Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/db5651-95f1-47c1-acf0-eafca5854257/1/_5lGMPx0VWzlCAJocJAVRft7BM0.mft
File: _5lGMPx0VWzlCAJocJAVRft7BM0.mft (raw, json)
Hash identifier: XPCeGtoYKeMNH0L6DQlUQu7x05++3dbLiL1wa5+Jvzs=
Subject key identifier: 54:BE:51:5B:93:5F:95:AF:39:C6:08:D9:C6:10:16:85:B0:3C:9F:05
Authority key identifier: FF:99:46:30:FC:74:55:6C:E5:08:02:68:70:90:15:45:FB:7B:04:CD
Certificate issuer: /CN=ff994630fc74556ce508026870901545fb7b04cd
Certificate serial: 019D2703E97609C8C4C3B96206A9FD4E4047
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_5lGMPx0VWzlCAJocJAVRft7BM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/db5651-95f1-47c1-acf0-eafca5854257/1/_5lGMPx0VWzlCAJocJAVRft7BM0.mft
Manifest number: 1883
Signing time: Wed 25 Mar 2026 22:01:00 +0000
Manifest this update: Wed 25 Mar 2026 22:01:00 +0000
Manifest next update: Thu 26 Mar 2026 22:01:00 +0000
Files and hashes: 1: _5lGMPx0VWzlCAJocJAVRft7BM0.crl (hash: mJ+2mT6Oa9fNvDkdS5w62LusnXz7xH33Kkcsxfa9tyE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/db5651-95f1-47c1-acf0-eafca5854257/1/_5lGMPx0VWzlCAJocJAVRft7BM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/db5651-95f1-47c1-acf0-eafca5854257/1/_5lGMPx0VWzlCAJocJAVRft7BM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_5lGMPx0VWzlCAJocJAVRft7BM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:e9:76:09:c8:c4:c3:b9:62:06:a9:fd:4e:40:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff994630fc74556ce508026870901545fb7b04cd
Validity
Not Before: Mar 25 22:01:00 2026 GMT
Not After : Mar 26 22:01:00 2026 GMT
Subject: CN=54be515b935f95af39c608d9c6101685b03c9f05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ee:57:70:b0:77:23:fd:76:b1:4c:60:bd:eb:
24:45:d6:87:55:b6:03:07:c0:88:d4:b9:e7:cb:b1:
68:dc:ef:d4:5c:51:c4:66:a5:83:2d:f5:3b:ee:6d:
45:b7:59:bd:97:03:a9:2d:0b:00:4f:62:71:7c:c6:
94:db:34:cd:1f:6d:f6:f0:7b:c8:05:3e:61:4d:66:
be:f5:7a:18:9a:b5:c6:55:6c:f7:02:ba:9c:91:94:
d5:69:45:08:aa:c6:68:5d:94:67:80:b1:08:10:fe:
d1:32:3d:48:5e:91:34:62:c1:54:7d:f8:ca:2b:6e:
dd:3b:1d:e3:b0:3b:e6:99:f1:58:eb:4a:d4:b8:e1:
c1:fc:68:dc:4e:96:a6:58:e7:04:c6:bb:59:80:b3:
f5:55:6c:52:21:23:11:73:8d:b9:7b:5d:7c:4d:33:
f0:9f:97:e3:eb:53:3e:95:11:b0:94:f0:97:9c:9f:
5d:89:48:27:97:9f:f9:20:40:ab:c9:b5:d9:df:b1:
62:7e:6b:0b:b6:68:bb:1e:3b:b1:d3:e4:6f:6e:f6:
2d:ef:5a:d0:d7:fc:74:ca:0c:a8:33:96:b1:f9:30:
46:0a:54:1e:ff:ab:2e:d0:94:e5:72:98:65:0d:1e:
3d:2e:9b:93:32:8f:dc:05:dd:b1:eb:48:37:be:1d:
eb:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:BE:51:5B:93:5F:95:AF:39:C6:08:D9:C6:10:16:85:B0:3C:9F:05
X509v3 Authority Key Identifier:
keyid:FF:99:46:30:FC:74:55:6C:E5:08:02:68:70:90:15:45:FB:7B:04:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_5lGMPx0VWzlCAJocJAVRft7BM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/db5651-95f1-47c1-acf0-eafca5854257/1/_5lGMPx0VWzlCAJocJAVRft7BM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/db5651-95f1-47c1-acf0-eafca5854257/1/_5lGMPx0VWzlCAJocJAVRft7BM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:e7:4a:eb:1e:3a:11:fe:00:83:36:37:04:17:29:09:1c:f4:
82:30:49:a2:f0:07:16:5c:21:9d:71:c0:0d:71:20:c2:d6:aa:
db:14:7d:1a:58:06:9e:31:ab:a4:ab:58:98:2f:42:82:d1:c6:
b0:1c:b8:50:5f:72:2f:b2:30:85:8c:38:d1:25:ca:bc:09:50:
4d:46:87:ce:05:c1:3a:bb:fa:da:e0:c7:59:56:05:94:bd:ec:
95:6c:8a:01:c3:db:d2:e1:f1:1e:83:10:8f:6e:2a:56:7a:aa:
1c:ab:a1:d0:fd:f4:63:7f:70:6d:23:9b:f3:b9:ed:66:9f:cd:
29:ac:bb:70:49:8d:fc:4f:dd:fa:a4:1f:6b:74:2a:5d:84:22:
ff:6a:3e:c2:af:05:41:41:9d:6c:8e:50:1b:ef:78:68:ae:3d:
80:7c:c7:b4:62:50:6f:6e:48:36:27:5e:d4:e0:fe:d5:24:31:
33:c3:c8:f3:c3:0a:c4:e4:ef:2e:a9:ba:75:3c:1b:4e:5f:b3:
44:4b:94:44:45:9d:2a:ae:b0:1a:1a:27:1f:39:1b:f3:27:66:
8a:70:c0:60:6b:ae:09:63:42:d2:ac:7e:b6:05:c9:02:60:c9:
03:7d:08:86:b2:06:5a:d7:0d:bb:9c:dc:cf:01:3b:c1:ff:3f:
94:09:93:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:40:46 2026 by rpki-client