Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/cb879b-9c96-429a-9bb3-e18d998c64ef/1/5huaXW2YcDw4cqG7P5DRA2hcvQQ.mft
File: 5huaXW2YcDw4cqG7P5DRA2hcvQQ.mft (raw, json)
Hash identifier: JVY9nAGYR4sR2W/QjLItklPvtPnQoV6mu/dWa35cP3Q=
Subject key identifier: 4C:A0:D0:CD:3A:78:DC:36:2A:E5:23:C8:75:E2:CC:2F:EB:E1:C4:82
Authority key identifier: E6:1B:9A:5D:6D:98:70:3C:38:72:A1:BB:3F:90:D1:03:68:5C:BD:04
Certificate issuer: /CN=e61b9a5d6d98703c3872a1bb3f90d103685cbd04
Certificate serial: 019D29CE9B802AD57FF6A277B1DAF87EC02A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5huaXW2YcDw4cqG7P5DRA2hcvQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/cb879b-9c96-429a-9bb3-e18d998c64ef/1/5huaXW2YcDw4cqG7P5DRA2hcvQQ.mft
Manifest number: 1884
Signing time: Thu 26 Mar 2026 11:01:39 +0000
Manifest this update: Thu 26 Mar 2026 11:01:39 +0000
Manifest next update: Fri 27 Mar 2026 11:01:39 +0000
Files and hashes: 1: 5huaXW2YcDw4cqG7P5DRA2hcvQQ.crl (hash: VfU/5g7pxWdoLklTaRV60cwS3EgWLRFPdThzu6XbCbk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/cb879b-9c96-429a-9bb3-e18d998c64ef/1/5huaXW2YcDw4cqG7P5DRA2hcvQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/cb879b-9c96-429a-9bb3-e18d998c64ef/1/5huaXW2YcDw4cqG7P5DRA2hcvQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5huaXW2YcDw4cqG7P5DRA2hcvQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:9b:80:2a:d5:7f:f6:a2:77:b1:da:f8:7e:c0:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e61b9a5d6d98703c3872a1bb3f90d103685cbd04
Validity
Not Before: Mar 26 11:01:39 2026 GMT
Not After : Mar 27 11:01:39 2026 GMT
Subject: CN=4ca0d0cd3a78dc362ae523c875e2cc2febe1c482
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:9c:85:82:38:eb:bc:7f:e0:5e:84:b2:7b:d2:
ea:36:81:d2:f9:e6:0b:da:55:a4:eb:ef:51:da:6f:
34:b0:7b:9e:27:23:99:8e:57:b3:f3:7c:f1:db:f8:
d0:94:e1:7b:9f:e9:fd:5d:3c:84:65:c3:3f:8e:d0:
99:34:1c:3f:60:ba:ff:04:ed:fa:8d:0b:7f:9f:40:
00:83:28:9c:c2:1a:f8:ff:ca:a4:bc:c4:e1:1d:c1:
7a:7b:2f:14:0e:d7:8e:b7:e3:72:83:15:47:50:e9:
88:2f:4e:bc:c4:9a:d7:2c:26:4e:18:47:f3:e4:08:
d0:73:bb:e8:39:4e:ac:ef:9d:0d:e4:6b:05:5b:ff:
b7:63:fc:f2:05:e3:bf:06:7e:bb:3a:44:61:69:e1:
a3:4c:a2:fa:c7:97:4b:be:71:31:35:81:69:33:3a:
9a:6a:1a:56:34:ff:cb:3f:26:38:83:ef:11:27:fa:
a3:91:db:9c:83:b2:bb:9f:f3:32:01:86:fc:a7:59:
8a:e3:c0:59:34:2d:32:ae:ad:78:93:d1:f2:8e:23:
6a:a1:5c:0a:30:1a:9d:3e:38:2e:03:36:9d:ac:67:
15:89:93:ed:a9:05:16:e1:4a:4f:b8:e0:61:33:7a:
79:70:b4:20:5b:14:34:20:37:42:9f:16:82:4e:55:
7d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:A0:D0:CD:3A:78:DC:36:2A:E5:23:C8:75:E2:CC:2F:EB:E1:C4:82
X509v3 Authority Key Identifier:
keyid:E6:1B:9A:5D:6D:98:70:3C:38:72:A1:BB:3F:90:D1:03:68:5C:BD:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5huaXW2YcDw4cqG7P5DRA2hcvQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cb879b-9c96-429a-9bb3-e18d998c64ef/1/5huaXW2YcDw4cqG7P5DRA2hcvQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cb879b-9c96-429a-9bb3-e18d998c64ef/1/5huaXW2YcDw4cqG7P5DRA2hcvQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:21:a2:11:1b:c2:83:79:1f:73:c7:55:e3:52:f7:04:2f:3e:
e7:d0:b7:95:1e:df:81:af:8f:6e:33:65:10:64:c6:a0:5b:4f:
0c:c5:91:82:13:6c:71:53:08:ae:db:5e:2f:39:a1:65:c8:3a:
15:c8:70:b5:4f:f8:97:53:a2:53:67:0d:ef:b9:7b:a9:22:57:
a7:f7:c6:ff:96:ba:c0:b6:7f:42:18:8c:bb:f8:8f:56:21:c4:
8a:d9:ad:de:10:ea:1c:61:bf:f0:17:92:45:c8:9d:ef:c5:b0:
ba:1f:28:b4:f7:61:a4:a3:08:74:af:d2:ec:7a:38:f3:53:9d:
58:8b:78:3f:1a:c9:3f:45:72:b9:f7:b8:e0:a1:9a:dd:e2:d5:
24:1f:e1:ad:bb:33:c3:82:23:d6:b8:36:fa:38:df:95:6e:8c:
8f:b1:dc:6f:8d:82:92:3d:e9:05:9e:38:20:4d:2e:f2:e0:cc:
7d:fc:b2:ab:ff:58:67:56:81:6b:16:15:cd:4d:2e:b8:77:f2:
56:96:bc:5a:c0:07:77:af:62:d5:17:47:ec:18:e8:60:a3:f4:
54:7b:46:ab:a4:b0:13:7d:aa:6e:ed:ff:6a:d1:14:09:6d:49:
5a:63:b0:07:4f:58:39:1a:87:e0:ca:2d:38:31:e0:27:78:39:
ee:67:56:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:55:48 2026 by rpki-client