Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/05ce9d-6dae-4709-971f-341658243b4e/1/5k3j63dco74tVQPJyc07crvNpJs.mft
File: 5k3j63dco74tVQPJyc07crvNpJs.mft (raw, json)
Hash identifier: ctUyympPgu33ijK5bNgx5M50HuDzkEw3DS9LL5QqiAY=
Subject key identifier: 69:BB:F6:67:7C:FB:42:BC:AC:38:5F:DE:D2:72:D9:EF:DC:C7:F6:1D
Authority key identifier: E6:4D:E3:EB:77:5C:A3:BE:2D:55:03:C9:C9:CD:3B:72:BB:CD:A4:9B
Certificate issuer: /CN=e64de3eb775ca3be2d5503c9c9cd3b72bbcda49b
Certificate serial: 019CAE6BF7EB6A72ECE8C1FA3A3C835768CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5k3j63dco74tVQPJyc07crvNpJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/05ce9d-6dae-4709-971f-341658243b4e/1/5k3j63dco74tVQPJyc07crvNpJs.mft
Manifest number: FB
Signing time: Mon 02 Mar 2026 12:00:37 +0000
Manifest this update: Mon 02 Mar 2026 12:00:37 +0000
Manifest next update: Tue 03 Mar 2026 12:00:37 +0000
Files and hashes: 1: 5k3j63dco74tVQPJyc07crvNpJs.crl (hash: b3idYG4oWr5FFuM8aF/I8niZ3TefQluOfPI8pAtQrP8=)
2: tfwhmbNUeb70v_DXkuhRwPo_elo.roa (hash: VbIkneiXqdXvw+KPGB3c+sh95KU6gx9gOTx0TPGcPy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/05ce9d-6dae-4709-971f-341658243b4e/1/5k3j63dco74tVQPJyc07crvNpJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/05ce9d-6dae-4709-971f-341658243b4e/1/5k3j63dco74tVQPJyc07crvNpJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/5k3j63dco74tVQPJyc07crvNpJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 12:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:6b:f7:eb:6a:72:ec:e8:c1:fa:3a:3c:83:57:68:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e64de3eb775ca3be2d5503c9c9cd3b72bbcda49b
Validity
Not Before: Mar 2 12:00:37 2026 GMT
Not After : Mar 3 12:00:37 2026 GMT
Subject: CN=69bbf6677cfb42bcac385fded272d9efdcc7f61d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:9b:8a:c8:61:72:4d:d3:da:12:3c:08:75:ce:
fa:e7:09:ef:7b:47:38:24:d7:68:70:e6:a1:b5:fb:
c6:72:e5:34:73:3d:cb:9d:61:29:db:a0:80:84:e9:
ac:02:64:5d:89:07:b5:eb:2a:84:f4:09:c0:ee:c0:
dc:eb:d6:56:64:19:ec:54:37:19:58:57:7c:fe:cc:
a9:19:ef:82:21:f8:78:1d:43:20:28:e6:ba:d8:b6:
6a:d9:0e:95:42:a9:58:7b:cb:d6:b9:a8:37:26:fe:
c0:af:46:b9:52:71:4a:83:8a:f8:50:35:6c:e7:f1:
33:54:88:d4:7c:9d:bd:22:ea:e2:ac:1f:31:e2:ea:
99:74:b4:85:de:1f:52:dd:c7:80:3b:52:86:37:54:
4c:19:07:ee:7d:6a:89:d0:01:90:8c:46:21:d0:f0:
60:75:ab:f7:5b:cc:a7:4b:1c:cd:ae:87:32:31:e3:
fe:98:e6:44:89:5e:f6:98:cb:0e:4e:02:d5:ac:da:
1e:3f:36:33:4f:be:fb:c5:59:1b:ab:e8:69:a0:1d:
9d:d2:62:f1:6e:61:87:7e:f8:d8:34:44:64:42:21:
8e:ba:c2:84:46:1d:4f:3e:b8:4a:ff:41:00:73:0e:
47:b5:8b:4e:6f:71:f1:92:c3:93:00:7c:43:b2:c7:
63:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:BB:F6:67:7C:FB:42:BC:AC:38:5F:DE:D2:72:D9:EF:DC:C7:F6:1D
X509v3 Authority Key Identifier:
keyid:E6:4D:E3:EB:77:5C:A3:BE:2D:55:03:C9:C9:CD:3B:72:BB:CD:A4:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5k3j63dco74tVQPJyc07crvNpJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/05ce9d-6dae-4709-971f-341658243b4e/1/5k3j63dco74tVQPJyc07crvNpJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/05ce9d-6dae-4709-971f-341658243b4e/1/5k3j63dco74tVQPJyc07crvNpJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:11:49:27:b2:2b:7a:53:8c:ee:50:76:13:95:89:a0:a1:74:
3c:21:bc:d7:e3:61:a0:66:15:e2:ce:1c:10:d3:74:88:68:d3:
f9:9c:65:2e:1a:12:47:b6:a8:e7:57:58:b6:32:77:17:1d:3b:
c7:aa:e3:5e:6f:8d:4a:01:4e:64:dd:1c:b7:d0:1e:cd:3f:d3:
02:72:80:ee:b7:36:29:1c:d4:d9:42:a0:9d:f4:82:36:39:e4:
09:2f:47:59:f5:0e:7c:0b:59:a7:19:56:d2:66:47:12:76:63:
4f:82:96:e3:5d:33:a1:74:d2:3c:f1:6b:f8:20:a8:0a:c8:4e:
6a:f2:8c:b6:4e:c3:04:bb:ae:e5:80:ae:6b:cb:24:77:0b:f9:
cc:bb:ca:6b:af:70:2d:1e:7d:1a:6d:b8:fd:89:f4:3c:d1:5f:
0c:6a:b3:07:f4:0a:98:c2:ad:c4:a9:53:d1:80:e1:cb:6d:d5:
3d:d8:fd:85:ca:95:b1:fb:59:45:4a:f3:62:82:1b:c5:56:c9:
0e:43:f0:da:be:e9:cb:b7:fe:05:c9:be:ba:f6:c3:b8:74:10:
63:51:73:62:61:c1:ab:8d:9d:6c:e1:4c:07:44:fc:71:3e:3b:
96:fe:ff:cf:01:94:f4:f4:a9:90:ed:c7:c2:c7:b7:ab:5c:6b:
b3:76:02:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:08:59 2026 by rpki-client