Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/e58386-bcf8-4826-95ec-f9c75ad3aed3/1/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.mft
File: _5fx7KTIxPAMJlUyV9zSK-YJMuQ.mft (raw, json)
Hash identifier: crxF0qpShLrjp1NPADcrBSIdhAHZRAV/szRF6G+POqU=
Subject key identifier: D9:E5:64:20:C0:01:B0:9A:32:E0:61:C6:8F:AB:FF:6C:B4:81:73:BB
Authority key identifier: FF:97:F1:EC:A4:C8:C4:F0:0C:26:55:32:57:DC:D2:2B:E6:09:32:E4
Certificate issuer: /CN=ff97f1eca4c8c4f00c26553257dcd22be60932e4
Certificate serial: 019D2772BD5505FE67313FF1DAFA84D6DB4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/e58386-bcf8-4826-95ec-f9c75ad3aed3/1/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.mft
Manifest number: 1884
Signing time: Thu 26 Mar 2026 00:02:03 +0000
Manifest this update: Thu 26 Mar 2026 00:02:03 +0000
Manifest next update: Fri 27 Mar 2026 00:02:03 +0000
Files and hashes: 1: _5fx7KTIxPAMJlUyV9zSK-YJMuQ.crl (hash: dz6PigR9hhV8TvsdBFkmQsLPbM1vDgk/saB6tiS3GsA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/e58386-bcf8-4826-95ec-f9c75ad3aed3/1/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/e58386-bcf8-4826-95ec-f9c75ad3aed3/1/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:bd:55:05:fe:67:31:3f:f1:da:fa:84:d6:db:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff97f1eca4c8c4f00c26553257dcd22be60932e4
Validity
Not Before: Mar 26 00:02:03 2026 GMT
Not After : Mar 27 00:02:03 2026 GMT
Subject: CN=d9e56420c001b09a32e061c68fabff6cb48173bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:e0:b4:24:99:5a:dd:fb:d2:ec:00:90:67:d3:
97:8f:fd:f5:64:84:78:f8:0f:ab:64:e8:66:b2:ea:
59:04:4c:79:8f:c8:34:7f:7c:77:7f:e7:0c:ed:8d:
65:7a:78:0e:92:49:9a:2c:5c:d3:29:16:a2:0c:5c:
7a:45:ff:26:08:17:b5:61:66:1e:80:f7:c0:30:73:
00:fc:be:bb:11:5c:02:7f:d9:5c:8d:7a:29:c5:3c:
65:66:65:a4:aa:5c:e3:1d:5a:7b:0c:94:2d:e0:c5:
12:22:4b:56:06:b4:75:2b:95:c0:f4:28:42:9a:30:
b9:e6:b8:6d:6b:03:2a:36:64:cb:7f:6f:e2:98:6f:
3e:45:27:c5:3f:c8:af:ef:fd:54:ec:3d:32:a2:63:
04:5e:19:28:32:7c:f2:63:33:05:7d:c6:d1:fc:3c:
29:f8:53:25:7d:32:45:2a:59:6b:2a:80:42:70:d5:
5c:a9:e4:ac:da:6f:27:01:42:73:d9:bb:f5:3e:1d:
a4:40:03:dd:f0:ab:a0:4b:00:7a:d3:e6:3b:23:f7:
c4:b0:8b:62:9a:3c:bd:ff:7d:b3:57:3a:13:25:1c:
8f:8f:f6:5e:dd:6a:70:6f:11:8a:07:89:99:12:d5:
ec:3f:6e:f8:5d:12:2b:0c:16:d9:b6:4f:48:71:d9:
e8:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:E5:64:20:C0:01:B0:9A:32:E0:61:C6:8F:AB:FF:6C:B4:81:73:BB
X509v3 Authority Key Identifier:
