Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/afbb62-0098-42b3-81ae-f0bb2e15f6d0/1/5Xcx6oV7kDqkCo5f2NiERlBbUjM.mft
File: 5Xcx6oV7kDqkCo5f2NiERlBbUjM.mft (raw, json)
Hash identifier: k5uNJyNe9SUjkb8qzMwWHCVGfwapkWfiMrU4zcvkda4=
Subject key identifier: CB:97:0A:75:B0:78:65:16:5E:95:44:0E:3C:6F:E1:CA:A7:F0:E3:11
Authority key identifier: E5:77:31:EA:85:7B:90:3A:A4:0A:8E:5F:D8:D8:84:46:50:5B:52:33
Certificate issuer: /CN=e57731ea857b903aa40a8e5fd8d88446505b5233
Certificate serial: 019D27A929F11F02D7D3918353848DC39EE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Xcx6oV7kDqkCo5f2NiERlBbUjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/afbb62-0098-42b3-81ae-f0bb2e15f6d0/1/5Xcx6oV7kDqkCo5f2NiERlBbUjM.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 01:01:30 +0000
Manifest this update: Thu 26 Mar 2026 01:01:30 +0000
Manifest next update: Fri 27 Mar 2026 01:01:30 +0000
Files and hashes: 1: 5Xcx6oV7kDqkCo5f2NiERlBbUjM.crl (hash: myN52diuCLsD8NfWHN34XM2amBb4tyC+fgwzYhQL8KI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/afbb62-0098-42b3-81ae-f0bb2e15f6d0/1/5Xcx6oV7kDqkCo5f2NiERlBbUjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/afbb62-0098-42b3-81ae-f0bb2e15f6d0/1/5Xcx6oV7kDqkCo5f2NiERlBbUjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Xcx6oV7kDqkCo5f2NiERlBbUjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:29:f1:1f:02:d7:d3:91:83:53:84:8d:c3:9e:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e57731ea857b903aa40a8e5fd8d88446505b5233
Validity
Not Before: Mar 26 01:01:30 2026 GMT
Not After : Mar 27 01:01:30 2026 GMT
Subject: CN=cb970a75b07865165e95440e3c6fe1caa7f0e311
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:fa:e3:35:ab:f5:fb:23:2e:81:0c:12:e0:00:
9f:1f:0a:31:5e:49:af:01:21:16:b6:92:9b:20:ef:
45:d9:01:06:3f:f3:3f:8b:58:ff:da:b9:de:55:03:
c0:7e:06:cf:ea:fa:7c:25:42:ed:2f:13:28:09:39:
bf:ee:7a:58:df:fe:b9:56:e7:b6:a8:43:36:f0:13:
33:63:17:08:bf:0e:c0:1b:9b:6b:90:6a:de:78:8c:
73:ab:b1:b7:d7:be:2a:1f:08:ff:e0:09:35:9a:fa:
89:2b:cf:43:87:8f:1f:de:4d:db:66:6c:52:48:55:
1e:12:ed:4b:8f:42:9f:46:ae:4f:df:9f:d3:b0:2c:
c4:50:47:d0:de:24:15:94:a0:7c:a8:8f:7e:ce:e2:
a0:5f:ef:31:a8:15:54:4f:0e:26:82:27:1b:09:03:
52:48:98:9b:fe:0e:1f:29:b6:4d:57:97:c7:51:98:
cc:c2:ac:94:26:fc:cd:b6:09:d5:92:dc:65:ef:a0:
27:57:09:5d:1a:b3:fa:30:09:87:ed:c4:6b:1a:f6:
26:fa:42:c9:f7:1b:64:d6:cf:55:ae:3a:3e:40:d3:
c4:51:aa:08:81:0b:87:57:b6:b4:4e:19:2b:b7:8e:
3e:95:f6:94:f8:ad:a6:95:13:14:4c:48:ab:d1:4a:
62:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:97:0A:75:B0:78:65:16:5E:95:44:0E:3C:6F:E1:CA:A7:F0:E3:11
X509v3 Authority Key Identifier:
