Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/516946-d5b6-4f0e-965c-5378de430377/1/5qr3mKBsFXlcb-xweYOYvrD01m4.mft
File: 5qr3mKBsFXlcb-xweYOYvrD01m4.mft (raw, json)
Hash identifier: VpszhPcPGL2icQ4CMlOqFezL4+jdMZTDVEyAiL8yRPs=
Subject key identifier: 81:60:97:3D:F2:43:33:DE:05:E2:E9:E7:96:CC:E7:FB:00:AF:B1:6C
Authority key identifier: E6:AA:F7:98:A0:6C:15:79:5C:6F:EC:70:79:83:98:BE:B0:F4:D6:6E
Certificate issuer: /CN=e6aaf798a06c15795c6fec70798398beb0f4d66e
Certificate serial: 019D2583E369EDDE0022019A0F3B9B6B213B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5qr3mKBsFXlcb-xweYOYvrD01m4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/516946-d5b6-4f0e-965c-5378de430377/1/5qr3mKBsFXlcb-xweYOYvrD01m4.mft
Manifest number: 066E
Signing time: Wed 25 Mar 2026 15:01:33 +0000
Manifest this update: Wed 25 Mar 2026 15:01:33 +0000
Manifest next update: Thu 26 Mar 2026 15:01:33 +0000
Files and hashes: 1: 1-kDUYI7kuVmqQlf1mvxZtUR-Mpg.asa (hash: sXvSLo124AUM8vV6Hyy9bXbz/uQqmbFGdfAl+2Zq9Js=)
2: 5qr3mKBsFXlcb-xweYOYvrD01m4.crl (hash: hJLaPuhBABW8WwxAhK2VoNfShyyYf9wfI5X/eWU1h40=)
3: febei7ElndSA55KLJAxPmYsaSA8.roa (hash: 3rk22KTNdwadb2vDfYhZFH+AJY/gYjCaDrWeCZ+y2x8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/516946-d5b6-4f0e-965c-5378de430377/1/5qr3mKBsFXlcb-xweYOYvrD01m4.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/516946-d5b6-4f0e-965c-5378de430377/1/5qr3mKBsFXlcb-xweYOYvrD01m4.mft
rsync://rpki.ripe.net/repository/DEFAULT/5qr3mKBsFXlcb-xweYOYvrD01m4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:e3:69:ed:de:00:22:01:9a:0f:3b:9b:6b:21:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6aaf798a06c15795c6fec70798398beb0f4d66e
Validity
Not Before: Mar 25 15:01:33 2026 GMT
Not After : Mar 26 15:01:33 2026 GMT
Subject: CN=8160973df24333de05e2e9e796cce7fb00afb16c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:bd:29:75:9a:68:32:88:10:47:ef:5e:b9:dd:
51:69:d6:29:73:ce:8a:96:03:b9:b3:2e:ea:69:0f:
68:76:a0:c3:d9:e4:fc:8a:74:3a:26:47:06:16:51:
c2:3d:b8:5e:2c:68:32:20:e0:00:8a:f6:fe:57:91:
83:d8:92:3e:74:0d:fc:e0:e1:03:40:cf:7e:6a:0d:
c5:8b:0c:f2:27:f9:76:8f:42:00:8b:c7:bf:78:a0:
99:ad:1d:ee:f8:38:9c:7d:14:40:db:6a:5a:e6:2d:
a4:e0:e3:74:51:76:f3:9f:1c:40:6f:db:20:68:c3:
49:e8:55:e5:66:c9:03:1c:ef:06:de:81:1a:dd:47:
45:7c:56:e3:42:55:86:ad:36:4f:f2:5b:4b:cd:e6:
60:a2:a5:a8:44:29:20:26:ec:26:71:a0:2e:c2:bf:
3e:92:f8:88:19:7c:23:f8:6a:0b:56:28:2b:5d:bd:
fd:43:94:79:b5:86:35:c5:93:9c:3f:39:b4:22:35:
c7:16:56:79:6e:92:19:04:15:fb:e6:a6:6d:85:91:
9c:11:46:e2:6c:48:3f:16:76:d4:bf:c4:46:bf:34:
d7:bc:aa:fc:ee:df:d8:d8:bc:7e:07:3a:f2:fe:91:
a7:77:be:d3:c2:dc:55:2e:f6:2f:0b:17:0a:98:9a:
2c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:60:97:3D:F2:43:33:DE:05:E2:E9:E7:96:CC:E7:FB:00:AF:B1:6C
X509v3 Authority Key Identifier:
keyid:E6:AA:F7:98:A0:6C:15:79:5C:6F:EC:70:79:83:98:BE:B0:F4:D6:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5qr3mKBsFXlcb-xweYOYvrD01m4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/516946-d5b6-4f0e-965c-5378de430377/1/5qr3mKBsFXlcb-xweYOYvrD01m4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/516946-d5b6-4f0e-965c-5378de430377/1/5qr3mKBsFXlcb-xweYOYvrD01m4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:5b:10:f7:73:5d:eb:1f:93:78:a5:e8:9f:08:3e:cd:ef:db:
29:5c:bd:40:11:96:e6:64:fe:14:41:57:f7:b1:a8:3b:c9:a8:
c4:61:52:eb:d7:78:56:e0:90:b3:92:bb:ea:39:1d:43:49:55:
d9:94:a4:c2:7d:be:27:7c:a5:3e:44:42:b2:9d:f4:dc:ab:33:
52:06:38:76:74:1b:23:98:b4:75:f4:42:f7:b0:22:77:da:30:
97:73:25:3f:73:b7:99:1d:15:79:36:64:4a:06:3e:c5:fb:84:
4d:a6:c4:04:73:53:f0:69:78:1e:45:f7:8c:43:e6:9f:d6:95:
04:9c:4b:b6:d1:a0:7d:3b:bc:89:54:db:cb:02:81:cd:c9:3c:
33:24:c2:75:fb:9d:7d:e5:14:21:00:f4:d4:29:7b:ae:37:29:
b6:c2:66:eb:03:56:e8:92:ec:7b:89:f4:21:57:91:1b:9c:43:
07:38:4a:8b:01:16:61:fc:9c:43:d9:26:52:71:10:fb:a2:16:
69:f3:5e:a6:76:ac:e2:d8:4a:16:83:e6:8a:74:cc:c9:be:8f:
89:38:4d:e3:cb:42:9b:e7:64:b9:4c:95:f8:8f:51:2f:1e:57:
99:08:40:2c:d8:f6:65:f2:2a:c2:02:a5:cf:b4:f6:81:32:81:
8e:2e:61:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:46:51 2026 by rpki-client