Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/5Xi8BlBytAuvCEFuIWoTB7JLxEs.mft
File: 5Xi8BlBytAuvCEFuIWoTB7JLxEs.mft (raw, json)
Hash identifier: H59PgCVSkeq/oddJ87yT09XvhOGIyvSvX0VShlxvkb0=
Subject key identifier: 6D:5D:38:B7:90:B2:97:17:3E:F7:FB:F1:33:57:28:A0:4A:81:51:07
Authority key identifier: E5:78:BC:06:50:72:B4:0B:AF:08:41:6E:21:6A:13:07:B2:4B:C4:4B
Certificate issuer: /CN=e578bc065072b40baf08416e216a1307b24bc44b
Certificate serial: 019D270481C081ED986E3091C5EEF56D17CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Xi8BlBytAuvCEFuIWoTB7JLxEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/5Xi8BlBytAuvCEFuIWoTB7JLxEs.mft
Manifest number: 1883
Signing time: Wed 25 Mar 2026 22:01:39 +0000
Manifest this update: Wed 25 Mar 2026 22:01:39 +0000
Manifest next update: Thu 26 Mar 2026 22:01:39 +0000
Files and hashes: 1: 5Xi8BlBytAuvCEFuIWoTB7JLxEs.crl (hash: PrHfpg/vqZm27GsS83LIC7yQqadc6NGkiLgVXfJ1wO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/5Xi8BlBytAuvCEFuIWoTB7JLxEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/5Xi8BlBytAuvCEFuIWoTB7JLxEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Xi8BlBytAuvCEFuIWoTB7JLxEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:81:c0:81:ed:98:6e:30:91:c5:ee:f5:6d:17:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e578bc065072b40baf08416e216a1307b24bc44b
Validity
Not Before: Mar 25 22:01:39 2026 GMT
Not After : Mar 26 22:01:39 2026 GMT
Subject: CN=6d5d38b790b297173ef7fbf1335728a04a815107
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d9:fb:36:07:7c:7d:17:69:e2:39:2b:42:85:
b9:5f:7d:dc:bd:74:fa:ec:1d:04:28:40:4e:17:56:
3d:a3:ee:c9:d1:9c:15:62:f5:e4:7c:a8:58:2d:16:
bf:52:71:6f:b7:01:7c:50:c6:54:39:9b:c8:83:b1:
04:e6:74:cb:14:7e:da:54:73:e9:e6:8d:cc:56:f2:
90:29:48:71:12:56:af:7c:37:af:55:99:5c:c1:64:
30:a4:99:7d:ca:6c:ca:a3:a4:5d:e9:d2:d5:91:a1:
46:7f:ad:31:9c:ac:20:67:73:86:1c:b0:b8:88:ce:
2d:ca:c6:24:22:c3:52:3f:67:dc:15:8f:12:56:29:
50:f7:26:f6:2c:7f:77:e9:97:63:85:73:fb:29:0d:
22:87:37:47:16:0b:c1:05:17:bc:ab:9a:3c:cb:0d:
3a:05:1c:07:73:95:9f:db:02:43:45:fd:29:67:57:
0c:31:76:f1:76:d1:47:86:03:14:a1:5a:73:e2:56:
f0:e5:21:6b:2a:28:d0:ea:99:a9:18:0c:3f:73:bc:
14:4d:ba:53:bc:fa:c2:64:71:a7:af:db:16:f9:1c:
2a:af:20:9f:13:9f:7d:50:01:30:5f:a0:c4:36:5b:
89:c0:e4:8a:71:7e:12:d7:9d:f5:74:a3:87:af:da:
72:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:5D:38:B7:90:B2:97:17:3E:F7:FB:F1:33:57:28:A0:4A:81:51:07
X509v3 Authority Key Identifier:
keyid:E5:78:BC:06:50:72:B4:0B:AF:08:41:6E:21:6A:13:07:B2:4B:C4:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Xi8BlBytAuvCEFuIWoTB7JLxEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/5Xi8BlBytAuvCEFuIWoTB7JLxEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/5Xi8BlBytAuvCEFuIWoTB7JLxEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:bf:48:8e:a5:4f:26:be:5c:3f:f3:8e:ac:73:87:fe:05:8b:
6d:de:c8:13:60:b8:0d:ee:03:c7:bf:e3:1a:06:85:ef:15:4b:
f5:f7:09:c6:35:fd:5c:b7:d5:21:77:dc:65:6c:bc:52:f0:f4:
c1:6c:9f:13:54:94:55:f5:42:18:77:22:0b:26:ea:b2:ae:70:
94:71:24:5d:7a:d9:62:d9:f5:f5:c5:76:80:08:a5:71:55:1e:
09:4f:04:e4:11:a5:99:d0:b9:de:04:7a:d8:31:9c:04:bf:f5:
2f:1c:a0:4c:18:30:70:63:ba:73:97:5c:31:41:a5:9f:64:e7:
d3:50:89:83:51:03:53:5b:68:46:3b:4a:ed:36:13:71:d1:cd:
b5:3a:92:bb:f7:18:25:d3:fe:86:02:70:a1:d2:b9:7f:d1:5d:
c9:33:10:cf:16:55:2a:08:ce:0e:a1:7f:b4:94:8f:2e:58:1f:
77:82:e6:17:70:b6:0c:65:6a:a4:56:3c:0a:37:81:d7:74:08:
b1:69:89:6e:17:0b:07:c4:21:ab:af:07:cd:30:74:b2:aa:86:
6c:3f:63:b8:d5:91:4a:8e:30:bc:9e:19:68:5e:76:85:72:8a:
ca:be:f1:dd:10:bd:f0:0d:f1:0a:c2:16:b2:83:86:f6:6c:be:
c4:2d:26:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:23:26 2026 by rpki-client