Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/5D3UJDhHWbXoVZWCUBm2n-m_kiA.mft
File: 5D3UJDhHWbXoVZWCUBm2n-m_kiA.mft (raw, json)
Hash identifier: cmGDc5jAi4quydb8CwroU2dRs6uBpmxp00/wo3SF/EE=
Subject key identifier: BD:64:61:F9:DA:21:A0:27:C7:45:06:F7:BA:81:C8:69:67:38:63:33
Authority key identifier: E4:3D:D4:24:38:47:59:B5:E8:55:95:82:50:19:B6:9F:E9:BF:92:20
Certificate issuer: /CN=e43dd424384759b5e85595825019b69fe9bf9220
Certificate serial: 019D3308958DFF5133D6CBE113F54ECD56FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5D3UJDhHWbXoVZWCUBm2n-m_kiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/5D3UJDhHWbXoVZWCUBm2n-m_kiA.mft
Manifest number: 188C
Signing time: Sat 28 Mar 2026 06:01:33 +0000
Manifest this update: Sat 28 Mar 2026 06:01:33 +0000
Manifest next update: Sun 29 Mar 2026 06:01:33 +0000
Files and hashes: 1: 5D3UJDhHWbXoVZWCUBm2n-m_kiA.crl (hash: 3eNabz151sIiJMXf2C36RqVoxd74wlAFPCUfXII/4wA=)
2: KH_y6DMeLM_eRTQR237TlQM4cq0.roa (hash: S47bUB+M6fnMYGaRb90XLdJ8p/ULY/nAXkVIfAd1Rog=)
3: Y_-6cR-Ot-YkSDcVXJ6Sf9LgN2I.roa (hash: 6nifGRrcDpgAxnDj7xvX5R59QywyMQ7qljbxshYjizQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/5D3UJDhHWbXoVZWCUBm2n-m_kiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/5D3UJDhHWbXoVZWCUBm2n-m_kiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5D3UJDhHWbXoVZWCUBm2n-m_kiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:08:95:8d:ff:51:33:d6:cb:e1:13:f5:4e:cd:56:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e43dd424384759b5e85595825019b69fe9bf9220
Validity
Not Before: Mar 28 06:01:33 2026 GMT
Not After : Mar 29 06:01:33 2026 GMT
Subject: CN=bd6461f9da21a027c74506f7ba81c86967386333
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:4d:5c:c2:1d:e1:7c:c2:a4:f8:a1:6d:90:92:
22:be:1e:d7:e3:03:f9:90:23:27:c1:b1:36:95:47:
58:9f:02:d4:d5:20:ff:f0:c0:78:8a:85:2c:b4:0d:
0d:6c:84:f6:a7:6c:c6:25:d4:b7:21:70:99:4c:29:
cf:2d:a5:a0:7d:d7:1c:e4:0e:b8:d7:e6:09:53:39:
19:f8:ae:ad:89:0f:03:7b:5e:dc:84:5b:b3:e3:92:
b6:18:ee:bd:21:4b:15:52:ac:1b:a0:38:4c:18:fc:
19:7f:c9:d7:65:9f:d5:20:07:42:13:24:e3:b7:f5:
92:35:f4:02:99:f1:a5:db:f2:82:20:86:a6:67:8d:
ba:57:b1:37:d9:38:4e:e1:2b:a7:c4:3f:8d:40:f9:
19:16:39:96:8a:4a:df:61:eb:e8:63:dc:ef:98:d8:
ce:9e:d6:9e:6d:a0:d3:e5:73:c6:4e:f0:0d:ba:cc:
d1:2e:98:36:dd:68:86:72:cf:24:e5:67:1a:1a:a7:
e9:29:d7:e4:3f:cf:1b:ae:31:ba:08:ba:e6:ab:04:
02:b0:62:50:77:c0:bf:53:52:5b:c3:93:8f:53:31:
83:1b:29:c4:26:a7:37:b0:1c:cb:d5:37:fc:e3:e5:
38:6f:06:c6:b6:a5:ee:a4:6f:ca:c8:a5:cd:d9:d9:
f8:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:64:61:F9:DA:21:A0:27:C7:45:06:F7:BA:81:C8:69:67:38:63:33
X509v3 Authority Key Identifier:
keyid:E4:3D:D4:24:38:47:59:B5:E8:55:95:82:50:19:B6:9F:E9:BF:92:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5D3UJDhHWbXoVZWCUBm2n-m_kiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/5D3UJDhHWbXoVZWCUBm2n-m_kiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/5D3UJDhHWbXoVZWCUBm2n-m_kiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:c1:12:0e:55:c6:b0:b7:8a:29:e3:4d:a4:e0:21:84:c4:dc:
7e:c4:ae:39:8c:fa:67:c4:0f:d3:e5:ca:35:60:8f:0f:24:44:
93:26:f3:b8:70:4c:35:60:73:76:4c:a4:db:af:88:7d:93:92:
16:e7:af:1d:19:5a:af:a4:73:4d:e7:18:0e:23:00:31:01:77:
9b:14:42:50:3e:1a:7e:b9:96:b6:36:80:4d:fd:8e:e5:f2:71:
89:bc:0b:81:b0:1f:e3:31:cc:ff:3e:a4:f6:4c:96:c1:52:e7:
02:e0:e1:eb:bf:69:91:af:2c:fc:d9:3a:77:03:c2:0b:37:18:
34:62:7b:8d:03:d7:93:29:fb:11:1f:98:a5:c4:62:67:e7:4f:
64:93:4e:5f:a4:bf:77:77:4b:53:58:6c:95:6d:cb:08:d9:a5:
97:7e:04:9f:a5:ca:82:c3:28:50:0a:7f:0f:00:e0:98:3d:8c:
44:61:40:aa:5b:0e:7c:24:8b:09:a8:4c:6b:9d:54:fe:53:45:
76:63:77:ed:20:a7:8a:68:da:da:17:46:7a:ec:e1:2f:2b:a8:
25:f0:1c:73:79:a9:a0:e2:ea:f6:3a:fb:d3:3a:69:62:2d:13:
42:9f:47:1b:1f:2d:d4:ae:54:bf:2f:8d:02:e4:f1:49:ad:37:
1e:25:85:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:45:24 2026 by rpki-client