Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/a3a299-ce28-4c35-ac64-c8c20f25de88/1/5kdeNHqvK1nU7oU6ilS05L03R-s.mft
File: 5kdeNHqvK1nU7oU6ilS05L03R-s.mft (raw, json)
Hash identifier: ML0loUSwlw5LMiISZcBvY4nvBuqk4R0OpTaHtJTGPjM=
Subject key identifier: A2:FD:E4:61:3C:60:AB:36:39:FB:62:9C:5A:79:B8:76:4E:17:81:AB
Authority key identifier: E6:47:5E:34:7A:AF:2B:59:D4:EE:85:3A:8A:54:B4:E4:BD:37:47:EB
Certificate issuer: /CN=e6475e347aaf2b59d4ee853a8a54b4e4bd3747eb
Certificate serial: 019D273AF2833927BD680DECD6836E9A2F58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5kdeNHqvK1nU7oU6ilS05L03R-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/a3a299-ce28-4c35-ac64-c8c20f25de88/1/5kdeNHqvK1nU7oU6ilS05L03R-s.mft
Manifest number: 03D0
Signing time: Wed 25 Mar 2026 23:01:07 +0000
Manifest this update: Wed 25 Mar 2026 23:01:07 +0000
Manifest next update: Thu 26 Mar 2026 23:01:07 +0000
Files and hashes: 1: 5kdeNHqvK1nU7oU6ilS05L03R-s.crl (hash: gXGz/7QdpxtBZQisXZvfKEdJiK/OjpHkLMYtpt4VsSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/a3a299-ce28-4c35-ac64-c8c20f25de88/1/5kdeNHqvK1nU7oU6ilS05L03R-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/a3a299-ce28-4c35-ac64-c8c20f25de88/1/5kdeNHqvK1nU7oU6ilS05L03R-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/5kdeNHqvK1nU7oU6ilS05L03R-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:f2:83:39:27:bd:68:0d:ec:d6:83:6e:9a:2f:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6475e347aaf2b59d4ee853a8a54b4e4bd3747eb
Validity
Not Before: Mar 25 23:01:07 2026 GMT
Not After : Mar 26 23:01:07 2026 GMT
Subject: CN=a2fde4613c60ab3639fb629c5a79b8764e1781ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b7:65:a9:30:4d:3c:78:2d:84:0e:da:45:68:
ec:7e:94:fb:1a:02:6a:c8:d7:1e:c3:91:e2:e8:d2:
a0:59:29:e9:f7:b1:c2:c5:a8:6c:58:99:63:24:27:
dc:b8:c0:3e:3f:fa:ce:4d:d3:4c:3e:3c:f3:57:dd:
97:05:cc:7c:39:1e:a7:37:ca:40:8e:e7:55:50:4c:
52:4b:bf:e6:57:81:25:93:15:e7:1a:be:c1:61:40:
19:6a:71:4b:80:2a:b1:9f:47:3f:d4:15:37:83:bb:
7b:5a:b4:56:c7:0b:95:f1:a1:af:62:7e:c5:5f:f1:
9a:73:20:53:71:96:1a:6a:57:d6:3e:a2:61:9d:3f:
bf:75:76:85:17:25:c9:96:0d:93:9a:41:80:fb:36:
ee:5b:8f:93:31:a6:30:24:ef:45:55:a8:38:5a:04:
3b:28:e9:42:3c:92:5d:c7:c0:31:49:6d:ca:6d:88:
db:7d:92:b4:06:f5:3d:51:fe:80:d1:ca:2e:ad:36:
cd:3b:02:6b:51:3a:e2:5f:8b:0f:0d:90:c7:4a:3f:
ba:2b:82:ce:88:0e:f7:02:cb:b2:12:4a:36:97:64:
4f:dd:78:b9:57:19:9b:15:c5:e5:81:81:96:af:62:
c7:c2:0d:2c:16:e0:0b:a2:63:66:a3:2c:bf:7f:20:
28:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:FD:E4:61:3C:60:AB:36:39:FB:62:9C:5A:79:B8:76:4E:17:81:AB
X509v3 Authority Key Identifier:
keyid:E6:47:5E:34:7A:AF:2B:59:D4:EE:85:3A:8A:54:B4:E4:BD:37:47:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5kdeNHqvK1nU7oU6ilS05L03R-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a3a299-ce28-4c35-ac64-c8c20f25de88/1/5kdeNHqvK1nU7oU6ilS05L03R-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a3a299-ce28-4c35-ac64-c8c20f25de88/1/5kdeNHqvK1nU7oU6ilS05L03R-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:c5:e1:c3:9e:32:ab:b5:ba:dc:2b:da:45:69:b5:68:a1:5f:
bb:f3:20:fa:8b:2d:11:4a:01:f3:37:21:48:a9:8c:ec:2e:0c:
53:ee:df:d1:36:aa:cd:21:71:7b:08:d7:d8:46:f1:f1:b9:cb:
01:58:e4:37:60:32:25:cc:01:dd:42:ba:d1:b9:15:96:69:07:
4e:3b:c4:66:f6:5a:0d:ca:68:8b:22:43:af:38:66:86:b5:c3:
8b:85:91:3c:8b:16:d8:a5:34:ef:f0:04:ed:be:13:33:e3:4a:
47:67:bc:9a:cc:19:44:43:d4:b6:19:56:33:4c:98:be:a8:7e:
4f:cc:99:4f:d8:36:04:0f:a6:a4:84:d3:94:85:3b:7c:ef:0c:
c9:37:78:8d:54:f9:5f:d7:60:d8:c4:e3:ef:b3:87:e7:ee:5c:
93:c0:42:b3:18:8f:82:96:ad:d6:ce:4b:f2:a9:9a:ad:a6:56:
71:23:b0:2f:a3:89:05:d0:a1:ea:c2:5a:60:54:45:46:a8:cb:
9f:52:fb:f0:02:cd:92:6d:62:89:92:7f:50:e7:09:67:4e:97:
95:a5:1a:49:87:76:f8:a4:08:95:d4:5f:74:a3:88:6f:a3:2b:
f6:be:09:80:f8:89:08:72:33:80:67:a5:4d:fa:50:67:17:72:
04:31:4d:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:59:45 2026 by rpki-client