Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/05ce9d-6dae-4709-971f-341658243b4e/1/5k3j63dco74tVQPJyc07crvNpJs.mft
File: 5k3j63dco74tVQPJyc07crvNpJs.mft (raw, json)
Hash identifier: QFgFvDvIfrWQFCR55fDxIsgLQmFvO25AAtr8pmvlQYg=
Subject key identifier: 15:E5:D1:D9:3C:75:D1:45:70:CE:5A:9F:D9:9A:66:D0:AE:7D:C6:DB
Authority key identifier: E6:4D:E3:EB:77:5C:A3:BE:2D:55:03:C9:C9:CD:3B:72:BB:CD:A4:9B
Certificate issuer: /CN=e64de3eb775ca3be2d5503c9c9cd3b72bbcda49b
Certificate serial: 019DCE2BC251D12CAC867B471189CE6EAB63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5k3j63dco74tVQPJyc07crvNpJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/05ce9d-6dae-4709-971f-341658243b4e/1/5k3j63dco74tVQPJyc07crvNpJs.mft
Manifest number: 0190
Signing time: Mon 27 Apr 2026 09:01:07 +0000
Manifest this update: Mon 27 Apr 2026 09:01:07 +0000
Manifest next update: Tue 28 Apr 2026 09:01:07 +0000
Files and hashes: 1: 5k3j63dco74tVQPJyc07crvNpJs.crl (hash: 6V0lLmDSnRKVnaF7yzP5Z6AhTwWWWnYOuuUH09qQ4PI=)
2: tfwhmbNUeb70v_DXkuhRwPo_elo.roa (hash: VbIkneiXqdXvw+KPGB3c+sh95KU6gx9gOTx0TPGcPy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/05ce9d-6dae-4709-971f-341658243b4e/1/5k3j63dco74tVQPJyc07crvNpJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/05ce9d-6dae-4709-971f-341658243b4e/1/5k3j63dco74tVQPJyc07crvNpJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/5k3j63dco74tVQPJyc07crvNpJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 09:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:2b:c2:51:d1:2c:ac:86:7b:47:11:89:ce:6e:ab:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e64de3eb775ca3be2d5503c9c9cd3b72bbcda49b
Validity
Not Before: Apr 27 09:01:07 2026 GMT
Not After : Apr 28 09:01:07 2026 GMT
Subject: CN=15e5d1d93c75d14570ce5a9fd99a66d0ae7dc6db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:30:51:fb:9e:b0:61:26:c9:4a:e5:51:63:7b:
f6:c3:98:8d:fd:14:9c:cb:8d:e0:c4:68:20:d6:da:
5b:e3:e1:83:86:86:30:5e:e0:28:82:06:1d:69:db:
f4:86:2a:3f:c9:4f:35:07:d2:41:60:47:cc:88:c8:
ee:da:58:61:ad:c0:f2:48:68:bb:af:9a:9b:82:2c:
5e:b4:6d:fa:69:cc:7f:c2:e4:be:0c:67:9b:64:13:
01:87:9f:a6:43:6b:5a:a8:50:bd:5b:af:da:a1:15:
1a:c7:1c:8c:56:e1:b2:ac:ed:40:a5:84:a4:a4:86:
72:f3:fc:1e:81:7c:a7:a1:fc:67:79:1d:3f:a4:a0:
91:e7:4c:e6:b0:b8:15:b7:b1:9e:0c:c0:27:bd:23:
15:b3:17:90:93:61:95:38:f2:e9:4b:ae:dd:47:0e:
97:92:51:e3:6a:11:90:e3:d4:c1:2c:d3:91:de:ee:
b0:98:11:28:98:a0:25:7c:15:07:bd:d6:07:fe:78:
b3:1e:c9:26:9e:9b:db:e1:b0:c0:a4:11:e9:f8:95:
94:80:93:2e:49:ab:bb:b3:d2:67:7b:ec:10:3b:ff:
fa:fc:3b:90:7a:90:8a:3e:db:b3:7d:11:81:a9:a2:
7b:d3:31:4c:7b:07:c0:2b:a8:01:4d:05:d9:26:b9:
0c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:E5:D1:D9:3C:75:D1:45:70:CE:5A:9F:D9:9A:66:D0:AE:7D:C6:DB
X509v3 Authority Key Identifier:
keyid:E6:4D:E3:EB:77:5C:A3:BE:2D:55:03:C9:C9:CD:3B:72:BB:CD:A4:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5k3j63dco74tVQPJyc07crvNpJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/05ce9d-6dae-4709-971f-341658243b4e/1/5k3j63dco74tVQPJyc07crvNpJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/05ce9d-6dae-4709-971f-341658243b4e/1/5k3j63dco74tVQPJyc07crvNpJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:59:85:1a:fd:2d:70:bb:44:00:dc:0e:82:da:44:92:08:c8:
c2:ba:9c:d8:42:68:f2:fd:bc:7c:81:0c:5c:2c:d8:4d:79:48:
4b:3e:01:b0:a2:48:1a:a8:3b:81:4c:9c:df:88:70:e5:54:28:
2d:2d:92:c7:4a:5a:e2:30:c8:1e:bf:de:5b:83:76:c1:fb:d9:
b6:f7:54:6d:81:93:51:65:20:06:7d:e3:2f:e7:17:e7:45:bf:
f8:f7:0b:45:9b:36:62:45:77:fc:d1:61:e5:ae:40:19:1b:7b:
18:af:07:1b:99:8a:02:24:c3:01:3e:fe:61:57:bb:7c:07:fd:
6e:f7:55:b1:1c:a6:6b:93:80:60:b7:4e:6a:df:e6:60:b4:8a:
3d:06:ad:e5:97:73:58:d6:00:17:65:d4:99:d2:f6:bf:2f:7f:
24:23:68:b0:ec:09:78:39:b1:04:81:6b:a1:08:6f:f9:0d:2c:
c4:50:7b:0a:27:e8:5f:06:7d:d8:24:03:8f:05:58:20:f8:51:
c0:5f:59:d4:bb:b0:c8:5e:b0:3f:ca:b5:3d:e1:3c:87:9d:cd:
f3:e1:57:d4:1c:64:b1:93:2b:02:a3:44:ae:66:03:f7:2b:ce:
13:a3:6b:1a:d3:f5:cd:ff:2c:c9:79:c5:9d:9a:94:27:0c:0c:
ff:73:61:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 18:31:15 2026 by rpki-client