Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/e75f08-5dc6-46f9-af18-347ebb3975cf/1/D5_5nyJzNWVWJpW7Gk8uKxje_7A.mft
File: D5_5nyJzNWVWJpW7Gk8uKxje_7A.mft (raw, json)
Hash identifier: NWkRWcKcGRzqqctC5h0M29YtUIiHDCnnr+gTyHWkAQY=
Subject key identifier: FF:6C:E6:81:80:9B:DB:9D:72:AC:38:C4:87:6E:E5:01:D1:6E:69:3D
Authority key identifier: 0F:9F:F9:9F:22:73:35:65:56:26:95:BB:1A:4F:2E:2B:18:DE:FF:B0
Certificate issuer: /CN=0f9ff99f22733565562695bb1a4f2e2b18deffb0
Certificate serial: 019D2928F1335DCA6F1EC219D8D43831D556
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5_5nyJzNWVWJpW7Gk8uKxje_7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/e75f08-5dc6-46f9-af18-347ebb3975cf/1/D5_5nyJzNWVWJpW7Gk8uKxje_7A.mft
Manifest number: BC
Signing time: Thu 26 Mar 2026 08:00:42 +0000
Manifest this update: Thu 26 Mar 2026 08:00:42 +0000
Manifest next update: Fri 27 Mar 2026 08:00:42 +0000
Files and hashes: 1: D5_5nyJzNWVWJpW7Gk8uKxje_7A.crl (hash: ggBUbMbLMCk8xBP0D8cH5d8b+Sez+c8D9jbZr9Y+278=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/e75f08-5dc6-46f9-af18-347ebb3975cf/1/D5_5nyJzNWVWJpW7Gk8uKxje_7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/e75f08-5dc6-46f9-af18-347ebb3975cf/1/D5_5nyJzNWVWJpW7Gk8uKxje_7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/D5_5nyJzNWVWJpW7Gk8uKxje_7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:28:f1:33:5d:ca:6f:1e:c2:19:d8:d4:38:31:d5:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f9ff99f22733565562695bb1a4f2e2b18deffb0
Validity
Not Before: Mar 26 08:00:42 2026 GMT
Not After : Mar 27 08:00:42 2026 GMT
Subject: CN=ff6ce681809bdb9d72ac38c4876ee501d16e693d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:b1:dd:86:7d:27:fb:54:5d:23:9c:72:09:d8:
23:2f:17:db:5a:0a:a6:51:39:da:ae:04:b4:ef:cc:
4f:3b:0f:04:90:20:36:46:02:15:b1:22:95:cb:30:
ae:ef:e9:3a:e8:c8:33:e3:62:a1:06:66:bc:f0:78:
96:79:a7:27:4e:d9:9f:e2:e9:1a:ff:c9:81:4f:05:
34:80:ef:7a:2f:b5:f5:70:8b:eb:88:06:99:11:17:
b9:d5:63:a8:b7:4b:bf:49:37:d4:f6:f5:c1:87:81:
fd:1f:be:01:3f:5e:d0:50:ea:b1:4b:50:57:a6:41:
dc:12:8f:74:66:ae:e5:14:0e:2b:64:00:5b:8a:fa:
41:74:b6:e1:42:34:07:56:2d:40:f3:b9:51:eb:0b:
65:a8:60:28:2f:31:08:2f:07:20:cf:71:76:52:c1:
38:71:34:57:ce:cc:97:2e:94:61:d1:36:06:1d:b9:
51:42:51:2b:07:f1:d1:75:47:78:22:eb:a5:06:b9:
54:5b:1f:2f:e1:a3:98:09:f3:e2:48:dc:c9:a7:f5:
eb:e5:0f:57:19:69:e3:47:d8:00:1b:a3:43:28:71:
a8:21:fe:86:8a:54:33:4f:72:c0:fc:d3:cf:56:2c:
70:55:a5:ca:db:2a:5c:85:14:17:2a:57:c7:1d:a5:
25:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:6C:E6:81:80:9B:DB:9D:72:AC:38:C4:87:6E:E5:01:D1:6E:69:3D
X509v3 Authority Key Identifier:
keyid:0F:9F:F9:9F:22:73:35:65:56:26:95:BB:1A:4F:2E:2B:18:DE:FF:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5_5nyJzNWVWJpW7Gk8uKxje_7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e75f08-5dc6-46f9-af18-347ebb3975cf/1/D5_5nyJzNWVWJpW7Gk8uKxje_7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e75f08-5dc6-46f9-af18-347ebb3975cf/1/D5_5nyJzNWVWJpW7Gk8uKxje_7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:c2:76:52:e8:f2:9c:cc:1c:35:dd:69:b4:ae:36:d7:d7:7f:
e8:14:71:19:c0:77:20:10:dd:a4:d9:f7:75:a8:c4:d7:a3:a5:
00:cc:ce:85:f6:8f:c2:ab:54:08:e6:27:49:93:f5:e9:ec:87:
61:e6:84:40:10:da:9a:1f:68:3e:ca:1a:a5:cc:5b:6f:75:83:
61:6f:0d:fb:6f:ba:7b:39:ba:03:2c:35:7c:51:9b:1b:b5:2e:
9c:68:34:7f:87:1d:af:00:e6:04:b1:c1:86:57:c4:0d:e5:57:
52:75:7c:c8:f1:f2:ec:7e:51:2f:63:bd:66:a5:9b:e1:2b:dc:
c1:03:0f:af:fd:73:03:fe:c7:46:24:6d:4d:91:4d:4e:e6:79:
96:f6:6b:fd:3d:bd:59:0a:de:dc:ef:f7:57:89:55:58:82:c6:
2b:6c:ec:bd:d2:b9:7b:a6:b5:08:8c:1c:94:8a:41:08:32:20:
b6:cd:d4:6e:de:d6:35:18:8f:41:8d:e4:9b:13:ef:7f:d6:34:
41:ee:10:f5:62:4e:35:aa:f0:c6:15:9f:08:ba:af:c5:ba:ff:
da:f7:46:33:0d:95:bc:75:ee:76:ee:3c:1f:57:2f:c7:96:02:
b3:0c:3d:83:d6:2d:a3:6a:8e:65:a3:ac:48:e1:b1:60:d5:56:
fb:e6:03:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:41:38 2026 by rpki-client