keyid:E5:77:31:EA:85:7B:90:3A:A4:0A:8E:5F:D8:D8:84:46:50:5B:52:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Xcx6oV7kDqkCo5f2NiERlBbUjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/afbb62-0098-42b3-81ae-f0bb2e15f6d0/1/5Xcx6oV7kDqkCo5f2NiERlBbUjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/afbb62-0098-42b3-81ae-f0bb2e15f6d0/1/5Xcx6oV7kDqkCo5f2NiERlBbUjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:ca:65:60:c0:80:f7:d3:a2:10:66:5a:03:41:6a:22:6a:64:
41:53:c3:d9:3a:80:6d:39:a0:6d:5f:65:cc:c1:5d:60:67:9e:
b6:5e:4c:f0:af:d1:b0:24:ab:68:09:0d:fb:cb:c8:cc:1c:de:
b0:f4:84:2a:53:11:02:cd:c2:bf:ba:8a:40:c0:fe:5f:a0:6f:
47:27:f5:69:d0:35:40:b9:00:a7:3d:a8:77:59:82:7a:3e:5f:
7e:2b:d9:b2:0b:e2:27:37:11:f5:9d:0d:70:c4:ee:c9:b2:5a:
74:68:cc:ac:60:4b:6e:e1:d9:9d:e5:ef:40:47:6b:ea:a5:79:
81:03:a3:bb:2d:1d:47:99:2a:ff:ab:04:11:fa:ef:ee:3f:7a:
ca:c7:f5:82:f8:67:45:4c:7c:38:d0:25:da:08:12:db:65:64:
08:dd:5a:4f:e9:4d:30:2e:42:df:69:45:94:7c:aa:63:d1:f3:
65:78:61:f2:83:1c:e8:c2:32:10:01:04:e8:81:de:db:c0:db:
22:4b:10:49:79:a2:04:f3:a6:15:64:6c:f0:36:80:dd:7f:d0:
35:11:eb:43:d7:fd:08:68:18:a2:0b:c3:06:6b:a8:0b:81:fc:
70:49:1e:1b:30:a4:ff:e7:da:04:f5:64:9a:aa:8c:ac:15:dd:
62:67:ec:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nqSnxHwLX05GDU4SNw57iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1NzczMWVhODU3YjkwM2FhNDBhOGU1ZmQ4ZDg4NDQ2NTA1
YjUyMzMwHhcNMjYwMzI2MDEwMTMwWhcNMjYwMzI3MDEwMTMwWjAzMTEwLwYDVQQD
EyhjYjk3MGE3NWIwNzg2NTE2NWU5NTQ0MGUzYzZmZTFjYWE3ZjBlMzExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyfrjNav1+yMugQwS4ACfHwoxXkmv
ASEWtpKbIO9F2QEGP/M/i1j/2rneVQPAfgbP6vp8JULtLxMoCTm/7npY3/65Vue2
qEM28BMzYxcIvw7AG5trkGreeIxzq7G3174qHwj/4Ak1mvqJK89Dh48f3k3bZmxS
SFUeEu1Lj0KfRq5P35/TsCzEUEfQ3iQVlKB8qI9+zuKgX+8xqBVUTw4mgicbCQNS
SJib/g4fKbZNV5fHUZjMwqyUJvzNtgnVktxl76AnVwldGrP6MAmH7cRrGvYm+kLJ
9xtk1s9Vrjo+QNPEUaoIgQuHV7a0Thkrt44+lfaU+K2mlRMUTEir0UpigQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMuXCnWweGUWXpVEDjxv4cqn8OMRMB8GA1UdIwQY
MBaAFOV3MeqFe5A6pAqOX9jYhEZQW1IzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVhjeDZvVjdrRHFrQ281ZjJOaUVSbEJiVWpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9hZmJiNjItMDA5OC00MmIzLTgxYWUt
ZjBiYjJlMTVmNmQwLzEvNVhjeDZvVjdrRHFrQ281ZjJOaUVSbEJiVWpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS9hZmJiNjItMDA5OC00MmIzLTgxYWUtZjBiYjJlMTVmNmQw
LzEvNVhjeDZvVjdrRHFrQ281ZjJOaUVSbEJiVWpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWsplYMCA
99OiEGZaA0FqImpkQVPD2TqAbTmgbV9lzMFdYGeetl5M8K/RsCSraAkN+8vIzBze
sPSEKlMRAs3Cv7qKQMD+X6BvRyf1adA1QLkApz2od1mCej5ffivZsgviJzcR9Z0N
cMTuybJadGjMrGBLbuHZneXvQEdr6qV5gQOjuy0dR5kq/6sEEfrv7j96ysf1gvhn
RUx8ONAl2ggS22VkCN1aT+lNMC5C32lFlHyqY9HzZXhh8oMc6MIyEAEE6IHe28Db
IksQSXmiBPOmFWRs8DaA3X/QNRHrQ9f9CGgYogvDBmuoC4H8cEkeGzCk/+faBPVk
mqqMrBXdYmfszw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:55:45 2026 by rpki-client