Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/269285-5881-427c-acbc-37b61ec2c0d5/1/E5cPuUba-bnv47YJ8onK4Bn8YYw.mft
File: E5cPuUba-bnv47YJ8onK4Bn8YYw.mft (raw, json)
Hash identifier: C+s2R0fJ/h8Vsc0O3fJGGBrtKiGjTQmEltjvykvI3+4=
Subject key identifier: 5A:A0:B4:01:25:C3:5B:CF:CB:EA:5B:A1:AD:C4:2A:A4:21:83:1B:1D
Authority key identifier: 13:97:0F:B9:46:DA:F9:B9:EF:E3:B6:09:F2:89:CA:E0:19:FC:61:8C
Certificate issuer: /CN=13970fb946daf9b9efe3b609f289cae019fc618c
Certificate serial: 019D33E39FF4A1A8C5542CF94BFAABCA4F0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E5cPuUba-bnv47YJ8onK4Bn8YYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/269285-5881-427c-acbc-37b61ec2c0d5/1/E5cPuUba-bnv47YJ8onK4Bn8YYw.mft
Manifest number: 12E8
Signing time: Sat 28 Mar 2026 10:00:48 +0000
Manifest this update: Sat 28 Mar 2026 10:00:48 +0000
Manifest next update: Sun 29 Mar 2026 10:00:48 +0000
Files and hashes: 1: E5cPuUba-bnv47YJ8onK4Bn8YYw.crl (hash: OtIqen/jOOIZJWFL8UW3Qp2+li2lbxXM7I69X1rXsNA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/269285-5881-427c-acbc-37b61ec2c0d5/1/E5cPuUba-bnv47YJ8onK4Bn8YYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/269285-5881-427c-acbc-37b61ec2c0d5/1/E5cPuUba-bnv47YJ8onK4Bn8YYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/E5cPuUba-bnv47YJ8onK4Bn8YYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:e3:9f:f4:a1:a8:c5:54:2c:f9:4b:fa:ab:ca:4f:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13970fb946daf9b9efe3b609f289cae019fc618c
Validity
Not Before: Mar 28 10:00:48 2026 GMT
Not After : Mar 29 10:00:48 2026 GMT
Subject: CN=5aa0b40125c35bcfcbea5ba1adc42aa421831b1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ef:b4:d1:23:aa:5b:a3:17:48:49:d4:cb:78:
61:e6:e7:c7:8e:0c:85:6c:9c:79:69:30:e7:92:d4:
25:05:a7:05:11:fa:07:34:dd:d1:f3:a9:38:d4:ba:
6a:d5:a6:d0:06:7f:c7:f3:e3:bf:6b:e8:5b:ba:6a:
eb:0d:69:09:4f:f3:bc:f2:7e:df:4c:35:1c:a5:4b:
90:59:9f:3e:0a:83:fa:31:69:2d:f7:b0:e8:8c:3b:
fb:da:49:66:af:c4:c2:7b:32:0a:d5:f5:1c:24:f7:
a7:a1:ab:71:e4:f9:94:b4:63:86:dc:4c:b3:de:96:
d1:88:90:ae:88:e8:b6:1a:4d:ed:1f:3a:0f:61:06:
d7:56:39:87:0d:27:bb:d0:d3:2d:6f:fc:23:6c:38:
7f:92:9b:a2:bb:b5:bd:10:d6:b3:92:06:36:42:10:
87:58:c0:9d:ab:c4:de:4d:cb:0d:6c:88:91:06:ea:
b9:ad:fb:83:ca:fe:d3:2d:63:a9:f8:52:ba:2f:31:
57:5a:af:3a:b3:80:c9:71:a6:8e:fd:0f:56:0f:20:
76:6c:78:9c:03:ae:93:e0:38:82:f1:14:ca:ff:65:
9b:bb:4d:c8:eb:06:f8:6a:1d:80:05:b2:fe:ec:56:
0d:81:2e:d3:66:f8:9b:4d:82:70:dd:2e:d4:8c:aa:
fa:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:A0:B4:01:25:C3:5B:CF:CB:EA:5B:A1:AD:C4:2A:A4:21:83:1B:1D
X509v3 Authority Key Identifier:
keyid:13:97:0F:B9:46:DA:F9:B9:EF:E3:B6:09:F2:89:CA:E0:19:FC:61:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E5cPuUba-bnv47YJ8onK4Bn8YYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/269285-5881-427c-acbc-37b61ec2c0d5/1/E5cPuUba-bnv47YJ8onK4Bn8YYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/269285-5881-427c-acbc-37b61ec2c0d5/1/E5cPuUba-bnv47YJ8onK4Bn8YYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:1f:77:92:2d:25:fd:20:bb:87:c5:a2:78:a1:c7:39:60:1a:
0f:8d:de:75:0a:5a:31:5b:13:a6:3d:e1:c2:26:32:ac:0a:d7:
5e:e6:07:de:fd:dc:aa:0a:c8:61:9b:23:de:33:41:62:32:ed:
69:25:dc:f6:06:8f:91:37:a6:96:a1:21:28:6d:c6:f3:6d:81:
10:d8:ad:9d:d4:41:67:37:d5:c7:b0:aa:e5:85:07:90:c4:5c:
cd:84:47:2e:91:16:ae:a6:b5:0a:71:1b:19:7c:60:d8:3e:95:
b1:bf:4b:f9:d6:59:b7:a2:24:f3:f1:64:eb:dd:ea:b3:6f:17:
33:61:91:0f:67:98:64:59:0e:f7:1d:7f:bd:a6:5b:0a:72:c8:
07:65:73:15:57:df:5b:96:c9:b6:39:6a:b7:87:74:ce:a7:49:
1f:ab:28:95:25:91:df:64:8c:d3:79:17:cb:2f:55:06:1b:53:
9b:e9:2b:e7:d2:42:9c:69:a0:54:ac:b5:4d:6f:4d:a4:00:03:
ce:8e:d9:3a:d9:0d:31:c7:53:a4:63:05:3b:5c:0d:59:2f:3e:
47:8e:60:28:1b:6d:e8:ac:74:26:b5:b6:f6:ac:23:dc:23:ae:
c9:e3:ea:72:4f:32:a2:e3:03:47:a2:17:a4:0c:0e:53:8d:77:
49:b6:27:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 15:56:26 2026 by rpki-client