Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/05ce9d-6dae-4709-971f-341658243b4e/1/5k3j63dco74tVQPJyc07crvNpJs.mft
File: 5k3j63dco74tVQPJyc07crvNpJs.mft (raw, json)
Hash identifier: IquSDw/kMvd00Hh4DH3BOcNLIWRsGpfwvsfOaXuFV8w=
Subject key identifier: 90:C4:54:B6:8D:F5:43:4C:63:4E:23:27:03:D3:E4:EC:2D:50:5C:97
Authority key identifier: E6:4D:E3:EB:77:5C:A3:BE:2D:55:03:C9:C9:CD:3B:72:BB:CD:A4:9B
Certificate issuer: /CN=e64de3eb775ca3be2d5503c9c9cd3b72bbcda49b
Certificate serial: 019D26286AF2F8078B86C4FA64160A74A818
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5k3j63dco74tVQPJyc07crvNpJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/05ce9d-6dae-4709-971f-341658243b4e/1/5k3j63dco74tVQPJyc07crvNpJs.mft
Manifest number: 0139
Signing time: Wed 25 Mar 2026 18:01:16 +0000
Manifest this update: Wed 25 Mar 2026 18:01:16 +0000
Manifest next update: Thu 26 Mar 2026 18:01:16 +0000
Files and hashes: 1: 5k3j63dco74tVQPJyc07crvNpJs.crl (hash: qLi0/vPoE0ZUd6wZLzlH0PU9IFIkjP8XKcUFumKspcU=)
2: tfwhmbNUeb70v_DXkuhRwPo_elo.roa (hash: VbIkneiXqdXvw+KPGB3c+sh95KU6gx9gOTx0TPGcPy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/05ce9d-6dae-4709-971f-341658243b4e/1/5k3j63dco74tVQPJyc07crvNpJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/05ce9d-6dae-4709-971f-341658243b4e/1/5k3j63dco74tVQPJyc07crvNpJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/5k3j63dco74tVQPJyc07crvNpJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:6a:f2:f8:07:8b:86:c4:fa:64:16:0a:74:a8:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e64de3eb775ca3be2d5503c9c9cd3b72bbcda49b
Validity
Not Before: Mar 25 18:01:16 2026 GMT
Not After : Mar 26 18:01:16 2026 GMT
Subject: CN=90c454b68df5434c634e232703d3e4ec2d505c97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:bc:5e:17:da:80:fe:28:f0:f9:93:e2:1d:0e:
93:55:e2:0c:eb:14:1d:79:9f:54:fe:4a:11:ae:63:
cb:e6:db:fa:d5:d0:88:f9:d9:90:5e:5d:e8:e9:fd:
de:f7:90:53:b4:99:c6:bd:5c:6d:66:1a:ce:1a:e7:
27:cb:ea:12:b4:59:65:ea:e4:7c:9f:c0:6b:6a:1e:
ea:5c:4e:07:9e:7b:47:22:b6:cb:41:35:ef:15:ab:
cf:56:f4:ca:2b:07:72:cb:9e:0a:8c:14:b3:2d:95:
b1:86:ee:db:11:57:b0:9f:64:bf:44:49:a5:54:cf:
3e:6a:84:15:76:e8:cb:6f:40:08:75:40:ac:05:bf:
73:d5:7a:c8:66:5a:dc:4b:44:31:47:7c:86:9a:1c:
51:2d:2d:22:76:e0:a7:20:d2:49:08:71:97:36:19:
54:1e:55:a1:96:84:4b:5a:e0:a1:e1:ca:83:1c:fe:
4c:4e:2d:69:8a:47:a6:d7:e5:8f:14:a3:b7:b3:5a:
85:61:38:03:b1:42:6f:36:b3:89:33:67:a0:10:2c:
6c:34:f4:f2:f8:0e:6b:04:e5:58:59:c1:df:e2:fe:
84:f7:5d:24:90:99:b5:e1:e8:30:93:f5:61:60:76:
f6:b8:30:86:4a:57:f8:aa:26:87:a3:39:68:c1:db:
55:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:C4:54:B6:8D:F5:43:4C:63:4E:23:27:03:D3:E4:EC:2D:50:5C:97
X509v3 Authority Key Identifier:
keyid:E6:4D:E3:EB:77:5C:A3:BE:2D:55:03:C9:C9:CD:3B:72:BB:CD:A4:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5k3j63dco74tVQPJyc07crvNpJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/05ce9d-6dae-4709-971f-341658243b4e/1/5k3j63dco74tVQPJyc07crvNpJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/05ce9d-6dae-4709-971f-341658243b4e/1/5k3j63dco74tVQPJyc07crvNpJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:1a:fb:9b:6e:7c:a0:2d:15:fc:dc:c1:c1:de:7f:e8:e9:49:
be:61:93:5d:64:5e:94:2d:a9:5d:4e:3b:c2:d1:01:53:8b:1d:
ed:f1:ec:d6:df:ae:38:a9:f2:25:1f:83:aa:cb:4a:e7:70:6b:
45:f6:35:67:87:58:87:c5:17:a2:00:13:f4:c6:f2:54:3f:c2:
84:f0:c7:9a:b0:3c:e9:83:ad:68:a5:54:37:a9:dc:ed:d4:31:
55:3b:0f:ec:73:c5:5b:49:49:62:40:71:5f:4c:61:c3:aa:58:
a1:56:02:47:39:9e:ff:7f:02:9d:6e:de:83:e0:ec:47:18:50:
1f:72:73:f6:78:b6:68:a5:a6:c1:39:a3:7e:2e:1f:e3:42:f2:
fd:19:4d:6e:8a:39:57:e1:56:5c:27:ab:23:5d:f5:34:a0:b0:
d5:14:60:ee:e0:50:2b:d1:6d:0e:54:52:0f:d8:d8:f4:09:90:
3e:c5:ce:45:91:e0:3f:03:2a:a0:e3:3f:3d:67:6a:73:ff:09:
23:40:da:60:08:7a:e6:e1:aa:15:ba:35:4b:b7:18:ab:c4:02:
25:58:41:b1:6a:70:09:2f:c1:d7:55:df:06:17:f0:45:3f:86:
da:35:39:55:fa:b3:95:5f:3f:5b:98:51:1c:8f:0f:45:fe:b3:
bf:c9:88:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:23:25 2026 by rpki-client