Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/6470ac-1809-4d59-8714-73bdcb9de755/1/5iq6ZBCCl1gsyujnuobyz8nh1ao.mft
File: 5iq6ZBCCl1gsyujnuobyz8nh1ao.mft (raw, json)
Hash identifier: o6QSdLmYHAeUoXgSLTSFAt+Nuvxi5hJThYvP+jVtVyk=
Subject key identifier: F3:00:89:4F:94:ED:3B:81:12:65:3F:E9:6F:0B:DD:2E:7D:8A:4B:89
Authority key identifier: E6:2A:BA:64:10:82:97:58:2C:CA:E8:E7:BA:86:F2:CF:C9:E1:D5:AA
Certificate issuer: /CN=e62aba64108297582ccae8e7ba86f2cfc9e1d5aa
Certificate serial: 019D29CDF8C9DEF6398CD16D8B11F8DFD8EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5iq6ZBCCl1gsyujnuobyz8nh1ao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/6470ac-1809-4d59-8714-73bdcb9de755/1/5iq6ZBCCl1gsyujnuobyz8nh1ao.mft
Manifest number: 0889
Signing time: Thu 26 Mar 2026 11:00:57 +0000
Manifest this update: Thu 26 Mar 2026 11:00:57 +0000
Manifest next update: Fri 27 Mar 2026 11:00:57 +0000
Files and hashes: 1: 5iq6ZBCCl1gsyujnuobyz8nh1ao.crl (hash: 92QtFW666ekL8AvW8ex8dxfunx52Z7a7GQaGbgjlcjg=)
2: om31b6FWDBGxEuwor71QHsugvxY.roa (hash: nmUcpfkGCJ2B9JhtJKk02OVz3WisKOfii97PhUxXZVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/6470ac-1809-4d59-8714-73bdcb9de755/1/5iq6ZBCCl1gsyujnuobyz8nh1ao.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/6470ac-1809-4d59-8714-73bdcb9de755/1/5iq6ZBCCl1gsyujnuobyz8nh1ao.mft
rsync://rpki.ripe.net/repository/DEFAULT/5iq6ZBCCl1gsyujnuobyz8nh1ao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:cd:f8:c9:de:f6:39:8c:d1:6d:8b:11:f8:df:d8:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e62aba64108297582ccae8e7ba86f2cfc9e1d5aa
Validity
Not Before: Mar 26 11:00:57 2026 GMT
Not After : Mar 27 11:00:57 2026 GMT
Subject: CN=f300894f94ed3b8112653fe96f0bdd2e7d8a4b89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:3b:46:54:7a:79:d1:e5:75:a2:a0:26:bb:0e:
57:5d:3d:ee:29:f7:f9:4d:31:4d:72:fe:ed:a4:5a:
7f:dc:e2:27:06:74:11:b2:73:24:2b:a7:0f:fe:03:
7f:b1:f0:07:4b:fc:51:9b:cb:f0:cb:b8:96:6e:c2:
49:98:87:56:e8:82:ea:62:c7:27:41:87:4b:da:89:
2e:dd:a1:e1:01:b4:15:e1:d1:e3:ff:be:f3:09:c4:
ff:c0:8d:c4:13:e7:ab:a9:56:96:ff:f5:60:da:29:
60:24:6a:aa:f9:41:15:93:b5:63:82:d7:0c:a1:fb:
e4:e5:8a:6b:fd:43:f4:fd:60:ef:a6:0a:11:b4:12:
13:f9:f8:f6:e6:ee:a0:97:da:fb:1c:5b:d5:7e:cd:
ba:ad:29:ce:52:91:d3:d3:fd:f7:f3:69:e1:37:ba:
59:d4:f2:c9:12:64:cf:75:d8:ed:ff:11:cc:2d:d3:
46:05:4f:3f:69:24:9e:39:80:1b:94:66:d1:69:b6:
b9:c2:e2:3b:93:bb:b6:49:f8:96:ff:92:45:89:8d:
8b:6f:03:1d:ef:6b:30:a2:3a:a4:e3:53:f7:d1:7c:
a4:30:7b:0c:2b:8e:af:e3:56:d0:0c:96:c0:fa:c1:
3f:77:0f:c4:86:58:b2:08:11:67:57:43:69:ba:68:
0f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:00:89:4F:94:ED:3B:81:12:65:3F:E9:6F:0B:DD:2E:7D:8A:4B:89
X509v3 Authority Key Identifier:
keyid:E6:2A:BA:64:10:82:97:58:2C:CA:E8:E7:BA:86:F2:CF:C9:E1:D5:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5iq6ZBCCl1gsyujnuobyz8nh1ao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/6470ac-1809-4d59-8714-73bdcb9de755/1/5iq6ZBCCl1gsyujnuobyz8nh1ao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/6470ac-1809-4d59-8714-73bdcb9de755/1/5iq6ZBCCl1gsyujnuobyz8nh1ao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:5d:4b:42:48:d9:7d:ba:30:36:0a:f3:98:f1:35:a1:6e:44:
6d:4f:2d:67:45:c2:43:e9:ce:0e:a1:a1:4b:76:15:09:ad:54:
5b:3f:f0:7d:c2:02:d3:85:16:70:a1:50:29:d8:33:1f:1a:65:
77:8b:4d:7d:e9:da:a8:62:73:dc:c8:74:c0:a5:94:ab:5b:6e:
1f:44:a1:e5:56:a9:4b:62:98:87:b7:ba:e8:f0:12:a0:21:71:
e2:4b:f0:7c:e6:22:d6:36:e3:72:b9:4e:3a:83:47:f0:7b:8c:
32:c7:f0:08:89:8c:6b:d9:a7:e1:da:9e:cf:58:74:77:78:7e:
7b:11:dd:49:2d:56:ec:23:73:c5:a6:6a:fe:bc:b1:a8:29:e8:
b5:0d:2a:da:08:3e:24:b8:b1:16:2a:07:01:51:b1:82:9e:d8:
e2:b7:f2:4f:0c:00:80:60:d9:0e:4c:f4:f2:56:40:14:a4:92:
6a:82:c9:97:81:3c:48:46:af:e7:60:ab:20:b2:cc:af:6c:1e:
b7:65:0b:d2:2b:88:41:1b:03:60:79:44:1e:b5:95:5c:23:1b:
cf:33:88:58:f8:04:71:1c:b8:ef:76:bd:a7:e7:f2:13:bb:4e:
74:22:83:0a:ad:7c:7c:18:62:96:d6:5e:7f:88:cf:2b:98:52:
e6:0b:5f:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:35:23 2026 by rpki-client