Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/1446aa-6e41-45c0-b09a-32c3658b25be/1/5XB6RVkqydFxmoV2lgMXeCm0bgo.mft
File: 5XB6RVkqydFxmoV2lgMXeCm0bgo.mft (raw, json)
Hash identifier: r4GBsBtPnRIegAv08MKOcywKDPiQixesotl+Nn7IVM8=
Subject key identifier: FA:35:FE:D3:FA:D5:D3:66:76:C8:FA:A9:2B:CA:2C:48:5D:6A:43:E4
Authority key identifier: E5:70:7A:45:59:2A:C9:D1:71:9A:85:76:96:03:17:78:29:B4:6E:0A
Certificate issuer: /CN=e5707a45592ac9d1719a85769603177829b46e0a
Certificate serial: 019D273B31519A5880F9D4EE76891335B963
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5XB6RVkqydFxmoV2lgMXeCm0bgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/1446aa-6e41-45c0-b09a-32c3658b25be/1/5XB6RVkqydFxmoV2lgMXeCm0bgo.mft
Manifest number: 0E84
Signing time: Wed 25 Mar 2026 23:01:23 +0000
Manifest this update: Wed 25 Mar 2026 23:01:23 +0000
Manifest next update: Thu 26 Mar 2026 23:01:23 +0000
Files and hashes: 1: 5XB6RVkqydFxmoV2lgMXeCm0bgo.crl (hash: qaySS7vW9xUwgO3oerXjoRvSawOUmXryuQ0gZZ5icNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/1446aa-6e41-45c0-b09a-32c3658b25be/1/5XB6RVkqydFxmoV2lgMXeCm0bgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/1446aa-6e41-45c0-b09a-32c3658b25be/1/5XB6RVkqydFxmoV2lgMXeCm0bgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5XB6RVkqydFxmoV2lgMXeCm0bgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3b:31:51:9a:58:80:f9:d4:ee:76:89:13:35:b9:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5707a45592ac9d1719a85769603177829b46e0a
Validity
Not Before: Mar 25 23:01:23 2026 GMT
Not After : Mar 26 23:01:23 2026 GMT
Subject: CN=fa35fed3fad5d36676c8faa92bca2c485d6a43e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:5f:59:76:31:8e:ec:cf:04:a7:e6:a2:d2:97:
4c:47:b9:8b:4f:e0:fa:55:65:25:70:1e:9c:bd:94:
58:e4:18:df:d9:dc:68:8a:fe:ca:cf:64:f5:70:9c:
26:11:29:dc:bb:41:c7:c6:4e:61:b9:97:02:5e:1b:
9a:fa:04:48:5b:7d:2d:99:bf:73:a7:34:0e:d9:27:
e7:f8:f1:0b:c4:85:6b:3a:f5:2a:46:d6:b4:30:0d:
24:6e:fd:66:e7:f6:8c:9b:0c:f0:ec:c4:58:33:94:
e8:28:96:b3:09:8c:e0:2b:ff:7d:97:a8:c4:7f:7b:
ad:9b:d8:d9:b6:1e:8b:eb:55:a1:5c:a5:ff:94:a6:
cf:ff:26:82:a0:bf:fd:86:ce:2d:b0:ab:b5:3e:9a:
7b:a8:50:3a:32:14:84:e9:e5:34:13:ec:e8:fb:d9:
07:46:cb:da:e3:06:e0:a8:aa:bb:a9:f1:ae:a5:b8:
c9:87:fe:cc:3f:51:4b:d8:20:7e:c3:66:0d:ad:21:
c5:cc:20:0c:79:69:7d:70:3c:6d:8f:56:89:77:2d:
67:63:26:bf:94:3d:aa:f8:42:45:cb:8d:2d:8b:8f:
45:cd:a8:f7:87:b0:50:26:7e:e4:3c:f2:26:03:d0:
a8:0d:a5:be:9d:f2:9a:9c:70:10:94:3d:3c:90:b3:
6b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:35:FE:D3:FA:D5:D3:66:76:C8:FA:A9:2B:CA:2C:48:5D:6A:43:E4
X509v3 Authority Key Identifier:
keyid:E5:70:7A:45:59:2A:C9:D1:71:9A:85:76:96:03:17:78:29:B4:6E:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5XB6RVkqydFxmoV2lgMXeCm0bgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1446aa-6e41-45c0-b09a-32c3658b25be/1/5XB6RVkqydFxmoV2lgMXeCm0bgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1446aa-6e41-45c0-b09a-32c3658b25be/1/5XB6RVkqydFxmoV2lgMXeCm0bgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:a6:63:ca:20:da:74:a8:25:cb:5a:b4:94:65:9d:b5:c4:29:
8a:e9:10:47:86:cf:24:90:52:2f:5f:21:a7:cc:94:59:f1:e7:
2f:90:56:6c:97:ca:52:db:43:18:b3:0f:71:78:81:2c:30:4f:
c4:70:b0:cd:d9:fe:22:df:0c:46:eb:97:7c:6d:02:c5:6b:51:
da:af:bf:a7:6e:d7:f4:8b:ac:a6:27:a2:88:1d:fb:96:ce:f1:
a9:5f:b3:50:e2:80:bc:33:56:e3:fe:c8:51:3c:56:7b:07:06:
61:8e:69:04:1e:4b:54:6a:37:b8:d6:0f:83:c7:65:ad:00:b5:
9a:6d:79:84:93:be:b3:ed:3c:c2:6a:e2:f0:f9:02:cf:db:40:
72:08:68:93:ef:53:7d:32:a2:95:25:20:62:dd:1e:3a:2a:f7:
10:29:8e:00:d4:57:91:d0:57:4b:3b:73:2f:25:f1:46:45:bb:
0a:c5:b5:d1:de:8b:58:d7:f5:a0:e2:5b:08:81:cb:8f:77:59:
bf:0b:c9:9d:f8:22:5c:37:60:84:5f:48:a1:6e:fc:22:e7:d6:
a1:86:9b:00:03:db:f9:4e:f9:f9:87:c2:de:2e:2e:29:3e:9e:
40:e6:da:37:44:f7:ab:2b:e2:91:eb:2d:bc:ae:51:04:b4:6a:
5e:09:4a:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:17:44 2026 by rpki-client