Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/63abe6-3551-414f-8792-1f9dfd814ab6/1/5qTV3yM4mOBPrj2D6Fgi2YgOCAY.mft
File: 5qTV3yM4mOBPrj2D6Fgi2YgOCAY.mft (raw, json)
Hash identifier: ZmH4Zzwq4twZ14vRk+7c7GC54yV9fOPJj7qldMrHoZM=
Subject key identifier: 9B:43:59:6C:A4:B0:0B:EA:2A:C7:83:ED:11:16:C4:08:21:22:55:4F
Authority key identifier: E6:A4:D5:DF:23:38:98:E0:4F:AE:3D:83:E8:58:22:D9:88:0E:08:06
Certificate issuer: /CN=e6a4d5df233898e04fae3d83e85822d9880e0806
Certificate serial: 019D2583A5866D8BB8F4A07AF2A5F644B2D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5qTV3yM4mOBPrj2D6Fgi2YgOCAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/63abe6-3551-414f-8792-1f9dfd814ab6/1/5qTV3yM4mOBPrj2D6Fgi2YgOCAY.mft
Manifest number: B8
Signing time: Wed 25 Mar 2026 15:01:17 +0000
Manifest this update: Wed 25 Mar 2026 15:01:17 +0000
Manifest next update: Thu 26 Mar 2026 15:01:17 +0000
Files and hashes: 1: 4SK6T1joxEKD3qcJIw_toyLw7Cg.asa (hash: S9VsSYa/rKcIFEh+rtQN72zQTr6Bln2NJ0sYtwMEOXo=)
2: 5qTV3yM4mOBPrj2D6Fgi2YgOCAY.crl (hash: eGMW9B6+YYDIQDtadp5+naBI7MdkonoFKtworgZG7vw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/63abe6-3551-414f-8792-1f9dfd814ab6/1/5qTV3yM4mOBPrj2D6Fgi2YgOCAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/63abe6-3551-414f-8792-1f9dfd814ab6/1/5qTV3yM4mOBPrj2D6Fgi2YgOCAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/5qTV3yM4mOBPrj2D6Fgi2YgOCAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:a5:86:6d:8b:b8:f4:a0:7a:f2:a5:f6:44:b2:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6a4d5df233898e04fae3d83e85822d9880e0806
Validity
Not Before: Mar 25 15:01:17 2026 GMT
Not After : Mar 26 15:01:17 2026 GMT
Subject: CN=9b43596ca4b00bea2ac783ed1116c4082122554f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:41:80:4a:04:92:53:67:43:12:ca:45:bc:e8:
73:84:85:26:47:40:13:8f:a5:5e:ca:03:bf:4c:a8:
7a:8c:76:23:6e:5d:80:09:33:2d:d5:1f:42:9f:f7:
9f:5c:0c:b8:30:99:ed:fb:b8:1f:96:51:af:90:7c:
fc:d0:25:3f:4f:c8:72:7c:80:1e:cf:ae:17:25:05:
48:f8:21:e3:fe:6c:a6:5f:42:87:4b:2f:9a:4f:7b:
8b:63:28:b5:4d:e8:27:e6:1c:82:62:71:21:0e:b6:
6a:6b:bd:52:d1:cf:4b:3b:c0:a9:15:89:c7:4f:e5:
a0:15:e9:78:3a:0d:11:88:98:35:46:98:0b:d9:4d:
eb:9d:f5:84:b7:11:de:c5:44:e7:a3:a4:a8:02:5e:
73:0d:45:d5:76:48:d6:3b:78:d3:b6:42:ef:e2:38:
15:4a:94:90:81:a9:f4:3e:e6:c8:12:d1:2a:cf:4f:
26:a2:77:9d:b8:c4:48:14:cd:f7:62:e4:82:bf:42:
ad:fa:c6:68:f0:04:2c:db:52:a6:9b:20:53:16:62:
0d:86:be:7e:6e:af:f1:c3:45:71:50:1f:d7:ed:35:
5a:d2:a1:ed:1c:82:b7:90:c5:73:8b:82:e6:50:ff:
a7:55:d8:6a:f5:80:d1:cc:ba:71:f5:6e:2c:aa:b6:
e4:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:43:59:6C:A4:B0:0B:EA:2A:C7:83:ED:11:16:C4:08:21:22:55:4F
X509v3 Authority Key Identifier:
