Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/2b264d-1d0c-44c5-aee7-f132aea6f7a2/1/5r62dxRfZMr7zXE26B81onSujow.mft
File: 5r62dxRfZMr7zXE26B81onSujow.mft (raw, json)
Hash identifier: 6lMBm4wRo1YjksxR65biKiSkVJp6q5nVleWuu6CQJ54=
Subject key identifier: C2:3B:38:B7:38:C5:01:0B:8D:8A:A7:21:17:C5:56:7E:6A:EC:FA:0B
Authority key identifier: E6:BE:B6:77:14:5F:64:CA:FB:CD:71:36:E8:1F:35:A2:74:AE:8E:8C
Certificate issuer: /CN=e6beb677145f64cafbcd7136e81f35a274ae8e8c
Certificate serial: 019DA48AEABDA301222BB69A9BC80FB4883A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5r62dxRfZMr7zXE26B81onSujow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/2b264d-1d0c-44c5-aee7-f132aea6f7a2/1/5r62dxRfZMr7zXE26B81onSujow.mft
Manifest number: 020B
Signing time: Sun 19 Apr 2026 07:01:00 +0000
Manifest this update: Sun 19 Apr 2026 07:01:00 +0000
Manifest next update: Mon 20 Apr 2026 07:01:00 +0000
Files and hashes: 1: 5r62dxRfZMr7zXE26B81onSujow.crl (hash: rDADuK9wlRx8RLfDMuDVdXHV4jj2BgFjYZ5Fjgic+LM=)
2: UEVvSHR4RXiw4RWetmh_ZCqzc9E.roa (hash: bFzxJ++JMPEdKwW88mp2Ckxb5L1ulPilrj2DRxpxsNw=)
3: tjprewfipgbi2VkjPO3arRc-3cs.asa (hash: 6WFMJ/QA4RHzwHp7zyMKTAL+OYliyrWyqQs9rXBT3nY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/2b264d-1d0c-44c5-aee7-f132aea6f7a2/1/5r62dxRfZMr7zXE26B81onSujow.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/2b264d-1d0c-44c5-aee7-f132aea6f7a2/1/5r62dxRfZMr7zXE26B81onSujow.mft
rsync://rpki.ripe.net/repository/DEFAULT/5r62dxRfZMr7zXE26B81onSujow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:8a:ea:bd:a3:01:22:2b:b6:9a:9b:c8:0f:b4:88:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6beb677145f64cafbcd7136e81f35a274ae8e8c
Validity
Not Before: Apr 19 07:01:00 2026 GMT
Not After : Apr 20 07:01:00 2026 GMT
Subject: CN=c23b38b738c5010b8d8aa72117c5567e6aecfa0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:96:24:1c:2f:a9:ef:d0:d8:66:3d:06:f6:41:
99:00:30:ee:1e:70:7f:7a:a2:97:37:e3:28:11:77:
ad:d3:14:06:bd:ab:09:ea:ce:3d:e4:25:6a:b9:ef:
84:2b:50:70:d2:54:ae:3c:fe:88:54:24:e0:b2:12:
c8:41:5a:84:0d:91:3d:03:e3:b4:83:47:d0:ce:b4:
f0:ff:0d:60:5e:96:81:8d:56:5f:97:c4:62:77:b3:
7a:d4:e7:99:32:39:ab:bd:5f:f3:70:cf:c1:cb:f9:
b7:a9:7a:8b:fa:68:9a:69:a4:60:8a:e2:3a:30:71:
c9:34:34:06:82:12:81:93:7b:43:1b:9d:f0:6f:24:
6a:c9:94:99:98:c0:1e:83:4c:43:ab:87:83:7e:21:
4d:fa:b2:10:55:95:0d:27:e0:07:f5:da:86:79:dc:
c8:be:95:bc:72:51:e9:fb:18:50:99:cb:17:02:f2:
20:70:9f:04:ec:2d:4e:0e:39:5f:f2:f6:05:c3:28:
db:08:e2:27:68:37:77:56:1a:79:57:79:1f:65:3b:
1d:55:b8:0a:b6:6e:69:63:04:f8:9a:bb:c9:64:6b:
08:61:a4:31:23:31:27:07:15:92:71:06:c1:d3:87:
5d:ca:5f:86:06:f6:a3:01:da:7b:78:ea:14:50:d7:
87:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:3B:38:B7:38:C5:01:0B:8D:8A:A7:21:17:C5:56:7E:6A:EC:FA:0B
X509v3 Authority Key Identifier:
keyid:E6:BE:B6:77:14:5F:64:CA:FB:CD:71:36:E8:1F:35:A2:74:AE:8E:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5r62dxRfZMr7zXE26B81onSujow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/2b264d-1d0c-44c5-aee7-f132aea6f7a2/1/5r62dxRfZMr7zXE26B81onSujow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/2b264d-1d0c-44c5-aee7-f132aea6f7a2/1/5r62dxRfZMr7zXE26B81onSujow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:86:9a:00:ad:0c:53:c0:40:0d:4d:60:42:47:54:15:9d:37:
6d:cc:b2:48:a6:44:20:ba:00:30:2b:aa:08:ed:b6:3e:e8:1d:
21:5d:cc:04:8c:d6:1c:a2:cc:21:dd:37:f7:ea:73:ff:92:c2:
9d:2b:a1:9f:fe:63:f4:27:74:9e:37:e0:ae:57:23:45:b7:cf:
f2:b4:d5:fd:6b:84:44:b7:7e:02:9c:6f:5c:f6:dc:4b:fd:17:
b9:27:1c:e7:18:3f:0c:79:65:f7:a3:4f:85:b6:4f:c1:4d:d9:
74:f2:38:9d:1d:e0:b0:e6:6d:32:f8:78:86:c7:a8:cb:57:bc:
5e:6b:00:5c:ad:52:30:0f:64:68:09:0b:00:f3:30:1b:35:aa:
be:c1:86:7f:af:9f:cb:29:8c:ad:5b:79:b6:ef:62:7b:90:56:
d0:b7:c2:c0:cb:78:e8:3d:1b:8f:b6:70:7c:f8:ee:72:cf:6e:
f3:5a:9f:a7:64:91:c0:fb:c3:9c:c0:40:cb:fe:f4:c9:c1:d3:
b3:6d:c1:12:4e:e5:b4:f8:0f:db:1a:65:4e:a4:7f:3f:e7:0b:
ec:6a:56:cf:44:2c:b2:96:d6:b3:05:e2:2d:40:21:01:cb:19:
e1:aa:31:1d:23:38:d4:33:5c:b4:ca:24:42:ab:1b:a7:96:ef:
1d:b4:31:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:41:04 2026 by rpki-client