Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/5bb1d0-634e-46fc-a75a-0c9aa6696b49/1/5cePoZk9RRL-JDa4ztqL_JKdZX0.mft
File: 5cePoZk9RRL-JDa4ztqL_JKdZX0.mft (raw, json)
Hash identifier: pRJ2N/MIFMkHng8PfaFfPN7ucKWRc6iS8ZmF/tJ6yiA=
Subject key identifier: 31:DA:BC:E7:9C:6A:D5:85:1E:D9:D1:DA:45:F6:8C:61:39:04:04:49
Authority key identifier: E5:C7:8F:A1:99:3D:45:12:FE:24:36:B8:CE:DA:8B:FC:92:9D:65:7D
Certificate issuer: /CN=e5c78fa1993d4512fe2436b8ceda8bfc929d657d
Certificate serial: 019D292913F3A167CFB89060CFE1B1A973A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5cePoZk9RRL-JDa4ztqL_JKdZX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/5bb1d0-634e-46fc-a75a-0c9aa6696b49/1/5cePoZk9RRL-JDa4ztqL_JKdZX0.mft
Manifest number: 0BC7
Signing time: Thu 26 Mar 2026 08:00:51 +0000
Manifest this update: Thu 26 Mar 2026 08:00:51 +0000
Manifest next update: Fri 27 Mar 2026 08:00:51 +0000
Files and hashes: 1: 5cePoZk9RRL-JDa4ztqL_JKdZX0.crl (hash: DyA49G2wVFcAWxhwlJS/R8M0MjxI7wyrGWMyIZuN1UQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/5bb1d0-634e-46fc-a75a-0c9aa6696b49/1/5cePoZk9RRL-JDa4ztqL_JKdZX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/5bb1d0-634e-46fc-a75a-0c9aa6696b49/1/5cePoZk9RRL-JDa4ztqL_JKdZX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/5cePoZk9RRL-JDa4ztqL_JKdZX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:13:f3:a1:67:cf:b8:90:60:cf:e1:b1:a9:73:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5c78fa1993d4512fe2436b8ceda8bfc929d657d
Validity
Not Before: Mar 26 08:00:51 2026 GMT
Not After : Mar 27 08:00:51 2026 GMT
Subject: CN=31dabce79c6ad5851ed9d1da45f68c6139040449
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:30:d1:d1:dc:41:f5:16:cd:d8:f3:04:68:76:
31:f7:96:83:bc:0b:07:f8:b8:48:bd:1e:0b:7f:9d:
c3:81:59:52:90:98:6c:bd:87:8b:6f:29:34:e1:40:
cd:87:d6:e1:bd:21:00:05:a1:87:38:16:71:63:22:
74:31:10:96:e2:59:a1:55:21:ef:f7:17:1a:82:ba:
93:8a:eb:3e:87:cb:f7:9b:e4:22:96:a6:de:88:20:
3b:e3:e0:28:35:db:29:c3:d9:dc:62:31:39:87:de:
c5:0b:83:50:1d:88:61:79:f5:b6:71:db:f5:22:26:
2a:5b:a6:71:fc:90:0b:8b:5f:a1:2a:4e:36:e3:6c:
d5:8d:e9:fd:55:a8:8a:f1:de:6e:90:c6:f8:eb:15:
33:5d:70:b4:12:4f:ec:f1:be:42:66:8e:5a:5c:17:
a7:50:a6:7c:d0:69:44:02:58:f9:79:c5:db:21:28:
10:5d:72:21:6e:e4:c7:0c:81:3e:cb:73:a3:db:f8:
be:cd:fe:41:da:d2:45:30:5c:8e:f2:d2:c4:9d:66:
aa:ed:3a:7e:83:e7:80:b5:7b:67:63:04:1c:15:cb:
fd:cd:7e:78:90:ae:37:dc:0d:aa:06:37:ac:2b:4f:
66:0b:b1:b9:8a:9f:ed:06:7a:da:d7:32:56:28:f7:
96:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:DA:BC:E7:9C:6A:D5:85:1E:D9:D1:DA:45:F6:8C:61:39:04:04:49
X509v3 Authority Key Identifier:
keyid:E5:C7:8F:A1:99:3D:45:12:FE:24:36:B8:CE:DA:8B:FC:92:9D:65:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5cePoZk9RRL-JDa4ztqL_JKdZX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/5bb1d0-634e-46fc-a75a-0c9aa6696b49/1/5cePoZk9RRL-JDa4ztqL_JKdZX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/5bb1d0-634e-46fc-a75a-0c9aa6696b49/1/5cePoZk9RRL-JDa4ztqL_JKdZX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:b5:14:88:02:12:c3:91:5c:50:f1:59:b0:30:f3:85:7c:9c:
12:58:bb:65:d7:f5:91:71:26:91:76:d2:04:c8:34:fd:fc:8a:
c8:90:65:28:0c:05:04:4f:d8:7b:2d:a9:a6:b1:b3:fc:9a:b3:
0e:a2:4d:de:95:e1:59:6c:43:69:00:5c:78:22:e1:2a:d7:28:
1a:94:14:92:41:11:c7:51:fa:31:46:b6:e6:bf:4b:03:ef:b9:
54:3c:4f:4d:cf:cd:0e:2d:70:12:6f:c8:24:97:93:c2:c5:75:
a9:78:c9:ea:cc:c4:bb:3f:28:54:2f:0c:08:97:07:3c:bb:bc:
67:25:61:14:8d:23:46:92:65:d0:24:64:40:45:c5:36:6b:4d:
75:83:a6:f3:81:cd:17:98:aa:f2:a1:85:d6:cd:b4:91:ff:da:
1a:1c:25:1f:85:c2:cc:1e:49:56:21:08:17:48:57:61:e0:a4:
72:80:19:f5:a6:2d:66:72:84:a5:75:ad:81:ba:1f:17:55:c7:
c1:ea:42:c0:b3:6a:bb:40:5d:57:e2:c0:34:7e:77:01:3f:c8:
ad:a6:d6:68:31:f8:f3:a4:62:88:e7:01:d5:d9:eb:33:86:8a:
46:1a:04:5d:e0:6f:21:dc:4e:1f:15:2e:dd:55:8a:ad:80:12:
41:d4:51:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pKRPzoWfPuJBgz+GxqXOkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1Yzc4ZmExOTkzZDQ1MTJmZTI0MzZiOGNlZGE4YmZjOTI5
ZDY1N2QwHhcNMjYwMzI2MDgwMDUxWhcNMjYwMzI3MDgwMDUxWjAzMTEwLwYDVQQD
EygzMWRhYmNlNzljNmFkNTg1MWVkOWQxZGE0NWY2OGM2MTM5MDQwNDQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzDR0dxB9RbN2PMEaHYx95aDvAsH
+LhIvR4Lf53DgVlSkJhsvYeLbyk04UDNh9bhvSEABaGHOBZxYyJ0MRCW4lmhVSHv
9xcagrqTius+h8v3m+QilqbeiCA74+AoNdspw9ncYjE5h97FC4NQHYhhefW2cdv1
IiYqW6Zx/JALi1+hKk4242zVjen9VaiK8d5ukMb46xUzXXC0Ek/s8b5CZo5aXBen
UKZ80GlEAlj5ecXbISgQXXIhbuTHDIE+y3Oj2/i+zf5B2tJFMFyO8tLEnWaq7Tp+
g+eAtXtnYwQcFcv9zX54kK433A2qBjesK09mC7G5ip/tBnra1zJWKPeWyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDHavOecatWFHtnR2kX2jGE5BARJMB8GA1UdIwQY
MBaAFOXHj6GZPUUS/iQ2uM7ai/ySnWV9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWNlUG9aazlSUkwtSkRhNHp0cUxfSktkWlgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy81YmIxZDAtNjM0ZS00NmZjLWE3NWEt
MGM5YWE2Njk2YjQ5LzEvNWNlUG9aazlSUkwtSkRhNHp0cUxfSktkWlgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy81YmIxZDAtNjM0ZS00NmZjLWE3NWEtMGM5YWE2Njk2YjQ5
LzEvNWNlUG9aazlSUkwtSkRhNHp0cUxfSktkWlgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH7UUiAIS
w5FcUPFZsDDzhXycEli7Zdf1kXEmkXbSBMg0/fyKyJBlKAwFBE/Yey2pprGz/Jqz
DqJN3pXhWWxDaQBceCLhKtcoGpQUkkERx1H6MUa25r9LA++5VDxPTc/NDi1wEm/I
JJeTwsV1qXjJ6szEuz8oVC8MCJcHPLu8ZyVhFI0jRpJl0CRkQEXFNmtNdYOm84HN
F5iq8qGF1s20kf/aGhwlH4XCzB5JViEIF0hXYeCkcoAZ9aYtZnKEpXWtgbofF1XH
wepCwLNqu0BdV+LANH53AT/IrabWaDH486RiiOcB1dnrM4aKRhoEXeBvIdxOHxUu
3VWKrYASQdRRbg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:07:57 2026 by rpki-client