Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fc803f-9675-4355-80f6-77730159c8d4/1/5qVIUgd6AHg4MDwfYchDh8zN1oQ.mft
File: 5qVIUgd6AHg4MDwfYchDh8zN1oQ.mft (raw, json)
Hash identifier: ctysNIWUwcdOujSFsjSJj1DXBqHbrtO24oXQV1V4Pm0=
Subject key identifier: 77:AD:C5:3D:2F:F0:65:F7:BD:8C:B4:4A:C8:40:6B:0F:5B:25:ED:F9
Authority key identifier: E6:A5:48:52:07:7A:00:78:38:30:3C:1F:61:C8:43:87:CC:CD:D6:84
Certificate issuer: /CN=e6a54852077a007838303c1f61c84387cccdd684
Certificate serial: 019CAC7DBA89AD8720BBCCA28AD315BCB8F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5qVIUgd6AHg4MDwfYchDh8zN1oQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fc803f-9675-4355-80f6-77730159c8d4/1/5qVIUgd6AHg4MDwfYchDh8zN1oQ.mft
Manifest number: 05D3
Signing time: Mon 02 Mar 2026 03:00:46 +0000
Manifest this update: Mon 02 Mar 2026 03:00:46 +0000
Manifest next update: Tue 03 Mar 2026 03:00:46 +0000
Files and hashes: 1: 5qVIUgd6AHg4MDwfYchDh8zN1oQ.crl (hash: 1qLDRQrRsGknZeT8b4BiQaPsS0aN1nTq5TolhfQ+FKE=)
2: y4_u6MP25DDbYftrjo0-BN4CqP0.roa (hash: P3A69WpiF0MyDiVo1cBJGQBqn5Zv2zHMeyZO0MmbAb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fc803f-9675-4355-80f6-77730159c8d4/1/5qVIUgd6AHg4MDwfYchDh8zN1oQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fc803f-9675-4355-80f6-77730159c8d4/1/5qVIUgd6AHg4MDwfYchDh8zN1oQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5qVIUgd6AHg4MDwfYchDh8zN1oQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7d:ba:89:ad:87:20:bb:cc:a2:8a:d3:15:bc:b8:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6a54852077a007838303c1f61c84387cccdd684
Validity
Not Before: Mar 2 03:00:46 2026 GMT
Not After : Mar 3 03:00:46 2026 GMT
Subject: CN=77adc53d2ff065f7bd8cb44ac8406b0f5b25edf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:7c:9b:26:b6:22:59:d1:fc:cc:fc:18:8a:ce:
93:80:6a:db:17:88:18:94:8e:89:94:54:8a:b3:02:
3e:d6:6c:7c:19:6c:1d:a3:3c:3e:9c:3c:a9:23:ef:
db:56:a5:39:21:e9:34:33:27:0f:a5:2a:2f:0e:ac:
11:34:5f:97:b6:df:99:b4:34:c6:ea:11:f5:00:66:
ff:5d:b8:a5:88:60:d3:49:94:e9:85:07:e1:2e:a6:
91:5d:b6:10:18:a1:25:d5:6f:e4:4f:1a:ba:81:5d:
0c:ad:14:e9:4e:3a:3e:05:f9:af:d6:e0:09:51:a5:
85:f8:3b:68:97:9b:e3:d6:af:6e:02:54:43:84:03:
93:fb:fc:81:f0:12:be:5d:56:c0:43:86:28:f5:0a:
ec:88:94:20:aa:35:17:ec:59:7a:91:16:3b:9c:74:
10:fd:e3:7b:68:ce:d8:8b:67:c5:b4:7f:fe:80:b3:
c6:f9:3d:92:35:5a:9f:dd:ae:f5:05:40:d6:a5:fe:
6a:22:aa:17:ef:eb:3c:07:2c:d0:fc:b9:12:24:68:
40:0d:91:3f:b9:1b:c1:7d:a7:aa:76:a4:5d:95:e6:
5b:6d:86:3e:80:f7:de:4e:ee:09:2b:26:d3:88:9d:
8c:e3:45:04:b9:e3:aa:7e:9a:67:c6:37:71:b1:06:
f5:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:AD:C5:3D:2F:F0:65:F7:BD:8C:B4:4A:C8:40:6B:0F:5B:25:ED:F9
X509v3 Authority Key Identifier:
keyid:E6:A5:48:52:07:7A:00:78:38:30:3C:1F:61:C8:43:87:CC:CD:D6:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5qVIUgd6AHg4MDwfYchDh8zN1oQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fc803f-9675-4355-80f6-77730159c8d4/1/5qVIUgd6AHg4MDwfYchDh8zN1oQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fc803f-9675-4355-80f6-77730159c8d4/1/5qVIUgd6AHg4MDwfYchDh8zN1oQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:22:b6:15:42:9b:af:f0:29:47:7a:19:ab:f0:b7:14:a4:97:
d4:ff:04:8d:cb:b3:07:9b:71:e8:39:56:4c:8b:63:73:91:01:
e5:95:e5:47:00:40:6e:d1:50:d3:94:17:ee:7e:c7:aa:41:7f:
b2:f9:c6:33:22:ce:b3:f4:27:92:09:4d:e4:ac:95:3e:8b:36:
af:c4:73:9d:49:d6:67:6f:92:65:ba:ab:47:88:56:e8:7c:fd:
75:ac:04:a4:c4:c7:03:ea:a1:43:d7:ec:fe:e8:d7:cb:b5:dd:
76:ab:8d:0c:a1:de:2e:5e:06:59:3d:4f:79:52:e0:b6:c1:e1:
ce:6c:98:a6:25:22:6b:ba:3a:3e:6d:7b:71:82:cf:36:97:09:
8a:50:d2:0a:62:18:63:1d:71:db:af:bf:06:b9:6f:81:87:5f:
a6:46:68:d4:fd:83:50:e6:7a:a1:c2:6d:77:00:65:1c:6f:1f:
9d:b8:ab:3f:dc:2c:d8:5f:7d:0d:d8:f4:92:57:57:69:52:c8:
af:d1:93:29:75:ff:3a:6c:da:b2:be:2f:0c:ca:76:eb:72:22:
a5:fd:5d:f4:21:9b:af:b7:1c:9a:5d:6a:e6:d2:7c:0e:0f:d6:
7a:f7:2f:91:8f:e0:e0:d9:81:49:a5:58:ef:3c:d3:1f:95:ab:
c1:38:c6:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:22:37 2026 by rpki-client