Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/6558bc-7d3a-4f6f-b73a-62a3562c72ba/1/E5YC73YK3ApbekhYPPv5tg_LcTA.mft
File: E5YC73YK3ApbekhYPPv5tg_LcTA.mft (raw, json)
Hash identifier: 79uDikhtOoodZFOqvDygOtLA/mtRzDORsLNfYVlUS9w=
Subject key identifier: 50:B4:4A:00:DB:42:A6:FE:90:3C:F8:C9:EF:5A:8D:CE:BB:71:04:0A
Authority key identifier: 13:96:02:EF:76:0A:DC:0A:5B:7A:48:58:3C:FB:F9:B6:0F:CB:71:30
Certificate issuer: /CN=139602ef760adc0a5b7a48583cfbf9b60fcb7130
Certificate serial: 019D2703CFF0B103AFF1A59231824A18180A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E5YC73YK3ApbekhYPPv5tg_LcTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/6558bc-7d3a-4f6f-b73a-62a3562c72ba/1/E5YC73YK3ApbekhYPPv5tg_LcTA.mft
Manifest number: 10FA
Signing time: Wed 25 Mar 2026 22:00:54 +0000
Manifest this update: Wed 25 Mar 2026 22:00:54 +0000
Manifest next update: Thu 26 Mar 2026 22:00:54 +0000
Files and hashes: 1: E5YC73YK3ApbekhYPPv5tg_LcTA.crl (hash: mcw/2bZLvEkDSriXAq/wnyK3JHldg21VLu4SCS3u8V8=)
2: eIvGRKEJzXb2weR4zx6UQcOzf-I.roa (hash: fXtGDiQR6bCST/6YzQ1DTyETQIkxGKJAAeEFWx1ditk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/6558bc-7d3a-4f6f-b73a-62a3562c72ba/1/E5YC73YK3ApbekhYPPv5tg_LcTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/6558bc-7d3a-4f6f-b73a-62a3562c72ba/1/E5YC73YK3ApbekhYPPv5tg_LcTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/E5YC73YK3ApbekhYPPv5tg_LcTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:cf:f0:b1:03:af:f1:a5:92:31:82:4a:18:18:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=139602ef760adc0a5b7a48583cfbf9b60fcb7130
Validity
Not Before: Mar 25 22:00:54 2026 GMT
Not After : Mar 26 22:00:54 2026 GMT
Subject: CN=50b44a00db42a6fe903cf8c9ef5a8dcebb71040a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:97:ea:63:54:f4:ab:49:8b:b9:26:cc:c9:54:
8b:ee:73:14:fe:a1:0c:da:e4:cb:67:c8:26:45:0f:
72:a5:9d:31:52:94:04:69:43:7b:33:cc:d1:75:6c:
e8:83:b5:11:35:4f:59:b9:5a:b3:28:8f:42:cb:9c:
e4:42:8d:2b:5d:c3:87:c1:2b:a4:5e:a7:06:4d:e2:
a7:50:0b:99:2f:09:78:a0:15:b5:ca:63:21:05:12:
df:95:3e:24:25:ea:c7:5f:cd:f7:2d:69:a2:9d:e3:
1d:f2:34:96:9e:1f:44:01:d1:74:96:cb:9f:75:50:
f9:04:4f:df:2a:ea:e2:05:b8:15:81:2f:6d:ea:3c:
27:fe:e1:fa:20:02:a9:56:71:52:2c:c3:9d:27:da:
23:4d:21:a7:c6:0e:42:33:50:53:8f:9f:46:09:99:
ed:af:03:cd:a7:db:76:af:97:8b:ea:3d:16:1a:b0:
ba:1c:a9:20:3b:60:66:d4:d5:43:c2:dc:19:9a:bf:
80:21:b0:a8:b2:31:e0:66:a6:64:4e:eb:01:aa:dd:
46:23:fe:37:fe:6f:2a:ae:f1:48:b6:6f:30:0e:bc:
79:a8:c3:d5:00:d5:da:de:66:94:88:5a:4b:5e:a8:
fb:68:e2:d6:e7:3d:25:4c:2b:c1:30:a6:56:92:a8:
ad:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:B4:4A:00:DB:42:A6:FE:90:3C:F8:C9:EF:5A:8D:CE:BB:71:04:0A
X509v3 Authority Key Identifier:
keyid:13:96:02:EF:76:0A:DC:0A:5B:7A:48:58:3C:FB:F9:B6:0F:CB:71:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E5YC73YK3ApbekhYPPv5tg_LcTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/6558bc-7d3a-4f6f-b73a-62a3562c72ba/1/E5YC73YK3ApbekhYPPv5tg_LcTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/6558bc-7d3a-4f6f-b73a-62a3562c72ba/1/E5YC73YK3ApbekhYPPv5tg_LcTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:0c:94:86:6a:71:f2:04:4a:53:33:99:cb:26:7e:b0:99:42:
88:2e:46:44:7d:a7:ca:6b:ba:a9:47:d2:6d:14:cd:88:58:11:
ea:be:91:23:8b:f1:36:f6:26:79:00:66:41:ca:e5:50:38:50:
06:5e:68:17:10:e6:89:af:2c:86:75:a4:95:14:c8:0d:45:fe:
95:08:5c:6b:cb:dc:64:5d:c3:07:03:9f:c4:f1:54:ba:b6:8d:
4c:07:ec:dc:98:a6:ab:51:b6:06:b6:0c:e3:83:53:50:d8:37:
5c:97:ce:ba:f3:ff:21:2a:0a:ad:82:44:bf:74:0f:37:83:8c:
a5:19:66:2a:ae:be:12:8e:b3:b4:ab:37:12:e3:22:6d:f3:cd:
c4:76:21:29:22:26:8c:9c:8e:15:f6:25:03:b7:fc:ee:ed:23:
95:08:c5:8a:cd:82:38:f5:f3:d2:62:3f:ac:46:c8:7c:01:8f:
df:eb:60:d4:67:e7:5d:55:9d:24:68:67:33:a1:42:63:a0:2c:
29:2b:a6:6b:a3:1c:6f:84:f6:0a:e4:03:f5:e9:09:29:a9:fa:
46:37:00:c8:7c:da:16:49:25:1c:7f:28:c0:ac:11:1a:2f:b9:
5f:af:93:c0:40:72:a2:e4:89:63:5a:26:b8:5a:a5:ef:d7:db:
c6:16:4d:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:50 2026 by rpki-client