Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/226b69-4a01-4e33-84a8-02b2acee3bdc/1/s5DqJ6ZUsoo4kanb-vy53i3DteQ.mft
File: s5DqJ6ZUsoo4kanb-vy53i3DteQ.mft (raw, json)
Hash identifier: X6NuLn2vciDrcMHLSog2HPHfFtOQAxeqibM2C4HxdAI=
Subject key identifier: 31:D1:2A:50:3C:E6:FB:AF:CF:1F:83:93:E6:55:B6:14:61:9A:B4:DC
Authority key identifier: B3:90:EA:27:A6:54:B2:8A:38:91:A9:DB:FA:FC:B9:DE:2D:C3:B5:E4
Certificate issuer: /CN=b390ea27a654b28a3891a9dbfafcb9de2dc3b5e4
Certificate serial: 019D27040125036D800E1C26F1987EE94B88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s5DqJ6ZUsoo4kanb-vy53i3DteQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/226b69-4a01-4e33-84a8-02b2acee3bdc/1/s5DqJ6ZUsoo4kanb-vy53i3DteQ.mft
Manifest number: 01AD
Signing time: Wed 25 Mar 2026 22:01:06 +0000
Manifest this update: Wed 25 Mar 2026 22:01:06 +0000
Manifest next update: Thu 26 Mar 2026 22:01:06 +0000
Files and hashes: 1: s5DqJ6ZUsoo4kanb-vy53i3DteQ.crl (hash: 6KGl5GLM5dAJZ/Gm/pi+rtRwVauRkwIQK2s4nV4Oe3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/226b69-4a01-4e33-84a8-02b2acee3bdc/1/s5DqJ6ZUsoo4kanb-vy53i3DteQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/226b69-4a01-4e33-84a8-02b2acee3bdc/1/s5DqJ6ZUsoo4kanb-vy53i3DteQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/s5DqJ6ZUsoo4kanb-vy53i3DteQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:01:25:03:6d:80:0e:1c:26:f1:98:7e:e9:4b:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b390ea27a654b28a3891a9dbfafcb9de2dc3b5e4
Validity
Not Before: Mar 25 22:01:06 2026 GMT
Not After : Mar 26 22:01:06 2026 GMT
Subject: CN=31d12a503ce6fbafcf1f8393e655b614619ab4dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b7:da:44:a8:87:55:d5:c3:b4:69:b7:f8:fa:
0f:af:e7:16:0e:37:58:17:54:cf:7a:0e:16:77:7e:
00:23:64:2f:02:c4:11:90:f1:9c:e4:40:01:d2:a1:
e8:01:24:be:82:65:0e:8f:a4:80:a5:b4:c7:20:65:
c5:fb:43:73:47:d5:cf:dd:07:b1:6a:67:2b:86:cb:
f0:a0:78:c0:ad:95:26:27:9d:c7:4d:2b:db:f7:ed:
12:95:6b:1a:b1:fc:3b:8f:f6:35:9d:5f:fc:5f:de:
9b:fc:67:b3:42:f7:3f:90:56:3c:49:89:1a:37:d7:
48:64:9f:bf:4e:41:20:78:cb:b8:e3:30:c8:2b:7c:
4e:99:af:6f:71:34:35:9a:a7:75:82:27:81:8d:c1:
75:4a:3b:8f:6b:f9:f4:c4:03:8e:d5:79:90:f1:ee:
36:27:4d:3a:f9:d4:53:0d:ae:c1:e4:2f:ca:34:97:
b1:40:f9:cb:51:a7:08:f9:e6:0c:cd:99:ee:5c:72:
c6:db:58:2c:79:46:0b:e4:5c:d6:23:39:d2:7e:54:
19:fe:8d:e1:22:29:2a:45:33:d2:7a:77:16:93:ef:
b9:18:87:fc:96:6c:62:33:60:ca:f8:ca:bb:dd:e0:
0d:71:b5:4f:87:b0:94:f3:6f:e5:e9:6b:08:f9:f6:
d1:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:D1:2A:50:3C:E6:FB:AF:CF:1F:83:93:E6:55:B6:14:61:9A:B4:DC
X509v3 Authority Key Identifier:
keyid:B3:90:EA:27:A6:54:B2:8A:38:91:A9:DB:FA:FC:B9:DE:2D:C3:B5:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s5DqJ6ZUsoo4kanb-vy53i3DteQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/226b69-4a01-4e33-84a8-02b2acee3bdc/1/s5DqJ6ZUsoo4kanb-vy53i3DteQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/226b69-4a01-4e33-84a8-02b2acee3bdc/1/s5DqJ6ZUsoo4kanb-vy53i3DteQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:0e:91:d6:22:17:7e:a0:96:42:e8:79:b6:7a:64:97:18:e2:
71:8f:a9:8b:fd:96:ea:81:f5:b3:d0:af:f1:99:5c:a6:c8:21:
bb:99:50:18:a5:7a:d2:ab:ac:1c:35:96:e0:a6:52:52:d0:1a:
d5:8b:52:0b:3b:7e:c1:43:38:ad:fe:af:75:8c:b6:7c:50:ed:
75:ee:0b:d5:72:fb:ff:54:15:2d:1d:a0:01:ad:90:25:30:a1:
3f:21:f4:72:42:7c:c5:dd:11:be:61:ff:6d:5c:0b:4c:26:9d:
99:b7:3d:ba:dd:d3:ca:2b:74:ba:a0:1a:33:44:2a:be:10:10:
93:54:82:d1:a3:7c:dd:49:41:e1:f5:9c:27:00:33:24:b4:1c:
b7:02:7d:d3:46:ec:e0:bf:8f:56:e1:b8:28:34:4e:54:4b:05:
01:13:70:a1:7c:42:2f:e3:31:1a:e8:3a:16:63:34:73:ea:ce:
4c:f3:43:80:7b:17:d0:6a:c8:88:df:79:8f:21:b4:cd:d6:75:
bc:c4:c2:0c:e1:18:a5:44:6f:98:a6:fb:f3:cc:05:ef:fb:eb:
f3:29:a5:2d:62:28:50:f1:03:36:ff:b9:ab:13:a4:c2:d1:cb:
47:21:67:c2:24:ce:a9:0c:cc:b0:fb:a9:f2:c8:1e:1c:ef:e8:
18:43:8f:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:59:51 2026 by rpki-client