Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/63abe6-3551-414f-8792-1f9dfd814ab6/1/5qTV3yM4mOBPrj2D6Fgi2YgOCAY.mft
File: 5qTV3yM4mOBPrj2D6Fgi2YgOCAY.mft (raw, json)
Hash identifier: e8hz6ZL5U8YGBw2kFeul57ZUmyE/GzeZO4b8f2eEvrc=
Subject key identifier: 02:E0:B3:0B:CE:DA:07:54:18:A8:8B:24:49:1D:79:2E:30:14:25:F6
Authority key identifier: E6:A4:D5:DF:23:38:98:E0:4F:AE:3D:83:E8:58:22:D9:88:0E:08:06
Certificate issuer: /CN=e6a4d5df233898e04fae3d83e85822d9880e0806
Certificate serial: 01A178162CA844B3A046E4D913DCAAF99B16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5qTV3yM4mOBPrj2D6Fgi2YgOCAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/63abe6-3551-414f-8792-1f9dfd814ab6/1/5qTV3yM4mOBPrj2D6Fgi2YgOCAY.mft
Manifest number: 02F5
Signing time: Mon 26 Oct 2026 12:01:21 +0000
Manifest this update: Mon 26 Oct 2026 12:01:21 +0000
Manifest next update: Tue 27 Oct 2026 12:01:21 +0000
Files and hashes: 1: 4SK6T1joxEKD3qcJIw_toyLw7Cg.asa (hash: S9VsSYa/rKcIFEh+rtQN72zQTr6Bln2NJ0sYtwMEOXo=)
2: 5qTV3yM4mOBPrj2D6Fgi2YgOCAY.crl (hash: kqRRxEVyNCMt5rjs5fmv4GH/x0W9gsTHDXjoncj5h8k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/63abe6-3551-414f-8792-1f9dfd814ab6/1/5qTV3yM4mOBPrj2D6Fgi2YgOCAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/63abe6-3551-414f-8792-1f9dfd814ab6/1/5qTV3yM4mOBPrj2D6Fgi2YgOCAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/5qTV3yM4mOBPrj2D6Fgi2YgOCAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:16:2c:a8:44:b3:a0:46:e4:d9:13:dc:aa:f9:9b:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6a4d5df233898e04fae3d83e85822d9880e0806
Validity
Not Before: Oct 26 12:01:21 2026 GMT
Not After : Oct 27 12:01:21 2026 GMT
Subject: CN=02e0b30bceda075418a88b24491d792e301425f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:30:d5:4a:27:72:4c:a2:bf:33:7b:7d:6a:8e:
3f:86:55:bc:a6:84:87:fe:52:97:dc:8a:d5:ff:1e:
17:40:bc:39:82:ad:6d:05:fb:9e:c4:77:f5:30:ab:
f4:08:1c:a6:79:bc:f7:ce:c6:39:04:2d:6b:4b:7c:
53:9b:0e:e8:d7:82:07:63:4d:64:98:92:fe:87:0f:
46:90:56:18:bb:4c:3e:97:24:e8:27:4d:f2:81:d5:
5e:00:e4:2c:2a:d8:74:f7:e9:d5:69:59:35:f7:b3:
39:a7:d7:69:5f:73:a7:74:d0:33:9e:8e:1e:56:b7:
85:24:4b:58:4a:d5:cb:97:c9:bf:ac:8e:79:d1:41:
49:5f:f7:e4:b4:b9:fc:e0:ba:a4:ac:95:a6:50:9f:
99:d5:62:37:70:34:af:23:ec:ad:75:ec:a6:57:6a:
e9:2d:1c:bb:3c:c9:57:fc:5c:01:06:51:a8:26:78:
50:cf:cd:9b:01:6c:92:b4:7b:58:39:01:e6:78:46:
23:eb:d7:01:46:bd:47:75:76:a1:1c:aa:4f:08:53:
95:bf:4d:1d:01:98:33:cc:67:13:e7:f9:5d:e2:60:
f1:98:4a:42:c7:35:21:b6:ef:e0:a3:fb:1f:51:36:
65:e3:91:74:8e:5e:0d:ad:ce:31:e8:79:43:73:84:
f8:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:E0:B3:0B:CE:DA:07:54:18:A8:8B:24:49:1D:79:2E:30:14:25:F6
X509v3 Authority Key Identifier:
keyid:E6:A4:D5:DF:23:38:98:E0:4F:AE:3D:83:E8:58:22:D9:88:0E:08:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5qTV3yM4mOBPrj2D6Fgi2YgOCAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/63abe6-3551-414f-8792-1f9dfd814ab6/1/5qTV3yM4mOBPrj2D6Fgi2YgOCAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/63abe6-3551-414f-8792-1f9dfd814ab6/1/5qTV3yM4mOBPrj2D6Fgi2YgOCAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:34:32:d6:d0:e0:76:b2:5e:11:07:89:b9:d3:ad:4a:e6:87:
16:57:29:1c:3b:c6:6d:6e:1c:1b:4c:1f:64:a1:5e:24:e5:77:
79:41:45:71:29:c6:73:98:8d:ff:31:bd:dd:d5:93:47:b3:41:
88:d4:11:ca:fc:06:01:8d:a6:7d:4a:78:ea:ad:4a:d4:40:b5:
3b:20:aa:fa:40:c9:8b:8b:bb:70:ac:98:01:63:a6:68:74:71:
c9:c3:34:1d:4a:48:ec:de:61:80:2d:c6:51:87:71:fa:b1:cb:
e9:6d:67:f5:e7:ab:03:da:57:83:46:f1:b7:20:6b:63:f8:39:
1a:e3:66:b7:d8:43:a1:e2:da:76:bc:bc:76:57:66:d2:9e:8a:
d1:4d:e5:60:21:03:1b:a6:76:f5:9a:2a:36:cc:b8:ff:8e:8e:
26:82:2b:24:90:f4:6c:0b:e0:d2:c7:40:aa:17:79:a4:d4:d1:
78:e5:00:ee:79:69:02:00:96:28:c4:bf:7a:d3:f3:de:1a:b8:
18:b3:3d:ad:72:c3:e8:84:dd:c1:cd:f8:df:e8:d1:51:ee:a7:
a7:06:2a:86:80:22:5a:b5:9f:51:34:8e:25:c1:d2:e3:f7:58:
1b:7a:d8:5f:98:ed:a2:f7:fb:ae:fe:1e:7b:26:d6:42:27:f0:
97:76:fc:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 19:27:18 2026 by rpki-client