Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/5392b9-7f23-4740-9123-69c72f168689/1/t5im6ZG5VaKTURGf9312hksNOEo.mft
File: t5im6ZG5VaKTURGf9312hksNOEo.mft (raw, json)
Hash identifier: Hdr4fyKDzYDliDLFNok8qPgBh88t+837Q7zKju7o2Vk=
Subject key identifier: 7A:09:91:D6:A4:7E:91:B7:F0:A9:BE:18:31:4C:ED:B0:2E:C9:E1:7A
Authority key identifier: B7:98:A6:E9:91:B9:55:A2:93:51:11:9F:F7:7D:76:86:4B:0D:38:4A
Certificate issuer: /CN=b798a6e991b955a29351119ff77d76864b0d384a
Certificate serial: 019D2AE088B41F1A442EFAFCCA2611B81EFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t5im6ZG5VaKTURGf9312hksNOEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/5392b9-7f23-4740-9123-69c72f168689/1/t5im6ZG5VaKTURGf9312hksNOEo.mft
Manifest number: 0FAB
Signing time: Thu 26 Mar 2026 16:00:51 +0000
Manifest this update: Thu 26 Mar 2026 16:00:51 +0000
Manifest next update: Fri 27 Mar 2026 16:00:51 +0000
Files and hashes: 1: t5im6ZG5VaKTURGf9312hksNOEo.crl (hash: VvGRH7J5IoAxEz8rK2Q3ve2EWOY2eey+tVzZaHQr7F0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/5392b9-7f23-4740-9123-69c72f168689/1/t5im6ZG5VaKTURGf9312hksNOEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/5392b9-7f23-4740-9123-69c72f168689/1/t5im6ZG5VaKTURGf9312hksNOEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/t5im6ZG5VaKTURGf9312hksNOEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e0:88:b4:1f:1a:44:2e:fa:fc:ca:26:11:b8:1e:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b798a6e991b955a29351119ff77d76864b0d384a
Validity
Not Before: Mar 26 16:00:51 2026 GMT
Not After : Mar 27 16:00:51 2026 GMT
Subject: CN=7a0991d6a47e91b7f0a9be18314cedb02ec9e17a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:27:5d:db:39:8f:36:b2:8b:ad:89:65:f1:43:
8e:cf:26:7a:40:65:9c:47:b6:76:a1:92:86:81:29:
6a:26:81:b9:9d:61:e7:06:1e:fc:28:77:81:2a:04:
90:6a:55:fe:38:d1:c3:f0:93:0b:c1:22:d9:6d:03:
3c:39:30:7f:b1:0f:a6:fe:97:c1:2a:ec:7c:7d:6e:
72:59:21:2d:c4:a4:42:2e:fc:b9:f9:2e:7f:aa:92:
67:67:6f:06:b2:26:33:fb:3a:a1:b0:1e:a7:a7:df:
20:a6:91:54:7c:6c:31:34:11:b8:89:70:e4:71:13:
63:c8:b2:aa:bf:c3:8a:39:9e:f6:0a:32:e8:83:44:
a9:2d:6c:16:d0:76:c6:cb:91:65:aa:44:00:1c:88:
e8:c5:6d:5d:4d:8a:d0:71:6b:85:de:c9:eb:41:2b:
a1:ca:a2:a9:0f:97:28:bd:18:e1:09:a1:96:17:35:
4f:6a:dc:01:ba:52:ea:9c:99:37:01:67:27:a4:c4:
db:e6:20:4c:9c:32:23:29:d0:4e:c7:55:dc:55:2a:
9d:7f:08:9a:64:b5:76:50:2b:54:ce:ca:3e:f0:31:
54:b1:68:4d:12:c5:ec:0b:cf:4b:d8:31:d8:9e:dd:
24:e0:93:98:4c:f9:ad:58:e7:10:28:6e:6a:4d:cb:
ce:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:09:91:D6:A4:7E:91:B7:F0:A9:BE:18:31:4C:ED:B0:2E:C9:E1:7A
X509v3 Authority Key Identifier:
