Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/cb5183-d8d8-4425-b0ed-c2097031ed4b/1/at5urfJFy3ply0wF09VLzSYKB18.mft
File: at5urfJFy3ply0wF09VLzSYKB18.mft (raw, json)
Hash identifier: 2OV9x0BzldFzh64iJWl20zE6DHQpdTAFilPfGuuepJ4=
Subject key identifier: 88:9E:07:89:C0:D5:99:67:B1:DA:0C:96:A1:E9:70:44:B7:26:3C:A8
Authority key identifier: 6A:DE:6E:AD:F2:45:CB:7A:65:CB:4C:05:D3:D5:4B:CD:26:0A:07:5F
Certificate issuer: /CN=6ade6eadf245cb7a65cb4c05d3d54bcd260a075f
Certificate serial: 019D265F15B4A5E89823DD2B8C5CC2495465
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/at5urfJFy3ply0wF09VLzSYKB18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/cb5183-d8d8-4425-b0ed-c2097031ed4b/1/at5urfJFy3ply0wF09VLzSYKB18.mft
Manifest number: 05D4
Signing time: Wed 25 Mar 2026 19:00:58 +0000
Manifest this update: Wed 25 Mar 2026 19:00:58 +0000
Manifest next update: Thu 26 Mar 2026 19:00:58 +0000
Files and hashes: 1: at5urfJFy3ply0wF09VLzSYKB18.crl (hash: MPZMXMWqAL/yO1uKV+lVhur40lSZqpoeYGrTdsZvCt8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/cb5183-d8d8-4425-b0ed-c2097031ed4b/1/at5urfJFy3ply0wF09VLzSYKB18.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/cb5183-d8d8-4425-b0ed-c2097031ed4b/1/at5urfJFy3ply0wF09VLzSYKB18.mft
rsync://rpki.ripe.net/repository/DEFAULT/at5urfJFy3ply0wF09VLzSYKB18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:15:b4:a5:e8:98:23:dd:2b:8c:5c:c2:49:54:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ade6eadf245cb7a65cb4c05d3d54bcd260a075f
Validity
Not Before: Mar 25 19:00:58 2026 GMT
Not After : Mar 26 19:00:58 2026 GMT
Subject: CN=889e0789c0d59967b1da0c96a1e97044b7263ca8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f7:17:42:16:b8:da:b7:08:d8:21:52:2c:97:
76:40:22:5c:55:35:e0:49:a2:e5:92:52:67:b9:be:
35:ea:1d:21:02:0a:a9:be:db:63:d4:d8:19:99:db:
5a:95:82:7b:e8:16:76:57:a9:1f:97:91:9b:7a:70:
61:49:89:e1:9e:36:0a:ee:f5:12:a1:e0:b8:9e:cd:
09:08:a4:ff:56:8a:ee:d3:19:3b:b2:fd:a7:2a:cf:
79:9a:fd:ed:14:fd:d1:ad:45:63:87:6e:95:6b:6d:
6c:af:77:5a:84:d2:bf:a5:21:ed:c4:a1:ce:6f:df:
cb:40:e3:c4:f3:61:25:6b:78:bf:40:8a:c3:26:56:
b1:b8:3c:27:19:1b:1c:8e:76:22:99:c3:50:37:f7:
04:82:0b:6a:8c:a8:db:be:5e:ea:92:6f:62:36:f2:
dd:07:c1:fd:3b:3f:d5:25:a8:40:cd:8a:b3:21:c3:
7f:b3:99:ff:c5:5f:d7:8e:f3:c7:53:60:a7:c9:72:
7f:b2:d4:d2:a8:1d:da:e1:d4:59:2f:0b:38:0f:9a:
03:4f:02:05:4f:c2:6a:de:fb:24:78:3b:7d:dc:ff:
1f:31:d3:6a:38:71:7f:b9:28:6b:6c:d3:c0:d9:cb:
61:99:7d:ba:41:01:ef:a6:d6:8f:fd:22:6e:b9:23:
f6:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:9E:07:89:C0:D5:99:67:B1:DA:0C:96:A1:E9:70:44:B7:26:3C:A8
X509v3 Authority Key Identifier:
keyid:6A:DE:6E:AD:F2:45:CB:7A:65:CB:4C:05:D3:D5:4B:CD:26:0A:07:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/at5urfJFy3ply0wF09VLzSYKB18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cb5183-d8d8-4425-b0ed-c2097031ed4b/1/at5urfJFy3ply0wF09VLzSYKB18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cb5183-d8d8-4425-b0ed-c2097031ed4b/1/at5urfJFy3ply0wF09VLzSYKB18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:db:db:40:b7:b4:a7:d6:6e:21:77:f2:4e:0e:79:f9:de:89:
59:43:11:5e:a1:69:a8:af:2e:5b:7b:34:e7:9a:2e:38:5b:eb:
06:c7:bf:af:e5:9c:5d:69:6a:21:c7:68:b5:38:39:52:51:c9:
f3:d5:a6:52:c3:61:e9:6f:5f:57:37:ca:a0:b1:f6:eb:8a:bd:
1a:e1:47:8a:3e:fe:23:e3:d5:bc:4d:20:81:db:77:cc:05:4a:
7e:b7:e3:ac:e2:28:41:8c:d5:c9:17:91:66:5b:04:13:11:90:
57:0d:07:db:7c:a3:ba:15:a7:82:d2:e1:59:43:f6:d6:b1:d2:
57:ed:ce:1a:f3:c3:fb:2f:18:05:5c:4b:c7:29:07:4e:02:ff:
12:79:35:fd:8c:4d:08:08:71:eb:20:07:c8:7e:bd:a4:71:66:
98:71:f2:29:ed:0e:d4:e8:05:bc:e4:b2:41:d8:81:ff:5b:a7:
14:16:81:5b:4c:27:b4:fe:3d:74:41:01:6b:2b:50:f5:20:f1:
2a:61:73:d0:1e:20:59:59:d0:0f:10:5f:d4:05:2c:14:39:9b:
1b:6c:5a:ec:53:23:e8:49:13:eb:70:7b:7a:a3:96:cd:1b:25:
0a:bf:a4:e8:89:62:14:f1:c6:3f:5b:4e:66:b5:8e:ac:f6:ea:
59:ed:d7:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:56:38 2026 by rpki-client