Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/05ce9d-6dae-4709-971f-341658243b4e/1/5k3j63dco74tVQPJyc07crvNpJs.mft
File: 5k3j63dco74tVQPJyc07crvNpJs.mft (raw, json)
Hash identifier: R43PDM0elW3EZSAk4ZrvnKepn/bCWWEJ2JIOZAjuIc0=
Subject key identifier: 6B:61:35:79:67:A2:9D:6E:34:DE:5A:5E:4C:C3:66:AE:95:00:C9:57
Authority key identifier: E6:4D:E3:EB:77:5C:A3:BE:2D:55:03:C9:C9:CD:3B:72:BB:CD:A4:9B
Certificate issuer: /CN=e64de3eb775ca3be2d5503c9c9cd3b72bbcda49b
Certificate serial: 01A0D0B6C0A60AB6BA3703644E89C8A5683B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5k3j63dco74tVQPJyc07crvNpJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/05ce9d-6dae-4709-971f-341658243b4e/1/5k3j63dco74tVQPJyc07crvNpJs.mft
Manifest number: 031F
Signing time: Thu 24 Sep 2026 00:00:32 +0000
Manifest this update: Thu 24 Sep 2026 00:00:32 +0000
Manifest next update: Fri 25 Sep 2026 00:00:32 +0000
Files and hashes: 1: 5k3j63dco74tVQPJyc07crvNpJs.crl (hash: bcyp49AnqpaXNAij6qEwMaQ/vPCvHVJO1Ozo1PL532s=)
2: tfwhmbNUeb70v_DXkuhRwPo_elo.roa (hash: VbIkneiXqdXvw+KPGB3c+sh95KU6gx9gOTx0TPGcPy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/05ce9d-6dae-4709-971f-341658243b4e/1/5k3j63dco74tVQPJyc07crvNpJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/05ce9d-6dae-4709-971f-341658243b4e/1/5k3j63dco74tVQPJyc07crvNpJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/5k3j63dco74tVQPJyc07crvNpJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:b6:c0:a6:0a:b6:ba:37:03:64:4e:89:c8:a5:68:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e64de3eb775ca3be2d5503c9c9cd3b72bbcda49b
Validity
Not Before: Sep 24 00:00:32 2026 GMT
Not After : Sep 25 00:00:32 2026 GMT
Subject: CN=6b61357967a29d6e34de5a5e4cc366ae9500c957
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d1:66:35:27:df:14:c7:5c:73:15:aa:6b:e0:
af:0e:33:7e:e1:5f:43:4e:3c:80:45:4c:66:2a:12:
48:24:80:0f:b6:9d:3f:ec:5d:96:87:c6:6e:26:c1:
00:49:9a:1b:cc:93:93:40:00:14:ac:03:a1:b7:f3:
38:72:e5:aa:cc:2d:19:dc:b1:5e:d5:ee:de:a5:41:
7d:26:c9:3b:a0:1a:9f:d8:da:da:18:c2:1a:39:c3:
4d:72:2b:91:d9:34:ff:c0:ea:e3:4d:6d:55:70:c2:
c5:2b:2b:57:bf:5b:b6:9a:5a:a2:54:4c:37:04:75:
60:b2:06:b0:c7:bf:5c:14:3a:22:ab:17:31:93:4d:
d1:82:e0:63:40:60:58:05:9f:77:aa:cb:b8:6b:66:
90:1d:00:b3:7a:80:a6:44:45:05:f9:e8:5a:41:7a:
e3:77:90:59:93:d5:65:b8:86:a8:9b:ae:7d:a8:41:
0a:96:6b:1c:e2:c8:78:c1:41:b4:ad:65:7e:b1:2d:
a6:01:7c:51:4f:77:0e:71:5d:5b:da:ac:0a:d4:ea:
d0:fd:4b:ab:d5:e4:b3:54:53:ec:4b:65:af:97:40:
4a:8d:b7:d9:a8:6b:b4:aa:8e:66:04:84:24:d0:38:
a5:94:56:f5:af:80:dc:20:2d:15:44:35:77:96:08:
38:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:61:35:79:67:A2:9D:6E:34:DE:5A:5E:4C:C3:66:AE:95:00:C9:57
X509v3 Authority Key Identifier:
keyid:E6:4D:E3:EB:77:5C:A3:BE:2D:55:03:C9:C9:CD:3B:72:BB:CD:A4:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5k3j63dco74tVQPJyc07crvNpJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/05ce9d-6dae-4709-971f-341658243b4e/1/5k3j63dco74tVQPJyc07crvNpJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/05ce9d-6dae-4709-971f-341658243b4e/1/5k3j63dco74tVQPJyc07crvNpJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:36:c4:e4:7c:70:07:e0:1a:92:77:05:4a:80:c6:ae:4d:69:
43:6e:b0:72:c8:1b:9f:87:d9:2b:b2:b2:a3:50:85:86:74:c4:
20:ee:01:53:85:78:5b:4a:97:2d:9b:4e:18:dc:68:d0:61:ca:
98:50:e2:d7:10:7c:8a:a5:4a:00:f7:16:b1:79:e9:32:5e:a0:
c4:29:c2:80:af:b6:5b:a4:37:a8:ff:ae:3f:e9:2b:b1:d7:a4:
03:c5:69:c2:0a:80:d0:9d:22:bd:c1:cb:94:e3:5b:e1:7b:e2:
b4:cd:4c:84:dc:3f:6d:38:22:81:7a:ef:a3:15:b4:e9:8f:80:
35:c7:7d:0e:03:d0:6d:75:5c:18:bf:18:5e:31:b3:de:2f:70:
c2:df:52:0a:54:db:f6:8e:dd:b1:2b:3e:8d:b6:84:6a:ef:6c:
1b:a2:94:b1:9d:9b:a4:a2:d5:41:1e:72:d5:1a:12:62:58:de:
25:a7:90:d1:7c:ef:10:75:88:66:58:df:6d:3b:19:c7:65:4f:
e1:13:2f:f1:52:a7:37:e1:eb:2d:0f:ab:37:b7:52:51:6c:9b:
23:f5:9f:3f:e6:ba:0e:cd:82:17:20:f8:98:41:16:5d:fc:e5:
73:4b:39:31:73:77:07:20:03:35:27:b4:c3:7a:28:ca:41:86:
0b:0e:68:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 05:13:36 2026 by rpki-client