Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/63abe6-3551-414f-8792-1f9dfd814ab6/1/5qTV3yM4mOBPrj2D6Fgi2YgOCAY.mft
File: 5qTV3yM4mOBPrj2D6Fgi2YgOCAY.mft (raw, json)
Hash identifier: zwQCgHOXl95hYhjUL9SvYqW7BWQr59MLpzsKC3Cyk3o=
Subject key identifier: 9E:4A:EC:75:D4:5C:8C:76:C9:D7:23:15:B3:7C:B9:DF:7B:4C:EE:3B
Authority key identifier: E6:A4:D5:DF:23:38:98:E0:4F:AE:3D:83:E8:58:22:D9:88:0E:08:06
Certificate issuer: /CN=e6a4d5df233898e04fae3d83e85822d9880e0806
Certificate serial: 019D38D319F6E85346527B818BC80F74CC79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5qTV3yM4mOBPrj2D6Fgi2YgOCAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/63abe6-3551-414f-8792-1f9dfd814ab6/1/5qTV3yM4mOBPrj2D6Fgi2YgOCAY.mft
Manifest number: C2
Signing time: Sun 29 Mar 2026 09:00:51 +0000
Manifest this update: Sun 29 Mar 2026 09:00:51 +0000
Manifest next update: Mon 30 Mar 2026 09:00:51 +0000
Files and hashes: 1: 4SK6T1joxEKD3qcJIw_toyLw7Cg.asa (hash: S9VsSYa/rKcIFEh+rtQN72zQTr6Bln2NJ0sYtwMEOXo=)
2: 5qTV3yM4mOBPrj2D6Fgi2YgOCAY.crl (hash: /ZlSEbGaogBzp2Rap9VnnPLl77UBuJbcmkvkpoA1cFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/63abe6-3551-414f-8792-1f9dfd814ab6/1/5qTV3yM4mOBPrj2D6Fgi2YgOCAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/63abe6-3551-414f-8792-1f9dfd814ab6/1/5qTV3yM4mOBPrj2D6Fgi2YgOCAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/5qTV3yM4mOBPrj2D6Fgi2YgOCAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:19:f6:e8:53:46:52:7b:81:8b:c8:0f:74:cc:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6a4d5df233898e04fae3d83e85822d9880e0806
Validity
Not Before: Mar 29 09:00:51 2026 GMT
Not After : Mar 30 09:00:51 2026 GMT
Subject: CN=9e4aec75d45c8c76c9d72315b37cb9df7b4cee3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d8:41:34:1e:0a:da:1c:8b:2d:ce:52:81:ed:
66:a9:4f:e9:8b:b9:5b:80:f1:b8:2b:9d:9c:02:23:
82:5d:52:25:a7:46:1f:d2:8a:80:da:66:ca:d1:c3:
ee:77:cf:03:ab:93:b6:34:8f:cb:34:97:d1:fe:fc:
dd:d7:5b:4e:ad:78:92:9d:c4:c3:cf:da:b0:e2:3f:
88:1f:55:f8:c9:42:5e:c7:41:db:56:ba:f8:78:04:
08:7f:00:87:df:5d:2c:77:34:18:db:ed:5d:9a:cf:
45:c9:b0:b9:51:7f:66:10:19:12:7b:9a:f0:54:e8:
31:e1:b6:74:49:03:00:49:b5:c0:5b:e5:f0:77:1c:
09:0e:f2:c2:8a:b1:db:f0:ea:78:ef:e2:fe:e9:23:
6d:14:78:25:5f:66:bd:2c:89:52:9b:3a:5c:ce:c0:
08:76:91:59:34:da:c1:46:c6:47:97:d5:65:54:29:
77:55:16:07:7a:77:c2:40:b3:02:14:fd:8e:a0:f7:
06:ed:95:59:79:80:24:90:aa:78:e0:0d:01:85:52:
6f:85:5a:73:18:07:e8:d0:0d:63:4d:1b:a2:a8:de:
5a:d1:93:73:6d:99:76:bb:4a:f6:cf:c6:09:2b:6c:
27:f8:22:6e:35:c1:32:17:1a:66:27:0a:23:2e:e6:
e6:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:4A:EC:75:D4:5C:8C:76:C9:D7:23:15:B3:7C:B9:DF:7B:4C:EE:3B
X509v3 Authority Key Identifier:
keyid:E6:A4:D5:DF:23:38:98:E0:4F:AE:3D:83:E8:58:22:D9:88:0E:08:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5qTV3yM4mOBPrj2D6Fgi2YgOCAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/63abe6-3551-414f-8792-1f9dfd814ab6/1/5qTV3yM4mOBPrj2D6Fgi2YgOCAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/63abe6-3551-414f-8792-1f9dfd814ab6/1/5qTV3yM4mOBPrj2D6Fgi2YgOCAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:6c:7e:66:c2:b7:05:e3:36:18:76:10:0b:44:9d:48:65:44:
92:30:32:c0:6e:26:28:fd:b9:b1:df:f2:f3:20:c4:fe:3a:53:
71:3f:a2:6b:0e:39:b1:0b:de:65:b6:fc:98:cc:27:45:1f:5e:
29:16:07:86:91:41:8b:1d:ac:59:83:36:31:a4:4f:f2:30:96:
50:da:ce:a3:1e:8d:20:8e:34:55:77:0b:ab:a8:e1:0d:9d:34:
d4:17:f4:c7:ae:ad:c5:e3:d6:0a:6b:ee:77:96:94:c1:78:5f:
2b:b2:44:50:60:31:85:1f:47:db:04:94:ed:1a:d1:eb:86:50:
7f:69:02:c2:e7:c6:25:db:9b:d1:eb:c8:52:43:65:fd:70:52:
83:02:31:7c:26:04:b4:61:f2:86:82:71:34:42:83:c9:ca:5c:
9d:8d:47:2b:91:7d:c9:f7:90:cd:a9:51:32:16:3e:a5:8d:04:
c7:22:7e:83:6e:a9:77:67:f5:f9:f8:de:b4:ef:e7:56:d7:02:
28:18:8b:79:8a:7f:6d:00:0f:3d:46:31:09:c0:f0:5d:c2:b2:
6b:b3:1e:97:22:a7:57:1a:56:cd:5a:66:5d:3e:ec:6e:e6:eb:
fa:1f:17:b7:a0:e5:53:ce:06:1f:dd:6c:81:9d:05:91:4a:fb:
e5:0a:36:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:35:04 2026 by rpki-client