Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/6470ac-1809-4d59-8714-73bdcb9de755/1/5iq6ZBCCl1gsyujnuobyz8nh1ao.mft
File: 5iq6ZBCCl1gsyujnuobyz8nh1ao.mft (raw, json)
Hash identifier: QsKcJognqPfUWTUoD960s5/47iKn8tCyE9daKD77tIY=
Subject key identifier: A5:63:FD:04:76:8F:C0:93:7D:F5:8D:16:6A:64:3F:E2:39:5B:AA:B7
Authority key identifier: E6:2A:BA:64:10:82:97:58:2C:CA:E8:E7:BA:86:F2:CF:C9:E1:D5:AA
Certificate issuer: /CN=e62aba64108297582ccae8e7ba86f2cfc9e1d5aa
Certificate serial: 019DCDF4E384244E612D150286A98F12B0B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5iq6ZBCCl1gsyujnuobyz8nh1ao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/6470ac-1809-4d59-8714-73bdcb9de755/1/5iq6ZBCCl1gsyujnuobyz8nh1ao.mft
Manifest number: 08DE
Signing time: Mon 27 Apr 2026 08:01:11 +0000
Manifest this update: Mon 27 Apr 2026 08:01:11 +0000
Manifest next update: Tue 28 Apr 2026 08:01:11 +0000
Files and hashes: 1: 5iq6ZBCCl1gsyujnuobyz8nh1ao.crl (hash: L+xsYYpfWKD5yctRJj2EW7M+7xOIYNuqlJAHYWuAiuQ=)
2: om31b6FWDBGxEuwor71QHsugvxY.roa (hash: nmUcpfkGCJ2B9JhtJKk02OVz3WisKOfii97PhUxXZVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/6470ac-1809-4d59-8714-73bdcb9de755/1/5iq6ZBCCl1gsyujnuobyz8nh1ao.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/6470ac-1809-4d59-8714-73bdcb9de755/1/5iq6ZBCCl1gsyujnuobyz8nh1ao.mft
rsync://rpki.ripe.net/repository/DEFAULT/5iq6ZBCCl1gsyujnuobyz8nh1ao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:f4:e3:84:24:4e:61:2d:15:02:86:a9:8f:12:b0:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e62aba64108297582ccae8e7ba86f2cfc9e1d5aa
Validity
Not Before: Apr 27 08:01:11 2026 GMT
Not After : Apr 28 08:01:11 2026 GMT
Subject: CN=a563fd04768fc0937df58d166a643fe2395baab7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:0d:78:13:78:8e:a7:87:d4:94:ef:00:f4:47:
1e:8e:93:5c:f7:87:db:b9:21:71:7b:46:0c:c5:1d:
ce:9b:e9:5e:2f:39:1e:3c:18:bb:4f:18:fb:a4:29:
2f:41:74:f2:74:94:62:0e:c8:eb:60:6b:d1:78:0d:
7a:25:06:61:65:ac:2b:5b:89:f9:43:56:a4:de:0f:
6e:43:7e:65:b5:d3:9e:09:c3:d5:b2:b7:88:be:0d:
df:30:54:ae:0e:ca:be:63:e9:d6:f0:cf:1c:56:9e:
85:70:30:b8:b7:b3:a3:77:fa:95:65:2d:21:4f:26:
2c:35:f7:13:ce:e7:64:31:4b:78:d9:2f:c0:ee:72:
31:57:81:a4:0d:25:70:c1:28:e8:60:01:3c:ca:bd:
5d:e3:91:55:e7:a2:cd:54:66:13:0f:72:3d:fd:d9:
ee:f4:aa:44:cd:9c:76:1b:7f:d1:30:35:f7:97:db:
08:ef:af:e2:3c:67:80:b7:4c:a5:5c:47:fe:28:2a:
90:e2:b1:a1:f8:e9:0f:5a:a0:04:62:c0:ea:97:f6:
35:dd:14:db:e5:fd:64:66:75:cf:a8:93:31:11:22:
20:40:71:ff:97:74:67:3c:9b:79:83:30:41:90:a2:
0e:8b:37:75:95:17:3b:c0:69:f1:28:64:c2:bc:e3:
44:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:63:FD:04:76:8F:C0:93:7D:F5:8D:16:6A:64:3F:E2:39:5B:AA:B7
X509v3 Authority Key Identifier:
keyid:E6:2A:BA:64:10:82:97:58:2C:CA:E8:E7:BA:86:F2:CF:C9:E1:D5:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5iq6ZBCCl1gsyujnuobyz8nh1ao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/6470ac-1809-4d59-8714-73bdcb9de755/1/5iq6ZBCCl1gsyujnuobyz8nh1ao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/6470ac-1809-4d59-8714-73bdcb9de755/1/5iq6ZBCCl1gsyujnuobyz8nh1ao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:0f:b1:f2:f7:68:08:6d:70:43:f7:95:bc:8c:00:b2:76:28:
48:49:a8:09:c3:d2:82:a0:78:fd:ef:9f:53:53:d7:9c:39:95:
42:0e:4c:ad:68:87:63:84:21:a2:fb:c4:28:67:14:47:41:db:
e1:71:40:91:24:b3:b8:be:9a:44:09:21:83:da:50:76:b3:ec:
08:28:98:04:33:fe:27:d8:82:2d:aa:5c:e0:b2:d3:71:b5:6b:
4b:e1:79:c7:3a:30:ef:a2:a6:e9:20:6f:6b:c5:08:fe:a6:0e:
7e:0c:f5:36:c7:9f:07:99:5d:85:07:ce:b2:b7:3c:3e:b7:d8:
82:a5:cd:0a:bf:77:60:91:80:85:a9:51:cd:91:62:5b:4c:b0:
6a:d5:6e:c2:c9:e9:fa:c3:ea:93:16:46:36:89:e2:24:81:0f:
dc:44:b4:21:ff:35:22:33:87:98:7b:5e:45:cd:a7:2d:24:af:
7a:a5:4b:69:5b:05:69:15:55:a7:ad:74:25:5b:bc:47:9b:a4:
9c:73:f0:10:76:9f:ab:97:28:d6:9e:a7:e3:33:46:0e:c4:73:
69:4e:fd:35:35:5c:2c:87:5d:b6:8f:bb:82:41:5f:11:f2:d5:
e8:4f:1a:ea:12:f5:57:4c:37:5d:73:4a:ad:4b:56:b5:83:7a:
85:b9:4b:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 14:36:24 2026 by rpki-client