Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/05ce9d-6dae-4709-971f-341658243b4e/1/5k3j63dco74tVQPJyc07crvNpJs.mft
File: 5k3j63dco74tVQPJyc07crvNpJs.mft (raw, json)
Hash identifier: TXL91BkBL3l7/s8l8tTT91BQ7ViId8atDTcy/5I3Rz4=
Subject key identifier: 63:14:32:A3:BE:6B:4C:FC:0B:4A:91:D4:FF:4F:0D:9A:8A:E9:80:8E
Authority key identifier: E6:4D:E3:EB:77:5C:A3:BE:2D:55:03:C9:C9:CD:3B:72:BB:CD:A4:9B
Certificate issuer: /CN=e64de3eb775ca3be2d5503c9c9cd3b72bbcda49b
Certificate serial: 019DA3AF419891414DEA500F78700A8504D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5k3j63dco74tVQPJyc07crvNpJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/05ce9d-6dae-4709-971f-341658243b4e/1/5k3j63dco74tVQPJyc07crvNpJs.mft
Manifest number: 017A
Signing time: Sun 19 Apr 2026 03:01:04 +0000
Manifest this update: Sun 19 Apr 2026 03:01:04 +0000
Manifest next update: Mon 20 Apr 2026 03:01:04 +0000
Files and hashes: 1: 5k3j63dco74tVQPJyc07crvNpJs.crl (hash: 65hdGkUUi4jx1gY4WbEBYZTO0NKe+ieFFZtOHwMmYB8=)
2: tfwhmbNUeb70v_DXkuhRwPo_elo.roa (hash: VbIkneiXqdXvw+KPGB3c+sh95KU6gx9gOTx0TPGcPy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/05ce9d-6dae-4709-971f-341658243b4e/1/5k3j63dco74tVQPJyc07crvNpJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/05ce9d-6dae-4709-971f-341658243b4e/1/5k3j63dco74tVQPJyc07crvNpJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/5k3j63dco74tVQPJyc07crvNpJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 03:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:af:41:98:91:41:4d:ea:50:0f:78:70:0a:85:04:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e64de3eb775ca3be2d5503c9c9cd3b72bbcda49b
Validity
Not Before: Apr 19 03:01:04 2026 GMT
Not After : Apr 20 03:01:04 2026 GMT
Subject: CN=631432a3be6b4cfc0b4a91d4ff4f0d9a8ae9808e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d8:7b:c4:d9:e1:92:29:a4:ed:85:11:d7:69:
32:e0:65:21:29:b6:41:7b:28:d8:46:41:d7:d0:62:
52:cc:aa:f8:fd:45:af:9c:0c:92:95:ea:6e:5c:4b:
a5:59:dd:99:8b:48:a7:ec:28:c0:d6:32:35:75:a7:
ae:e1:f3:27:13:08:d5:e9:fa:96:cb:88:c3:86:c1:
07:c8:19:06:58:ed:cb:42:41:f7:a4:74:1b:7e:d6:
e4:6b:26:43:87:cb:79:60:91:b4:c7:56:4b:d6:8e:
9e:20:00:9d:c5:c7:9a:81:12:ea:48:c1:fa:a7:f1:
0b:2c:ed:98:dc:a2:52:d2:09:52:83:28:f3:c1:51:
fc:dc:6f:d9:76:a8:76:5e:95:06:36:e9:65:66:15:
a1:b5:98:61:03:c0:91:a2:68:42:03:93:b2:3f:85:
52:00:fd:28:13:20:bd:a1:47:22:8e:0e:de:b4:35:
28:01:f6:0c:f5:c8:be:6d:07:18:4b:f5:71:2a:e9:
5e:d4:94:61:16:af:c6:71:f8:9d:0f:20:f6:02:82:
56:9f:ad:6c:43:f2:44:45:aa:fa:17:ff:34:ec:18:
2d:df:44:43:db:68:3a:f5:46:53:1e:70:d8:a3:8c:
ba:98:03:22:40:e4:6d:be:c0:5c:9e:c5:68:5d:fb:
ad:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:14:32:A3:BE:6B:4C:FC:0B:4A:91:D4:FF:4F:0D:9A:8A:E9:80:8E
X509v3 Authority Key Identifier:
keyid:E6:4D:E3:EB:77:5C:A3:BE:2D:55:03:C9:C9:CD:3B:72:BB:CD:A4:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5k3j63dco74tVQPJyc07crvNpJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/05ce9d-6dae-4709-971f-341658243b4e/1/5k3j63dco74tVQPJyc07crvNpJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/05ce9d-6dae-4709-971f-341658243b4e/1/5k3j63dco74tVQPJyc07crvNpJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:a4:0c:b0:1a:8d:70:f2:d0:1b:03:0e:d4:c1:48:01:65:14:
eb:ed:91:fd:58:f7:5a:da:bc:7e:f8:9a:b8:1c:b9:8c:26:bd:
10:0e:d5:3b:32:5a:43:de:a4:10:df:26:eb:6d:ee:87:0c:cd:
61:0e:e7:2d:0f:ce:28:03:39:e3:08:20:ce:76:2b:7e:c3:ca:
78:a9:cc:00:47:cf:6b:5e:ad:4a:b0:c6:09:24:cb:b8:79:cb:
89:77:52:00:48:d0:8f:64:f3:b7:56:c4:de:7d:36:03:98:d7:
08:06:af:8c:75:d5:5e:48:35:66:f2:d0:d6:03:66:d4:94:44:
0e:d4:cb:64:e8:e4:ec:d9:5e:cf:a7:bb:22:0e:8b:14:47:c5:
27:c9:5f:45:4b:a6:62:85:c2:01:07:be:05:95:76:13:c3:1c:
68:44:aa:82:f0:13:91:01:cf:f4:03:22:19:49:fd:77:63:f4:
b4:e8:e0:c5:aa:ca:40:48:ac:3b:1e:ee:e8:2f:6a:3b:23:33:
0c:90:74:05:71:19:e6:f5:c9:81:9a:de:a8:13:5c:2a:73:29:
15:25:41:dd:2f:3f:c6:2f:e7:bd:5f:04:a2:7d:72:30:e9:d1:
cc:1c:9f:6b:8b:06:b2:3b:79:d0:b3:56:e5:0c:2a:69:4b:b5:
c3:34:db:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 13:00:15 2026 by rpki-client