Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/0/5DBF811E504A4FA2C29D3B4F11DFB713642873D3.mft
File: 5DBF811E504A4FA2C29D3B4F11DFB713642873D3.mft (raw, json)
Hash identifier: bQUeskKSz30nyAFsgHPAksu2n57Js8wCKyxldajtEOw=
Subject key identifier: C1:98:DA:B0:F3:5D:F2:0D:2C:AE:8B:BE:A5:B8:0B:98:F9:34:2D:6C
Authority key identifier: 5D:BF:81:1E:50:4A:4F:A2:C2:9D:3B:4F:11:DF:B7:13:64:28:73:D3
Certificate issuer: /CN=5dbf811e504a4fa2c29d3b4f11dfb713642873d3
Certificate serial: 3F2E9EBB954E831C2EE40EF5075C792CC67936C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xb-BHlBKT6LCnTtPEd-3E2Qoc9M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/0/5DBF811E504A4FA2C29D3B4F11DFB713642873D3.mft
Manifest number: 02F2
Signing time: Wed 25 Mar 2026 23:57:46 +0000
Manifest this update: Wed 25 Mar 2026 23:52:46 +0000
Manifest next update: Fri 27 Mar 2026 01:48:46 +0000
Files and hashes: 1: 5DBF811E504A4FA2C29D3B4F11DFB713642873D3.crl (hash: Brc3DPX5sJPnVav2ibzJjCoxDzDpKEt7vVkTxOh5iuo=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/0/5DBF811E504A4FA2C29D3B4F11DFB713642873D3.crl
rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/0/5DBF811E504A4FA2C29D3B4F11DFB713642873D3.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xb-BHlBKT6LCnTtPEd-3E2Qoc9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:2e:9e:bb:95:4e:83:1c:2e:e4:0e:f5:07:5c:79:2c:c6:79:36:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dbf811e504a4fa2c29d3b4f11dfb713642873d3
Validity
Not Before: Mar 25 23:52:46 2026 GMT
Not After : Mar 27 01:48:46 2026 GMT
Subject: CN=C198DAB0F35DF20D2CAE8BBEA5B80B98F9342D6C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:20:30:2f:d7:57:23:02:65:6e:68:51:1e:f4:
44:31:de:7a:6f:04:49:86:1a:01:d0:29:37:58:18:
c1:38:ed:26:56:f8:8a:3d:0c:ab:2c:63:9d:1c:05:
2b:95:87:0c:9f:b5:24:d9:97:c4:c4:0b:4f:de:57:
a9:10:72:8d:87:07:0d:2e:72:fb:7b:3d:8d:dd:61:
04:a6:f3:dc:b4:96:09:2f:ae:38:71:2b:e1:d0:fb:
78:5e:66:77:6b:9b:6a:d3:2b:bb:dd:3f:6f:66:d4:
1c:9b:9f:2b:76:7f:52:84:b6:c7:0f:6f:ff:be:7f:
2c:c9:5e:64:45:ff:f1:f7:a5:6d:82:e9:30:e0:cf:
e1:97:d1:0c:c8:43:90:80:7e:97:6c:63:72:f3:8b:
c1:5d:7f:a8:c5:cb:0e:90:e0:f0:c0:f6:ad:e0:22:
f5:c8:f9:65:99:77:19:77:ee:9b:72:b2:5c:ca:cd:
8c:91:08:3a:bf:41:c7:8e:78:9a:19:e8:03:f8:6b:
56:77:bb:c5:11:da:8a:b5:cc:66:9d:7b:42:bf:7d:
49:62:f7:62:6e:f3:ec:27:d4:fa:4b:70:0e:de:ab:
8d:f0:97:1a:78:83:09:91:9c:57:ba:8b:dc:2b:e7:
7b:48:c6:7d:93:70:07:c5:5c:f4:b4:6f:7e:45:dc:
22:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:98:DA:B0:F3:5D:F2:0D:2C:AE:8B:BE:A5:B8:0B:98:F9:34:2D:6C
X509v3 Authority Key Identifier:
keyid:5D:BF:81:1E:50:4A:4F:A2:C2:9D:3B:4F:11:DF:B7:13:64:28:73:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/0/5DBF811E504A4FA2C29D3B4F11DFB713642873D3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xb-BHlBKT6LCnTtPEd-3E2Qoc9M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/0/5DBF811E504A4FA2C29D3B4F11DFB713642873D3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:e9:be:73:56:ac:96:c2:2f:c7:15:26:10:4a:26:83:e0:ca:
02:18:5f:3a:87:05:44:d4:42:4b:b9:e8:3e:84:27:52:94:5a:
10:fb:17:c5:b1:61:e6:1c:05:01:62:b0:46:d8:f0:61:28:61:
af:47:03:2e:4c:c1:ea:0d:49:21:22:30:5a:be:ff:e4:c9:97:
d0:99:62:67:8d:9b:e8:4c:86:44:0f:87:22:fc:0f:1f:12:25:
76:3a:12:26:aa:55:9f:37:e6:2b:a8:0e:0a:a2:6f:a7:4d:1d:
cc:db:ce:7e:99:6a:65:a0:8c:1f:37:31:40:47:dc:3a:fc:97:
37:27:14:cd:3c:d7:f6:88:81:c7:05:43:43:45:b0:2c:a7:fd:
c4:6a:1e:6b:c6:54:87:3b:f6:9b:e8:2e:8f:37:a3:ca:14:a9:
2c:85:e5:97:b0:17:d2:e0:2f:a4:e5:f4:4b:3d:50:59:af:f9:
ef:04:b9:c7:a3:dc:44:cd:cd:80:5a:41:b7:d0:65:88:2b:5f:
8f:fb:09:07:21:8e:c7:03:aa:26:c3:c4:43:30:e3:be:16:ca:
5b:07:7a:27:27:d0:65:83:d7:77:ce:b8:6a:88:db:65:f4:80:
df:e5:af:27:f0:69:93:a9:a3:e5:13:ed:67:5f:b2:a5:cb:57:
2e:7b:3c:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:29:04 2026 by rpki-client