Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/b0d5a1-5fb2-4d31-904e-7037ef49ac2d/1/5vxHDvW4iHmlId3t94cHhZubDjc.mft
File: 5vxHDvW4iHmlId3t94cHhZubDjc.mft (raw, json)
Hash identifier: MzzmdOL79+WOSAiHk4DPk5rI+C+BuflQ4K+Vr5i3phI=
Subject key identifier: F3:6B:2D:D3:63:5D:97:4C:BF:7A:34:13:C8:55:69:DD:E9:DD:00:5B
Authority key identifier: E6:FC:47:0E:F5:B8:88:79:A5:21:DD:ED:F7:87:07:85:9B:9B:0E:37
Certificate issuer: /CN=e6fc470ef5b88879a521ddedf78707859b9b0e37
Certificate serial: 019D26CCCD57243B4C06E45ECF9E0FA9F077
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5vxHDvW4iHmlId3t94cHhZubDjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/b0d5a1-5fb2-4d31-904e-7037ef49ac2d/1/5vxHDvW4iHmlId3t94cHhZubDjc.mft
Manifest number: 01FC
Signing time: Wed 25 Mar 2026 21:00:49 +0000
Manifest this update: Wed 25 Mar 2026 21:00:49 +0000
Manifest next update: Thu 26 Mar 2026 21:00:49 +0000
Files and hashes: 1: 5vxHDvW4iHmlId3t94cHhZubDjc.crl (hash: NxDLylmBiFsqqpScj3FKJCUhOZN/NPiybu1OFHuW8vA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/b0d5a1-5fb2-4d31-904e-7037ef49ac2d/1/5vxHDvW4iHmlId3t94cHhZubDjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/b0d5a1-5fb2-4d31-904e-7037ef49ac2d/1/5vxHDvW4iHmlId3t94cHhZubDjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/5vxHDvW4iHmlId3t94cHhZubDjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:cd:57:24:3b:4c:06:e4:5e:cf:9e:0f:a9:f0:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6fc470ef5b88879a521ddedf78707859b9b0e37
Validity
Not Before: Mar 25 21:00:49 2026 GMT
Not After : Mar 26 21:00:49 2026 GMT
Subject: CN=f36b2dd3635d974cbf7a3413c85569dde9dd005b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a7:89:33:87:ca:2d:c9:c4:80:a5:d9:d2:1b:
a6:d9:d2:89:a4:c8:7f:5e:03:35:d8:29:df:be:0f:
76:4d:c0:7e:9c:5c:a2:f8:c0:6f:75:6e:07:a5:ee:
71:7e:30:38:1d:cf:0a:fb:0b:a9:39:e2:e4:71:9f:
35:0c:12:4f:50:1e:9c:38:2e:fd:3e:3c:51:18:da:
3e:08:5a:d7:bd:a9:24:3e:78:a8:d9:c4:99:c4:30:
ca:48:d8:71:c8:88:76:e5:aa:fa:29:27:f5:5f:08:
86:4a:f3:0e:cb:89:4a:e4:27:21:ec:89:a5:b6:35:
e3:22:13:11:31:41:37:e8:77:79:21:86:5a:e7:0b:
eb:9b:62:cf:07:1b:c3:c3:f0:99:b3:e1:6d:1f:18:
e6:b1:0a:b6:81:e0:71:69:89:2e:ca:6c:85:25:d7:
77:a9:5c:5d:7a:cf:8e:fc:04:ec:7d:83:1c:e5:15:
97:7b:17:cd:de:78:a3:53:ed:07:dc:6c:f1:78:d1:
64:09:7f:cb:65:0a:27:0b:40:f0:e0:b2:c7:fa:91:
6e:6c:d1:91:b3:ed:7c:6d:25:48:63:2d:ac:8b:51:
e0:72:e6:8b:16:c4:9a:76:29:85:cd:90:2d:fa:b7:
9a:04:45:b0:1c:ee:39:cf:37:ac:22:f8:f8:e7:41:
0a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:6B:2D:D3:63:5D:97:4C:BF:7A:34:13:C8:55:69:DD:E9:DD:00:5B
X509v3 Authority Key Identifier:
keyid:E6:FC:47:0E:F5:B8:88:79:A5:21:DD:ED:F7:87:07:85:9B:9B:0E:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5vxHDvW4iHmlId3t94cHhZubDjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b0d5a1-5fb2-4d31-904e-7037ef49ac2d/1/5vxHDvW4iHmlId3t94cHhZubDjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b0d5a1-5fb2-4d31-904e-7037ef49ac2d/1/5vxHDvW4iHmlId3t94cHhZubDjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:40:2f:af:a9:ac:05:a1:2a:66:aa:6d:70:2d:55:cb:2d:4c:
a7:58:48:57:06:5c:02:b3:8f:d0:41:ea:78:7f:26:61:73:e8:
3f:63:66:7c:c1:70:80:1d:38:dc:d9:7a:f5:cd:43:95:82:64:
4f:3d:d8:fe:78:a6:7c:30:28:f6:3e:4c:ca:87:86:43:4f:ee:
ce:54:53:7f:6e:e4:47:72:09:95:9a:19:3a:7d:72:08:fd:ca:
e3:a0:97:35:53:be:77:91:b3:d1:7c:21:40:a7:03:50:33:9a:
78:1d:2a:02:c4:ab:e7:70:b5:74:ee:eb:20:7c:0a:96:77:74:
86:da:f4:79:ce:a9:d2:aa:9a:0a:f6:e2:e6:8a:0e:7e:3f:db:
61:08:f4:6a:8b:ca:f4:ba:18:ca:53:5b:6a:bc:0b:b2:ff:9d:
ed:bc:61:4b:ab:26:ed:1c:96:08:ca:78:72:0c:61:55:db:3e:
e6:c1:6c:db:b3:78:3c:3e:f6:a9:0a:2e:a2:7e:e5:88:e4:40:
34:32:b6:32:3f:28:ee:ae:73:c8:95:87:57:95:c8:7d:7b:a5:
06:f4:50:8a:f6:bd:d2:da:17:d5:eb:67:4d:bc:e4:e8:22:e1:
cb:15:c4:4c:14:66:d3:60:7c:75:47:4f:75:ee:89:36:87:cd:
2f:e2:6e:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:36:18 2026 by rpki-client