Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/63abe6-3551-414f-8792-1f9dfd814ab6/1/5qTV3yM4mOBPrj2D6Fgi2YgOCAY.mft
File: 5qTV3yM4mOBPrj2D6Fgi2YgOCAY.mft (raw, json)
Hash identifier: 4IbMZAZwXVdFDGD1b9n+KT7InG4CQL6EnWOTesCMGkE=
Subject key identifier: 4D:91:7E:5D:4E:D4:57:EC:4B:41:C9:E5:A7:4F:D3:12:E7:DE:F6:B9
Authority key identifier: E6:A4:D5:DF:23:38:98:E0:4F:AE:3D:83:E8:58:22:D9:88:0E:08:06
Certificate issuer: /CN=e6a4d5df233898e04fae3d83e85822d9880e0806
Certificate serial: 019DA4F92B88396063E91BBB85908534719F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5qTV3yM4mOBPrj2D6Fgi2YgOCAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/63abe6-3551-414f-8792-1f9dfd814ab6/1/5qTV3yM4mOBPrj2D6Fgi2YgOCAY.mft
Manifest number: FA
Signing time: Sun 19 Apr 2026 09:01:26 +0000
Manifest this update: Sun 19 Apr 2026 09:01:26 +0000
Manifest next update: Mon 20 Apr 2026 09:01:26 +0000
Files and hashes: 1: 4SK6T1joxEKD3qcJIw_toyLw7Cg.asa (hash: S9VsSYa/rKcIFEh+rtQN72zQTr6Bln2NJ0sYtwMEOXo=)
2: 5qTV3yM4mOBPrj2D6Fgi2YgOCAY.crl (hash: 2FN/iWzqbPIOxeebiamg8Uy94GAsGWfzz4YYVCFW+dc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/63abe6-3551-414f-8792-1f9dfd814ab6/1/5qTV3yM4mOBPrj2D6Fgi2YgOCAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/63abe6-3551-414f-8792-1f9dfd814ab6/1/5qTV3yM4mOBPrj2D6Fgi2YgOCAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/5qTV3yM4mOBPrj2D6Fgi2YgOCAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:f9:2b:88:39:60:63:e9:1b:bb:85:90:85:34:71:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6a4d5df233898e04fae3d83e85822d9880e0806
Validity
Not Before: Apr 19 09:01:26 2026 GMT
Not After : Apr 20 09:01:26 2026 GMT
Subject: CN=4d917e5d4ed457ec4b41c9e5a74fd312e7def6b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:fe:e2:36:3f:68:d6:b5:b1:84:38:5a:45:bb:
15:84:74:36:14:de:f5:c9:4e:c2:d5:23:aa:6b:0d:
5b:4a:84:bb:35:44:d3:17:27:7a:9b:03:90:14:10:
6b:a0:7c:93:cc:5d:ba:8f:b3:4e:d1:a8:af:7a:38:
5b:a0:50:23:fe:31:fc:3d:e4:0a:66:b1:c4:2d:b6:
d2:3e:e5:e0:33:5b:9c:1b:46:bd:96:08:24:2d:22:
9f:fb:b3:98:d9:f8:c2:0f:1a:35:b9:26:38:bd:61:
ea:e9:ad:ec:6b:da:7b:f0:1f:07:f2:44:8c:7f:2a:
dc:79:b1:0b:46:5e:df:1c:68:8c:25:ba:24:4c:1a:
eb:ea:44:b3:3f:3a:de:94:dc:8c:ad:75:33:f2:8a:
7f:00:29:78:55:91:31:fa:83:11:5a:f8:74:50:d2:
94:2b:fd:eb:26:6f:91:bd:bc:25:ae:d8:9d:51:fe:
88:0c:cc:e9:31:42:17:1d:9e:55:e7:3a:3f:2c:2e:
15:ec:24:93:60:d8:5c:b6:93:9c:ca:71:5b:37:75:
56:da:9c:b9:48:24:e5:f2:15:e5:5d:52:d5:63:93:
e3:5c:76:08:3f:fc:65:8e:9b:02:6d:10:a5:91:b1:
3e:b5:6f:37:5a:05:50:e4:21:82:ff:c9:7d:14:bf:
f9:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:91:7E:5D:4E:D4:57:EC:4B:41:C9:E5:A7:4F:D3:12:E7:DE:F6:B9
X509v3 Authority Key Identifier:
keyid:E6:A4:D5:DF:23:38:98:E0:4F:AE:3D:83:E8:58:22:D9:88:0E:08:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5qTV3yM4mOBPrj2D6Fgi2YgOCAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/63abe6-3551-414f-8792-1f9dfd814ab6/1/5qTV3yM4mOBPrj2D6Fgi2YgOCAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/63abe6-3551-414f-8792-1f9dfd814ab6/1/5qTV3yM4mOBPrj2D6Fgi2YgOCAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:f0:ed:53:a6:1c:82:fb:28:31:95:fd:fe:1c:41:e4:e7:ed:
f1:e4:ee:d6:95:08:22:2f:f9:fd:7c:7a:a2:7e:ce:33:24:23:
64:eb:c3:46:28:57:c6:3a:85:8e:89:33:92:dc:27:bf:30:a6:
4e:cf:7d:19:7b:de:71:6b:96:d6:e3:95:10:bc:cb:f1:a6:c6:
8f:de:3e:64:f8:be:7e:76:a9:a6:bd:83:f7:e4:78:aa:a7:73:
41:44:8f:00:b1:b5:c0:21:78:3e:04:ff:76:68:31:a4:d3:d7:
a3:31:57:6f:32:9e:17:85:9d:0f:cb:cf:40:3b:9e:00:ad:b8:
84:5c:3d:96:35:e3:06:3f:23:ed:29:f9:b1:48:66:01:a6:8f:
fc:07:25:05:50:01:c4:1c:0b:c1:ff:58:bd:c4:6e:74:40:60:
78:ce:92:6c:7a:5b:19:6b:e2:a7:7f:ed:a7:2b:8a:8f:61:38:
d2:ed:86:49:17:3e:4d:b3:3c:10:8f:99:3c:48:37:44:a5:89:
b4:df:98:5d:a7:c6:84:e4:5e:01:70:c3:21:bb:bb:84:59:4f:
c6:68:a3:27:bd:04:b6:ef:c7:de:47:77:2e:5a:76:e5:79:af:
a0:76:b3:1f:93:0b:04:83:72:63:94:0e:96:30:e6:d8:77:00:
4f:31:0d:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:44:48 2026 by rpki-client