Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/f2ed50-4c9a-4344-9148-039c1405e175/1/5Q5mktlyjagfXE9J4VB3Phr7yAs.mft
File: 5Q5mktlyjagfXE9J4VB3Phr7yAs.mft (raw, json)
Hash identifier: XOuC90meR5dYXROJfQGxxkGOJxVO7GdFMFCsLofGX8g=
Subject key identifier: DF:DB:82:52:3E:DD:35:79:96:38:9F:05:20:B2:98:52:87:C1:D1:01
Authority key identifier: E5:0E:66:92:D9:72:8D:A8:1F:5C:4F:49:E1:50:77:3E:1A:FB:C8:0B
Certificate issuer: /CN=e50e6692d9728da81f5c4f49e150773e1afbc80b
Certificate serial: 019D292998806587CC70249F46839F296C8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Q5mktlyjagfXE9J4VB3Phr7yAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/f2ed50-4c9a-4344-9148-039c1405e175/1/5Q5mktlyjagfXE9J4VB3Phr7yAs.mft
Manifest number: 10A6
Signing time: Thu 26 Mar 2026 08:01:24 +0000
Manifest this update: Thu 26 Mar 2026 08:01:24 +0000
Manifest next update: Fri 27 Mar 2026 08:01:24 +0000
Files and hashes: 1: 5Q5mktlyjagfXE9J4VB3Phr7yAs.crl (hash: /eD5aWeg5O/M+69v4IK0SROMg5SIysLpdAtVs+He5/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/f2ed50-4c9a-4344-9148-039c1405e175/1/5Q5mktlyjagfXE9J4VB3Phr7yAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/f2ed50-4c9a-4344-9148-039c1405e175/1/5Q5mktlyjagfXE9J4VB3Phr7yAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Q5mktlyjagfXE9J4VB3Phr7yAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:98:80:65:87:cc:70:24:9f:46:83:9f:29:6c:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e50e6692d9728da81f5c4f49e150773e1afbc80b
Validity
Not Before: Mar 26 08:01:24 2026 GMT
Not After : Mar 27 08:01:24 2026 GMT
Subject: CN=dfdb82523edd357996389f0520b2985287c1d101
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4b:3e:a4:32:1d:58:45:15:c3:7e:23:f7:30:
ce:27:94:7e:2d:25:04:07:f1:76:37:ac:48:fb:5c:
57:9d:79:bf:b7:08:ce:90:87:a7:34:e3:d9:4d:2e:
68:cc:7a:1e:db:de:36:8f:63:7e:56:6a:fc:a7:32:
0b:e2:3e:49:5d:ac:05:32:ca:5d:a3:4e:f9:f1:9d:
a4:1e:49:cc:21:b2:d7:ac:64:81:8c:98:71:40:74:
dc:1a:91:94:ed:9c:63:f2:b7:a6:32:48:59:3e:8e:
af:a6:47:64:d0:19:51:11:26:1e:d4:f1:82:29:fb:
bf:d0:cc:e3:09:b9:d4:21:f5:e8:cd:b3:54:3f:30:
ba:29:2e:5f:59:88:3b:25:6d:39:c1:6c:eb:79:48:
db:83:a5:45:11:73:ee:c1:d0:89:97:39:97:1d:a7:
94:97:b1:3f:e1:96:4c:f6:6c:20:df:e1:12:f1:b8:
15:5c:f5:52:49:42:4b:2c:b4:0a:4d:a8:d0:97:34:
22:b1:b4:a6:e1:f6:fa:3f:6c:2a:8a:60:aa:58:3c:
82:d3:f1:9e:37:36:f0:b1:16:52:06:2b:84:06:0d:
d5:ec:78:7a:e3:fb:fc:17:d2:3e:28:06:6d:6f:09:
c3:cc:86:11:33:1f:7d:1f:80:90:dc:89:fb:14:b9:
5f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:DB:82:52:3E:DD:35:79:96:38:9F:05:20:B2:98:52:87:C1:D1:01
X509v3 Authority Key Identifier:
keyid:E5:0E:66:92:D9:72:8D:A8:1F:5C:4F:49:E1:50:77:3E:1A:FB:C8:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Q5mktlyjagfXE9J4VB3Phr7yAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/f2ed50-4c9a-4344-9148-039c1405e175/1/5Q5mktlyjagfXE9J4VB3Phr7yAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/f2ed50-4c9a-4344-9148-039c1405e175/1/5Q5mktlyjagfXE9J4VB3Phr7yAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:fc:8e:70:25:4c:0b:18:f8:6a:b4:e3:49:56:6b:f3:b6:b0:
31:20:49:c8:04:01:a6:12:07:ac:15:65:1b:91:f4:12:0f:03:
7e:e7:b9:41:c9:74:aa:42:5e:36:13:37:e5:06:99:bc:cb:27:
77:1c:85:dc:50:b4:45:16:46:09:4c:19:4a:33:d7:1c:04:f0:
9f:5c:4e:8a:c1:90:4c:39:5d:3b:a0:8a:21:23:1d:e1:df:5a:
0d:e5:f3:4b:a3:d4:33:49:f8:ca:05:03:a0:eb:5e:c8:d4:25:
ae:2d:9c:0b:7f:81:b5:d2:6a:25:59:02:29:3d:f9:fa:38:fc:
58:37:ce:e4:f7:5f:38:98:08:15:29:e1:a1:7b:c8:0c:54:c1:
58:12:fb:47:54:c7:96:2e:61:47:37:c4:fa:01:90:4f:44:55:
bb:3f:62:6c:c8:5d:af:c9:9c:76:1d:8e:22:5b:0d:03:c8:61:
3a:3f:1f:9e:07:6b:bd:1a:77:19:c4:e4:37:25:56:f6:1b:6b:
56:fd:f5:31:e9:95:7a:88:40:70:fd:1c:66:81:73:80:74:11:
df:7b:b0:dd:2e:a5:3f:f9:a9:b2:b3:7c:ed:69:24:f5:59:81:
c4:9f:44:a5:6c:81:e2:19:ca:17:e6:d1:1a:ce:f3:40:b1:75:
56:54:eb:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:56:22 2026 by rpki-client