Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/f9f773-121e-450d-b606-98bf4289df3b/1/5qTLdM9STBgSHVO1MsA8BvSta-Y.mft
File: 5qTLdM9STBgSHVO1MsA8BvSta-Y.mft (raw, json)
Hash identifier: ewpJcSxaMbbpzjNXx5lol0q1Z7VuB7BqrDROAKDXm2s=
Subject key identifier: 13:5D:DC:12:16:26:CC:50:CF:BA:3A:5D:84:B0:E7:B4:64:97:41:83
Authority key identifier: E6:A4:CB:74:CF:52:4C:18:12:1D:53:B5:32:C0:3C:06:F4:AD:6B:E6
Certificate issuer: /CN=e6a4cb74cf524c18121d53b532c03c06f4ad6be6
Certificate serial: 019D371C02F24A7BC5FEE02F83446C0E22C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5qTLdM9STBgSHVO1MsA8BvSta-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/f9f773-121e-450d-b606-98bf4289df3b/1/5qTLdM9STBgSHVO1MsA8BvSta-Y.mft
Manifest number: 1289
Signing time: Sun 29 Mar 2026 01:01:15 +0000
Manifest this update: Sun 29 Mar 2026 01:01:15 +0000
Manifest next update: Mon 30 Mar 2026 01:01:15 +0000
Files and hashes: 1: 5qTLdM9STBgSHVO1MsA8BvSta-Y.crl (hash: IcApb/BSizGJNFYvm1f0gEN65TGRTa40ILstxJR3Tck=)
2: PHHmlI_lozSBsIeTe7D4ho8MMgk.roa (hash: Q0/1mQZnoW0veYxUY+kdm56TFO9WzQm4B7+icQrGOc4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/f9f773-121e-450d-b606-98bf4289df3b/1/5qTLdM9STBgSHVO1MsA8BvSta-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/f9f773-121e-450d-b606-98bf4289df3b/1/5qTLdM9STBgSHVO1MsA8BvSta-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/5qTLdM9STBgSHVO1MsA8BvSta-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1c:02:f2:4a:7b:c5:fe:e0:2f:83:44:6c:0e:22:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6a4cb74cf524c18121d53b532c03c06f4ad6be6
Validity
Not Before: Mar 29 01:01:15 2026 GMT
Not After : Mar 30 01:01:15 2026 GMT
Subject: CN=135ddc121626cc50cfba3a5d84b0e7b464974183
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:be:e7:6f:68:af:cf:33:f2:2a:79:26:23:42:
2a:a8:f1:16:66:45:1d:52:0b:9a:f8:ab:25:32:fd:
35:5b:c2:f8:d1:70:8a:d9:4f:e4:d0:2d:73:63:ed:
6d:66:df:20:7f:01:f8:ba:6a:d0:f4:e6:3a:3c:7d:
40:fc:72:04:36:99:56:87:19:94:46:4f:e0:f6:32:
f3:91:d2:90:7c:2d:e3:b0:7b:28:c0:f7:7c:2e:b8:
ca:97:0a:dd:9b:41:28:b2:d7:fb:57:bb:6e:f6:a4:
b7:a5:52:b2:8a:ec:6c:df:92:8d:08:ce:00:08:3f:
9a:49:1e:4d:85:e6:86:82:01:f8:d4:dc:d6:1b:63:
b9:e9:a7:cd:79:69:4b:ca:21:84:12:2d:af:b6:9c:
95:00:56:24:a0:3a:38:5a:01:eb:1b:cb:75:9f:34:
42:c1:8d:84:5b:78:b2:6a:09:ba:24:cc:3a:91:71:
4d:3d:32:a9:46:0e:39:55:ec:e8:45:49:a7:0b:0a:
df:22:30:a1:4d:2f:68:70:88:27:97:b3:32:38:51:
09:0d:2a:92:a6:33:b2:25:3e:cf:b9:cb:70:48:67:
1c:38:9f:84:0e:41:53:f2:93:14:de:7f:44:a0:67:
0a:41:54:ac:7f:fe:7b:0d:fa:40:49:c1:f1:6b:3c:
a1:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:5D:DC:12:16:26:CC:50:CF:BA:3A:5D:84:B0:E7:B4:64:97:41:83
X509v3 Authority Key Identifier:
keyid:E6:A4:CB:74:CF:52:4C:18:12:1D:53:B5:32:C0:3C:06:F4:AD:6B:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5qTLdM9STBgSHVO1MsA8BvSta-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/f9f773-121e-450d-b606-98bf4289df3b/1/5qTLdM9STBgSHVO1MsA8BvSta-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/f9f773-121e-450d-b606-98bf4289df3b/1/5qTLdM9STBgSHVO1MsA8BvSta-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:ba:ae:06:1f:cf:85:2a:1e:f8:af:5f:62:1f:4a:71:02:10:
47:a9:70:82:bc:05:67:c0:e4:f3:79:0b:92:6e:77:48:e1:fc:
c3:a9:dc:96:0f:e6:ba:08:27:f8:f3:d2:41:f1:98:7d:d8:4d:
94:04:cc:5e:1a:b2:ee:8d:7a:94:7c:8d:4e:5b:f2:8b:f1:9b:
b0:e6:20:09:51:8e:ba:17:d1:18:f5:f8:10:2d:d3:a5:da:16:
0f:ec:18:88:84:d4:d7:cf:c9:a9:a0:ec:45:47:94:d7:1a:80:
fb:ee:7e:95:e5:db:db:59:ad:f8:ae:9b:46:ec:be:1d:f8:e5:
0b:41:c0:53:11:80:ba:61:52:7f:9f:3c:07:ec:71:66:f5:67:
5b:8f:56:58:2d:c6:0f:86:3a:d2:27:56:2b:51:5f:92:3b:b1:
f2:80:b7:0d:82:77:2c:f9:96:15:ba:d7:f4:35:b6:92:b4:b2:
95:e0:ab:7f:05:92:40:71:b4:ae:e4:b7:db:ce:25:8e:1a:86:
f3:71:5e:96:b6:b3:e8:6e:0b:c4:ca:94:4f:1c:a5:c8:15:7d:
a8:03:fe:83:93:65:92:00:ba:b2:4b:25:c6:b9:74:63:cf:62:
16:cc:19:00:0c:68:1c:65:94:49:be:c7:ab:ea:be:f3:b9:cc:
85:68:17:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:05 2026 by rpki-client