Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/8c8811-01c6-47c2-b5f0-3c1624100752/1/5NCejvFx6a4hYnzKdu1k_Rfm7tI.mft
File: 5NCejvFx6a4hYnzKdu1k_Rfm7tI.mft (raw, json)
Hash identifier: UlD4oEcla2JeFaBH4FQsFkfMYifI4/ApL9MhJ8PeSN0=
Subject key identifier: 21:34:1C:DF:34:C7:81:C6:2E:37:A2:BD:89:01:48:83:6E:D1:0D:17
Authority key identifier: E4:D0:9E:8E:F1:71:E9:AE:21:62:7C:CA:76:ED:64:FD:17:E6:EE:D2
Certificate issuer: /CN=e4d09e8ef171e9ae21627cca76ed64fd17e6eed2
Certificate serial: 019D2583322A861560B586CD022C5B1041EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5NCejvFx6a4hYnzKdu1k_Rfm7tI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/8c8811-01c6-47c2-b5f0-3c1624100752/1/5NCejvFx6a4hYnzKdu1k_Rfm7tI.mft
Manifest number: 17C6
Signing time: Wed 25 Mar 2026 15:00:48 +0000
Manifest this update: Wed 25 Mar 2026 15:00:48 +0000
Manifest next update: Thu 26 Mar 2026 15:00:48 +0000
Files and hashes: 1: 5NCejvFx6a4hYnzKdu1k_Rfm7tI.crl (hash: flgLnpi04djYkTKU3F7EsgA21s0BYrw/NlNINbyK9bM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/8c8811-01c6-47c2-b5f0-3c1624100752/1/5NCejvFx6a4hYnzKdu1k_Rfm7tI.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/8c8811-01c6-47c2-b5f0-3c1624100752/1/5NCejvFx6a4hYnzKdu1k_Rfm7tI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5NCejvFx6a4hYnzKdu1k_Rfm7tI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:32:2a:86:15:60:b5:86:cd:02:2c:5b:10:41:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4d09e8ef171e9ae21627cca76ed64fd17e6eed2
Validity
Not Before: Mar 25 15:00:48 2026 GMT
Not After : Mar 26 15:00:48 2026 GMT
Subject: CN=21341cdf34c781c62e37a2bd890148836ed10d17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:2f:20:d1:60:4c:fb:a2:8c:90:c7:d8:cb:ae:
d3:05:17:d6:b1:54:2a:e4:7a:d4:66:1b:59:af:35:
39:96:df:ae:a1:99:44:9d:23:08:fa:9e:a6:9a:bb:
40:bb:88:c7:0e:73:e3:fd:a8:18:bb:c0:1b:06:1e:
fe:d9:5d:84:a3:eb:60:65:1e:9a:f7:f6:25:90:b4:
b0:65:bb:47:5d:f6:5a:c0:e8:20:de:c6:2e:d5:54:
4b:8d:b2:7f:1d:f9:8f:6b:20:bc:29:7b:70:d0:bd:
2c:8b:b0:a0:32:b8:31:f1:7a:dc:f3:f3:16:3e:5e:
40:0d:c1:54:09:d7:c8:e7:31:f3:44:51:91:82:4f:
f2:d3:33:2f:00:f1:33:96:b3:7f:6c:ac:6a:19:78:
95:c3:ff:ea:66:25:85:5c:fc:88:10:90:62:1b:b7:
f7:d2:71:10:62:57:e9:72:86:44:10:96:3d:11:2b:
78:32:07:d4:48:20:4e:f8:71:e7:d6:4d:ca:72:20:
22:4a:39:3c:78:0d:a8:13:fe:a9:4f:fc:53:90:2e:
82:6d:19:a7:9f:7a:74:2d:68:80:76:0b:97:82:02:
2b:2e:e5:6f:50:be:6d:4c:ac:dc:a1:6a:be:9f:8d:
4d:bc:db:ee:cf:a8:36:8b:36:13:3a:ca:a1:18:55:
fd:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:34:1C:DF:34:C7:81:C6:2E:37:A2:BD:89:01:48:83:6E:D1:0D:17
X509v3 Authority Key Identifier:
keyid:E4:D0:9E:8E:F1:71:E9:AE:21:62:7C:CA:76:ED:64:FD:17:E6:EE:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5NCejvFx6a4hYnzKdu1k_Rfm7tI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8c8811-01c6-47c2-b5f0-3c1624100752/1/5NCejvFx6a4hYnzKdu1k_Rfm7tI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8c8811-01c6-47c2-b5f0-3c1624100752/1/5NCejvFx6a4hYnzKdu1k_Rfm7tI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:1d:c9:a0:a1:d8:c8:e6:a6:15:7a:29:be:be:bf:aa:67:f7:
b6:5c:80:8e:a5:a2:3f:ac:d2:59:10:4e:80:2e:6a:34:ae:59:
23:6d:18:a7:37:68:eb:6b:37:8b:94:b6:d3:fe:3b:e6:b2:a8:
35:b7:7a:5e:9e:c5:a3:e8:a0:7d:dd:09:b4:7e:6f:4e:ec:a4:
42:b5:84:f6:c0:51:70:33:74:6b:bb:01:00:b0:33:f6:90:b7:
73:76:7c:a8:c9:b4:c5:f8:fe:6c:c2:bb:76:24:75:a2:72:69:
f4:aa:b2:ba:b5:aa:7b:42:02:2b:65:35:f3:56:b1:b9:d1:a1:
5c:f3:0e:d3:fe:07:f4:b0:0f:c5:8b:8f:7f:ec:17:e5:c7:18:
bb:15:ed:2a:cb:d5:73:da:8d:f7:6b:63:55:aa:a8:6f:f8:83:
b4:6d:77:91:4b:aa:c2:5a:38:61:ed:47:3d:95:b7:4a:97:e5:
3d:e2:0a:e1:df:c0:82:cd:b8:95:a0:f9:b8:17:f3:8b:5d:8c:
f1:4b:c3:09:e5:39:fe:a9:37:bf:30:3b:14:73:da:80:3e:eb:
2d:e1:f6:a5:2c:b9:62:d7:17:b0:00:45:48:72:7a:5f:63:a0:
24:b0:3d:da:d5:3c:78:2f:d2:07:bd:ca:59:78:3d:0e:a2:a3:
32:d2:0e:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:16 2026 by rpki-client