Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/516946-d5b6-4f0e-965c-5378de430377/1/5qr3mKBsFXlcb-xweYOYvrD01m4.mft
File: 5qr3mKBsFXlcb-xweYOYvrD01m4.mft (raw, json)
Hash identifier: 60Cqjs01M/aZ7CMRTCIJD/Rqop+7xeWwgiWSIhHvrAg=
Subject key identifier: 34:4D:12:42:81:DE:F5:CA:A8:22:B4:81:B8:11:9F:BE:35:C7:05:EE
Authority key identifier: E6:AA:F7:98:A0:6C:15:79:5C:6F:EC:70:79:83:98:BE:B0:F4:D6:6E
Certificate issuer: /CN=e6aaf798a06c15795c6fec70798398beb0f4d66e
Certificate serial: 019DB27D88914B82CC529A22D11A73C35DE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5qr3mKBsFXlcb-xweYOYvrD01m4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/516946-d5b6-4f0e-965c-5378de430377/1/5qr3mKBsFXlcb-xweYOYvrD01m4.mft
Manifest number: 06B7
Signing time: Wed 22 Apr 2026 00:01:04 +0000
Manifest this update: Wed 22 Apr 2026 00:01:04 +0000
Manifest next update: Thu 23 Apr 2026 00:01:04 +0000
Files and hashes: 1: 1-kDUYI7kuVmqQlf1mvxZtUR-Mpg.asa (hash: sXvSLo124AUM8vV6Hyy9bXbz/uQqmbFGdfAl+2Zq9Js=)
2: 5qr3mKBsFXlcb-xweYOYvrD01m4.crl (hash: JEmAPLCJzlkyfmSY31uRvJutwg3az85KP2N9vY77avM=)
3: febei7ElndSA55KLJAxPmYsaSA8.roa (hash: 3rk22KTNdwadb2vDfYhZFH+AJY/gYjCaDrWeCZ+y2x8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/516946-d5b6-4f0e-965c-5378de430377/1/5qr3mKBsFXlcb-xweYOYvrD01m4.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/516946-d5b6-4f0e-965c-5378de430377/1/5qr3mKBsFXlcb-xweYOYvrD01m4.mft
rsync://rpki.ripe.net/repository/DEFAULT/5qr3mKBsFXlcb-xweYOYvrD01m4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b2:7d:88:91:4b:82:cc:52:9a:22:d1:1a:73:c3:5d:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6aaf798a06c15795c6fec70798398beb0f4d66e
Validity
Not Before: Apr 22 00:01:04 2026 GMT
Not After : Apr 23 00:01:04 2026 GMT
Subject: CN=344d124281def5caa822b481b8119fbe35c705ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:07:71:18:0d:27:b6:f8:29:48:45:67:3a:75:
c3:13:a0:f7:9b:ad:98:06:e4:0a:74:35:25:31:82:
c4:1b:fd:a5:ad:28:2d:07:43:a9:70:d2:3f:e4:55:
5d:a3:f2:3c:63:61:88:42:2d:ee:f6:e0:97:63:09:
0b:3b:08:75:7e:65:61:25:e2:8b:39:c1:5e:b7:3d:
2c:9e:25:42:5c:55:15:02:00:fc:c9:ed:09:b4:bc:
b8:58:e6:5c:44:55:b2:d8:19:cf:14:21:7f:2a:d0:
ea:2e:30:5b:65:60:9c:a9:85:81:d9:47:fa:2b:92:
9c:5c:bf:45:eb:3d:2a:5f:6a:18:fb:23:45:50:e2:
47:0d:68:43:b9:39:4e:dc:ba:d1:d1:b7:30:e5:fb:
1b:b1:36:fa:1b:b3:c9:91:72:a2:f3:1c:95:82:ed:
4b:26:89:58:d7:3b:ef:36:1d:4b:c7:4d:e3:5d:33:
93:bb:5d:68:9f:8f:f5:79:1c:68:0c:8a:7e:0f:27:
60:fe:7f:22:c3:78:51:fc:4d:18:29:c5:42:e5:95:
c6:91:20:f3:61:ca:88:1e:e0:ca:17:4e:dc:17:c5:
00:58:ea:8d:d3:fd:25:92:31:7f:24:dc:fb:4e:69:
10:e1:4b:74:52:b3:3c:73:fc:59:65:68:8b:ae:f9:
78:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:4D:12:42:81:DE:F5:CA:A8:22:B4:81:B8:11:9F:BE:35:C7:05:EE
X509v3 Authority Key Identifier:
keyid:E6:AA:F7:98:A0:6C:15:79:5C:6F:EC:70:79:83:98:BE:B0:F4:D6:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5qr3mKBsFXlcb-xweYOYvrD01m4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/516946-d5b6-4f0e-965c-5378de430377/1/5qr3mKBsFXlcb-xweYOYvrD01m4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/516946-d5b6-4f0e-965c-5378de430377/1/5qr3mKBsFXlcb-xweYOYvrD01m4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:b6:24:2c:7c:8e:e9:c5:19:80:7e:ef:2b:91:a4:1e:34:4d:
eb:28:28:13:1c:0c:be:aa:55:cc:54:30:11:72:7a:b4:19:1d:
4b:a4:83:06:fa:a2:00:62:cb:a9:6c:56:fb:da:c0:33:03:db:
46:7d:da:4f:03:4f:32:b1:f6:f6:2b:f8:fe:55:ca:6d:ca:24:
c6:06:94:17:14:8c:7b:9c:ee:f1:d4:30:a0:7b:17:85:86:c4:
c1:d5:d2:4c:cc:1a:1e:5b:3d:a1:a6:98:b7:c0:9f:98:3e:6f:
34:04:de:73:91:2c:d4:3a:b7:bb:d7:9d:4f:a6:32:12:dc:e6:
16:b3:95:b1:95:b4:cc:5c:49:d8:71:14:a6:26:74:68:ae:20:
2b:f3:12:da:0f:01:13:79:81:72:cf:59:9d:4a:49:e4:33:7c:
04:fd:5c:63:0f:18:52:5e:02:17:70:d6:2b:94:5a:4c:7d:83:
fd:52:a2:03:1c:a6:7a:56:44:eb:a9:52:32:a7:7f:d3:70:7a:
d9:3d:4c:60:7f:05:86:b2:aa:5d:75:13:f4:b1:1d:76:3b:5d:
4f:d0:c1:54:9e:13:31:5c:e5:35:c2:32:01:51:3d:76:98:a5:
18:bb:91:d7:78:2c:98:57:dd:a3:8c:8d:a6:a5:6e:d6:75:9a:
fe:1f:32:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 09:19:14 2026 by rpki-client