Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/3eed28-230c-4b9f-904c-777e6ca4eff6/1/5BjN3DnTR1Y8bcHl7F5ZYh5A5Nk.mft
File: 5BjN3DnTR1Y8bcHl7F5ZYh5A5Nk.mft (raw, json)
Hash identifier: 6X2o/VQd201QnHGtyZ6Xes5prFD2eyczfaMGc7Fs3eQ=
Subject key identifier: EF:FF:CD:A4:E0:E9:8E:D9:A7:04:36:D5:24:EB:55:D7:BA:21:FB:F8
Authority key identifier: E4:18:CD:DC:39:D3:47:56:3C:6D:C1:E5:EC:5E:59:62:1E:40:E4:D9
Certificate issuer: /CN=e418cddc39d347563c6dc1e5ec5e59621e40e4d9
Certificate serial: 019D2704481259C371088F4D6CB31748CF37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5BjN3DnTR1Y8bcHl7F5ZYh5A5Nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/3eed28-230c-4b9f-904c-777e6ca4eff6/1/5BjN3DnTR1Y8bcHl7F5ZYh5A5Nk.mft
Manifest number: 066A
Signing time: Wed 25 Mar 2026 22:01:25 +0000
Manifest this update: Wed 25 Mar 2026 22:01:25 +0000
Manifest next update: Thu 26 Mar 2026 22:01:25 +0000
Files and hashes: 1: 5BjN3DnTR1Y8bcHl7F5ZYh5A5Nk.crl (hash: dEc+qoc3n58gAI3RT70pWnB+9smVhmZnDjpnBcwbP04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/3eed28-230c-4b9f-904c-777e6ca4eff6/1/5BjN3DnTR1Y8bcHl7F5ZYh5A5Nk.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/3eed28-230c-4b9f-904c-777e6ca4eff6/1/5BjN3DnTR1Y8bcHl7F5ZYh5A5Nk.mft
rsync://rpki.ripe.net/repository/DEFAULT/5BjN3DnTR1Y8bcHl7F5ZYh5A5Nk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:48:12:59:c3:71:08:8f:4d:6c:b3:17:48:cf:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e418cddc39d347563c6dc1e5ec5e59621e40e4d9
Validity
Not Before: Mar 25 22:01:25 2026 GMT
Not After : Mar 26 22:01:25 2026 GMT
Subject: CN=efffcda4e0e98ed9a70436d524eb55d7ba21fbf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:2f:4a:dc:19:98:b7:dc:16:97:fa:1f:b7:25:
41:d6:b5:3a:0b:0c:3b:fb:4c:66:d7:1d:09:0d:25:
71:9b:aa:d4:df:4b:cb:10:f1:a9:b8:08:8c:12:04:
6b:fd:51:07:04:fc:6d:0c:f5:24:65:da:4c:6b:04:
73:1b:ce:83:c1:63:9b:3f:84:69:15:e4:e9:21:04:
2d:d7:19:bf:1a:f1:fe:89:70:56:5a:82:28:e4:27:
7a:52:0c:9a:4d:d7:8f:74:5d:f2:59:c8:bd:5d:2e:
8b:2b:ff:9e:d4:fc:4f:e1:a5:22:85:c5:88:17:15:
88:a9:cb:f1:af:61:f4:f2:df:0e:35:60:cd:15:89:
f7:68:9c:3f:a3:8e:a3:c2:a6:d6:f2:8a:93:32:70:
e4:24:40:44:b4:41:24:6f:cf:26:9c:9c:83:0f:27:
05:53:e4:51:c0:b7:85:68:5c:ee:28:ba:e6:c6:71:
96:a6:77:bf:fe:b2:96:ac:2d:2d:bf:18:0c:65:e4:
1a:7d:0f:d9:6e:c0:31:10:26:3d:15:de:28:80:eb:
1e:f4:9a:c4:4a:02:f3:04:9f:0a:73:2a:1b:e6:e3:
0f:29:9b:7e:15:e5:95:5d:3e:0e:4f:75:8a:9b:9c:
e0:cc:73:e0:a3:34:76:fa:73:33:95:9e:e8:f4:43:
87:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:FF:CD:A4:E0:E9:8E:D9:A7:04:36:D5:24:EB:55:D7:BA:21:FB:F8
X509v3 Authority Key Identifier:
keyid:E4:18:CD:DC:39:D3:47:56:3C:6D:C1:E5:EC:5E:59:62:1E:40:E4:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5BjN3DnTR1Y8bcHl7F5ZYh5A5Nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/3eed28-230c-4b9f-904c-777e6ca4eff6/1/5BjN3DnTR1Y8bcHl7F5ZYh5A5Nk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/3eed28-230c-4b9f-904c-777e6ca4eff6/1/5BjN3DnTR1Y8bcHl7F5ZYh5A5Nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:49:50:1e:62:6b:2f:b0:49:02:68:2f:1b:bf:a4:44:3d:3e:
7b:41:27:80:b0:99:e0:21:0a:97:3b:f5:8c:3c:62:69:16:39:
07:8b:d4:b2:67:f0:3a:2b:d8:f1:aa:59:f5:68:a0:3b:eb:84:
42:12:d2:d6:b0:c5:c8:3a:52:09:0c:d9:0c:94:ca:13:42:23:
70:05:29:1e:ae:00:42:5e:97:4d:09:b4:e2:15:a5:d4:aa:b9:
0a:1d:ca:d4:eb:49:d5:72:82:7a:6d:18:ca:85:51:da:70:00:
8b:c5:ea:04:81:9e:6d:8c:1b:03:35:d0:2e:b9:ed:93:3d:81:
96:f9:dc:c0:8e:a2:4c:87:71:8b:55:2e:81:f3:4f:d8:91:f8:
90:7b:65:a5:b7:9c:77:a8:9e:e0:b7:37:71:05:fd:96:36:d0:
b6:a5:de:51:13:94:5d:2c:05:bf:e4:85:bd:6b:c6:c1:f9:5c:
8c:00:0f:d7:53:3e:2a:30:7a:0d:e1:0d:10:8c:37:2e:74:73:
f4:9f:15:b2:20:22:ff:21:97:9d:bb:f9:6c:81:ed:dd:c5:f3:
4b:67:e6:b1:f9:99:e5:f4:94:13:2c:e8:3c:51:d5:e1:76:32:
71:50:89:38:97:ec:50:c4:f2:33:29:3a:5a:70:42:89:c2:7e:
60:38:71:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:37:56 2026 by rpki-client