Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fc803f-9675-4355-80f6-77730159c8d4/1/5qVIUgd6AHg4MDwfYchDh8zN1oQ.mft
File: 5qVIUgd6AHg4MDwfYchDh8zN1oQ.mft (raw, json)
Hash identifier: 0aWZGAGnL/0FT0IUU70aWVSE1NuprRmJbgX5rZvsbgE=
Subject key identifier: E2:55:6C:60:6A:F0:42:C3:C1:A4:A8:21:A8:9F:D5:75:56:06:35:8A
Authority key identifier: E6:A5:48:52:07:7A:00:78:38:30:3C:1F:61:C8:43:87:CC:CD:D6:84
Certificate issuer: /CN=e6a54852077a007838303c1f61c84387cccdd684
Certificate serial: 019D28169EAD0AAC884E2F5DBD46A0C70FD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5qVIUgd6AHg4MDwfYchDh8zN1oQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fc803f-9675-4355-80f6-77730159c8d4/1/5qVIUgd6AHg4MDwfYchDh8zN1oQ.mft
Manifest number: 0613
Signing time: Thu 26 Mar 2026 03:01:04 +0000
Manifest this update: Thu 26 Mar 2026 03:01:04 +0000
Manifest next update: Fri 27 Mar 2026 03:01:04 +0000
Files and hashes: 1: 5qVIUgd6AHg4MDwfYchDh8zN1oQ.crl (hash: amHuhZPs6ZWv5teXSZTEl7lr0PE1HV5zKNBEFk5qJUE=)
2: y4_u6MP25DDbYftrjo0-BN4CqP0.roa (hash: P3A69WpiF0MyDiVo1cBJGQBqn5Zv2zHMeyZO0MmbAb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fc803f-9675-4355-80f6-77730159c8d4/1/5qVIUgd6AHg4MDwfYchDh8zN1oQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fc803f-9675-4355-80f6-77730159c8d4/1/5qVIUgd6AHg4MDwfYchDh8zN1oQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5qVIUgd6AHg4MDwfYchDh8zN1oQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:9e:ad:0a:ac:88:4e:2f:5d:bd:46:a0:c7:0f:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6a54852077a007838303c1f61c84387cccdd684
Validity
Not Before: Mar 26 03:01:04 2026 GMT
Not After : Mar 27 03:01:04 2026 GMT
Subject: CN=e2556c606af042c3c1a4a821a89fd5755606358a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:39:63:35:c5:30:30:8a:d6:5c:4c:78:e3:ed:
7c:53:ea:e1:2f:ad:0b:e8:49:22:d2:e4:e0:6c:d0:
0e:b6:52:79:79:13:64:c1:06:ff:c2:7b:c2:04:2f:
8e:63:57:09:ef:bb:3f:a9:4e:22:aa:74:ba:0b:db:
e6:ca:45:36:43:37:7e:da:b0:36:0e:07:d4:a9:08:
ad:43:3d:b6:d3:78:5b:2c:87:16:ab:65:2c:85:0b:
f9:72:45:79:1a:24:2e:1e:2d:50:30:73:ab:94:4c:
57:87:5f:aa:77:00:e6:47:3a:fb:06:8a:d3:a6:2f:
23:fe:3e:51:63:68:2c:02:d3:f8:a8:c8:5d:76:3d:
c1:89:e1:a4:3f:34:d9:07:86:72:58:2b:2a:ee:f5:
5d:1b:22:4f:70:76:17:31:5b:a4:18:5c:fb:93:6b:
0e:d2:ad:96:fd:f0:10:e6:c5:95:a7:c3:a8:3d:c0:
96:4b:df:7f:95:5c:92:54:53:d8:09:44:c9:3f:ab:
a8:f2:f9:98:80:24:02:47:e8:7c:f5:cb:55:56:9c:
c4:fb:d9:29:7b:b2:26:11:80:31:06:73:65:47:62:
06:15:d1:6b:7a:64:bc:dc:df:1c:2c:61:63:7e:ad:
0f:2b:4b:0c:df:42:51:95:95:1b:df:ad:67:14:00:
9d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:55:6C:60:6A:F0:42:C3:C1:A4:A8:21:A8:9F:D5:75:56:06:35:8A
X509v3 Authority Key Identifier:
keyid:E6:A5:48:52:07:7A:00:78:38:30:3C:1F:61:C8:43:87:CC:CD:D6:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5qVIUgd6AHg4MDwfYchDh8zN1oQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fc803f-9675-4355-80f6-77730159c8d4/1/5qVIUgd6AHg4MDwfYchDh8zN1oQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fc803f-9675-4355-80f6-77730159c8d4/1/5qVIUgd6AHg4MDwfYchDh8zN1oQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:65:fa:ce:24:69:4f:2f:4d:4f:fc:fc:d7:a9:57:08:e0:b8:
62:b3:e5:ae:b1:37:df:27:db:ab:4a:fc:b2:3b:12:17:63:2a:
e4:0a:aa:df:ee:24:e6:2a:71:46:a7:f4:4a:5c:dc:1e:51:ec:
1f:84:fe:ce:48:b5:9a:c8:8e:c8:30:d4:e7:0a:83:18:27:31:
bf:1a:0d:99:a7:92:c4:78:1b:16:12:fa:c1:e3:d5:e5:f5:ce:
5d:a9:aa:3e:02:38:fa:96:9d:b3:15:e5:33:74:db:87:b2:14:
20:b2:36:e2:75:19:1c:ab:5e:46:df:c7:d6:12:c9:12:f5:cf:
b8:c9:3f:85:f7:b4:81:5d:de:ae:d0:77:4b:b1:96:ad:50:3f:
b6:15:02:6c:f2:ee:51:63:09:05:b2:6e:6c:26:a6:ae:96:62:
bd:a2:2b:ed:5b:c6:7c:f0:8d:ad:74:b6:47:04:e1:2d:46:df:
c8:65:98:07:fd:36:da:d6:fd:6c:ed:77:61:5c:4f:e7:66:3a:
6b:c7:b6:16:77:2a:c8:4c:95:45:da:4b:f4:52:95:fd:b6:02:
97:5f:04:60:1c:b4:50:b3:53:1c:c3:2a:99:db:53:37:94:7d:
6a:c7:00:58:86:8a:17:6b:7f:60:70:a2:b6:3d:8a:4f:ae:c7:
cf:ef:db:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:04:29 2026 by rpki-client