Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/1dc732-888e-42eb-8d8c-ff00f2ac8c78/1/5qowZQKj7IBJPXU0jChYsa9-z4A.mft
File: 5qowZQKj7IBJPXU0jChYsa9-z4A.mft (raw, json)
Hash identifier: mWfVJqHgk7xlPuHuu00y5pDcrmfFQko9r7dPhPi5T2c=
Subject key identifier: 43:46:C2:46:26:A4:8A:EF:6E:FC:89:16:FA:87:0C:9A:58:1E:4E:98
Authority key identifier: E6:AA:30:65:02:A3:EC:80:49:3D:75:34:8C:28:58:B1:AF:7E:CF:80
Certificate issuer: /CN=e6aa306502a3ec80493d75348c2858b1af7ecf80
Certificate serial: 019CAB6BC5BF4ACC6E5436515B8B2403F220
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5qowZQKj7IBJPXU0jChYsa9-z4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/1dc732-888e-42eb-8d8c-ff00f2ac8c78/1/5qowZQKj7IBJPXU0jChYsa9-z4A.mft
Manifest number: 06CB
Signing time: Sun 01 Mar 2026 22:01:32 +0000
Manifest this update: Sun 01 Mar 2026 22:01:32 +0000
Manifest next update: Mon 02 Mar 2026 22:01:32 +0000
Files and hashes: 1: 5qowZQKj7IBJPXU0jChYsa9-z4A.crl (hash: cfEWOqphwV6SbMpxFYfPwEQ9LwXbw777WVzKXNkWr7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/1dc732-888e-42eb-8d8c-ff00f2ac8c78/1/5qowZQKj7IBJPXU0jChYsa9-z4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/1dc732-888e-42eb-8d8c-ff00f2ac8c78/1/5qowZQKj7IBJPXU0jChYsa9-z4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/5qowZQKj7IBJPXU0jChYsa9-z4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:c5:bf:4a:cc:6e:54:36:51:5b:8b:24:03:f2:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6aa306502a3ec80493d75348c2858b1af7ecf80
Validity
Not Before: Mar 1 22:01:32 2026 GMT
Not After : Mar 2 22:01:32 2026 GMT
Subject: CN=4346c24626a48aef6efc8916fa870c9a581e4e98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:87:71:f9:e3:36:a0:43:3d:ba:4c:fd:af:c3:
03:26:dd:d9:95:60:2c:99:4c:e1:ef:28:44:82:c6:
27:c2:06:56:ad:c1:f3:d0:ce:86:80:ce:fd:a8:8e:
44:b7:d8:24:92:e7:a7:c9:61:c2:74:2a:c8:e5:95:
72:aa:7f:d6:7d:90:a5:1d:ba:ac:73:c5:fd:88:2d:
ad:6f:f6:71:c7:87:f6:58:0c:6f:f9:68:dc:93:b4:
93:82:a7:bb:b9:0b:9c:a5:28:fe:2d:fd:2c:1b:0f:
27:e6:84:95:36:25:2c:4c:f5:f5:be:e0:4c:28:03:
54:45:27:28:5c:3f:b2:a7:56:6e:9d:0a:c3:5e:b9:
88:18:7f:f1:21:2d:66:25:a2:af:e0:0f:f3:4f:3f:
f9:cd:6c:c8:8c:56:cd:50:8c:1c:93:8b:a3:1d:3d:
77:b1:89:66:71:b6:f2:de:3c:25:36:1f:bf:3c:31:
51:99:f4:af:15:11:32:9d:f9:c2:83:f3:b4:16:ae:
3b:ec:2c:8f:9d:52:ef:ab:75:ff:23:21:b8:ba:90:
d7:17:55:68:8c:8e:99:39:2f:8e:8d:f9:9e:c9:13:
3f:9c:25:e7:96:71:f4:3c:68:e7:eb:4e:00:cf:b4:
e5:80:e7:cd:5b:d6:a4:c9:0b:a9:37:44:36:ea:7b:
14:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:46:C2:46:26:A4:8A:EF:6E:FC:89:16:FA:87:0C:9A:58:1E:4E:98
X509v3 Authority Key Identifier:
