
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/05ce9d-6dae-4709-971f-341658243b4e/1/5k3j63dco74tVQPJyc07crvNpJs.mft
File: 5k3j63dco74tVQPJyc07crvNpJs.mft (raw, json)
Hash identifier: PNNIDpTDQ8adu0uo0QjCM3TscgJybhMKCF1car25/H4=
Subject key identifier: 41:D1:6A:22:4E:B2:8F:AD:4B:0E:DD:36:DA:9C:A9:EE:A6:BE:23:3E
Authority key identifier: E6:4D:E3:EB:77:5C:A3:BE:2D:55:03:C9:C9:CD:3B:72:BB:CD:A4:9B
Certificate issuer: /CN=e64de3eb775ca3be2d5503c9c9cd3b72bbcda49b
Certificate serial: 019CE47F41E67EFBDEE791EE3C055677E983
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5k3j63dco74tVQPJyc07crvNpJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/05ce9d-6dae-4709-971f-341658243b4e/1/5k3j63dco74tVQPJyc07crvNpJs.mft
Manifest number: 0117
Signing time: Fri 13 Mar 2026 00:01:10 +0000
Manifest this update: Fri 13 Mar 2026 00:01:10 +0000
Manifest next update: Sat 14 Mar 2026 00:01:10 +0000
Files and hashes: 1: 5k3j63dco74tVQPJyc07crvNpJs.crl (hash: qdknoMXScYVLEMhBCONcOu828UYzi+25rQr6V5zH3JQ=)
2: tfwhmbNUeb70v_DXkuhRwPo_elo.roa (hash: VbIkneiXqdXvw+KPGB3c+sh95KU6gx9gOTx0TPGcPy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/05ce9d-6dae-4709-971f-341658243b4e/1/5k3j63dco74tVQPJyc07crvNpJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/05ce9d-6dae-4709-971f-341658243b4e/1/5k3j63dco74tVQPJyc07crvNpJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/5k3j63dco74tVQPJyc07crvNpJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:7f:41:e6:7e:fb:de:e7:91:ee:3c:05:56:77:e9:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e64de3eb775ca3be2d5503c9c9cd3b72bbcda49b
Validity
Not Before: Mar 13 00:01:10 2026 GMT
Not After : Mar 14 00:01:10 2026 GMT
Subject: CN=41d16a224eb28fad4b0edd36da9ca9eea6be233e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b7:20:c8:b0:8a:b2:09:fe:ee:d4:d9:21:20:
cc:3b:ed:7d:fd:3a:da:d1:fe:08:50:48:15:86:e9:
2c:9c:56:00:93:e8:49:bc:81:c3:94:6f:6d:d0:67:
5d:94:c2:55:07:31:ea:8d:42:f1:2b:61:97:a6:4b:
27:9b:bd:4a:73:26:6e:0c:eb:d2:ae:2f:52:1c:6f:
2c:89:27:0e:2a:9a:90:93:31:14:ae:7e:91:07:f7:
8e:0e:70:70:c8:cd:11:bc:09:b6:da:0f:9e:6a:64:
e8:fb:b7:e1:8c:8a:27:3c:67:b9:93:13:36:c5:57:
5f:51:44:88:66:e0:16:39:35:d8:74:b2:16:2b:96:
d2:44:0d:30:3e:c2:41:33:f8:15:7c:69:e6:94:65:
8b:c2:b2:73:f9:da:e4:bc:af:2c:9d:67:fa:96:4d:
72:7c:e1:85:14:1d:f9:bc:b9:b5:7c:49:07:24:d2:
e1:af:96:21:72:ab:14:12:40:b2:5b:d6:fb:6e:4d:
ea:c5:e7:02:a8:08:59:51:42:e9:89:f5:9e:d1:9c:
27:48:1b:df:12:d6:c0:c1:38:28:11:c9:39:0e:87:
23:28:07:57:3f:89:dd:49:d4:ae:9d:9c:ac:70:aa:
ff:0f:58:47:f6:74:4f:d2:fe:f6:e0:d6:3a:a7:ad:
f7:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:D1:6A:22:4E:B2:8F:AD:4B:0E:DD:36:DA:9C:A9:EE:A6:BE:23:3E
X509v3 Authority Key Identifier:
