Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/f9f773-121e-450d-b606-98bf4289df3b/1/5qTLdM9STBgSHVO1MsA8BvSta-Y.mft
File: 5qTLdM9STBgSHVO1MsA8BvSta-Y.mft (raw, json)
Hash identifier: zao+tb3l1JbRA4KsJkK6dCDO6/syOCLnnTnYg9BdezU=
Subject key identifier: 54:4F:58:F0:C1:A3:03:0C:11:84:E2:9A:67:B7:98:05:3C:FF:96:C6
Authority key identifier: E6:A4:CB:74:CF:52:4C:18:12:1D:53:B5:32:C0:3C:06:F4:AD:6B:E6
Certificate issuer: /CN=e6a4cb74cf524c18121d53b532c03c06f4ad6be6
Certificate serial: 019D2B85714F839B6C57FF9822D42D86089C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5qTLdM9STBgSHVO1MsA8BvSta-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/f9f773-121e-450d-b606-98bf4289df3b/1/5qTLdM9STBgSHVO1MsA8BvSta-Y.mft
Manifest number: 1283
Signing time: Thu 26 Mar 2026 19:00:58 +0000
Manifest this update: Thu 26 Mar 2026 19:00:58 +0000
Manifest next update: Fri 27 Mar 2026 19:00:58 +0000
Files and hashes: 1: 5qTLdM9STBgSHVO1MsA8BvSta-Y.crl (hash: VhXX6pzRN35CfbIRMaINERjPpJ0CZw2EqYs+SJ0rB/M=)
2: PHHmlI_lozSBsIeTe7D4ho8MMgk.roa (hash: Q0/1mQZnoW0veYxUY+kdm56TFO9WzQm4B7+icQrGOc4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/f9f773-121e-450d-b606-98bf4289df3b/1/5qTLdM9STBgSHVO1MsA8BvSta-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/f9f773-121e-450d-b606-98bf4289df3b/1/5qTLdM9STBgSHVO1MsA8BvSta-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/5qTLdM9STBgSHVO1MsA8BvSta-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:85:71:4f:83:9b:6c:57:ff:98:22:d4:2d:86:08:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6a4cb74cf524c18121d53b532c03c06f4ad6be6
Validity
Not Before: Mar 26 19:00:58 2026 GMT
Not After : Mar 27 19:00:58 2026 GMT
Subject: CN=544f58f0c1a3030c1184e29a67b798053cff96c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c2:ec:c8:31:0a:b5:14:ea:ce:1b:28:ff:d2:
77:b6:f0:1a:66:60:c5:10:03:9f:10:47:65:c7:8d:
81:2b:d0:cc:51:a1:ef:d5:6f:e0:10:06:d0:38:fd:
35:cb:ff:65:9c:45:61:45:b7:1a:2f:6d:03:63:b1:
7d:c0:0e:d7:f9:dc:5e:a1:95:bb:4b:08:65:f4:e3:
94:af:75:b9:1c:c3:d5:50:b3:c3:70:26:4b:66:c9:
aa:a2:3a:c0:c8:71:bc:3d:07:83:73:5e:67:06:46:
21:25:42:bb:7f:cd:28:2e:43:74:46:fa:aa:a3:29:
c9:33:ac:90:16:d1:4a:7d:ad:be:2a:d2:2a:9b:f9:
e8:38:dc:9b:30:2c:d6:17:67:e1:5b:aa:b8:c2:ea:
37:f6:e8:ec:3f:96:e1:24:86:48:42:b4:cb:39:f4:
63:f7:8e:73:df:e3:e0:d5:e5:9e:f3:21:7c:7e:9b:
11:30:17:18:94:bb:8b:43:9d:10:4d:24:44:38:56:
6c:7c:7d:85:c0:92:37:fb:7c:00:f7:f9:69:32:eb:
76:63:ba:b5:ef:1f:ba:6d:5d:3b:5e:ef:06:a2:8c:
25:e5:be:52:24:af:0e:24:88:94:d5:f2:6e:70:40:
3d:39:9f:39:59:37:d8:f7:25:b4:01:34:31:0a:45:
9e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:4F:58:F0:C1:A3:03:0C:11:84:E2:9A:67:B7:98:05:3C:FF:96:C6
X509v3 Authority Key Identifier:
keyid:E6:A4:CB:74:CF:52:4C:18:12:1D:53:B5:32:C0:3C:06:F4:AD:6B:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5qTLdM9STBgSHVO1MsA8BvSta-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/f9f773-121e-450d-b606-98bf4289df3b/1/5qTLdM9STBgSHVO1MsA8BvSta-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/f9f773-121e-450d-b606-98bf4289df3b/1/5qTLdM9STBgSHVO1MsA8BvSta-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:7d:72:79:2b:f1:09:a4:8a:9a:5d:3d:d3:58:d9:72:95:e2:
2b:38:a0:61:61:e0:b7:0b:6d:06:02:14:e0:a0:09:78:ac:52:
d8:42:92:05:ed:b2:01:2c:c3:e9:a7:16:ed:0c:a6:cd:73:f2:
3f:ca:b0:d4:ca:9a:74:a0:7e:1d:74:89:a1:0d:f8:89:f3:63:
0a:5c:24:a9:3f:d4:5c:5b:f7:0b:5b:8e:59:fb:44:4c:ac:c4:
86:72:58:41:3d:0e:5e:70:f5:0d:3d:71:bd:33:c5:ae:bd:2f:
b2:ca:58:02:ef:4a:d9:71:e8:66:08:4e:1c:5e:f8:00:62:9c:
79:0c:7e:3a:37:ce:04:92:54:c3:11:11:27:10:4e:b7:06:d9:
5b:88:94:c0:70:0b:33:73:06:ba:82:76:43:df:15:75:38:5b:
fb:3b:14:77:6a:c8:9f:64:ec:d5:86:e2:3f:48:6d:70:2b:7f:
8e:57:55:0b:14:0c:5b:47:6d:16:4a:19:24:53:c0:c9:04:2c:
d2:af:a7:87:7e:75:a9:e2:10:35:f1:29:92:a2:22:3a:c4:07:
9d:6b:d3:1a:8a:8b:8d:96:04:98:b0:16:36:2f:16:af:ba:8a:
b1:43:44:39:97:e8:99:b1:c1:59:57:13:10:f1:14:03:7d:84:
42:50:4b:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:38:36 2026 by rpki-client