Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/e39f5f-2568-4222-b5ea-2a157f7cf3a3/1/5u3M-9t7nhk-y-gVL7WilruJ1-k.mft
File: 5u3M-9t7nhk-y-gVL7WilruJ1-k.mft (raw, json)
Hash identifier: 16zhaA+vyPtVfQCVlOBcwiI/mFg2Qb2RR7/fPcQ0wIk=
Subject key identifier: FB:3B:F6:A3:93:08:94:DE:2D:CC:26:16:6B:9A:6D:34:74:9B:92:68
Authority key identifier: E6:ED:CC:FB:DB:7B:9E:19:3E:CB:E8:15:2F:B5:A2:96:BB:89:D7:E9
Certificate issuer: /CN=e6edccfbdb7b9e193ecbe8152fb5a296bb89d7e9
Certificate serial: 019D27725AFCBF80CA168E2B89D4FA04132B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5u3M-9t7nhk-y-gVL7WilruJ1-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/e39f5f-2568-4222-b5ea-2a157f7cf3a3/1/5u3M-9t7nhk-y-gVL7WilruJ1-k.mft
Manifest number: 59
Signing time: Thu 26 Mar 2026 00:01:38 +0000
Manifest this update: Thu 26 Mar 2026 00:01:38 +0000
Manifest next update: Fri 27 Mar 2026 00:01:38 +0000
Files and hashes: 1: 5u3M-9t7nhk-y-gVL7WilruJ1-k.crl (hash: UUZDcw98+g4dhE9k/wM9bLgF6mICD+RSSh2a6guobVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/e39f5f-2568-4222-b5ea-2a157f7cf3a3/1/5u3M-9t7nhk-y-gVL7WilruJ1-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/e39f5f-2568-4222-b5ea-2a157f7cf3a3/1/5u3M-9t7nhk-y-gVL7WilruJ1-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/5u3M-9t7nhk-y-gVL7WilruJ1-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:5a:fc:bf:80:ca:16:8e:2b:89:d4:fa:04:13:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6edccfbdb7b9e193ecbe8152fb5a296bb89d7e9
Validity
Not Before: Mar 26 00:01:38 2026 GMT
Not After : Mar 27 00:01:38 2026 GMT
Subject: CN=fb3bf6a3930894de2dcc26166b9a6d34749b9268
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:77:6b:ce:17:74:6b:ce:cd:ae:ad:95:39:60:
22:7a:86:11:13:b4:11:7a:2e:b5:26:46:3e:7b:30:
a8:08:a2:d4:c1:8a:9e:c9:bc:68:af:cb:03:9c:a8:
2d:3f:43:ad:90:bc:d1:68:b8:77:9e:52:34:20:a5:
a8:7c:b5:3d:f1:ab:97:73:4a:cd:1c:d2:b6:0a:b9:
f5:69:06:25:9d:6f:ba:81:b5:99:b1:29:81:76:09:
2e:ad:22:a8:f9:b0:5f:90:b6:33:28:92:0b:fd:18:
6f:7a:8d:e3:9d:d6:c3:dc:b8:8a:0a:e8:25:85:af:
53:8c:58:e7:c1:d9:e0:2d:01:12:8f:52:e3:84:b3:
4b:25:81:42:eb:4d:fa:8c:0e:26:94:0f:f4:3f:1b:
b1:c3:1c:97:00:ef:90:22:8b:ae:26:65:b7:1c:cd:
d5:03:e8:f5:f9:f5:68:34:c1:19:1e:70:a7:46:1c:
89:e7:4d:08:8a:d0:00:7b:38:0e:5a:73:e7:9f:01:
8e:d3:b6:b3:98:bb:74:6d:03:cb:a4:6a:77:16:53:
2a:2d:b7:d4:7e:13:16:84:5d:ce:9a:8c:fd:fc:55:
85:09:e5:6d:be:30:64:18:8e:5f:fa:3e:84:07:c1:
68:a6:0e:88:71:a0:00:3e:6b:79:34:c8:54:b9:ae:
b5:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:3B:F6:A3:93:08:94:DE:2D:CC:26:16:6B:9A:6D:34:74:9B:92:68
X509v3 Authority Key Identifier:
keyid:E6:ED:CC:FB:DB:7B:9E:19:3E:CB:E8:15:2F:B5:A2:96:BB:89:D7:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5u3M-9t7nhk-y-gVL7WilruJ1-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e39f5f-2568-4222-b5ea-2a157f7cf3a3/1/5u3M-9t7nhk-y-gVL7WilruJ1-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e39f5f-2568-4222-b5ea-2a157f7cf3a3/1/5u3M-9t7nhk-y-gVL7WilruJ1-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:17:b3:23:88:38:3a:ea:29:65:f3:8a:a0:89:0e:6d:90:a4:
a0:1c:c9:1c:ef:0c:1c:c8:0f:3a:7e:fd:fc:7a:da:6d:2a:4e:
a3:ca:25:f0:6a:da:26:18:0c:bd:47:7d:37:06:dc:9b:1f:a1:
72:10:04:ed:fb:ac:98:e2:1d:9e:a4:ee:ed:17:92:c7:1c:37:
e3:c8:d1:29:f0:aa:de:b8:ce:3f:62:a4:12:04:9f:9e:9b:d0:
fc:a8:99:44:3f:95:cc:ba:3f:09:51:8c:00:62:2a:d1:c8:40:
84:e3:94:6f:fd:d5:ab:08:e9:5d:93:04:32:e5:8c:ed:e2:44:
90:1d:85:f1:8f:8c:1f:6e:f3:24:90:0a:e9:57:b5:fd:85:d2:
69:6b:a5:f3:e2:e0:1c:2a:ba:bd:c7:f2:8e:64:0a:2f:99:6a:
89:c0:b2:ec:dd:36:c8:3b:2a:54:c6:88:29:bc:9f:06:35:b8:
1f:bf:12:3d:f1:3d:1c:35:be:20:a1:d5:d1:8d:57:d2:41:65:
42:4a:c8:57:11:d6:6b:95:70:d1:c6:47:13:3b:b0:0a:6f:61:
40:56:7e:c9:44:d7:10:34:c0:aa:93:2d:0d:6a:38:6f:86:9a:
40:d4:09:0e:14:b7:9a:84:ff:c2:cd:8d:7b:63:f9:8e:cf:0d:
fd:1b:7e:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:18:47 2026 by rpki-client