keyid:E6:AA:30:65:02:A3:EC:80:49:3D:75:34:8C:28:58:B1:AF:7E:CF:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5qowZQKj7IBJPXU0jChYsa9-z4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/1dc732-888e-42eb-8d8c-ff00f2ac8c78/1/5qowZQKj7IBJPXU0jChYsa9-z4A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/1dc732-888e-42eb-8d8c-ff00f2ac8c78/1/5qowZQKj7IBJPXU0jChYsa9-z4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:61:cf:85:14:6f:87:6e:b4:2c:3e:b5:49:c5:bc:1f:9b:f3:
20:79:42:f3:8e:d0:5b:23:6c:49:ad:84:81:57:8b:35:34:b9:
43:58:42:ce:37:8a:57:3a:6f:20:57:e5:0f:3c:fb:44:ef:5c:
95:8e:cb:f4:a8:5e:84:55:24:0f:eb:46:cb:6e:da:79:39:62:
4a:7a:f3:dd:17:d6:54:17:f8:d2:8f:8b:93:ca:05:c5:22:79:
3a:11:cc:fb:1f:01:ec:f0:6d:4b:e6:f0:1e:1b:43:fe:41:f4:
0d:ce:3f:e3:c1:f5:db:c0:50:72:6f:92:4d:26:75:c2:9d:14:
bf:b9:21:eb:e8:a2:4d:76:b3:67:a9:60:e3:9b:30:1e:33:69:
92:60:12:92:31:87:1e:ad:d3:ca:8e:54:e7:da:06:5b:0c:f6:
73:b0:aa:57:00:bc:47:53:07:5a:a0:94:c0:71:34:d9:4a:9d:
db:6e:1c:e2:52:80:c0:48:24:2c:c7:c3:2a:b6:e3:f0:f7:24:
f5:b6:a0:6c:89:e3:4a:0f:75:b9:2c:f9:bc:98:7d:42:58:4f:
15:d7:83:da:94:b5:13:50:cb:45:53:9c:94:02:79:4c:c1:88:
be:2b:b4:63:ba:29:a0:5e:9a:b8:64:0f:5c:fa:e8:71:0f:26:
b6:8e:cc:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyra8W/SsxuVDZRW4skA/IgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2YWEzMDY1MDJhM2VjODA0OTNkNzUzNDhjMjg1OGIxYWY3
ZWNmODAwHhcNMjYwMzAxMjIwMTMyWhcNMjYwMzAyMjIwMTMyWjAzMTEwLwYDVQQD
Eyg0MzQ2YzI0NjI2YTQ4YWVmNmVmYzg5MTZmYTg3MGM5YTU4MWU0ZTk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYdx+eM2oEM9ukz9r8MDJt3ZlWAs
mUzh7yhEgsYnwgZWrcHz0M6GgM79qI5Et9gkkuenyWHCdCrI5ZVyqn/WfZClHbqs
c8X9iC2tb/Zxx4f2WAxv+Wjck7STgqe7uQucpSj+Lf0sGw8n5oSVNiUsTPX1vuBM
KANURScoXD+yp1ZunQrDXrmIGH/xIS1mJaKv4A/zTz/5zWzIjFbNUIwck4ujHT13
sYlmcbby3jwlNh+/PDFRmfSvFREynfnCg/O0Fq477CyPnVLvq3X/IyG4upDXF1Vo
jI6ZOS+OjfmeyRM/nCXnlnH0PGjn604Az7TlgOfNW9akyQupN0Q26nsUywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFENGwkYmpIrvbvyJFvqHDJpYHk6YMB8GA1UdIwQY
MBaAFOaqMGUCo+yAST11NIwoWLGvfs+AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXFvd1pRS2o3SUJKUFhVMGpDaFlzYTktejRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8xZGM3MzItODg4ZS00MmViLThkOGMt
ZmYwMGYyYWM4Yzc4LzEvNXFvd1pRS2o3SUJKUFhVMGpDaFlzYTktejRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC8xZGM3MzItODg4ZS00MmViLThkOGMtZmYwMGYyYWM4Yzc4
LzEvNXFvd1pRS2o3SUJKUFhVMGpDaFlzYTktejRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq2HPhRRv
h260LD61ScW8H5vzIHlC847QWyNsSa2EgVeLNTS5Q1hCzjeKVzpvIFflDzz7RO9c
lY7L9KhehFUkD+tGy27aeTliSnrz3RfWVBf40o+Lk8oFxSJ5OhHM+x8B7PBtS+bw
HhtD/kH0Dc4/48H128BQcm+STSZ1wp0Uv7kh6+iiTXazZ6lg45swHjNpkmASkjGH
Hq3Tyo5U59oGWwz2c7CqVwC8R1MHWqCUwHE02Uqd224c4lKAwEgkLMfDKrbj8Pck
9bagbInjSg91uSz5vJh9QlhPFdeD2pS1E1DLRVOclAJ5TMGIviu0Y7opoF6auGQP
XProcQ8mto7MSQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:47:05 2026 by rpki-client