Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/228e16-f808-4471-a984-364ee2859f2c/1/5qirioB4uztX5W_3wL1Npj7oLIs.mft
File: 5qirioB4uztX5W_3wL1Npj7oLIs.mft (raw, json)
Hash identifier: 4ohCEfFTt3OOtv4ZORHCo8Q/hHHwFFsr7+6MbKX58qY=
Subject key identifier: 14:06:E3:41:1B:FA:4F:C7:4C:F6:4E:56:0B:96:0C:E7:83:E6:41:1B
Authority key identifier: E6:A8:AB:8A:80:78:BB:3B:57:E5:6F:F7:C0:BD:4D:A6:3E:E8:2C:8B
Certificate issuer: /CN=e6a8ab8a8078bb3b57e56ff7c0bd4da63ee82c8b
Certificate serial: 019CA90ECACAB0B63B4C8A20EF32A7E4AB56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5qirioB4uztX5W_3wL1Npj7oLIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/228e16-f808-4471-a984-364ee2859f2c/1/5qirioB4uztX5W_3wL1Npj7oLIs.mft
Manifest number: 1352
Signing time: Sun 01 Mar 2026 11:00:44 +0000
Manifest this update: Sun 01 Mar 2026 11:00:44 +0000
Manifest next update: Mon 02 Mar 2026 11:00:44 +0000
Files and hashes: 1: 5qirioB4uztX5W_3wL1Npj7oLIs.crl (hash: 3upC9xDYHK3fq2hFHbYtsPmK3XHEd3ZcKKiMjIjPX7w=)
2: KlzzYC8Q2UVlJx85f6zf8EkPNPg.asa (hash: K23b9m4+V1oJoVx1ztFLX9QMWZu++2ah4sRiGDlVDmU=)
3: Wm5un5s1l1Uczxx1_V5CG7Ar2bA.roa (hash: B9uLWiqoWEc0M4LCpE9t/HNlmsxvolzzjhIuXCpoz+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/228e16-f808-4471-a984-364ee2859f2c/1/5qirioB4uztX5W_3wL1Npj7oLIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/228e16-f808-4471-a984-364ee2859f2c/1/5qirioB4uztX5W_3wL1Npj7oLIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/5qirioB4uztX5W_3wL1Npj7oLIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:0e:ca:ca:b0:b6:3b:4c:8a:20:ef:32:a7:e4:ab:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6a8ab8a8078bb3b57e56ff7c0bd4da63ee82c8b
Validity
Not Before: Mar 1 11:00:44 2026 GMT
Not After : Mar 2 11:00:44 2026 GMT
Subject: CN=1406e3411bfa4fc74cf64e560b960ce783e6411b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c5:5b:c0:72:6c:76:e5:4c:85:ae:70:e2:16:
51:1e:0e:4f:25:ba:f9:ad:52:33:b8:b7:94:f8:ad:
0d:c0:45:97:27:13:db:55:f2:76:18:12:82:ab:38:
e0:83:f1:7b:d6:03:99:df:cb:de:b9:af:bd:1f:3d:
d3:a0:af:2c:30:01:85:eb:90:cf:10:ce:7a:5f:46:
8a:7c:b1:11:95:7d:c3:0f:7c:f2:0e:2d:a1:41:ae:
ef:35:5f:d8:1e:c8:14:24:07:fb:be:e9:c0:0b:29:
aa:d6:59:d4:67:95:c8:f1:88:de:24:d2:0b:91:52:
db:4e:b4:1b:d2:f1:03:93:ed:c8:12:84:0a:11:88:
9f:7b:81:f6:a6:34:dc:62:a0:43:8b:6b:31:7e:1a:
15:2f:66:62:58:41:85:b4:d8:91:91:20:21:57:23:
0b:0b:61:bd:87:8e:a9:fe:9d:4b:d9:2e:29:9e:f6:
96:8d:54:65:9a:07:b9:15:ff:69:8d:26:9a:73:9d:
54:3d:8f:43:65:40:b8:c8:43:15:c9:ea:c5:e6:ac:
89:19:2d:c9:0c:1d:e3:63:a2:b0:fa:97:29:8e:30:
00:70:ab:36:53:fe:ec:c1:4a:ce:cf:cd:05:c7:72:
1e:3a:ea:07:17:65:57:7f:e5:34:df:8a:ee:90:d7:
56:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:06:E3:41:1B:FA:4F:C7:4C:F6:4E:56:0B:96:0C:E7:83:E6:41:1B
X509v3 Authority Key Identifier:
keyid:E6:A8:AB:8A:80:78:BB:3B:57:E5:6F:F7:C0:BD:4D:A6:3E:E8:2C:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5qirioB4uztX5W_3wL1Npj7oLIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/228e16-f808-4471-a984-364ee2859f2c/1/5qirioB4uztX5W_3wL1Npj7oLIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/228e16-f808-4471-a984-364ee2859f2c/1/5qirioB4uztX5W_3wL1Npj7oLIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:73:54:92:ae:e3:ab:2c:f9:71:08:0b:9b:c5:78:33:a5:f6:
11:bf:e4:81:a6:fd:31:68:b4:0f:a5:e3:ce:e9:18:20:80:e9:
d9:f1:80:f4:e4:09:87:6a:f7:d9:ce:8a:d7:09:ed:2b:9f:08:
ac:bd:b0:0d:98:cb:59:52:da:aa:06:6f:7e:47:32:3b:a8:8e:
f8:ae:c1:9a:de:33:9e:f8:f4:ae:7e:1a:80:20:46:f2:ef:86:
93:69:60:76:5e:fe:4f:33:d8:71:e9:2c:7d:52:2b:98:02:d0:
5a:49:08:e4:64:d2:b2:81:cf:3f:96:7b:9f:60:43:92:50:ba:
51:b4:78:9d:87:27:39:a1:26:e2:33:d6:2e:99:10:25:cc:40:
75:98:e9:44:86:06:81:60:bc:8b:1b:4d:30:32:d8:73:ad:03:
d4:6d:78:b6:3c:f4:d0:f5:5a:f6:20:e2:10:f2:5d:c3:0d:9f:
ec:13:a9:2a:e8:6c:13:9c:8d:ba:56:38:c0:95:60:45:53:2d:
38:13:41:78:0c:4e:92:c9:18:20:53:1b:bb:a1:6b:14:9d:2c:
4a:7c:ce:f3:69:5d:16:c4:fa:e8:63:33:8b:f5:95:bf:a7:69:
30:16:ac:11:e8:5d:8a:7b:f8:d3:27:26:12:9d:66:88:06:1f:
39:30:90:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 19:25:24 2026 by rpki-client