Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/def9c7-f3e5-42f7-8def-9df4bb18fb06/1/5JlaSpG8KcjX7RBKA4QBmk_lng4.mft
File: 5JlaSpG8KcjX7RBKA4QBmk_lng4.mft (raw, json)
Hash identifier: Qz2VnfmxnPj0p09PIKdAR9Ot4asw8JIrjX++1aNMILE=
Subject key identifier: D6:79:31:50:83:16:DE:C0:76:F0:9F:74:50:EC:2A:DD:07:26:4D:4E
Authority key identifier: E4:99:5A:4A:91:BC:29:C8:D7:ED:10:4A:03:84:01:9A:4F:E5:9E:0E
Certificate issuer: /CN=e4995a4a91bc29c8d7ed104a0384019a4fe59e0e
Certificate serial: 019D2704547520881414084D7FD0B65A8726
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5JlaSpG8KcjX7RBKA4QBmk_lng4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/def9c7-f3e5-42f7-8def-9df4bb18fb06/1/5JlaSpG8KcjX7RBKA4QBmk_lng4.mft
Manifest number: 0BCD
Signing time: Wed 25 Mar 2026 22:01:28 +0000
Manifest this update: Wed 25 Mar 2026 22:01:28 +0000
Manifest next update: Thu 26 Mar 2026 22:01:28 +0000
Files and hashes: 1: 5JlaSpG8KcjX7RBKA4QBmk_lng4.crl (hash: f/oyTpcV+PQzLGbHtco6lSSkYFS6LVFI8zycBKMxDBE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/def9c7-f3e5-42f7-8def-9df4bb18fb06/1/5JlaSpG8KcjX7RBKA4QBmk_lng4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/def9c7-f3e5-42f7-8def-9df4bb18fb06/1/5JlaSpG8KcjX7RBKA4QBmk_lng4.mft
rsync://rpki.ripe.net/repository/DEFAULT/5JlaSpG8KcjX7RBKA4QBmk_lng4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:54:75:20:88:14:14:08:4d:7f:d0:b6:5a:87:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4995a4a91bc29c8d7ed104a0384019a4fe59e0e
Validity
Not Before: Mar 25 22:01:28 2026 GMT
Not After : Mar 26 22:01:28 2026 GMT
Subject: CN=d67931508316dec076f09f7450ec2add07264d4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:03:33:90:c7:45:c5:18:aa:8f:ee:0a:e8:50:
7f:aa:50:82:7a:a1:c5:81:55:27:af:b6:2d:00:f1:
c3:7c:07:d3:27:1f:1d:db:b0:ec:15:7e:9c:c1:8d:
c9:24:4e:30:69:a6:a0:b4:11:05:81:35:3a:b8:89:
0e:83:a7:4a:96:93:41:bc:ab:fc:40:17:dd:ab:55:
80:75:fb:01:0c:fa:85:1c:2b:4f:60:28:5c:81:13:
00:93:51:27:4f:af:35:bd:e0:c4:4f:d7:39:73:1b:
d4:bf:9c:38:d3:28:58:c1:03:75:e4:3f:0c:4d:cd:
63:6a:db:dd:c8:9b:9e:88:f6:68:e7:7d:30:5f:17:
1b:e5:da:74:32:2d:e2:1c:2b:db:de:ed:8d:72:ae:
00:02:f6:bd:c9:1b:e4:ab:7c:a3:ec:d8:9b:df:9c:
96:97:08:7f:7f:44:25:35:ba:ee:c0:7b:e4:da:b6:
2a:c1:ab:0e:c1:77:06:18:fa:e6:ba:3c:ef:32:08:
88:06:a9:f1:4b:2e:f0:f0:28:d0:58:a4:7f:f8:b3:
cc:7a:aa:c1:08:ce:25:44:20:e7:ab:88:e1:07:4c:
ab:6e:ad:9b:1b:38:47:85:cc:4f:00:9c:6e:57:2c:
cf:92:a9:e5:f7:d4:a7:24:fa:6f:cc:e2:ad:59:79:
45:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:79:31:50:83:16:DE:C0:76:F0:9F:74:50:EC:2A:DD:07:26:4D:4E
X509v3 Authority Key Identifier:
keyid:E4:99:5A:4A:91:BC:29:C8:D7:ED:10:4A:03:84:01:9A:4F:E5:9E:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5JlaSpG8KcjX7RBKA4QBmk_lng4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/def9c7-f3e5-42f7-8def-9df4bb18fb06/1/5JlaSpG8KcjX7RBKA4QBmk_lng4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/def9c7-f3e5-42f7-8def-9df4bb18fb06/1/5JlaSpG8KcjX7RBKA4QBmk_lng4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:bc:98:ba:64:ab:1f:c8:5e:5f:69:0f:86:15:2f:94:2d:18:
dc:a0:0f:ed:7e:27:70:8d:0b:2c:33:8d:5a:3b:fc:13:e5:a7:
cb:67:b3:d9:f6:5f:8a:a6:06:4d:9d:2c:a9:31:8e:75:6b:dc:
02:ae:95:8c:ba:5c:18:26:91:82:1f:ec:1f:83:3d:98:69:48:
2f:61:a7:be:c6:94:00:58:7e:ea:a7:d4:7e:0c:e1:7d:13:c5:
2a:9b:95:58:0c:24:db:1d:79:67:5f:62:88:06:ef:fe:4f:a1:
f3:2a:f3:e3:bb:d9:88:c3:b1:67:38:52:7d:dd:73:6d:c3:eb:
20:65:f3:ff:fb:f6:19:11:d2:c9:8d:9d:3f:ed:b0:ce:ac:69:
29:5f:8f:e1:54:8c:29:2c:a1:41:e5:0b:be:e8:18:29:83:43:
fa:43:50:3d:6b:0a:9a:0c:cd:ee:1b:6d:58:f4:7e:68:84:c4:
b2:a3:35:b3:5b:4e:6b:60:9e:90:8e:cf:7b:24:21:33:2a:ac:
a5:67:b3:b1:66:1e:d5:21:c3:2d:66:11:28:bf:da:1f:9c:59:
ec:53:df:fd:b6:4b:11:3d:eb:98:e5:5f:dd:c2:72:6b:9f:21:
50:84:81:3c:84:a9:7b:44:e9:a4:82:d3:42:63:38:aa:50:9e:
e7:4b:c0:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:58:27 2026 by rpki-client