Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/9b674c-3657-4c25-9953-3f7040997682/1/5iNO09jKltxRjTXB58kr6_z2zk0.mft
File: 5iNO09jKltxRjTXB58kr6_z2zk0.mft (raw, json)
Hash identifier: XJUo5eebMa3M5QNO1M5lGT2l98psLs5/GiMlrdlk2Wg=
Subject key identifier: 63:EC:8C:DF:8E:03:34:40:F0:65:89:64:8A:D0:E1:71:6D:8A:A6:96
Authority key identifier: E6:23:4E:D3:D8:CA:96:DC:51:8D:35:C1:E7:C9:2B:EB:FC:F6:CE:4D
Certificate issuer: /CN=e6234ed3d8ca96dc518d35c1e7c92bebfcf6ce4d
Certificate serial: 019D29972F34A1252C27E9FE3130796025A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5iNO09jKltxRjTXB58kr6_z2zk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/9b674c-3657-4c25-9953-3f7040997682/1/5iNO09jKltxRjTXB58kr6_z2zk0.mft
Manifest number: 1817
Signing time: Thu 26 Mar 2026 10:01:06 +0000
Manifest this update: Thu 26 Mar 2026 10:01:06 +0000
Manifest next update: Fri 27 Mar 2026 10:01:06 +0000
Files and hashes: 1: 1-Q3xDZfzQc6tV29ExEVxZMLhErU.roa (hash: RiGnAtuoBY0MDLXEEdvsOwo9zTH9zl0+GNo+JIs/bog=)
2: 5iNO09jKltxRjTXB58kr6_z2zk0.crl (hash: 5L4Z+fZIHuV2uLld+Wdfld4snWh0Yk85/+8TYD/kAvI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/9b674c-3657-4c25-9953-3f7040997682/1/5iNO09jKltxRjTXB58kr6_z2zk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/9b674c-3657-4c25-9953-3f7040997682/1/5iNO09jKltxRjTXB58kr6_z2zk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/5iNO09jKltxRjTXB58kr6_z2zk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 10:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:2f:34:a1:25:2c:27:e9:fe:31:30:79:60:25:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6234ed3d8ca96dc518d35c1e7c92bebfcf6ce4d
Validity
Not Before: Mar 26 10:01:06 2026 GMT
Not After : Mar 27 10:01:06 2026 GMT
Subject: CN=63ec8cdf8e033440f06589648ad0e1716d8aa696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e6:e6:48:3e:e1:f4:98:34:a0:08:92:44:8d:
f5:8d:89:4b:b1:49:42:2e:57:cc:e8:18:97:85:56:
54:e1:79:a9:38:15:90:df:fc:5d:c5:64:7a:ba:cf:
77:f6:8c:15:74:4f:44:d2:05:d4:02:63:7a:55:a3:
95:f4:aa:99:f6:7a:3a:6c:0d:60:5d:f0:96:43:45:
0a:f1:5d:71:12:6e:6d:fd:97:10:e5:57:99:a0:9c:
5a:ce:94:e2:b1:0a:22:74:be:f8:8b:92:a4:9e:a5:
61:a1:41:af:b4:f9:8a:ea:2d:3d:c7:86:81:76:55:
87:12:40:24:4b:46:94:25:64:be:57:e6:eb:b1:5a:
71:e4:26:91:f3:9d:d1:e7:3a:81:b8:32:74:99:8d:
95:87:f4:25:29:63:67:30:52:d7:19:4b:55:4c:15:
05:42:ed:80:e2:81:1b:20:d5:70:05:a1:02:d0:33:
67:e2:6b:3f:6b:d4:6f:5f:6b:0e:83:18:fe:ed:4a:
4e:da:6c:e8:bf:a3:00:3c:4f:f0:45:c5:7c:6c:71:
be:79:53:66:2c:5e:c6:e6:b0:b2:5a:9f:92:15:a2:
27:1c:14:62:f2:fd:a1:56:6f:b7:1a:c5:30:01:c5:
ad:4c:a2:25:58:d8:79:f8:ec:c6:d7:29:e0:ea:15:
d1:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:EC:8C:DF:8E:03:34:40:F0:65:89:64:8A:D0:E1:71:6D:8A:A6:96
X509v3 Authority Key Identifier:
keyid:E6:23:4E:D3:D8:CA:96:DC:51:8D:35:C1:E7:C9:2B:EB:FC:F6:CE:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5iNO09jKltxRjTXB58kr6_z2zk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/9b674c-3657-4c25-9953-3f7040997682/1/5iNO09jKltxRjTXB58kr6_z2zk0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/9b674c-3657-4c25-9953-3f7040997682/1/5iNO09jKltxRjTXB58kr6_z2zk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:fe:7a:6f:bf:4b:f0:97:d1:99:a1:07:0d:7b:f6:06:c3:17:
bc:54:e1:42:c1:a5:87:3c:48:2e:40:5a:97:dd:83:b0:4a:51:
3e:d0:c0:9b:7c:25:a2:e6:a7:d3:93:0b:ed:fa:a0:9c:af:a6:
a2:3a:44:2b:75:39:aa:ac:15:2d:7b:47:60:a3:d4:76:df:f6:
88:d9:0d:83:e7:c7:a9:02:36:a5:9d:08:c6:d1:c8:17:cf:6a:
8b:c2:4f:e3:c9:05:6e:c7:77:c7:ba:d9:79:77:9c:93:9d:ca:
b0:76:72:65:32:96:82:61:59:a2:29:0c:d1:2e:8d:aa:fc:e8:
31:75:a5:60:d9:2e:e0:27:06:35:4c:d8:db:9a:51:36:99:dd:
f6:92:be:a4:41:74:0d:a2:f4:28:0a:7f:cc:51:9d:18:da:d6:
d8:a2:bb:ae:ba:7d:b4:2f:88:5f:d1:dd:50:42:ea:70:81:d6:
75:df:bc:67:7b:be:cc:27:08:3b:48:b6:70:3d:d4:c9:99:72:
ca:18:31:a9:b1:65:e3:68:38:2a:5e:86:86:a6:23:33:d5:60:
92:ae:d2:e9:b8:9f:1c:ff:10:b4:5a:c1:fa:ca:3d:bc:25:16:
93:dc:6a:d8:96:9d:38:9f:b7:6b:d5:f7:04:7e:21:dd:8f:a3:
1e:89:44:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:38:49 2026 by rpki-client