
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/63abe6-3551-414f-8792-1f9dfd814ab6/1/5qTV3yM4mOBPrj2D6Fgi2YgOCAY.mft
File: 5qTV3yM4mOBPrj2D6Fgi2YgOCAY.mft (raw, json)
Hash identifier: tmsM4tBu9KmzwgIDupZC+j0F1kDGocW65Nbw6LqsWn8=
Subject key identifier: 3C:E7:15:33:18:16:27:B0:E4:2D:F9:BB:24:E5:52:1E:F8:FC:C6:28
Authority key identifier: E6:A4:D5:DF:23:38:98:E0:4F:AE:3D:83:E8:58:22:D9:88:0E:08:06
Certificate issuer: /CN=e6a4d5df233898e04fae3d83e85822d9880e0806
Certificate serial: 019CA9EB53B8949CFB14F1CEB9207BCD413C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5qTV3yM4mOBPrj2D6Fgi2YgOCAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/63abe6-3551-414f-8792-1f9dfd814ab6/1/5qTV3yM4mOBPrj2D6Fgi2YgOCAY.mft
Manifest number: 78
Signing time: Sun 01 Mar 2026 15:01:37 +0000
Manifest this update: Sun 01 Mar 2026 15:01:37 +0000
Manifest next update: Mon 02 Mar 2026 15:01:37 +0000
Files and hashes: 1: 4SK6T1joxEKD3qcJIw_toyLw7Cg.asa (hash: S9VsSYa/rKcIFEh+rtQN72zQTr6Bln2NJ0sYtwMEOXo=)
2: 5qTV3yM4mOBPrj2D6Fgi2YgOCAY.crl (hash: VSYQj73oeSeHWCicEUNvM9wGlZ9yEsz8YceLaFu0aPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/63abe6-3551-414f-8792-1f9dfd814ab6/1/5qTV3yM4mOBPrj2D6Fgi2YgOCAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/63abe6-3551-414f-8792-1f9dfd814ab6/1/5qTV3yM4mOBPrj2D6Fgi2YgOCAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/5qTV3yM4mOBPrj2D6Fgi2YgOCAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:eb:53:b8:94:9c:fb:14:f1:ce:b9:20:7b:cd:41:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6a4d5df233898e04fae3d83e85822d9880e0806
Validity
Not Before: Mar 1 15:01:37 2026 GMT
Not After : Mar 2 15:01:37 2026 GMT
Subject: CN=3ce71533181627b0e42df9bb24e5521ef8fcc628
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c3:27:fb:8f:22:9f:84:c8:63:5c:62:da:15:
99:32:8d:63:e4:79:7d:1e:74:28:22:91:aa:38:c0:
68:34:38:ca:7c:99:6b:31:3c:6b:2b:87:99:0c:ff:
c1:d6:fb:44:1f:1c:c0:f5:e4:14:27:57:5d:04:b6:
0c:73:7e:63:90:75:9f:27:72:16:ad:9d:ca:58:ff:
83:2e:7c:1b:08:54:17:82:25:f5:27:92:89:2a:b3:
2c:bf:ee:dd:15:b6:28:86:a4:6a:0c:3a:c1:34:28:
7b:6e:fc:c3:45:3c:df:4d:b5:b8:26:af:e7:f7:42:
dd:ab:9c:c4:a6:7a:0c:89:1a:c6:d2:28:5a:2c:6d:
f6:cf:17:b0:ef:5f:9a:19:e5:6a:04:50:b7:77:d1:
f8:c0:4f:50:28:67:7b:2d:10:51:e1:5e:8a:00:39:
39:17:52:1c:20:ac:fb:e3:c2:df:dc:94:ee:a6:d9:
c7:0c:29:62:a8:72:b4:05:6c:f7:bb:97:55:18:ac:
64:7d:c2:00:bf:60:3a:d1:4f:6a:0c:95:0b:6d:11:
64:ca:a2:27:76:9f:ef:ba:3b:4a:b4:e9:ca:8d:b0:
91:26:72:ac:16:3f:05:a2:ea:1c:cd:f0:87:bb:36:
4b:30:4d:31:08:a9:4f:53:5c:8e:39:4b:e9:9f:58:
f3:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:E7:15:33:18:16:27:B0:E4:2D:F9:BB:24:E5:52:1E:F8:FC:C6:28
X509v3 Authority Key Identifier:
keyid:E6:A4:D5:DF:23:38:98:E0:4F:AE:3D:83:E8:58:22:D9:88:0E:08:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5qTV3yM4mOBPrj2D6Fgi2YgOCAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/63abe6-3551-414f-8792-1f9dfd814ab6/1/5qTV3yM4mOBPrj2D6Fgi2YgOCAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/63abe6-3551-414f-8792-1f9dfd814ab6/1/5qTV3yM4mOBPrj2D6Fgi2YgOCAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:cc:01:39:bc:ec:91:fc:b3:96:66:30:50:fc:6b:1f:13:c0:
7c:87:28:a2:19:b0:e4:81:e0:64:1c:d5:11:32:92:c2:bd:c9:
a3:46:11:ae:19:7b:cc:9c:60:64:f2:17:b2:41:f0:1f:f5:f1:
68:5d:b6:1c:af:48:b7:84:2f:18:67:e2:cd:55:33:48:9c:1d:
bb:68:1e:ee:1c:72:bd:fd:cd:8b:59:91:93:b4:7b:75:5a:2f:
3e:20:7b:f9:ef:42:ed:3e:9b:0d:e3:5e:19:3d:6e:5b:84:37:
c0:3c:a3:8f:b5:ac:ff:35:d6:84:49:54:8b:2f:15:4f:71:f2:
0e:30:35:e1:07:04:ab:83:f9:c9:7a:37:ba:e4:2c:9c:a8:98:
4a:9f:19:70:d5:1d:25:d5:f9:fc:9a:4a:5c:63:fe:38:58:c5:
4a:5b:d6:ac:d3:0a:df:3f:9e:79:3a:39:f8:d4:cf:a2:67:05:
f7:d4:77:fb:73:e5:de:00:bc:47:cb:48:3e:ef:0a:e4:35:ec:
18:22:a4:53:22:26:e7:78:29:51:fe:f0:38:cc:1c:09:75:4f:
b7:72:b4:a0:6c:1c:8c:26:b4:7d:f7:30:74:98:05:b2:86:86:
57:31:1c:3c:56:c9:67:ca:f4:22:d5:66:9b:7b:ad:a0:5d:af:
cd:16:5c:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:22:55 2026 by rpki-client