keyid:B7:98:A6:E9:91:B9:55:A2:93:51:11:9F:F7:7D:76:86:4B:0D:38:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t5im6ZG5VaKTURGf9312hksNOEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/5392b9-7f23-4740-9123-69c72f168689/1/t5im6ZG5VaKTURGf9312hksNOEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/5392b9-7f23-4740-9123-69c72f168689/1/t5im6ZG5VaKTURGf9312hksNOEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:a6:03:a7:9c:7d:cf:f8:a2:29:98:09:57:4f:0b:3c:0a:ec:
b5:e7:c0:60:d3:24:62:c5:b8:81:89:9f:4e:f1:52:2b:bd:69:
c1:88:3c:f5:66:1a:da:72:a9:bb:8a:3f:8c:71:db:43:18:38:
37:c8:22:4f:84:d6:64:07:27:80:b1:61:86:79:6d:0e:7c:24:
0c:d3:8c:7a:f0:b6:92:7c:e4:28:6a:15:81:9b:7d:87:03:cc:
8b:2c:d9:a0:e5:df:3e:c7:4f:30:9c:93:3e:5c:35:2c:9c:f9:
90:ca:61:2b:e0:04:3a:d2:a5:6b:5d:bb:a8:97:2b:4d:ce:89:
c3:3b:1c:1c:35:63:2f:75:f7:11:0b:78:e1:a3:d9:c3:83:a1:
b3:5f:68:48:18:e5:2a:ee:24:fc:1f:c0:8b:19:0b:df:9d:3e:
e2:99:d3:4f:80:c7:57:90:70:7c:68:82:7b:59:f5:a9:30:e6:
94:4c:a0:1f:2b:13:85:cb:55:92:b4:97:07:0b:16:ac:f7:67:
54:38:90:fe:df:e9:0b:04:a7:df:e3:ca:ca:80:ca:1b:84:ce:
cb:f1:be:43:0f:e6:f9:ab:42:c6:7d:b0:2a:a0:49:5d:22:87:
58:33:9a:8f:58:0e:d5:6b:0c:8a:b1:f7:f6:89:39:e1:a9:ee:
9f:8b:86:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0q4Ii0HxpELvr8yiYRuB7/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3OThhNmU5OTFiOTU1YTI5MzUxMTE5ZmY3N2Q3Njg2NGIw
ZDM4NGEwHhcNMjYwMzI2MTYwMDUxWhcNMjYwMzI3MTYwMDUxWjAzMTEwLwYDVQQD
Eyg3YTA5OTFkNmE0N2U5MWI3ZjBhOWJlMTgzMTRjZWRiMDJlYzllMTdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsidd2zmPNrKLrYll8UOOzyZ6QGWc
R7Z2oZKGgSlqJoG5nWHnBh78KHeBKgSQalX+ONHD8JMLwSLZbQM8OTB/sQ+m/pfB
Kux8fW5yWSEtxKRCLvy5+S5/qpJnZ28GsiYz+zqhsB6np98gppFUfGwxNBG4iXDk
cRNjyLKqv8OKOZ72CjLog0SpLWwW0HbGy5FlqkQAHIjoxW1dTYrQcWuF3snrQSuh
yqKpD5covRjhCaGWFzVPatwBulLqnJk3AWcnpMTb5iBMnDIjKdBOx1XcVSqdfwia
ZLV2UCtUzso+8DFUsWhNEsXsC89L2DHYnt0k4JOYTPmtWOcQKG5qTcvOSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHoJkdakfpG38Km+GDFM7bAuyeF6MB8GA1UdIwQY
MBaAFLeYpumRuVWik1ERn/d9doZLDThKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDVpbTZaRzVWYUtUVVJHZjkzMTJoa3NOT0VvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS81MzkyYjktN2YyMy00NzQwLTkxMjMt
NjljNzJmMTY4Njg5LzEvdDVpbTZaRzVWYUtUVVJHZjkzMTJoa3NOT0VvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS81MzkyYjktN2YyMy00NzQwLTkxMjMtNjljNzJmMTY4Njg5
LzEvdDVpbTZaRzVWYUtUVVJHZjkzMTJoa3NOT0VvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvaYDp5x9
z/iiKZgJV08LPArstefAYNMkYsW4gYmfTvFSK71pwYg89WYa2nKpu4o/jHHbQxg4
N8giT4TWZAcngLFhhnltDnwkDNOMevC2knzkKGoVgZt9hwPMiyzZoOXfPsdPMJyT
Plw1LJz5kMphK+AEOtKla127qJcrTc6JwzscHDVjL3X3EQt44aPZw4Ohs19oSBjl
Ku4k/B/AixkL350+4pnTT4DHV5BwfGiCe1n1qTDmlEygHysThctVkrSXBwsWrPdn
VDiQ/t/pCwSn3+PKyoDKG4TOy/G+Qw/m+atCxn2wKqBJXSKHWDOaj1gO1WsMirH3
9ok54anun4uGfA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 20:13:48 2026 by rpki-client