Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/05ce9d-6dae-4709-971f-341658243b4e/1/5k3j63dco74tVQPJyc07crvNpJs.mft
File: 5k3j63dco74tVQPJyc07crvNpJs.mft (raw, json)
Hash identifier: wghm2vnY/c6AffN28mnIIWsd7M7jhQDGfRSvMHwbLJY=
Subject key identifier: DF:37:4C:17:21:C2:D2:A0:64:19:F1:EF:8D:0E:A7:98:7F:5D:A5:78
Authority key identifier: E6:4D:E3:EB:77:5C:A3:BE:2D:55:03:C9:C9:CD:3B:72:BB:CD:A4:9B
Certificate issuer: /CN=e64de3eb775ca3be2d5503c9c9cd3b72bbcda49b
Certificate serial: 01A08B31134093B46BBBEFDC80EBABE45B3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5k3j63dco74tVQPJyc07crvNpJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/05ce9d-6dae-4709-971f-341658243b4e/1/5k3j63dco74tVQPJyc07crvNpJs.mft
Manifest number: 02FB
Signing time: Thu 10 Sep 2026 12:00:44 +0000
Manifest this update: Thu 10 Sep 2026 12:00:44 +0000
Manifest next update: Fri 11 Sep 2026 12:00:44 +0000
Files and hashes: 1: 5k3j63dco74tVQPJyc07crvNpJs.crl (hash: yP6OOYBubLSvrO0Eyw9YWV6wdVCluJe30JleOT0mhUM=)
2: tfwhmbNUeb70v_DXkuhRwPo_elo.roa (hash: VbIkneiXqdXvw+KPGB3c+sh95KU6gx9gOTx0TPGcPy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/05ce9d-6dae-4709-971f-341658243b4e/1/5k3j63dco74tVQPJyc07crvNpJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/05ce9d-6dae-4709-971f-341658243b4e/1/5k3j63dco74tVQPJyc07crvNpJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/5k3j63dco74tVQPJyc07crvNpJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 12:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:31:13:40:93:b4:6b:bb:ef:dc:80:eb:ab:e4:5b:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e64de3eb775ca3be2d5503c9c9cd3b72bbcda49b
Validity
Not Before: Sep 10 12:00:44 2026 GMT
Not After : Sep 11 12:00:44 2026 GMT
Subject: CN=df374c1721c2d2a06419f1ef8d0ea7987f5da578
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:44:42:31:a4:d9:56:1a:f6:50:13:a6:61:a8:
0a:71:cb:b0:e5:1e:b4:6c:e9:aa:5d:91:f4:52:5f:
6e:90:f4:c8:07:5f:b9:1a:73:91:30:8d:0f:46:37:
fc:35:5d:08:d3:16:15:bd:4e:36:b8:bd:95:35:e4:
44:83:58:bb:92:ef:66:63:67:28:6d:85:d6:ed:fa:
17:54:d5:4d:86:fc:fe:e1:22:72:67:ed:81:c3:ed:
16:0d:58:95:f7:1f:f7:e0:b9:90:5d:c8:86:c3:f3:
ae:06:94:3d:f9:41:57:41:d6:19:32:fe:d6:7e:4b:
a5:40:d6:30:98:20:51:9b:4b:8e:a6:5d:0f:a7:77:
0d:30:73:eb:77:68:1c:2a:67:30:78:99:8b:ec:41:
c2:04:e8:45:82:81:69:5d:b7:1f:06:4f:a3:3c:34:
59:34:29:50:00:2d:79:24:b4:1c:39:4d:f8:72:c5:
07:f1:13:1c:bf:a9:92:12:e1:77:68:19:17:b2:a9:
27:39:58:2a:31:5b:7b:9a:f7:36:0b:af:a5:cb:73:
0b:21:33:97:1e:5f:c5:2b:ce:12:4f:34:6f:c8:b9:
62:89:7a:61:a4:4a:c0:29:b1:ba:92:57:ba:62:fb:
c5:cf:06:29:dd:1f:8c:18:c6:b7:7f:5f:26:ff:81:
7e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:37:4C:17:21:C2:D2:A0:64:19:F1:EF:8D:0E:A7:98:7F:5D:A5:78
X509v3 Authority Key Identifier:
keyid:E6:4D:E3:EB:77:5C:A3:BE:2D:55:03:C9:C9:CD:3B:72:BB:CD:A4:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5k3j63dco74tVQPJyc07crvNpJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/05ce9d-6dae-4709-971f-341658243b4e/1/5k3j63dco74tVQPJyc07crvNpJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/05ce9d-6dae-4709-971f-341658243b4e/1/5k3j63dco74tVQPJyc07crvNpJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:c6:c4:32:00:c3:d0:29:c1:5f:7b:26:52:50:dc:ab:42:a9:
fd:1f:29:7a:c2:20:51:ea:54:4a:cf:5e:eb:2c:c4:3d:da:6c:
99:bc:d0:2e:bd:20:55:36:9e:fb:2a:72:e4:3c:a4:ea:a7:6e:
ab:db:75:0b:53:81:b9:44:0d:87:4a:e3:ee:97:89:7e:6b:10:
74:3e:fe:3e:b9:eb:a2:05:4a:f7:c1:e5:11:77:50:0b:e3:ce:
fb:1f:6c:5d:50:26:b8:44:67:65:6e:0c:f6:b9:7b:30:de:3e:
7c:cc:d5:75:eb:26:04:19:01:7b:85:8a:d2:19:7d:88:87:92:
36:08:44:db:b7:d2:54:40:90:86:db:35:19:b5:26:de:81:c3:
4b:34:9d:c8:76:37:33:c7:ce:e2:d5:9a:c4:c0:ef:ac:7a:88:
a2:e7:f6:56:6b:3e:ae:3a:4a:46:54:1a:ac:6d:1c:46:8c:0f:
b9:11:a6:b5:19:d5:b3:40:e7:e7:31:39:44:c4:45:ec:cb:98:
bf:d7:3c:ca:18:c5:bc:ea:40:28:18:c8:81:39:d3:f5:94:cf:
00:60:79:52:c7:25:5e:ed:0b:a0:13:1e:f2:74:16:a8:82:8a:
cf:10:dd:f2:16:61:ea:7d:05:d1:7d:2f:ee:b1:72:94:7d:50:
3b:e2:33:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:27:26 2026 by rpki-client