Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/2b264d-1d0c-44c5-aee7-f132aea6f7a2/1/5r62dxRfZMr7zXE26B81onSujow.mft
File: 5r62dxRfZMr7zXE26B81onSujow.mft (raw, json)
Hash identifier: 1GpJkIUiqTz3duxsZ9Yl4mkLYu/nofOa/xoGe2Svk5c=
Subject key identifier: EC:93:8F:59:3F:55:80:71:0B:D2:83:67:CD:92:00:18:90:30:82:DE
Authority key identifier: E6:BE:B6:77:14:5F:64:CA:FB:CD:71:36:E8:1F:35:A2:74:AE:8E:8C
Certificate issuer: /CN=e6beb677145f64cafbcd7136e81f35a274ae8e8c
Certificate serial: 019D390993106F94CDA539A764E49A4D8DD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5r62dxRfZMr7zXE26B81onSujow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/2b264d-1d0c-44c5-aee7-f132aea6f7a2/1/5r62dxRfZMr7zXE26B81onSujow.mft
Manifest number: 01D3
Signing time: Sun 29 Mar 2026 10:00:21 +0000
Manifest this update: Sun 29 Mar 2026 10:00:21 +0000
Manifest next update: Mon 30 Mar 2026 10:00:21 +0000
Files and hashes: 1: 5r62dxRfZMr7zXE26B81onSujow.crl (hash: vuNDijQG4xd+2fGD5Ac28fxgBmMrsqQvMM3CZ6IRf3w=)
2: UEVvSHR4RXiw4RWetmh_ZCqzc9E.roa (hash: bFzxJ++JMPEdKwW88mp2Ckxb5L1ulPilrj2DRxpxsNw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/2b264d-1d0c-44c5-aee7-f132aea6f7a2/1/5r62dxRfZMr7zXE26B81onSujow.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/2b264d-1d0c-44c5-aee7-f132aea6f7a2/1/5r62dxRfZMr7zXE26B81onSujow.mft
rsync://rpki.ripe.net/repository/DEFAULT/5r62dxRfZMr7zXE26B81onSujow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:93:10:6f:94:cd:a5:39:a7:64:e4:9a:4d:8d:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6beb677145f64cafbcd7136e81f35a274ae8e8c
Validity
Not Before: Mar 29 10:00:21 2026 GMT
Not After : Mar 30 10:00:21 2026 GMT
Subject: CN=ec938f593f5580710bd28367cd920018903082de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:46:11:6d:6d:a4:63:5c:1e:7b:d0:8b:58:80:
07:81:a9:b4:98:f4:41:ac:f8:d1:02:a0:c1:81:5b:
71:df:a4:94:31:58:2a:74:f4:fe:8d:f4:59:f9:b5:
c1:36:f8:8a:f3:b3:d9:03:01:fb:b6:ed:85:86:05:
61:3c:69:78:15:a7:32:f3:e6:20:28:e9:56:88:90:
a1:31:68:77:3d:11:79:d3:71:ad:dd:12:26:b9:03:
61:17:33:4f:05:23:f5:63:bd:68:30:17:f1:c0:31:
c4:3c:f9:2e:63:d7:ef:ac:7b:30:0d:04:e6:dd:81:
e4:99:8e:99:90:17:25:4e:69:70:b8:76:63:5d:4b:
31:07:81:e5:ea:d4:b7:c9:1e:f4:3f:86:48:73:5e:
7d:66:08:84:58:bc:d1:f0:31:8e:22:3d:e2:d7:c8:
39:10:39:77:73:36:ec:66:b5:fc:15:49:51:4b:91:
aa:25:83:71:b0:05:ea:3c:5d:b8:b4:4b:1f:dd:a7:
ed:69:68:b9:ad:4f:8b:85:83:21:ff:b7:69:04:db:
36:ee:74:69:16:1f:65:62:c2:e2:03:b7:de:e6:f5:
a5:17:9e:f5:b1:8b:36:d2:50:f6:32:30:e2:60:03:
7a:87:a3:cc:eb:83:e0:77:0e:34:62:70:6e:ba:20:
78:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:93:8F:59:3F:55:80:71:0B:D2:83:67:CD:92:00:18:90:30:82:DE
X509v3 Authority Key Identifier:
keyid:E6:BE:B6:77:14:5F:64:CA:FB:CD:71:36:E8:1F:35:A2:74:AE:8E:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5r62dxRfZMr7zXE26B81onSujow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/2b264d-1d0c-44c5-aee7-f132aea6f7a2/1/5r62dxRfZMr7zXE26B81onSujow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/2b264d-1d0c-44c5-aee7-f132aea6f7a2/1/5r62dxRfZMr7zXE26B81onSujow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:a8:c3:65:c1:87:9d:34:7e:61:ac:8e:94:9c:86:73:90:75:
0d:28:8a:8f:85:9b:d1:64:7a:a5:b2:81:35:59:14:16:5a:cb:
13:d3:95:de:3f:17:05:59:60:49:ec:c3:0b:74:8b:c9:13:06:
99:b7:56:5d:bf:26:48:e1:12:0c:b3:0c:e1:79:4e:46:02:ca:
e0:24:88:68:06:07:03:d0:70:21:43:3c:07:7d:12:b1:ad:39:
a3:bc:de:5b:65:fa:85:3d:29:aa:b4:68:e5:6d:2e:34:60:a2:
78:cc:9a:b4:5d:f9:66:e2:35:09:3d:fc:49:d0:77:3e:12:8d:
1b:d0:84:7f:0c:39:f4:c1:ac:db:21:b3:a2:9c:58:67:fb:f7:
89:22:37:90:92:c3:0b:41:0d:be:f7:13:0a:a1:dc:fa:45:03:
8d:73:e2:ef:d3:05:c3:4b:c0:bb:65:fd:01:a4:d8:78:58:50:
94:90:af:50:6c:53:c9:37:92:ed:d5:a8:02:fe:2d:60:79:92:
2f:c2:c4:02:84:07:06:28:46:32:9a:65:82:2c:27:59:30:09:
92:9e:a7:7a:a0:f7:27:8f:94:97:de:11:c4:46:2d:0f:bd:6e:
af:cc:c9:35:0d:43:d1:da:b5:8e:42:2f:f8:a3:a1:62:7b:68:
f0:a7:1e:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:56:44 2026 by rpki-client