keyid:FF:97:F1:EC:A4:C8:C4:F0:0C:26:55:32:57:DC:D2:2B:E6:09:32:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e58386-bcf8-4826-95ec-f9c75ad3aed3/1/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e58386-bcf8-4826-95ec-f9c75ad3aed3/1/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:e9:2a:27:ed:f3:13:59:9f:40:0c:55:b4:59:65:48:c4:4a:
f4:15:a5:d0:bc:7a:f9:14:a7:a2:b3:2b:6d:bb:93:78:bc:ff:
ca:86:29:ae:c7:2b:ee:5b:29:75:b2:f1:75:23:2c:e9:86:e6:
b5:a9:a3:48:ef:7c:dc:da:b8:7a:40:2f:93:32:76:63:bb:13:
bc:71:42:56:a0:fa:22:6c:f8:74:73:6d:86:e3:be:74:3c:63:
01:96:62:69:7f:e8:72:71:c2:b8:21:40:df:51:a5:a1:10:3d:
71:74:ad:1f:36:98:d7:a5:fe:f0:29:05:5d:ea:30:05:cd:d8:
8d:11:35:0f:c4:94:8d:42:e3:38:88:bd:9e:40:d7:02:ea:97:
44:71:30:78:bd:9e:ec:25:e6:99:4b:89:b3:ee:6e:ed:0e:a5:
a1:03:72:e7:82:44:19:28:a1:36:9e:bf:5f:f6:e0:80:c2:dd:
25:84:2b:fb:df:5e:62:cb:a3:be:75:92:4d:58:c8:d6:54:63:
a4:b5:b5:63:c8:73:6b:46:62:fc:d4:5a:c1:b6:d6:70:13:6d:
c2:20:6b:de:06:94:eb:53:f0:4a:95:19:ca:12:38:f1:54:56:
e1:af:9a:ed:f9:ce:49:6c:48:ae:c1:8f:23:c1:13:73:d1:08:
9f:b6:98:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ncr1VBf5nMT/x2vqE1ttNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmOTdmMWVjYTRjOGM0ZjAwYzI2NTUzMjU3ZGNkMjJiZTYw
OTMyZTQwHhcNMjYwMzI2MDAwMjAzWhcNMjYwMzI3MDAwMjAzWjAzMTEwLwYDVQQD
EyhkOWU1NjQyMGMwMDFiMDlhMzJlMDYxYzY4ZmFiZmY2Y2I0ODE3M2JiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgOC0JJla3fvS7ACQZ9OXj/31ZIR4
+A+rZOhmsupZBEx5j8g0f3x3f+cM7Y1lengOkkmaLFzTKRaiDFx6Rf8mCBe1YWYe
gPfAMHMA/L67EVwCf9lcjXopxTxlZmWkqlzjHVp7DJQt4MUSIktWBrR1K5XA9ChC
mjC55rhtawMqNmTLf2/imG8+RSfFP8iv7/1U7D0yomMEXhkoMnzyYzMFfcbR/Dwp
+FMlfTJFKllrKoBCcNVcqeSs2m8nAUJz2bv1Ph2kQAPd8KugSwB60+Y7I/fEsIti
mjy9/32zVzoTJRyPj/Ze3WpwbxGKB4mZEtXsP274XRIrDBbZtk9IcdnoSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNnlZCDAAbCaMuBhxo+r/2y0gXO7MB8GA1UdIwQY
MBaAFP+X8eykyMTwDCZVMlfc0ivmCTLkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzVmeDdLVEl4UEFNSmxVeVY5elNLLVlKTXVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9lNTgzODYtYmNmOC00ODI2LTk1ZWMt
ZjljNzVhZDNhZWQzLzEvXzVmeDdLVEl4UEFNSmxVeVY5elNLLVlKTXVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC9lNTgzODYtYmNmOC00ODI2LTk1ZWMtZjljNzVhZDNhZWQz
LzEvXzVmeDdLVEl4UEFNSmxVeVY5elNLLVlKTXVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQOkqJ+3z
E1mfQAxVtFllSMRK9BWl0Lx6+RSnorMrbbuTeLz/yoYprscr7lspdbLxdSMs6Ybm
tamjSO983Nq4ekAvkzJ2Y7sTvHFCVqD6Imz4dHNthuO+dDxjAZZiaX/ocnHCuCFA
31GloRA9cXStHzaY16X+8CkFXeowBc3YjRE1D8SUjULjOIi9nkDXAuqXRHEweL2e
7CXmmUuJs+5u7Q6loQNy54JEGSihNp6/X/bggMLdJYQr+99eYsujvnWSTVjI1lRj
pLW1Y8hza0Zi/NRawbbWcBNtwiBr3gaU61PwSpUZyhI48VRW4a+a7fnOSWxIrsGP
I8ETc9EIn7aYyw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:31:23 2026 by rpki-client