Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/5bb1d0-634e-46fc-a75a-0c9aa6696b49/1/5cePoZk9RRL-JDa4ztqL_JKdZX0.mft
File: 5cePoZk9RRL-JDa4ztqL_JKdZX0.mft (raw, json)
Hash identifier: DkyATnR9zlFRS+GjStzDvsSDEojr3oK1+WM8YVQEbfM=
Subject key identifier: 8F:81:AB:4A:30:9C:97:67:85:7A:62:65:46:0F:90:D8:73:99:4B:82
Authority key identifier: E5:C7:8F:A1:99:3D:45:12:FE:24:36:B8:CE:DA:8B:FC:92:9D:65:7D
Certificate issuer: /CN=e5c78fa1993d4512fe2436b8ceda8bfc929d657d
Certificate serial: 019E1C7D71AEEA006755BC8D409997955621
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5cePoZk9RRL-JDa4ztqL_JKdZX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/5bb1d0-634e-46fc-a75a-0c9aa6696b49/1/5cePoZk9RRL-JDa4ztqL_JKdZX0.mft
Manifest number: 0C45
Signing time: Tue 12 May 2026 14:00:43 +0000
Manifest this update: Tue 12 May 2026 14:00:43 +0000
Manifest next update: Wed 13 May 2026 14:00:43 +0000
Files and hashes: 1: 5cePoZk9RRL-JDa4ztqL_JKdZX0.crl (hash: R7+p3eLp8t4j60G2UXlYgxjssUK36R9F5umcFKVDQWo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/5bb1d0-634e-46fc-a75a-0c9aa6696b49/1/5cePoZk9RRL-JDa4ztqL_JKdZX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/5bb1d0-634e-46fc-a75a-0c9aa6696b49/1/5cePoZk9RRL-JDa4ztqL_JKdZX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/5cePoZk9RRL-JDa4ztqL_JKdZX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:7d:71:ae:ea:00:67:55:bc:8d:40:99:97:95:56:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5c78fa1993d4512fe2436b8ceda8bfc929d657d
Validity
Not Before: May 12 14:00:43 2026 GMT
Not After : May 13 14:00:43 2026 GMT
Subject: CN=8f81ab4a309c9767857a6265460f90d873994b82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:67:4d:1a:b9:cf:48:08:15:e7:37:81:35:5b:
7d:ad:9a:a0:89:72:93:07:24:46:d6:e6:35:85:0e:
a9:c1:ae:64:a3:74:af:c8:7b:14:fc:46:88:db:9d:
ce:74:b5:99:12:84:70:4e:f9:f4:70:bc:92:01:5b:
3e:b0:57:a0:bb:d7:d1:90:86:0e:4a:f5:50:ea:fb:
b0:7d:67:b3:68:0c:14:a5:a2:5c:51:63:8b:7e:02:
3b:b2:e0:c5:3d:3d:5c:8e:07:be:28:8f:79:8c:0e:
ab:52:11:96:f8:3e:b8:37:d8:b4:02:17:03:b2:40:
bb:33:f6:81:95:f3:04:58:38:39:33:82:ef:a7:12:
a6:66:c4:8d:d3:d9:15:94:5c:37:95:71:7a:bd:62:
d3:c5:cf:98:d3:79:9b:9f:0d:7d:68:7a:06:9f:a5:
a0:ce:c7:d8:1d:5d:86:91:6e:a4:4c:04:75:a3:26:
3a:04:5e:21:0c:51:62:95:c9:05:1f:93:1b:62:4a:
63:c5:96:04:64:e1:3f:65:f5:43:c5:06:bd:54:75:
4b:07:74:65:1b:f2:b9:6b:85:35:09:19:a2:25:d6:
10:52:b5:71:35:6b:66:34:4b:7d:34:67:34:2c:a1:
7b:51:a6:3c:97:51:fa:fc:ea:e6:f5:5f:90:55:d7:
d7:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:81:AB:4A:30:9C:97:67:85:7A:62:65:46:0F:90:D8:73:99:4B:82
X509v3 Authority Key Identifier:
keyid:E5:C7:8F:A1:99:3D:45:12:FE:24:36:B8:CE:DA:8B:FC:92:9D:65:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5cePoZk9RRL-JDa4ztqL_JKdZX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/5bb1d0-634e-46fc-a75a-0c9aa6696b49/1/5cePoZk9RRL-JDa4ztqL_JKdZX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/5bb1d0-634e-46fc-a75a-0c9aa6696b49/1/5cePoZk9RRL-JDa4ztqL_JKdZX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:97:4d:57:c9:ac:95:26:4a:4c:1e:ef:8a:74:33:b5:10:3a:
05:fa:ad:c1:98:1f:e4:ae:fa:e6:51:d1:df:71:18:71:7b:34:
93:f9:60:28:1f:a2:16:d9:3a:c2:4a:73:78:94:10:58:d1:8a:
38:78:da:68:d9:ef:71:de:ec:f7:3d:a5:56:d4:b1:88:7e:aa:
28:1c:ba:ca:b9:04:8a:b4:06:01:2b:b5:7f:fa:24:d4:a8:18:
02:37:9c:c6:48:b2:a3:8c:fb:e0:25:b4:80:3f:f6:5e:0f:c7:
82:8b:f1:9c:ac:ce:5b:4a:a6:5f:e2:bd:30:2c:11:4c:ae:bc:
62:88:fe:48:9e:13:a8:44:82:fa:ec:b3:57:5a:6c:30:84:de:
1c:f4:6c:14:af:f0:3a:80:83:79:8b:0b:a9:a8:81:e1:e7:48:
59:07:31:cd:f0:0c:b1:7c:8d:d0:ed:7c:51:f0:df:60:3d:4a:
19:75:df:fd:83:ac:61:df:66:4b:f5:fb:d7:33:7e:37:47:e0:
39:af:72:14:9a:4d:1c:7b:0a:c9:ff:d0:c3:a0:fc:11:72:96:
36:af:c4:69:b1:a7:92:62:ec:26:8e:3d:2a:4b:95:13:e2:dc:
e9:ee:2f:50:5f:1a:10:b5:fb:27:f2:dd:be:be:9b:09:55:2f:
c8:58:43:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:25:45 2026 by rpki-client