Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/698339-5905-4637-b983-cdb3a657d9ee/1/5_y3rNVfY0m52BRheGwSRY-G9y4.mft
File: 5_y3rNVfY0m52BRheGwSRY-G9y4.mft (raw, json)
Hash identifier: E2bbBubtuUUj6vk/1OeA33HjhIb1KyR6mdlDTe3f1A0=
Subject key identifier: 2F:75:3C:59:82:79:15:E1:BC:DE:E4:C8:05:07:D9:4B:92:19:BD:71
Authority key identifier: E7:FC:B7:AC:D5:5F:63:49:B9:D8:14:61:78:6C:12:45:8F:86:F7:2E
Certificate issuer: /CN=e7fcb7acd55f6349b9d81461786c12458f86f72e
Certificate serial: 019D2A3C2F4A0258F0F1757E68F4EEB77F05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_y3rNVfY0m52BRheGwSRY-G9y4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/698339-5905-4637-b983-cdb3a657d9ee/1/5_y3rNVfY0m52BRheGwSRY-G9y4.mft
Manifest number: 1884
Signing time: Thu 26 Mar 2026 13:01:20 +0000
Manifest this update: Thu 26 Mar 2026 13:01:20 +0000
Manifest next update: Fri 27 Mar 2026 13:01:20 +0000
Files and hashes: 1: 5_y3rNVfY0m52BRheGwSRY-G9y4.crl (hash: 6GH/mM02MVrUkyn/Giir18OdXEPdxKFHklOgG1NkXO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/698339-5905-4637-b983-cdb3a657d9ee/1/5_y3rNVfY0m52BRheGwSRY-G9y4.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/698339-5905-4637-b983-cdb3a657d9ee/1/5_y3rNVfY0m52BRheGwSRY-G9y4.mft
rsync://rpki.ripe.net/repository/DEFAULT/5_y3rNVfY0m52BRheGwSRY-G9y4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3c:2f:4a:02:58:f0:f1:75:7e:68:f4:ee:b7:7f:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7fcb7acd55f6349b9d81461786c12458f86f72e
Validity
Not Before: Mar 26 13:01:20 2026 GMT
Not After : Mar 27 13:01:20 2026 GMT
Subject: CN=2f753c59827915e1bcdee4c80507d94b9219bd71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:db:d9:e5:c0:5c:65:01:08:8e:35:2f:cf:22:
8b:29:fc:91:ce:85:83:98:1f:57:a8:73:e5:6d:a6:
a9:ff:73:52:33:ac:28:c0:25:3c:82:e8:03:4f:b6:
a0:91:1c:86:2e:28:d4:a1:ad:70:aa:4b:9e:76:6d:
16:df:eb:76:26:aa:ba:f8:d3:a7:38:91:d0:27:ba:
8b:4a:3c:3c:0e:2e:8e:38:41:37:4f:64:6b:7f:fb:
ba:b0:e9:ba:54:c6:2c:4d:9e:60:a0:f6:d0:4f:8e:
bb:6a:63:41:81:8a:ab:a6:6f:15:f9:5d:3d:82:37:
21:f0:77:0a:bf:92:a1:c0:d2:38:ab:9c:95:f0:c5:
9c:82:a1:cc:00:3e:67:4f:53:bf:6b:01:5c:15:d0:
9c:d1:e0:e7:10:58:13:4e:6e:da:2b:3c:23:49:be:
2d:26:7c:2a:c6:b6:be:9f:5b:6f:09:db:48:2b:04:
c7:31:cf:95:92:fb:91:03:0c:17:39:f9:6c:1d:16:
df:74:b6:97:fe:1d:44:7e:0d:5b:24:1f:ff:54:be:
c6:e9:bf:bc:06:7f:3e:2d:c3:0f:b3:4b:c3:f2:eb:
1a:41:aa:a2:2d:6e:d8:c6:a5:06:3d:3a:10:28:e0:
14:ab:92:4c:00:2a:58:43:1d:be:79:d9:b4:18:b9:
df:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:75:3C:59:82:79:15:E1:BC:DE:E4:C8:05:07:D9:4B:92:19:BD:71
X509v3 Authority Key Identifier:
keyid:E7:FC:B7:AC:D5:5F:63:49:B9:D8:14:61:78:6C:12:45:8F:86:F7:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_y3rNVfY0m52BRheGwSRY-G9y4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/698339-5905-4637-b983-cdb3a657d9ee/1/5_y3rNVfY0m52BRheGwSRY-G9y4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/698339-5905-4637-b983-cdb3a657d9ee/1/5_y3rNVfY0m52BRheGwSRY-G9y4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:e9:79:66:e1:03:af:22:50:ba:b0:3b:9d:0b:17:3b:55:95:
6a:ac:d9:ea:d5:6a:37:1f:d5:5e:29:ba:88:8b:b2:29:c6:2e:
98:8a:2a:c2:c3:e5:ef:71:5c:05:23:d2:a7:05:8d:69:b8:6b:
bb:7f:8e:25:5f:24:85:34:ed:3d:8b:52:3d:fa:69:91:fe:19:
bf:96:e6:fb:a8:34:a6:9e:21:02:f3:9a:51:ed:9d:6d:03:b1:
e0:1c:f0:6f:9b:81:ce:3d:58:94:3b:f7:04:c9:dd:c5:1f:34:
a9:94:b0:e1:78:f9:3e:e1:22:17:9c:de:2e:22:a4:3e:f9:50:
75:1f:b2:d7:b0:a8:f8:3a:ac:b8:8a:56:ee:ca:b5:d2:ec:5d:
ad:ac:f4:c1:99:81:58:f5:c3:66:d3:44:78:87:25:5a:a8:a5:
2b:8f:6e:8e:ce:96:f1:80:36:1b:60:a3:63:c8:a2:05:28:e9:
a9:fd:33:ab:3e:fe:e0:44:28:60:49:81:b3:2c:95:97:7b:79:
e4:2b:ed:5f:c8:40:46:b5:b6:3e:4e:c2:02:19:40:c9:8b:71:
2f:3e:2b:db:1e:fa:fd:b5:cc:b3:95:dd:a1:7e:a7:fc:2b:7c:
4a:4e:ef:2a:a0:72:96:4c:05:93:ab:6b:8f:9e:b0:8e:b0:ab:
c3:1f:6c:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:21:39 2026 by rpki-client