Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a51c75-ef7b-48ab-870f-460cbe688ce5/1/g5JNIiU91reGmbxdCgEQJ5E-X3A.mft
File: g5JNIiU91reGmbxdCgEQJ5E-X3A.mft (raw, json)
Hash identifier: 3XOUIWQBvdBkg03fv7K9lGDszWIGifk2dSlpmo/Q+6c=
Subject key identifier: 66:33:E9:90:79:83:1A:44:8E:6E:52:DF:09:54:25:1B:A8:D0:47:D5
Authority key identifier: 83:92:4D:22:25:3D:D6:B7:86:99:BC:5D:0A:01:10:27:91:3E:5F:70
Certificate issuer: /CN=83924d22253dd6b78699bc5d0a011027913e5f70
Certificate serial: 019D273B1FD7C0B289515B09B065C16B20C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g5JNIiU91reGmbxdCgEQJ5E-X3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a51c75-ef7b-48ab-870f-460cbe688ce5/1/g5JNIiU91reGmbxdCgEQJ5E-X3A.mft
Manifest number: 07BD
Signing time: Wed 25 Mar 2026 23:01:19 +0000
Manifest this update: Wed 25 Mar 2026 23:01:19 +0000
Manifest next update: Thu 26 Mar 2026 23:01:19 +0000
Files and hashes: 1: g5JNIiU91reGmbxdCgEQJ5E-X3A.crl (hash: A4PlMWdmBQKmqxwDn+2S6I83eDEkM/YdB7pg+2z3IWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a51c75-ef7b-48ab-870f-460cbe688ce5/1/g5JNIiU91reGmbxdCgEQJ5E-X3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a51c75-ef7b-48ab-870f-460cbe688ce5/1/g5JNIiU91reGmbxdCgEQJ5E-X3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/g5JNIiU91reGmbxdCgEQJ5E-X3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3b:1f:d7:c0:b2:89:51:5b:09:b0:65:c1:6b:20:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83924d22253dd6b78699bc5d0a011027913e5f70
Validity
Not Before: Mar 25 23:01:19 2026 GMT
Not After : Mar 26 23:01:19 2026 GMT
Subject: CN=6633e99079831a448e6e52df0954251ba8d047d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1f:b9:2a:93:30:16:da:ed:86:57:c0:bf:dc:
fe:98:1e:05:b1:e9:b6:c4:e3:5c:8b:cf:9e:98:ce:
ca:38:a3:37:20:6c:dc:8b:fa:95:d1:62:7a:96:ec:
a4:fd:9b:9c:ad:ae:47:18:b0:af:fd:8a:83:86:22:
d9:f8:89:38:f5:15:84:5b:71:e6:a7:ff:af:a3:c9:
c9:c6:08:08:bb:8a:45:28:e7:6d:62:97:8a:89:f0:
04:e8:c1:57:90:19:0d:33:37:66:a5:cf:1d:51:cf:
ff:eb:82:b5:73:bc:96:65:5e:99:70:c9:14:a9:92:
a3:6c:3b:78:51:fa:c2:ce:ff:72:e2:00:b6:d1:1e:
1a:04:cd:88:8b:36:00:7c:2b:12:e8:e9:72:7c:4d:
60:f7:d9:85:05:83:2f:f6:ca:74:52:15:0f:83:f1:
b0:07:dd:bf:3f:41:69:b8:6f:b6:7d:05:2b:6c:dd:
67:50:87:11:e3:22:17:1b:55:8e:d0:48:36:a4:38:
98:81:63:a3:84:4d:c8:d6:b5:38:89:0b:07:cf:cf:
42:ca:67:7e:64:f6:2e:42:9d:43:07:ab:62:6e:52:
70:a0:35:95:42:cc:05:9e:d9:44:7c:4a:95:d2:80:
8b:c2:04:25:10:d7:8c:16:e0:12:e7:51:2f:64:c4:
a1:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:33:E9:90:79:83:1A:44:8E:6E:52:DF:09:54:25:1B:A8:D0:47:D5
X509v3 Authority Key Identifier:
keyid:83:92:4D:22:25:3D:D6:B7:86:99:BC:5D:0A:01:10:27:91:3E:5F:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g5JNIiU91reGmbxdCgEQJ5E-X3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a51c75-ef7b-48ab-870f-460cbe688ce5/1/g5JNIiU91reGmbxdCgEQJ5E-X3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a51c75-ef7b-48ab-870f-460cbe688ce5/1/g5JNIiU91reGmbxdCgEQJ5E-X3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:11:74:db:e4:97:55:ac:e3:d5:88:48:7d:06:08:6a:d2:d6:
5f:ab:99:74:b2:68:61:ab:87:be:e2:f5:93:f3:6f:66:e2:e6:
da:30:09:9b:5b:c1:7d:8c:14:80:2a:1d:b6:fb:d9:70:53:79:
f8:92:8f:28:dc:01:3d:cc:3b:95:3e:f5:6e:7f:af:a9:a8:1c:
d0:0b:fe:33:76:4c:f6:2b:f9:5a:86:4a:91:78:9d:64:90:10:
ec:85:e7:e3:01:b6:37:0b:eb:06:1e:ad:c0:59:3c:7b:94:bd:
80:37:5b:aa:93:fd:20:bb:a8:5e:71:eb:0c:e2:70:c4:9a:a2:
2f:0b:d8:30:1d:44:5b:52:93:3b:6c:39:6f:32:59:54:52:00:
d1:c1:38:44:92:fc:10:1f:97:01:5f:73:80:48:3f:26:72:97:
ee:53:3e:2b:55:42:83:25:fc:12:75:1b:5d:2c:3b:9a:84:36:
42:90:7f:85:53:a6:37:91:f8:a9:f0:81:a6:d9:a5:4c:5e:06:
3f:f1:9d:3d:4b:00:48:d0:0c:09:76:be:05:e5:22:75:6c:a7:
9a:94:6f:bc:67:5e:30:62:a2:98:ea:8c:68:31:af:a6:d4:ce:
cf:68:bd:b3:34:21:4c:b8:00:47:85:18:bb:b0:58:cf:57:52:
50:de:32:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:46 2026 by rpki-client