Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/d7dc8d-e386-404c-88b4-283ec42c2c94/1/5gRDG1VUd8GaP0xcttEHNljVs-M.mft
File: 5gRDG1VUd8GaP0xcttEHNljVs-M.mft (raw, json)
Hash identifier: a86t8xBpJ8mfWPkN0t+OjNyPOLzIDx6ASSF++3PRBgA=
Subject key identifier: 21:E9:B3:6B:91:EC:F4:E7:E8:7F:08:05:77:72:41:20:5D:6F:73:DE
Authority key identifier: E6:04:43:1B:55:54:77:C1:9A:3F:4C:5C:B6:D1:07:36:58:D5:B3:E3
Certificate issuer: /CN=e604431b555477c19a3f4c5cb6d1073658d5b3e3
Certificate serial: 019D2996C43EFD3925E5952DE1F9195597D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5gRDG1VUd8GaP0xcttEHNljVs-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/d7dc8d-e386-404c-88b4-283ec42c2c94/1/5gRDG1VUd8GaP0xcttEHNljVs-M.mft
Manifest number: 0EC9
Signing time: Thu 26 Mar 2026 10:00:39 +0000
Manifest this update: Thu 26 Mar 2026 10:00:39 +0000
Manifest next update: Fri 27 Mar 2026 10:00:39 +0000
Files and hashes: 1: 5gRDG1VUd8GaP0xcttEHNljVs-M.crl (hash: BQxVilthDtx0IjDBLc5GhMWU/gvSVDWaIpmT1uThP+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/d7dc8d-e386-404c-88b4-283ec42c2c94/1/5gRDG1VUd8GaP0xcttEHNljVs-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/d7dc8d-e386-404c-88b4-283ec42c2c94/1/5gRDG1VUd8GaP0xcttEHNljVs-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/5gRDG1VUd8GaP0xcttEHNljVs-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:96:c4:3e:fd:39:25:e5:95:2d:e1:f9:19:55:97:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e604431b555477c19a3f4c5cb6d1073658d5b3e3
Validity
Not Before: Mar 26 10:00:39 2026 GMT
Not After : Mar 27 10:00:39 2026 GMT
Subject: CN=21e9b36b91ecf4e7e87f0805777241205d6f73de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:7d:2a:6b:b9:68:3f:e3:53:fa:ed:84:d4:09:
3d:c6:67:cf:a7:e2:ab:02:33:0d:10:b4:6a:fa:ee:
96:65:11:d9:45:cf:62:d8:b6:67:f9:b1:d4:79:b7:
f8:10:df:f3:f4:e7:dd:82:d4:7d:c5:21:92:85:1e:
41:b3:41:1c:97:7b:fc:99:f0:d6:6d:7a:cb:14:b3:
5b:65:a0:43:67:c2:b0:61:98:79:5a:7c:0f:3f:f8:
d8:4b:04:0a:65:88:67:fb:6e:64:85:7b:0f:9a:f3:
8a:f6:6f:60:32:51:7a:b2:6b:5d:d8:f3:94:75:75:
f7:a4:83:83:13:18:6d:38:f3:89:1d:42:7a:30:1e:
73:c9:04:97:05:0a:22:82:07:c2:86:10:56:52:0f:
8e:a6:a2:cd:3a:76:4b:57:af:b2:2c:5a:8f:3a:c0:
78:fb:2e:92:8d:21:8c:b2:09:83:0d:c2:99:c8:9a:
ad:41:16:30:49:d5:b4:13:fb:2c:57:c8:2d:c5:8a:
17:66:a7:49:34:a4:22:23:7d:56:15:e6:b9:17:ec:
81:be:60:bb:99:2a:2d:8d:26:27:40:bb:6b:78:63:
9c:b1:0c:6b:08:40:f0:17:14:e0:6b:0c:3c:d3:ce:
14:99:19:3b:7c:3a:ce:4a:e1:e1:4f:c8:c7:bb:5b:
2d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:E9:B3:6B:91:EC:F4:E7:E8:7F:08:05:77:72:41:20:5D:6F:73:DE
X509v3 Authority Key Identifier:
keyid:E6:04:43:1B:55:54:77:C1:9A:3F:4C:5C:B6:D1:07:36:58:D5:B3:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5gRDG1VUd8GaP0xcttEHNljVs-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d7dc8d-e386-404c-88b4-283ec42c2c94/1/5gRDG1VUd8GaP0xcttEHNljVs-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d7dc8d-e386-404c-88b4-283ec42c2c94/1/5gRDG1VUd8GaP0xcttEHNljVs-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:ef:34:14:e3:fd:14:9f:62:85:d2:68:aa:49:84:4c:4f:d7:
6e:19:4d:26:46:55:34:2f:b0:18:cc:02:5c:69:50:47:4d:e0:
dc:87:ed:5b:04:02:38:86:c2:81:23:6b:45:b5:11:af:a7:e0:
64:18:50:be:bc:69:71:b7:15:2d:4e:4f:24:06:2a:f0:d7:71:
07:74:14:79:ad:5e:59:99:ff:fe:f6:b4:77:97:f4:f9:14:bb:
05:c1:2c:63:8d:95:dc:00:13:8c:7c:40:cf:f7:7c:52:22:3f:
d6:4f:15:c6:67:e8:0d:16:6f:84:58:e5:af:93:56:ba:b6:e8:
81:5c:a5:48:2f:ee:45:57:4b:22:09:75:cf:47:67:8c:ca:2d:
63:b9:a1:56:6c:0d:78:e4:03:33:a6:72:42:ec:86:7f:63:82:
c6:ae:d5:86:5a:2b:cb:35:6f:e6:0a:64:5e:8d:44:80:d2:94:
44:30:2a:7a:c6:d7:ad:6c:7e:6c:15:a6:1b:be:44:92:14:2a:
19:5a:db:92:0a:b1:3b:07:80:5d:bc:fd:4a:af:07:2f:9d:fa:
78:67:84:5c:29:2a:63:b9:6f:fd:1a:7a:1e:a5:2d:00:bf:f7:
27:ff:ed:68:ed:5f:0e:17:ee:44:c4:14:d3:2d:b9:c4:7b:c1:
26:6a:de:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:10:41 2026 by rpki-client