Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/72e632-362a-442a-99fc-dbdda4757155/1/s5LSHrz27URUxP9GgyS97dSbqhM.mft
File: s5LSHrz27URUxP9GgyS97dSbqhM.mft (raw, json)
Hash identifier: X9HqNr6+eYFV2Xlr3aSnFFA7NB8knpAHJ/IKybtSO0c=
Subject key identifier: AE:69:91:4B:4F:17:0A:97:F2:23:D8:46:58:32:BC:7B:88:6D:D6:E6
Authority key identifier: B3:92:D2:1E:BC:F6:ED:44:54:C4:FF:46:83:24:BD:ED:D4:9B:AA:13
Certificate issuer: /CN=b392d21ebcf6ed4454c4ff468324bdedd49baa13
Certificate serial: 019D26CD3B59D3F0F28FC2422A715FFA3826
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s5LSHrz27URUxP9GgyS97dSbqhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/72e632-362a-442a-99fc-dbdda4757155/1/s5LSHrz27URUxP9GgyS97dSbqhM.mft
Manifest number: A7
Signing time: Wed 25 Mar 2026 21:01:17 +0000
Manifest this update: Wed 25 Mar 2026 21:01:17 +0000
Manifest next update: Thu 26 Mar 2026 21:01:17 +0000
Files and hashes: 1: s5LSHrz27URUxP9GgyS97dSbqhM.crl (hash: /RJ+J8LRUBchrudy9jHAJ/9sHKi4jFurpfa3SkmYido=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/72e632-362a-442a-99fc-dbdda4757155/1/s5LSHrz27URUxP9GgyS97dSbqhM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/72e632-362a-442a-99fc-dbdda4757155/1/s5LSHrz27URUxP9GgyS97dSbqhM.mft
rsync://rpki.ripe.net/repository/DEFAULT/s5LSHrz27URUxP9GgyS97dSbqhM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:3b:59:d3:f0:f2:8f:c2:42:2a:71:5f:fa:38:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b392d21ebcf6ed4454c4ff468324bdedd49baa13
Validity
Not Before: Mar 25 21:01:17 2026 GMT
Not After : Mar 26 21:01:17 2026 GMT
Subject: CN=ae69914b4f170a97f223d8465832bc7b886dd6e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c2:e4:f8:37:72:a0:46:fc:b4:60:91:db:9b:
d0:73:60:bb:8e:d2:9f:b4:ed:d9:f4:45:8c:dc:3a:
15:ca:70:57:60:21:34:5f:88:62:7e:e5:4d:aa:c6:
1e:5d:2c:5e:53:75:68:b2:4c:12:f5:d0:1c:bd:45:
28:69:ba:b9:f8:80:0e:da:69:af:dd:ab:00:66:66:
f4:57:bc:6d:28:db:e5:95:3e:02:0a:ba:7f:05:c3:
05:72:7c:d2:e0:00:9d:f3:c1:b9:9b:0f:5e:86:56:
ba:af:5a:83:1c:07:70:8c:bb:07:b4:a7:63:7b:c9:
3a:47:d3:e0:36:cb:cd:55:33:98:e3:e7:66:96:36:
9c:f4:90:77:a5:a6:a2:5f:e7:bd:cd:10:00:4c:fd:
3a:fb:24:c1:26:b9:d9:a9:0c:16:44:6f:b6:c2:08:
e8:0a:7e:94:77:4d:2f:a7:7e:c3:6b:02:ab:f4:b2:
25:82:51:ab:fc:cb:97:05:a0:e1:fe:ac:2c:e0:50:
90:49:e1:be:bc:0e:35:6d:4b:02:c4:32:79:b1:f0:
2d:c8:ae:a3:cc:be:a1:a4:7e:a5:20:16:d3:61:b3:
d9:6e:4c:f0:99:e6:cd:87:c2:4c:15:62:f4:09:b9:
0b:ab:5c:e9:a7:e6:a5:fd:e6:f1:54:2e:46:1a:53:
26:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:69:91:4B:4F:17:0A:97:F2:23:D8:46:58:32:BC:7B:88:6D:D6:E6
X509v3 Authority Key Identifier:
keyid:B3:92:D2:1E:BC:F6:ED:44:54:C4:FF:46:83:24:BD:ED:D4:9B:AA:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s5LSHrz27URUxP9GgyS97dSbqhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/72e632-362a-442a-99fc-dbdda4757155/1/s5LSHrz27URUxP9GgyS97dSbqhM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/72e632-362a-442a-99fc-dbdda4757155/1/s5LSHrz27URUxP9GgyS97dSbqhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:9b:ab:ab:46:98:64:15:d0:c6:d1:7a:82:ae:15:ca:e0:58:
1f:f2:85:00:3c:c3:70:3a:64:b0:b7:1f:60:e7:df:f6:2a:29:
71:b3:d2:08:2e:cf:70:3a:e1:60:0f:fb:22:38:65:7e:ac:b9:
8b:2a:6f:37:d5:e3:17:35:bd:90:80:8c:17:1d:75:2f:0b:9b:
17:e8:57:57:a0:03:eb:84:9b:ee:1d:1c:6b:0a:43:94:71:b2:
dd:71:c4:8a:70:43:3c:46:83:e0:6a:81:b2:f4:f8:83:b2:9f:
c3:66:73:e9:a5:f7:cc:96:79:88:42:40:f8:19:3c:08:c3:9f:
d1:3a:04:f7:45:90:ef:68:40:a1:c3:11:84:72:80:49:c4:36:
f6:66:e1:3f:b7:99:d9:80:32:aa:a2:bd:af:d7:82:4c:53:c3:
ae:8f:4b:7a:f3:cc:37:ad:5a:80:06:8a:a3:da:90:ed:34:f5:
65:84:5e:fe:68:56:2c:14:cb:09:94:49:70:4f:aa:f7:1f:58:
86:91:ef:de:ef:3a:c3:97:86:ab:67:3d:3b:42:f9:a1:52:76:
4f:e2:ed:72:5f:05:1e:af:f9:82:97:07:3e:7f:f7:62:c9:73:
04:2b:0c:99:b3:0a:0d:1a:50:97:88:8d:74:71:80:71:77:1d:
a1:a8:e9:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:27:49 2026 by rpki-client