Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/097748-5cc8-450f-9fbb-8c8d10e8eabc/1/5vqg0vXewCAfVeQJecGQm223fDs.mft
File: 5vqg0vXewCAfVeQJecGQm223fDs.mft (raw, json)
Hash identifier: tpA+qwcwAYxvG1aLT+hq7aVy+zDkqzrgWYpXH1Qn+WM=
Subject key identifier: 63:1D:6F:E1:C2:21:E1:FA:A2:11:FA:B2:83:89:54:8A:CF:03:BA:84
Authority key identifier: E6:FA:A0:D2:F5:DE:C0:20:1F:55:E4:09:79:C1:90:9B:6D:B7:7C:3B
Certificate issuer: /CN=e6faa0d2f5dec0201f55e40979c1909b6db77c3b
Certificate serial: 019D284DDF03D9D799890DFF53FCAE791461
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5vqg0vXewCAfVeQJecGQm223fDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/097748-5cc8-450f-9fbb-8c8d10e8eabc/1/5vqg0vXewCAfVeQJecGQm223fDs.mft
Manifest number: 1890
Signing time: Thu 26 Mar 2026 04:01:25 +0000
Manifest this update: Thu 26 Mar 2026 04:01:25 +0000
Manifest next update: Fri 27 Mar 2026 04:01:25 +0000
Files and hashes: 1: 5vqg0vXewCAfVeQJecGQm223fDs.crl (hash: sclZjeDZRCPbxTveaQunb4ft5epr0ZlYVbfrmJwyQhg=)
2: IK4nJYFQUmKZNbdR--FPWuUhVxU.roa (hash: 6+SF1nvClEObRj38PWV6BTQEdzViGHThkpCqyru0FWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/097748-5cc8-450f-9fbb-8c8d10e8eabc/1/5vqg0vXewCAfVeQJecGQm223fDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/097748-5cc8-450f-9fbb-8c8d10e8eabc/1/5vqg0vXewCAfVeQJecGQm223fDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/5vqg0vXewCAfVeQJecGQm223fDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:df:03:d9:d7:99:89:0d:ff:53:fc:ae:79:14:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6faa0d2f5dec0201f55e40979c1909b6db77c3b
Validity
Not Before: Mar 26 04:01:25 2026 GMT
Not After : Mar 27 04:01:25 2026 GMT
Subject: CN=631d6fe1c221e1faa211fab28389548acf03ba84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a2:9a:3b:6b:ff:b4:01:28:d1:9e:4f:bb:05:
52:a5:57:6c:d0:b5:dd:ae:e7:f6:bd:e8:01:3c:d8:
9e:f9:b1:42:41:ce:69:ce:18:33:8d:17:25:81:82:
fc:36:e8:41:b1:62:07:0d:d0:05:ad:94:82:70:7f:
26:e0:16:5a:37:2e:9a:27:2e:b6:a2:31:bf:92:20:
27:43:ad:7e:22:65:4c:98:1c:10:3c:8b:d5:74:c3:
34:ec:ff:63:8d:d8:fc:f2:d0:0a:7a:b3:00:f4:36:
25:e2:ce:24:a3:92:c6:fe:05:bd:6e:43:a4:cb:dc:
7a:c7:83:aa:6b:b3:38:20:94:fb:70:a6:cf:d4:f3:
d8:bb:7e:78:09:5d:41:e1:0d:62:4e:75:f6:fb:65:
75:27:b5:3b:2f:5e:04:7c:36:d6:f4:40:75:49:15:
ec:08:ad:01:a1:e0:14:8f:1a:ac:5d:fa:3c:9b:55:
26:72:bc:63:c8:56:5b:15:97:eb:12:01:50:1c:df:
cc:f7:1a:0d:1a:0b:ca:a9:6b:91:91:8d:13:c2:c7:
e5:97:7e:66:06:ce:47:14:be:31:f0:60:be:fb:c4:
5b:1b:aa:e3:7f:54:ba:f1:b5:f1:31:4a:05:61:89:
0b:16:ac:a5:79:b1:1c:b4:4f:77:6b:4f:a9:77:20:
00:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:1D:6F:E1:C2:21:E1:FA:A2:11:FA:B2:83:89:54:8A:CF:03:BA:84
X509v3 Authority Key Identifier:
keyid:E6:FA:A0:D2:F5:DE:C0:20:1F:55:E4:09:79:C1:90:9B:6D:B7:7C:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5vqg0vXewCAfVeQJecGQm223fDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/097748-5cc8-450f-9fbb-8c8d10e8eabc/1/5vqg0vXewCAfVeQJecGQm223fDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/097748-5cc8-450f-9fbb-8c8d10e8eabc/1/5vqg0vXewCAfVeQJecGQm223fDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:80:08:99:dd:78:5f:44:29:88:19:5b:1b:89:46:36:3d:1d:
80:29:42:34:8d:9a:ff:2c:90:6f:f0:60:11:37:7e:8a:48:1f:
94:9d:da:bd:55:7c:6d:c6:e6:27:f8:aa:30:55:a3:40:ca:79:
11:cc:ac:09:6c:9d:42:ac:42:45:62:12:75:67:82:a8:e5:a0:
44:48:f5:05:28:c3:2e:7d:65:10:a1:36:90:e0:46:3b:84:18:
e8:16:78:9a:57:e5:f9:01:13:55:c4:2f:c1:ec:dc:2b:78:f2:
42:f0:c7:e9:57:0a:16:98:eb:de:43:65:ed:8d:f0:88:f5:a3:
8d:3d:43:77:50:7e:8d:86:1d:c7:7f:4f:80:80:87:54:56:1b:
8d:21:19:52:16:13:5e:0f:83:09:49:c6:31:87:61:c5:ef:f7:
e0:9d:39:a6:e2:a1:02:a8:c1:94:48:96:f0:3d:5f:53:06:ef:
7b:4c:ca:d5:33:8f:f7:37:27:b6:bc:ba:80:cd:12:e5:f3:44:
25:b7:fa:8c:70:c0:81:b0:dd:da:29:3c:3f:a3:6c:ef:62:5a:
41:6a:75:36:1e:59:39:70:32:0d:cd:72:7f:ff:f3:71:e8:47:
f0:50:ff:2e:46:4d:a1:bb:2a:da:8c:8d:b3:18:43:63:85:ab:
34:3c:2e:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:13:14 2026 by rpki-client