e6:48:cb:cb:
6e:a9:3d:c1:2b:56:06:58:09:ec:db:cb:8e:1a:88:fe:1e:55:
4d:46:4b:aa:fd:ae:b7:2b:6a:4c:70:77:69:21:2d:f3:e5:4a:
19:47:10:30:87:e9:7e:ef:76:fe:02:c6:3d:51:56:d1:b9:e2:
d7:50:f7:47:f1:5f:99:5c:83:cf:cc:9a:e9:ea:41:04:ce:c1:
14:9d:d9:e0:14:17:19:59:9b:9a:fb:9f:ba:01:13:a7:44:33:
cd:41:44:55:9b:95:ff:56:08:c1:b2:f1:a6:5d:a3:42:41:df:
44:65:fe:e7:7e:1f:b6:81:65:74:45:da:7c:0c:5a:45:95:9e:
d5:44:7f:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:44:38 2026 by rpki-client