Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/a80b6d-ccb7-44c2-b43f-ea6b0be5caee/1/cA5JDhDqN72DSWKGM7WIVmHmegI.mft
File: cA5JDhDqN72DSWKGM7WIVmHmegI.mft (raw, json)
Hash identifier: iQEYDWEYItcweFQjx0mi/Wa5F3v6RkvJERRKR0udG9s=
Subject key identifier: E8:71:24:D5:4D:17:4D:9A:8C:A1:BE:C2:02:77:0D:98:EE:E0:F1:7B
Authority key identifier: 70:0E:49:0E:10:EA:37:BD:83:49:62:86:33:B5:88:56:61:E6:7A:02
Certificate issuer: /CN=700e490e10ea37bd8349628633b5885661e67a02
Certificate serial: 019D28F282223B678049E00CE65F3CB8EBCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cA5JDhDqN72DSWKGM7WIVmHmegI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/a80b6d-ccb7-44c2-b43f-ea6b0be5caee/1/cA5JDhDqN72DSWKGM7WIVmHmegI.mft
Manifest number: 0391
Signing time: Thu 26 Mar 2026 07:01:14 +0000
Manifest this update: Thu 26 Mar 2026 07:01:14 +0000
Manifest next update: Fri 27 Mar 2026 07:01:14 +0000
Files and hashes: 1: cA5JDhDqN72DSWKGM7WIVmHmegI.crl (hash: 1HsqyVBLiOr8WbtRN9gb5chbKYUaBPlN6fObJkYjgRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/a80b6d-ccb7-44c2-b43f-ea6b0be5caee/1/cA5JDhDqN72DSWKGM7WIVmHmegI.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/a80b6d-ccb7-44c2-b43f-ea6b0be5caee/1/cA5JDhDqN72DSWKGM7WIVmHmegI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cA5JDhDqN72DSWKGM7WIVmHmegI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:82:22:3b:67:80:49:e0:0c:e6:5f:3c:b8:eb:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=700e490e10ea37bd8349628633b5885661e67a02
Validity
Not Before: Mar 26 07:01:14 2026 GMT
Not After : Mar 27 07:01:14 2026 GMT
Subject: CN=e87124d54d174d9a8ca1bec202770d98eee0f17b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:6e:44:55:25:77:66:a9:07:24:17:59:ce:fc:
8d:37:ad:d9:c3:f4:23:f8:54:89:af:3d:56:8f:06:
cf:6d:67:36:c0:65:1f:c5:10:69:3b:0e:07:79:e6:
2a:e7:c5:57:42:dc:b6:52:01:33:c0:99:23:ac:93:
27:8d:db:62:71:d1:87:6b:0d:ba:9d:da:96:2f:04:
38:58:fd:12:9b:87:ae:f5:8a:a4:56:2c:38:db:62:
71:9d:1f:56:9a:fd:f6:dc:00:65:a9:c4:e7:d7:d7:
03:e4:7c:31:dd:e6:9a:46:58:4f:c2:6a:ec:73:67:
36:99:ee:ef:61:c3:7c:98:b7:d9:17:19:12:eb:95:
a0:14:a3:67:a3:7a:a2:cc:7b:f8:bc:b5:ef:b5:31:
5d:2b:31:ce:50:9b:57:d2:d4:8c:0d:35:e5:56:79:
01:a1:0e:61:2a:c8:5b:c4:a0:d8:df:d7:63:c9:13:
7f:b8:cd:bf:9b:6b:0b:c4:c1:33:40:45:72:84:d8:
df:45:0c:5c:e9:a9:cb:70:81:c1:b8:be:f7:67:9d:
bb:ad:87:41:c5:80:85:55:6d:5c:b7:f0:9a:42:34:
61:8a:c7:ed:ca:66:bb:88:0a:64:b5:9d:26:54:83:
f4:f3:ff:85:64:90:4a:5e:f0:87:20:30:86:5b:05:
a5:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:71:24:D5:4D:17:4D:9A:8C:A1:BE:C2:02:77:0D:98:EE:E0:F1:7B
X509v3 Authority Key Identifier:
keyid:70:0E:49:0E:10:EA:37:BD:83:49:62:86:33:B5:88:56:61:E6:7A:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cA5JDhDqN72DSWKGM7WIVmHmegI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/a80b6d-ccb7-44c2-b43f-ea6b0be5caee/1/cA5JDhDqN72DSWKGM7WIVmHmegI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/a80b6d-ccb7-44c2-b43f-ea6b0be5caee/1/cA5JDhDqN72DSWKGM7WIVmHmegI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:9c:4c:e9:cc:22:98:7c:a3:ba:7f:20:82:04:eb:e7:e3:36:
6a:5b:6f:0d:a9:e3:06:1c:67:f4:ad:ce:fd:dd:9c:33:af:ba:
28:c8:66:70:db:92:ba:0d:a1:42:2b:df:d2:10:05:7c:9a:e9:
fa:4b:20:73:c4:f2:36:84:33:94:1c:9d:27:bb:85:fb:db:ea:
b3:65:98:83:32:7d:72:62:b2:8f:b7:f0:30:23:8f:be:06:96:
20:33:fd:85:e7:3f:fb:1c:c7:54:2d:6d:3d:2e:1e:b5:b2:c8:
09:40:2d:ef:dc:c3:06:ab:09:fb:9d:7c:65:bd:aa:44:1c:4a:
79:31:a9:5d:c9:bf:ce:1c:1a:37:2a:ce:b6:69:e1:db:ee:f3:
34:4a:28:f3:b7:2e:ac:51:6b:bf:4f:35:2f:b7:b4:cd:c3:ca:
1d:f6:13:a5:80:69:be:86:45:e8:0d:e2:90:b7:d5:9e:93:4b:
5b:ee:d0:a2:15:32:19:fa:37:21:8d:f3:3e:be:44:07:f3:5f:
c8:1b:68:32:37:87:8c:e6:fb:67:d0:86:9f:85:b0:86:e4:ff:
df:11:a5:50:d0:46:18:e4:65:79:f7:0a:c2:39:fb:ed:a0:57:
41:3e:71:f9:50:2d:24:e9:1a:6e:43:84:80:2d:d5:bc:91:b4:
e5:19:a0:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:13:14 2026 by rpki-client