Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/0d0cfe-4a26-4128-84ba-242ec7733e2a/1/x5bFLqluqP2iU7sEBw8ZNvrsdsE.mft
File: x5bFLqluqP2iU7sEBw8ZNvrsdsE.mft (raw, json)
Hash identifier: Ikd/P0hZriZkYoF3azmv6NI30WbtMiyuxZdlaUpjtBE=
Subject key identifier: 74:17:CF:07:E7:46:43:9A:7F:01:3C:E6:DB:2A:50:DC:8F:1A:22:E2
Authority key identifier: C7:96:C5:2E:A9:6E:A8:FD:A2:53:BB:04:07:0F:19:36:FA:EC:76:C1
Certificate issuer: /CN=c796c52ea96ea8fda253bb04070f1936faec76c1
Certificate serial: 019D32D1418A352D63F590E2D4632B7A306E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x5bFLqluqP2iU7sEBw8ZNvrsdsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/0d0cfe-4a26-4128-84ba-242ec7733e2a/1/x5bFLqluqP2iU7sEBw8ZNvrsdsE.mft
Manifest number: 52
Signing time: Sat 28 Mar 2026 05:01:07 +0000
Manifest this update: Sat 28 Mar 2026 05:01:07 +0000
Manifest next update: Sun 29 Mar 2026 05:01:07 +0000
Files and hashes: 1: x5bFLqluqP2iU7sEBw8ZNvrsdsE.crl (hash: IBX9DGiTZ4G3yPn+NJFVmZlMZX7F106z1jbOqWDv/hI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/0d0cfe-4a26-4128-84ba-242ec7733e2a/1/x5bFLqluqP2iU7sEBw8ZNvrsdsE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/0d0cfe-4a26-4128-84ba-242ec7733e2a/1/x5bFLqluqP2iU7sEBw8ZNvrsdsE.mft
rsync://rpki.ripe.net/repository/DEFAULT/x5bFLqluqP2iU7sEBw8ZNvrsdsE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:d1:41:8a:35:2d:63:f5:90:e2:d4:63:2b:7a:30:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c796c52ea96ea8fda253bb04070f1936faec76c1
Validity
Not Before: Mar 28 05:01:07 2026 GMT
Not After : Mar 29 05:01:07 2026 GMT
Subject: CN=7417cf07e746439a7f013ce6db2a50dc8f1a22e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:9a:8a:09:bc:58:8c:9e:01:39:76:6a:27:e8:
01:d4:37:39:64:07:d1:19:3a:3c:be:2e:b6:66:b3:
fc:67:13:78:54:2f:a7:9a:9b:84:a8:5c:cf:78:7f:
ed:ef:da:42:7e:02:9d:94:1b:27:87:d5:13:7d:20:
81:9b:e6:7f:34:46:2d:ac:c9:d4:99:3a:89:d4:e7:
ea:23:c8:ec:18:0e:c4:7b:00:ba:07:06:c2:30:96:
23:a0:99:b1:78:a2:03:ac:86:ed:de:c4:46:53:cd:
ac:48:52:30:3d:2b:b5:c2:bb:32:f8:30:2d:f6:ff:
b2:c6:78:57:03:ee:59:bb:36:ab:79:ce:a4:7c:84:
c8:a4:27:b6:7d:ef:e4:b7:52:c7:48:96:e0:78:f8:
4a:99:7d:9b:ba:64:22:73:42:e9:fe:74:dc:f0:ce:
8e:3b:30:32:7e:4f:92:d8:fb:bf:83:55:df:3e:1f:
7b:e6:e8:57:cd:25:eb:16:be:c8:ac:23:d2:e8:61:
d9:56:d4:5f:c3:c9:67:52:1f:03:58:2c:69:01:6c:
5b:17:14:ef:38:14:1e:48:cb:cb:f7:a2:21:34:77:
96:6c:7e:34:1e:6f:53:72:7b:d9:68:36:24:e0:92:
d0:56:1e:f0:fa:72:91:9c:ae:a7:05:49:1c:08:11:
4e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:17:CF:07:E7:46:43:9A:7F:01:3C:E6:DB:2A:50:DC:8F:1A:22:E2
X509v3 Authority Key Identifier:
keyid:C7:96:C5:2E:A9:6E:A8:FD:A2:53:BB:04:07:0F:19:36:FA:EC:76:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x5bFLqluqP2iU7sEBw8ZNvrsdsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/0d0cfe-4a26-4128-84ba-242ec7733e2a/1/x5bFLqluqP2iU7sEBw8ZNvrsdsE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/0d0cfe-4a26-4128-84ba-242ec7733e2a/1/x5bFLqluqP2iU7sEBw8ZNvrsdsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:4d:b2:23:7e:0a:c4:d1:d1:0c:25:c8:99:15:54:57:12:00:
42:61:c6:0c:5b:98:47:16:cc:a4:17:f4:cb:e2:61:84:2b:96:
1e:6e:80:44:2d:3b:20:d4:09:0f:31:77:e2:34:8c:e3:23:c1:
ba:24:ef:b8:95:00:42:f0:d4:8d:d5:e4:46:31:de:e1:bc:8e:
0b:74:55:10:a6:88:e6:70:bd:6a:e2:8f:cb:a8:55:4c:da:ff:
0a:48:40:50:c1:e9:e7:2b:45:68:39:15:3d:81:70:78:7a:17:
ab:da:dd:75:19:21:13:b8:d9:d1:e4:67:07:0b:29:f3:6e:a1:
66:09:f6:77:2f:35:af:60:ad:7e:06:91:58:bc:68:75:52:5e:
36:74:cf:02:ee:3a:f3:63:77:87:3b:9a:fe:2b:94:a0:b3:fa:
d3:73:ba:6e:03:13:5a:7d:1f:d2:2b:41:50:b7:94:51:fb:be:
98:1f:25:5c:2c:40:e9:a1:a4:b8:40:5b:43:f0:02:2a:d3:fb:
e5:be:75:fe:ca:4d:5e:43:e9:07:e8:e0:3d:17:aa:01:b3:30:
2c:fd:2c:f7:4d:e7:ec:9f:02:64:10:b0:06:8b:73:00:d6:ed:
d2:c7:ec:a6:36:1a:d1:04:70:ff:7d:99:70:00:aa:9f:ed:d8:
61:c5:07:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:46:43 2026 by rpki-client