Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.mft
File: 5lAiAKbmP3Y5etuU39g0wRaAm58.mft (raw, json)
Hash identifier: lkkJE+d+cdVathyll0OuGhI9YGkwfl3C1yeY/xOotqU=
Subject key identifier: 18:63:F9:75:68:CC:05:37:1E:39:0A:BE:48:BD:A1:85:71:F0:74:32
Authority key identifier: E6:50:22:00:A6:E6:3F:76:39:7A:DB:94:DF:D8:34:C1:16:80:9B:9F
Certificate issuer: /CN=e6502200a6e63f76397adb94dfd834c116809b9f
Certificate serial: 019D28BBE18A285C9054FDB1EEEFF8F4EBDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5lAiAKbmP3Y5etuU39g0wRaAm58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.mft
Manifest number: 0F14
Signing time: Thu 26 Mar 2026 06:01:34 +0000
Manifest this update: Thu 26 Mar 2026 06:01:34 +0000
Manifest next update: Fri 27 Mar 2026 06:01:34 +0000
Files and hashes: 1: 5lAiAKbmP3Y5etuU39g0wRaAm58.crl (hash: zXd45NvNuGL0ZJVKgB3ywJnmTo/x4/6DqsmTGF2NCJ0=)
2: VbpHqTm4InVPfeEhfG1houFen0s.roa (hash: mGh4WVGrOaH38U0K8XkAxbYr95lc2nJQTlFAMtTdwzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.mft
rsync://rpki.ripe.net/repository/DEFAULT/5lAiAKbmP3Y5etuU39g0wRaAm58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:e1:8a:28:5c:90:54:fd:b1:ee:ef:f8:f4:eb:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6502200a6e63f76397adb94dfd834c116809b9f
Validity
Not Before: Mar 26 06:01:34 2026 GMT
Not After : Mar 27 06:01:34 2026 GMT
Subject: CN=1863f97568cc05371e390abe48bda18571f07432
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:cf:79:b4:37:f3:c8:d0:24:28:29:40:2b:69:
45:48:63:6b:e8:6e:73:cf:5e:83:8b:63:af:46:a5:
21:fa:f9:52:c4:39:da:86:c0:84:00:d4:51:d4:79:
ac:37:ad:90:13:cd:f2:ba:07:fb:82:42:9f:ea:8f:
73:84:00:c7:8b:62:8d:f2:ce:92:12:a4:0a:d6:6c:
ab:44:cf:7f:ba:6e:e3:1c:8f:90:9d:88:93:cf:7b:
8a:ae:c1:d9:ac:95:44:21:4a:d5:a7:da:91:25:55:
a9:71:63:f3:85:98:93:09:34:c0:d8:4e:fb:9a:fe:
87:70:bb:36:47:69:39:d0:c9:53:42:52:c2:a7:ca:
7e:7f:47:f2:72:db:76:40:7c:84:b5:3f:9d:24:2a:
b4:1f:a3:8d:be:50:d5:b2:6c:73:00:41:e1:76:c8:
26:55:b6:05:17:fe:17:62:89:37:c1:e8:29:95:8e:
86:8e:7c:bc:c5:ab:c9:a3:6d:75:ce:a5:b9:e0:99:
c3:84:d5:91:63:78:36:7a:eb:b0:73:ac:46:6e:e3:
ea:94:7e:e9:4b:a5:de:6d:e5:2b:c0:62:e8:f3:7a:
17:d0:87:c3:2e:60:12:f7:37:15:9e:f6:53:2a:88:
84:00:be:50:f9:b6:f3:f3:3c:e6:78:7e:0c:12:46:
70:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:63:F9:75:68:CC:05:37:1E:39:0A:BE:48:BD:A1:85:71:F0:74:32
X509v3 Authority Key Identifier:
keyid:E6:50:22:00:A6:E6:3F:76:39:7A:DB:94:DF:D8:34:C1:16:80:9B:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5lAiAKbmP3Y5etuU39g0wRaAm58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:8e:89:b7:a3:ab:cf:68:af:4a:e0:e5:21:6e:29:b0:e9:c0:
c2:f9:34:f7:63:af:5d:fb:8d:7b:67:4e:b8:58:25:92:51:fb:
9a:05:50:7a:b0:06:13:37:0a:ac:c3:a4:50:92:ff:1f:75:7c:
53:4f:81:3e:ce:43:08:47:6e:09:be:a6:fb:71:00:8b:83:b1:
4d:42:7b:55:2d:0f:84:2f:fc:63:b9:69:06:4e:75:f9:fc:d0:
4d:bf:4e:5f:5f:b4:3a:b2:9c:bf:b5:84:6e:01:79:92:97:76:
25:b7:68:7e:70:af:ca:0c:87:31:1a:09:be:91:54:a9:a9:ab:
5e:d7:2f:9b:c4:1b:4b:e6:ea:ff:2b:4d:0a:75:9d:25:43:06:
f6:11:48:2f:7c:f1:f5:76:95:0d:78:cc:b2:20:dc:5f:90:06:
a8:19:46:9e:a5:48:97:6c:90:7b:47:5e:98:ce:00:62:8a:f8:
80:36:89:18:4c:70:a8:ae:67:cb:6b:d3:d9:a5:8d:f7:b9:3d:
08:1a:a6:41:bd:f4:96:b7:c3:af:ff:6f:ab:38:1a:02:64:69:
1c:93:34:7a:f7:4d:d1:b2:07:55:e4:44:0c:d4:a4:3c:9d:20:
81:eb:5d:62:9d:f7:b2:34:7b:b6:11:6e:12:72:cc:cf:24:25:
ef:24:43:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:19:16 2026 by rpki-client