Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/63abe6-3551-414f-8792-1f9dfd814ab6/1/5qTV3yM4mOBPrj2D6Fgi2YgOCAY.mft
File: 5qTV3yM4mOBPrj2D6Fgi2YgOCAY.mft (raw, json)
Hash identifier: crWg0iqV1CZz9oHJhQXc+TAD3WzsKQn+r2nkIXjOpaQ=
Subject key identifier: FD:68:F9:40:CC:CC:6E:43:D6:A7:EC:F1:C1:E3:5B:51:77:9F:FF:9E
Authority key identifier: E6:A4:D5:DF:23:38:98:E0:4F:AE:3D:83:E8:58:22:D9:88:0E:08:06
Certificate issuer: /CN=e6a4d5df233898e04fae3d83e85822d9880e0806
Certificate serial: 019F8F7E6A9C23E98A1AD48176A1FE5E501A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5qTV3yM4mOBPrj2D6Fgi2YgOCAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/63abe6-3551-414f-8792-1f9dfd814ab6/1/5qTV3yM4mOBPrj2D6Fgi2YgOCAY.mft
Manifest number: 01F8
Signing time: Thu 23 Jul 2026 15:00:54 +0000
Manifest this update: Thu 23 Jul 2026 15:00:54 +0000
Manifest next update: Fri 24 Jul 2026 15:00:54 +0000
Files and hashes: 1: 4SK6T1joxEKD3qcJIw_toyLw7Cg.asa (hash: S9VsSYa/rKcIFEh+rtQN72zQTr6Bln2NJ0sYtwMEOXo=)
2: 5qTV3yM4mOBPrj2D6Fgi2YgOCAY.crl (hash: UAYeallI1isv6Pz8FT7ZqnpKKt09SG9eU/yWlVgFbOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/63abe6-3551-414f-8792-1f9dfd814ab6/1/5qTV3yM4mOBPrj2D6Fgi2YgOCAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/63abe6-3551-414f-8792-1f9dfd814ab6/1/5qTV3yM4mOBPrj2D6Fgi2YgOCAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/5qTV3yM4mOBPrj2D6Fgi2YgOCAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:6a:9c:23:e9:8a:1a:d4:81:76:a1:fe:5e:50:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6a4d5df233898e04fae3d83e85822d9880e0806
Validity
Not Before: Jul 23 15:00:54 2026 GMT
Not After : Jul 24 15:00:54 2026 GMT
Subject: CN=fd68f940cccc6e43d6a7ecf1c1e35b51779fff9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:69:bb:65:69:39:7c:a7:3b:ee:4a:57:20:a6:
18:3c:ae:10:2a:6a:85:d0:5f:9a:6e:02:9e:d7:83:
5d:81:f4:65:37:f5:b1:5e:67:02:1c:e4:ac:e3:64:
7c:55:d2:38:26:7f:f8:a1:6c:98:ef:d7:f0:56:d2:
ac:6c:6b:e4:5b:4f:a2:08:df:e0:28:0d:61:48:48:
88:5f:14:1b:57:83:e5:ce:d9:44:0f:6b:f4:b7:b8:
f4:2c:ab:21:5d:09:b1:b9:f7:07:91:f3:d2:e3:41:
a4:fb:8f:39:03:7c:73:c8:cd:a5:14:29:2a:5b:ad:
dc:51:ed:75:cd:31:a4:51:ab:52:90:91:e6:c0:c2:
c3:8d:45:f4:74:c0:e2:b4:31:61:df:33:f1:89:6c:
e3:34:09:f6:0c:bf:8e:24:79:e6:b9:38:30:50:91:
60:41:1b:3e:5b:72:ec:50:9f:05:16:db:11:ab:c9:
d5:58:78:da:0b:f3:7f:9e:ae:28:02:b0:13:3d:43:
e2:f7:07:26:66:ff:50:f1:76:dc:b6:f6:d8:ee:89:
fd:0f:9d:3c:86:3d:f8:2c:e3:36:9c:85:a2:6c:88:
02:50:e7:a6:ec:16:83:41:05:97:55:45:49:90:2e:
0a:fc:32:7a:34:69:74:9c:6b:39:06:cb:5b:6b:6f:
07:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:68:F9:40:CC:CC:6E:43:D6:A7:EC:F1:C1:E3:5B:51:77:9F:FF:9E
X509v3 Authority Key Identifier:
keyid:E6:A4:D5:DF:23:38:98:E0:4F:AE:3D:83:E8:58:22:D9:88:0E:08:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5qTV3yM4mOBPrj2D6Fgi2YgOCAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/63abe6-3551-414f-8792-1f9dfd814ab6/1/5qTV3yM4mOBPrj2D6Fgi2YgOCAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/63abe6-3551-414f-8792-1f9dfd814ab6/1/5qTV3yM4mOBPrj2D6Fgi2YgOCAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:6f:f8:6a:a5:8d:5e:8c:9b:78:c0:68:51:fc:8f:17:cf:19:
71:f6:fc:be:fd:9f:cf:04:06:a6:5d:62:30:42:1e:85:ff:34:
83:31:e5:47:23:5a:0b:64:c0:a4:43:b5:62:50:20:ae:69:c5:
41:f9:e1:e5:79:b7:8e:25:93:03:76:27:27:25:fc:84:d7:60:
d1:36:b6:f7:fb:b2:a7:47:c3:12:a5:cf:ce:0b:30:4d:1c:7d:
44:b8:cf:c8:40:a4:28:eb:9c:a8:57:e8:40:bd:bc:ff:bf:b2:
03:da:db:65:04:66:05:c9:80:07:61:65:99:50:23:95:e0:6e:
d2:7f:c6:be:12:a3:86:dc:b3:ba:89:59:f8:2f:ba:46:ea:0f:
40:3a:f1:8c:16:a6:6d:45:52:9f:4b:9f:9e:71:fe:6d:f6:ab:
bd:9f:da:09:b8:d1:36:e7:df:ad:1b:2f:26:94:b8:bc:70:b7:
f4:31:ec:d4:1b:4d:67:86:95:11:5c:e6:32:aa:44:73:12:13:
82:16:25:dc:69:94:2b:92:80:8b:77:df:fc:76:f9:49:2f:e9:
10:e1:9b:00:d0:b8:90:90:5d:1c:8a:ad:99:4e:a1:df:5f:76:
7a:da:7d:bd:c6:6a:36:22:9c:a6:90:2b:1c:3b:29:1f:c3:9d:
56:17:49:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:08:12 2026 by rpki-client