keyid:E6:A4:D5:DF:23:38:98:E0:4F:AE:3D:83:E8:58:22:D9:88:0E:08:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5qTV3yM4mOBPrj2D6Fgi2YgOCAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/63abe6-3551-414f-8792-1f9dfd814ab6/1/5qTV3yM4mOBPrj2D6Fgi2YgOCAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/63abe6-3551-414f-8792-1f9dfd814ab6/1/5qTV3yM4mOBPrj2D6Fgi2YgOCAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:be:0e:42:b2:64:0a:df:bf:99:2a:b1:68:97:d2:32:59:31:
c7:d8:16:19:d1:9d:4a:02:db:7f:f0:04:94:8d:3c:05:bf:2f:
e0:00:ce:a4:e4:11:2f:c3:e9:77:e6:3b:b6:73:24:ef:5a:24:
7f:fd:50:52:34:41:14:11:7e:0e:5c:ce:17:c6:07:f6:7b:74:
87:f5:ed:2c:78:aa:f4:71:56:5d:ae:74:19:3c:38:7c:75:dc:
9e:0b:21:9d:74:3b:08:60:9c:dd:09:e5:56:df:1d:0f:76:14:
cb:dd:a2:b9:29:2f:e7:10:6e:4d:96:98:12:57:da:42:09:8d:
cc:d6:d2:eb:a2:e9:03:62:46:77:0f:c5:65:ea:d3:ad:44:27:
be:47:50:39:d4:ab:a9:0c:5e:65:da:d9:e3:ab:f8:ab:6e:96:
36:fb:da:ad:c0:95:58:8c:26:8c:c4:a0:9d:35:2b:f6:89:f9:
4b:e5:52:84:a1:88:20:c2:bc:0f:91:2a:a1:33:2b:2f:ad:f2:
e9:e6:8f:24:0f:ac:4e:38:73:8e:30:0b:4d:d9:6e:b7:40:30:
ef:ce:41:11:f3:01:c6:a2:df:92:06:03:7f:da:17:2e:8e:5f:
bb:c9:fd:d4:85:48:64:6a:43:d1:d4:c0:d0:c3:97:e1:c8:f5:
e2:79:af:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0lg6WGbYu49KB68qX2RLLRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2YTRkNWRmMjMzODk4ZTA0ZmFlM2Q4M2U4NTgyMmQ5ODgw
ZTA4MDYwHhcNMjYwMzI1MTUwMTE3WhcNMjYwMzI2MTUwMTE3WjAzMTEwLwYDVQQD
Eyg5YjQzNTk2Y2E0YjAwYmVhMmFjNzgzZWQxMTE2YzQwODIxMjI1NTRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnEGASgSSU2dDEspFvOhzhIUmR0AT
j6VeygO/TKh6jHYjbl2ACTMt1R9Cn/efXAy4MJnt+7gfllGvkHz80CU/T8hyfIAe
z64XJQVI+CHj/mymX0KHSy+aT3uLYyi1Tegn5hyCYnEhDrZqa71S0c9LO8CpFYnH
T+WgFel4Og0RiJg1RpgL2U3rnfWEtxHexUTno6SoAl5zDUXVdkjWO3jTtkLv4jgV
SpSQgan0PubIEtEqz08moneduMRIFM33YuSCv0Kt+sZo8AQs21KmmyBTFmINhr5+
bq/xw0VxUB/X7TVa0qHtHIK3kMVzi4LmUP+nVdhq9YDRzLpx9W4sqrbkgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJtDWWyksAvqKseD7REWxAghIlVPMB8GA1UdIwQY
MBaAFOak1d8jOJjgT649g+hYItmIDggGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXFUVjN5TTRtT0JQcmoyRDZGZ2kyWWdPQ0FZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC82M2FiZTYtMzU1MS00MTRmLTg3OTIt
MWY5ZGZkODE0YWI2LzEvNXFUVjN5TTRtT0JQcmoyRDZGZ2kyWWdPQ0FZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC82M2FiZTYtMzU1MS00MTRmLTg3OTItMWY5ZGZkODE0YWI2
LzEvNXFUVjN5TTRtT0JQcmoyRDZGZ2kyWWdPQ0FZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs74OQrJk
Ct+/mSqxaJfSMlkxx9gWGdGdSgLbf/AElI08Bb8v4ADOpOQRL8Ppd+Y7tnMk71ok
f/1QUjRBFBF+DlzOF8YH9nt0h/XtLHiq9HFWXa50GTw4fHXcngshnXQ7CGCc3Qnl
Vt8dD3YUy92iuSkv5xBuTZaYElfaQgmNzNbS66LpA2JGdw/FZerTrUQnvkdQOdSr
qQxeZdrZ46v4q26WNvvarcCVWIwmjMSgnTUr9on5S+VShKGIIMK8D5EqoTMrL63y
6eaPJA+sTjhzjjALTdlut0Aw785BEfMBxqLfkgYDf9oXLo5fu8n91IVIZGpD0dTA
0MOX4cj14nmv9w==
-----END CERTIFICATE-----
Generated at Wed Mar 25 23:15:01 2026 by rpki-client