Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/1dc732-888e-42eb-8d8c-ff00f2ac8c78/1/5qowZQKj7IBJPXU0jChYsa9-z4A.mft
File: 5qowZQKj7IBJPXU0jChYsa9-z4A.mft (raw, json)
Hash identifier: iMqqGnbgWxfQdHD14ZpcBrHqoPZzMqTDHPk+UoC4njM=
Subject key identifier: 5E:33:F6:5B:8A:BC:51:8C:76:2A:C8:B5:43:19:AA:3E:34:01:48:FA
Authority key identifier: E6:AA:30:65:02:A3:EC:80:49:3D:75:34:8C:28:58:B1:AF:7E:CF:80
Certificate issuer: /CN=e6aa306502a3ec80493d75348c2858b1af7ecf80
Certificate serial: 019D3866816B6BDD5C65FC1402125E8F1FE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5qowZQKj7IBJPXU0jChYsa9-z4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/1dc732-888e-42eb-8d8c-ff00f2ac8c78/1/5qowZQKj7IBJPXU0jChYsa9-z4A.mft
Manifest number: 0714
Signing time: Sun 29 Mar 2026 07:02:14 +0000
Manifest this update: Sun 29 Mar 2026 07:02:14 +0000
Manifest next update: Mon 30 Mar 2026 07:02:14 +0000
Files and hashes: 1: 5qowZQKj7IBJPXU0jChYsa9-z4A.crl (hash: j1z+rw4X/g4L9R8/9PmpLejiYmQoSuQzaCn5cTE7YlM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/1dc732-888e-42eb-8d8c-ff00f2ac8c78/1/5qowZQKj7IBJPXU0jChYsa9-z4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/1dc732-888e-42eb-8d8c-ff00f2ac8c78/1/5qowZQKj7IBJPXU0jChYsa9-z4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/5qowZQKj7IBJPXU0jChYsa9-z4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:81:6b:6b:dd:5c:65:fc:14:02:12:5e:8f:1f:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6aa306502a3ec80493d75348c2858b1af7ecf80
Validity
Not Before: Mar 29 07:02:14 2026 GMT
Not After : Mar 30 07:02:14 2026 GMT
Subject: CN=5e33f65b8abc518c762ac8b54319aa3e340148fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ee:50:dc:86:b0:be:a3:46:c6:55:ca:17:ee:
03:4c:06:68:5f:98:23:b5:65:19:5d:16:be:cb:7d:
ef:3f:ea:86:c7:8a:eb:cc:2a:74:15:ff:f9:3f:46:
a9:ed:11:e1:2e:cf:1f:f0:ca:80:90:73:67:fb:a4:
ff:ec:e2:01:c2:47:5e:bb:9f:2f:b5:ee:80:c4:a6:
79:22:7a:1d:15:29:18:c8:ea:89:af:c1:e3:46:d4:
ab:0a:e9:d8:b0:dd:2e:8e:39:9a:45:53:14:f5:ad:
af:d7:58:5d:3e:ae:21:99:22:f0:18:85:05:5f:72:
e0:73:39:5c:28:c4:4b:a5:ea:a2:df:0f:6c:dc:fd:
1f:cb:ec:3e:b1:5b:30:47:cd:73:1a:ed:76:84:5b:
7d:38:a5:8c:58:0e:35:52:ac:0f:b9:ed:f4:b2:6d:
33:11:58:84:c4:d9:eb:56:d3:c8:93:3c:ff:6b:70:
97:a1:c2:38:3c:69:bc:a7:40:a3:55:c4:b6:9c:2b:
d2:33:e3:55:36:b1:4c:a6:f9:36:63:48:cb:a9:d5:
eb:f9:53:44:84:07:21:a8:83:7a:f3:3b:93:29:32:
bf:86:af:ee:72:ec:38:eb:34:b6:03:89:09:47:b9:
d5:12:9e:f0:28:1e:b7:7f:4c:42:50:3f:d0:66:d0:
8c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:33:F6:5B:8A:BC:51:8C:76:2A:C8:B5:43:19:AA:3E:34:01:48:FA
X509v3 Authority Key Identifier:
keyid:E6:AA:30:65:02:A3:EC:80:49:3D:75:34:8C:28:58:B1:AF:7E:CF:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5qowZQKj7IBJPXU0jChYsa9-z4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/1dc732-888e-42eb-8d8c-ff00f2ac8c78/1/5qowZQKj7IBJPXU0jChYsa9-z4A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/1dc732-888e-42eb-8d8c-ff00f2ac8c78/1/5qowZQKj7IBJPXU0jChYsa9-z4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:b6:b5:de:04:fd:ec:7b:67:1c:2e:43:78:13:12:cd:fa:e5:
56:fa:dc:7f:42:8b:4e:48:b7:ed:39:db:7e:cc:35:b7:36:e4:
8a:3d:87:01:2d:c0:cb:85:c7:59:12:3a:5e:7c:f3:27:05:d5:
00:3e:e0:6a:e4:3d:7e:b1:5b:59:03:b7:ec:c6:3d:d0:2f:27:
35:8f:38:9f:7a:63:c1:ee:c4:ed:a7:e9:15:e2:38:7b:a3:ed:
23:03:58:e9:07:cd:49:8f:06:74:8a:5b:5c:22:8b:f8:98:45:
ff:c1:1e:b5:ef:00:8e:6c:02:bb:d7:8b:2f:9f:d1:cd:c7:60:
e7:84:8f:69:1b:b1:14:38:a3:83:24:1e:e2:60:2d:2f:56:29:
b8:de:ab:17:50:57:f8:1c:74:66:45:0d:e7:36:c9:87:7c:fa:
47:28:0f:1b:a6:b9:07:60:87:97:fe:02:b9:b6:21:e4:b3:a7:
85:5f:68:3d:92:61:b4:bb:de:6a:0f:28:3c:34:82:ad:73:28:
9f:08:3c:25:4c:30:97:13:30:94:37:37:02:7f:ec:76:5e:48:
dd:f8:9d:f4:bc:c9:7d:15:31:61:71:91:60:12:fc:a4:00:08:
9d:e5:37:00:19:d7:ff:6d:d7:f0:5d:57:b2:ff:02:f3:c8:7a:
9f:d2:3d:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:16 2026 by rpki-client