keyid:E6:4D:E3:EB:77:5C:A3:BE:2D:55:03:C9:C9:CD:3B:72:BB:CD:A4:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5k3j63dco74tVQPJyc07crvNpJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/05ce9d-6dae-4709-971f-341658243b4e/1/5k3j63dco74tVQPJyc07crvNpJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/05ce9d-6dae-4709-971f-341658243b4e/1/5k3j63dco74tVQPJyc07crvNpJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:cc:65:3f:70:a2:14:63:55:45:46:bd:a6:78:4c:8c:91:c9:
24:51:35:f3:4d:05:65:8b:76:1a:94:b3:f1:2a:9d:8e:bf:61:
1e:f3:96:76:b6:30:a8:26:b0:f9:93:57:eb:4c:88:a5:dd:13:
f0:bc:73:da:cc:52:76:35:53:c6:72:b1:ee:2c:e3:65:a1:c6:
d1:a2:74:98:de:39:28:a4:5e:31:c5:26:ee:83:3a:97:f7:6a:
1b:ff:18:0c:0f:b4:09:a7:4c:e8:38:58:14:27:9e:3a:78:c3:
db:32:92:4a:62:50:5f:fb:24:6e:46:0a:6f:2c:63:8f:d2:c4:
6d:f8:67:4d:05:16:ca:f2:5d:8c:66:77:04:b3:a4:7e:c2:3a:
3b:9f:3d:ab:b3:72:ec:00:80:b4:7d:15:93:bc:84:a0:97:6a:
80:3b:b0:51:32:41:89:c9:f4:a2:57:fa:a6:ca:d8:6d:51:06:
01:92:b7:4a:b7:81:d9:4d:de:10:6e:38:05:c6:60:45:a8:d8:
5c:75:4c:71:6f:c8:60:2f:93:7a:61:af:98:d1:71:be:17:77:
78:6d:47:ae:79:1d:a1:d9:e5:d1:46:6a:c6:81:ee:58:a9:c5:
f9:94:90:2f:94:87:a7:74:cb:81:91:7a:82:ce:a8:f7:c5:74:
66:3c:99:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzkf0Hmfvve55HuPAVWd+mDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2NGRlM2ViNzc1Y2EzYmUyZDU1MDNjOWM5Y2QzYjcyYmJj
ZGE0OWIwHhcNMjYwMzEzMDAwMTEwWhcNMjYwMzE0MDAwMTEwWjAzMTEwLwYDVQQD
Eyg0MWQxNmEyMjRlYjI4ZmFkNGIwZWRkMzZkYTljYTllZWE2YmUyMzNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAybcgyLCKsgn+7tTZISDMO+19/Tra
0f4IUEgVhuksnFYAk+hJvIHDlG9t0GddlMJVBzHqjULxK2GXpksnm71KcyZuDOvS
ri9SHG8siScOKpqQkzEUrn6RB/eODnBwyM0RvAm22g+eamTo+7fhjIonPGe5kxM2
xVdfUUSIZuAWOTXYdLIWK5bSRA0wPsJBM/gVfGnmlGWLwrJz+drkvK8snWf6lk1y
fOGFFB35vLm1fEkHJNLhr5YhcqsUEkCyW9b7bk3qxecCqAhZUULpifWe0ZwnSBvf
EtbAwTgoEck5DocjKAdXP4ndSdSunZyscKr/D1hH9nRP0v724NY6p633YwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEHRaiJOso+tSw7dNtqcqe6mviM+MB8GA1UdIwQY
MBaAFOZN4+t3XKO+LVUDycnNO3K7zaSbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWszajYzZGNvNzR0VlFQSnljMDdjcnZOcEpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS8wNWNlOWQtNmRhZS00NzA5LTk3MWYt
MzQxNjU4MjQzYjRlLzEvNWszajYzZGNvNzR0VlFQSnljMDdjcnZOcEpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS8wNWNlOWQtNmRhZS00NzA5LTk3MWYtMzQxNjU4MjQzYjRl
LzEvNWszajYzZGNvNzR0VlFQSnljMDdjcnZOcEpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACMxlP3Ci
FGNVRUa9pnhMjJHJJFE1800FZYt2GpSz8Sqdjr9hHvOWdrYwqCaw+ZNX60yIpd0T
8Lxz2sxSdjVTxnKx7izjZaHG0aJ0mN45KKReMcUm7oM6l/dqG/8YDA+0CadM6DhY
FCeeOnjD2zKSSmJQX/skbkYKbyxjj9LEbfhnTQUWyvJdjGZ3BLOkfsI6O589q7Ny
7ACAtH0Vk7yEoJdqgDuwUTJBicn0olf6psrYbVEGAZK3SreB2U3eEG44BcZgRajY
XHVMcW/IYC+TemGvmNFxvhd3eG1Hrnkdodnl0UZqxoHuWKnF+ZSQL5SHp3TLgZF6
gs6o98V0ZjyZhg==
-----END CERTIFICATE-----
Generated at Fri Mar 13 08:40:15 2026 by rpki-client