Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/063ebe-67f0-40e9-bbff-a409ca37a3ea/1/5-QyokmU5XnrJJmh9vNMZSEY40Q.mft
File: 5-QyokmU5XnrJJmh9vNMZSEY40Q.mft (raw, json)
Hash identifier: DLr8fFdpR6Ysf1fbn2plYlEVpDzMf+aZ60UL+I7A3H8=
Subject key identifier: B1:E3:FA:3F:43:A3:D3:82:DD:37:09:EB:32:9F:9F:F2:62:47:EC:4E
Authority key identifier: E7:E4:32:A2:49:94:E5:79:EB:24:99:A1:F6:F3:4C:65:21:18:E3:44
Certificate issuer: /CN=e7e432a24994e579eb2499a1f6f34c652118e344
Certificate serial: 019D33E394BF6CBE5F1AF4A6F5F53F7E25EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5-QyokmU5XnrJJmh9vNMZSEY40Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/063ebe-67f0-40e9-bbff-a409ca37a3ea/1/5-QyokmU5XnrJJmh9vNMZSEY40Q.mft
Manifest number: 1820
Signing time: Sat 28 Mar 2026 10:00:45 +0000
Manifest this update: Sat 28 Mar 2026 10:00:45 +0000
Manifest next update: Sun 29 Mar 2026 10:00:45 +0000
Files and hashes: 1: 5-QyokmU5XnrJJmh9vNMZSEY40Q.crl (hash: bcFKHfpP6Ke9jmXdKsMT8hOrnOh7AEkxwq27wNnIX3c=)
2: PVnKaPf91mf4o0pWWoMoyuOYLn0.roa (hash: bvYxvgOHnbm7x6gXSSyrjK4YHdzAS2cBUxtYdZAEIX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/063ebe-67f0-40e9-bbff-a409ca37a3ea/1/5-QyokmU5XnrJJmh9vNMZSEY40Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/063ebe-67f0-40e9-bbff-a409ca37a3ea/1/5-QyokmU5XnrJJmh9vNMZSEY40Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/5-QyokmU5XnrJJmh9vNMZSEY40Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:e3:94:bf:6c:be:5f:1a:f4:a6:f5:f5:3f:7e:25:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7e432a24994e579eb2499a1f6f34c652118e344
Validity
Not Before: Mar 28 10:00:45 2026 GMT
Not After : Mar 29 10:00:45 2026 GMT
Subject: CN=b1e3fa3f43a3d382dd3709eb329f9ff26247ec4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:37:ad:20:29:0c:b0:cc:79:82:22:91:29:f1:
c6:fe:f5:b7:17:99:6c:69:27:6f:8a:15:8f:9f:75:
7e:de:3e:13:64:98:ab:d5:d0:08:9a:6b:29:40:f7:
11:a1:a6:e8:90:20:b9:22:3b:ed:4e:2a:01:3a:76:
80:34:27:66:03:d4:17:e4:3f:6d:26:c9:90:fb:3a:
84:2a:af:05:16:26:96:48:4a:28:ed:42:16:72:05:
1f:af:45:8c:49:7a:11:48:6d:75:ee:f3:5c:02:23:
67:31:d4:2f:c6:d2:be:40:93:e4:b8:f1:6e:89:aa:
77:2e:77:83:61:31:eb:be:fb:73:4e:c5:63:2f:5f:
88:53:86:e2:39:a3:27:72:9f:88:b1:b7:a4:68:2c:
36:d2:17:bb:42:a7:08:85:00:b6:d9:2e:54:25:8f:
e0:be:f3:ca:ab:71:71:65:f2:3c:91:c8:e2:09:4d:
5e:b7:98:48:0f:16:0a:3a:d2:00:7f:fb:71:2d:55:
f5:cc:50:1e:c7:db:d4:fb:ad:93:3a:81:43:8a:43:
f5:53:bd:1a:72:6b:13:bd:fd:e4:70:ca:68:d2:bf:
50:c5:7a:79:52:8c:e6:ee:92:93:d3:cf:5b:c2:84:
5d:fd:dc:84:57:aa:76:1a:a1:0e:15:c3:99:c5:c5:
8e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:E3:FA:3F:43:A3:D3:82:DD:37:09:EB:32:9F:9F:F2:62:47:EC:4E
X509v3 Authority Key Identifier:
keyid:E7:E4:32:A2:49:94:E5:79:EB:24:99:A1:F6:F3:4C:65:21:18:E3:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5-QyokmU5XnrJJmh9vNMZSEY40Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/063ebe-67f0-40e9-bbff-a409ca37a3ea/1/5-QyokmU5XnrJJmh9vNMZSEY40Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/063ebe-67f0-40e9-bbff-a409ca37a3ea/1/5-QyokmU5XnrJJmh9vNMZSEY40Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:a2:dc:89:ba:d9:7a:fb:6f:0a:07:17:ce:ee:76:fc:ec:06:
f4:bc:4f:d8:1d:e3:91:96:b2:ee:b0:ad:01:c0:81:3e:2a:7b:
d5:de:81:e0:52:de:28:55:7c:7d:a1:a8:94:f1:21:ac:f8:fd:
f8:41:d9:1d:c2:03:b3:9c:fb:24:4c:d4:d2:53:45:9d:87:7d:
bf:46:4f:82:c6:39:ed:dc:70:fa:72:95:88:55:6b:44:63:94:
90:7b:bd:8a:20:c9:f8:1e:88:59:b2:a9:e4:e2:3b:71:84:29:
2b:c5:1c:e6:48:d6:44:64:95:57:d2:88:a0:9a:a0:d0:33:7f:
fd:1a:1b:90:66:63:8c:7b:f9:09:9c:85:a6:74:73:c8:38:00:
cd:c0:1a:05:f9:54:03:e8:3a:a2:cc:17:a1:cc:01:66:23:43:
0d:c2:59:da:83:41:8a:a9:2d:06:c9:69:69:51:35:f8:06:17:
22:31:69:e9:43:c4:03:d7:16:4c:ba:65:ea:c4:74:df:14:37:
61:f5:2e:39:cc:b0:f4:f1:ad:c9:78:8d:76:5d:ed:92:52:5d:
13:c7:d3:4b:41:3e:77:2e:14:d9:55:77:50:56:98:23:71:85:
4c:51:e6:93:4a:a9:4c:29:e6:77:9a:e7:ef:cf:ec:7e:ce:25:
92:82:27:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:03:00 2026 by rpki-client