Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/d73541-3b4d-44a9-82ac-29e53eda6e1c/1/_5zoM1_DdnayDsFlXFPWfbyG6LM.mft
File: _5zoM1_DdnayDsFlXFPWfbyG6LM.mft (raw, json)
Hash identifier: Sez4ofnvKv16j/BhQ/IrElC3KlBAFdFrUVVigltpsfY=
Subject key identifier: 77:68:50:A8:9E:0A:1D:90:55:7E:38:F7:B7:9F:7F:A6:A4:20:4F:3E
Authority key identifier: FF:9C:E8:33:5F:C3:76:76:B2:0E:C1:65:5C:53:D6:7D:BC:86:E8:B3
Certificate issuer: /CN=ff9ce8335fc37676b20ec1655c53d67dbc86e8b3
Certificate serial: 019D265F00F8DD0C9EAE52378D575B6FDD18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_5zoM1_DdnayDsFlXFPWfbyG6LM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/d73541-3b4d-44a9-82ac-29e53eda6e1c/1/_5zoM1_DdnayDsFlXFPWfbyG6LM.mft
Manifest number: 1100
Signing time: Wed 25 Mar 2026 19:00:53 +0000
Manifest this update: Wed 25 Mar 2026 19:00:53 +0000
Manifest next update: Thu 26 Mar 2026 19:00:53 +0000
Files and hashes: 1: _5zoM1_DdnayDsFlXFPWfbyG6LM.crl (hash: OTbJAOYTi2fOGH2JvKCcS/j2I2wQDUDHoLUGO/LnMsU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/d73541-3b4d-44a9-82ac-29e53eda6e1c/1/_5zoM1_DdnayDsFlXFPWfbyG6LM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/d73541-3b4d-44a9-82ac-29e53eda6e1c/1/_5zoM1_DdnayDsFlXFPWfbyG6LM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_5zoM1_DdnayDsFlXFPWfbyG6LM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:00:f8:dd:0c:9e:ae:52:37:8d:57:5b:6f:dd:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff9ce8335fc37676b20ec1655c53d67dbc86e8b3
Validity
Not Before: Mar 25 19:00:53 2026 GMT
Not After : Mar 26 19:00:53 2026 GMT
Subject: CN=776850a89e0a1d90557e38f7b79f7fa6a4204f3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:41:8d:6b:a9:ae:c5:d2:5d:81:d3:36:84:e6:
c8:7a:11:ec:8d:f4:49:91:13:b4:40:b3:06:55:1b:
23:bf:d8:03:5a:ed:10:17:65:3e:b5:c5:db:9e:34:
ae:45:55:9a:5a:18:4d:68:12:3a:80:4c:41:d0:39:
d5:72:ae:f2:d8:d0:47:eb:20:15:02:36:bd:c0:1a:
0f:e9:e9:bd:a2:0e:8a:c4:0f:d9:77:c1:22:60:48:
b2:15:16:29:c8:e5:62:8a:4b:e9:03:9f:b8:8a:78:
c6:94:92:1a:89:8d:7e:be:32:97:3c:69:6c:03:58:
43:90:a3:eb:40:80:9c:db:56:7e:c0:4e:2e:a8:b8:
ad:39:b3:f1:85:4a:c3:19:7e:74:2e:cd:43:cb:7d:
57:6e:c3:2d:2f:40:05:35:c0:25:69:80:92:d4:52:
7c:89:68:2a:c4:ec:88:0f:f3:f3:fc:11:97:65:6c:
79:5a:7b:c8:46:15:96:fd:85:27:7e:0b:28:55:e7:
db:6b:00:15:01:f9:c8:33:d4:e7:88:ab:6c:cc:34:
1a:31:b1:a9:4c:d7:01:c9:f3:e5:06:30:9f:4e:a6:
3b:e7:9d:7e:6d:0e:ed:73:8f:4e:bf:8b:3e:81:3a:
cb:de:5c:2a:87:8b:44:a3:a1:60:72:b1:a9:3f:f6:
cf:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:68:50:A8:9E:0A:1D:90:55:7E:38:F7:B7:9F:7F:A6:A4:20:4F:3E
X509v3 Authority Key Identifier:
keyid:FF:9C:E8:33:5F:C3:76:76:B2:0E:C1:65:5C:53:D6:7D:BC:86:E8:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_5zoM1_DdnayDsFlXFPWfbyG6LM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d73541-3b4d-44a9-82ac-29e53eda6e1c/1/_5zoM1_DdnayDsFlXFPWfbyG6LM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d73541-3b4d-44a9-82ac-29e53eda6e1c/1/_5zoM1_DdnayDsFlXFPWfbyG6LM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:84:32:27:ac:b6:20:48:f4:fa:55:f0:b0:33:f9:34:08:a7:
df:5b:a3:6c:57:58:22:10:69:52:90:f7:2d:60:7e:a8:22:f8:
8f:27:ce:7a:2f:6c:78:a8:72:bc:d2:b4:87:ae:8e:8f:e8:38:
10:b2:b0:57:7e:44:c8:90:db:6e:c4:27:ba:cf:c5:09:db:75:
a6:05:8d:d9:ef:ee:c4:7f:f6:48:6e:8e:22:af:4c:3f:40:b9:
d9:29:a8:78:99:8b:8d:50:bc:42:61:24:30:fa:e8:f3:cb:e6:
b7:98:81:f3:9c:de:90:78:a9:33:c9:9f:97:c4:9f:59:80:c3:
d5:7a:4c:c9:f5:5c:30:b1:3d:81:ae:48:59:ad:00:77:17:66:
5e:43:db:fe:21:db:3e:48:cb:b0:01:18:0d:9f:70:38:6e:f3:
3f:d1:b2:af:e5:06:74:07:18:06:3e:12:6a:6b:cf:dd:b4:de:
00:06:ce:6c:99:05:c0:90:6c:9e:3b:da:49:73:5f:3c:99:fd:
4b:fd:4c:9e:06:66:62:24:41:0f:f1:59:2b:38:98:46:67:24:
da:c2:66:a7:39:dd:1f:86:c3:d9:76:9e:73:20:13:46:40:35:
b5:69:a9:fe:66:e5:57:65:a6:da:a1:4f:5a:08:3c:19:d1:43:
08:76:69:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:26:43 2026 by rpki-client