Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/63abe6-3551-414f-8792-1f9dfd814ab6/1/5qTV3yM4mOBPrj2D6Fgi2YgOCAY.mft
File: 5qTV3yM4mOBPrj2D6Fgi2YgOCAY.mft (raw, json)
Hash identifier: grAomQlvNg+8TWXWlOBtYVa0kdpTlpnLHSpq4sqxgz4=
Subject key identifier: 3F:50:05:E3:67:BA:E2:E2:3D:6D:43:81:41:8E:B3:9E:9F:01:90:22
Authority key identifier: E6:A4:D5:DF:23:38:98:E0:4F:AE:3D:83:E8:58:22:D9:88:0E:08:06
Certificate issuer: /CN=e6a4d5df233898e04fae3d83e85822d9880e0806
Certificate serial: 019E1EA3B30AC13DC07ECB0041E1D8EDA459
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5qTV3yM4mOBPrj2D6Fgi2YgOCAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/63abe6-3551-414f-8792-1f9dfd814ab6/1/5qTV3yM4mOBPrj2D6Fgi2YgOCAY.mft
Manifest number: 0139
Signing time: Wed 13 May 2026 00:01:44 +0000
Manifest this update: Wed 13 May 2026 00:01:44 +0000
Manifest next update: Thu 14 May 2026 00:01:44 +0000
Files and hashes: 1: 4SK6T1joxEKD3qcJIw_toyLw7Cg.asa (hash: S9VsSYa/rKcIFEh+rtQN72zQTr6Bln2NJ0sYtwMEOXo=)
2: 5qTV3yM4mOBPrj2D6Fgi2YgOCAY.crl (hash: dAB9mabfcYOBPXQOAz3obCPypgzvKN8cd8PpvOYkSDM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/63abe6-3551-414f-8792-1f9dfd814ab6/1/5qTV3yM4mOBPrj2D6Fgi2YgOCAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/63abe6-3551-414f-8792-1f9dfd814ab6/1/5qTV3yM4mOBPrj2D6Fgi2YgOCAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/5qTV3yM4mOBPrj2D6Fgi2YgOCAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:b3:0a:c1:3d:c0:7e:cb:00:41:e1:d8:ed:a4:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6a4d5df233898e04fae3d83e85822d9880e0806
Validity
Not Before: May 13 00:01:44 2026 GMT
Not After : May 14 00:01:44 2026 GMT
Subject: CN=3f5005e367bae2e23d6d4381418eb39e9f019022
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:8b:9f:32:97:01:29:54:06:e5:c8:2d:88:bf:
f2:62:ab:47:60:cf:c6:b2:3f:ea:58:ee:ad:95:5f:
9b:98:8f:93:11:fb:be:2b:a3:bf:79:d6:5d:66:97:
2c:78:ed:54:ed:42:8e:44:b1:c9:ac:a5:b9:53:bb:
87:27:b1:c2:3e:9e:a4:90:c7:25:af:1c:eb:ea:a3:
3f:7e:cd:c7:38:18:30:74:05:61:20:d4:c2:c9:7a:
62:36:d2:0d:cd:45:59:4c:d8:01:34:65:02:3a:01:
f1:ca:62:b1:86:b6:f0:b2:7f:6a:a9:12:55:4e:d7:
48:a4:bb:6e:e0:b8:97:e3:e2:19:a6:28:6e:5a:d4:
0e:09:8c:24:bc:7c:d7:60:57:3a:33:f7:e7:6f:10:
12:de:77:83:74:c3:b5:d0:72:84:b6:6f:45:35:2d:
5e:1e:88:68:c3:0f:4f:76:5b:3a:eb:87:0e:16:8e:
00:6f:a0:7c:aa:ee:9f:2b:9f:eb:35:22:91:c4:42:
0b:fb:60:6b:70:b0:f9:86:36:5b:5d:34:7f:9f:b1:
ef:61:38:8b:ad:d5:6b:cc:bf:df:c9:df:0a:4f:28:
55:54:05:59:a5:20:d5:bd:9d:17:36:bf:42:13:65:
b4:eb:c4:87:f3:16:57:f5:c0:59:0f:ce:54:2f:c0:
8c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:50:05:E3:67:BA:E2:E2:3D:6D:43:81:41:8E:B3:9E:9F:01:90:22
X509v3 Authority Key Identifier:
keyid:E6:A4:D5:DF:23:38:98:E0:4F:AE:3D:83:E8:58:22:D9:88:0E:08:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5qTV3yM4mOBPrj2D6Fgi2YgOCAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/63abe6-3551-414f-8792-1f9dfd814ab6/1/5qTV3yM4mOBPrj2D6Fgi2YgOCAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/63abe6-3551-414f-8792-1f9dfd814ab6/1/5qTV3yM4mOBPrj2D6Fgi2YgOCAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:e7:28:6a:8e:f1:4b:ee:12:ca:9f:64:f5:d9:13:d5:06:85:
50:df:60:27:c9:84:90:79:a8:9e:00:43:44:b2:76:4d:dc:ef:
50:c3:28:1b:1e:13:3e:82:ca:2d:5f:1c:06:bc:ba:e8:d8:ae:
c0:18:20:22:f4:f1:11:51:91:5f:f2:7b:df:29:71:9c:f5:cd:
9f:12:c8:56:e9:85:5b:4e:05:55:3f:82:6b:59:6b:4d:3c:9b:
97:41:81:ea:47:8c:68:ef:c1:9e:60:56:07:94:22:ed:17:59:
3d:39:8c:10:e6:07:1d:71:75:a6:87:4f:3a:fe:22:50:8d:d5:
b6:b0:c2:72:91:80:d2:8c:13:aa:fd:41:cc:95:71:a2:f7:46:
d5:02:d1:9c:c2:28:bd:21:b7:07:f7:5d:8f:ac:7d:3d:af:8b:
05:15:4c:45:99:e0:81:16:df:05:82:75:94:58:e2:f6:a4:6e:
b9:96:fa:2a:d2:53:38:98:f5:32:2b:9c:2b:53:92:00:1f:17:
32:db:9f:e0:66:d3:af:5e:e9:18:48:5f:70:39:fc:39:a9:da:
ad:50:a5:83:1d:18:13:8f:0b:45:09:44:44:6b:5b:15:68:16:
3e:47:e0:f0:dc:d6:63:04:4b:c3:28:32:ba:31:2b:80:44:e3:
6a:9a:74:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:32:26 2026 by rpki-client