
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/05ce9d-6dae-4709-971f-341658243b4e/1/5k3j63dco74tVQPJyc07crvNpJs.mft
File: 5k3j63dco74tVQPJyc07crvNpJs.mft (raw, json)
Hash identifier: TM5iajK6E3owPhhgie2E/o1rNz4S+odRYYmW1Jf43z8=
Subject key identifier: 29:21:8F:95:FD:B4:DF:1D:CD:83:29:61:8D:52:44:01:5D:5F:65:AE
Authority key identifier: E6:4D:E3:EB:77:5C:A3:BE:2D:55:03:C9:C9:CD:3B:72:BB:CD:A4:9B
Certificate issuer: /CN=e64de3eb775ca3be2d5503c9c9cd3b72bbcda49b
Certificate serial: 01A0C70E7EFDC74490475F523E99A5E96EE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5k3j63dco74tVQPJyc07crvNpJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/05ce9d-6dae-4709-971f-341658243b4e/1/5k3j63dco74tVQPJyc07crvNpJs.mft
Manifest number: 031A
Signing time: Tue 22 Sep 2026 03:00:11 +0000
Manifest this update: Tue 22 Sep 2026 03:00:11 +0000
Manifest next update: Wed 23 Sep 2026 03:00:11 +0000
Files and hashes: 1: 5k3j63dco74tVQPJyc07crvNpJs.crl (hash: 0+2v12zzphShgR50Hb0il4KI2Wv8T4vR2ckYjCW9FCo=)
2: tfwhmbNUeb70v_DXkuhRwPo_elo.roa (hash: VbIkneiXqdXvw+KPGB3c+sh95KU6gx9gOTx0TPGcPy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/05ce9d-6dae-4709-971f-341658243b4e/1/5k3j63dco74tVQPJyc07crvNpJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/05ce9d-6dae-4709-971f-341658243b4e/1/5k3j63dco74tVQPJyc07crvNpJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/5k3j63dco74tVQPJyc07crvNpJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:0e:7e:fd:c7:44:90:47:5f:52:3e:99:a5:e9:6e:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e64de3eb775ca3be2d5503c9c9cd3b72bbcda49b
Validity
Not Before: Sep 22 03:00:11 2026 GMT
Not After : Sep 23 03:00:11 2026 GMT
Subject: CN=29218f95fdb4df1dcd8329618d5244015d5f65ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:8d:11:ed:c3:e6:cb:be:4c:99:ba:61:48:36:
3b:25:09:7e:c3:d6:d5:49:ab:7a:f1:59:a5:d4:5e:
59:ee:35:d7:ea:3e:bc:0d:8f:8c:a0:84:fb:64:a0:
1b:c1:a8:21:28:ab:c1:fa:2e:6d:67:c3:7e:47:a4:
f9:56:43:63:ad:0a:61:45:17:ca:c3:97:f5:ea:3b:
ae:8f:f1:36:3d:e0:cc:6e:83:17:4e:47:0e:6b:05:
65:a0:ef:44:cc:17:75:4e:66:ac:d7:e4:39:e9:18:
6b:83:a3:9d:a2:84:98:5b:6e:4c:aa:f0:74:17:f3:
1e:92:d1:d0:b6:b5:d8:5f:31:8e:8c:90:f5:f5:76:
09:13:39:b3:f9:b6:6d:18:7a:33:a7:5c:c6:0f:63:
7a:d2:37:0f:9d:2c:37:bb:ff:1a:44:46:3d:87:c3:
dc:39:8f:be:76:0b:ee:17:e9:a3:f3:10:2b:aa:3f:
5b:c1:e1:e7:63:3e:47:61:b7:84:07:f6:09:87:dd:
12:06:4a:63:bd:30:af:cc:e5:26:47:12:bd:91:e1:
01:cf:9c:dd:f2:ea:cb:dc:4a:0d:31:0a:52:75:d3:
1f:90:69:8e:6f:d8:3f:12:00:82:2c:46:50:60:dd:
28:8a:f8:46:8f:98:36:28:b6:d3:d2:6e:a5:c6:72:
04:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:21:8F:95:FD:B4:DF:1D:CD:83:29:61:8D:52:44:01:5D:5F:65:AE
X509v3 Authority Key Identifier:
keyid:E6:4D:E3:EB:77:5C:A3:BE:2D:55:03:C9:C9:CD:3B:72:BB:CD:A4:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5k3j63dco74tVQPJyc07crvNpJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/05ce9d-6dae-4709-971f-341658243b4e/1/5k3j63dco74tVQPJyc07crvNpJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/05ce9d-6dae-4709-971f-341658243b4e/1/5k3j63dco74tVQPJyc07crvNpJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:5e:c4:31:52:6a:84:45:bf:5b:01:df:82:4a:91:eb:13:05:
52:90:b5:92:c1:92:01:a9:fe:d5:94:c5:d8:c3:d9:fa:aa:4c:
50:30:2e:a0:75:09:b5:01:24:35:23:9a:8b:72:d7:0c:64:f9:
c0:fe:d1:56:d9:46:ce:9a:e7:e7:e9:13:62:6e:48:6b:3f:c5:
61:78:a9:7b:80:47:8d:d1:a1:d1:5e:01:8d:44:1f:e4:19:4f:
0d:cb:6f:6c:66:b9:b0:d1:1a:1a:ac:8b:aa:46:31:af:9c:69:
36:03:ce:c3:ea:d2:d9:a8:c2:43:4f:3e:1c:93:5a:17:2e:7e:
eb:e5:79:15:cb:6c:78:50:77:be:b4:78:09:d0:ab:e0:41:36:
5a:22:73:93:d4:d9:04:4e:d4:9f:1d:ef:1b:32:41:11:0f:ac:
e2:c0:bb:56:e8:92:d0:1c:56:a6:15:f4:c1:2d:17:5c:47:5f:
ae:6f:d2:5d:20:8a:44:74:3d:55:59:0a:a5:84:a6:27:9c:22:
7a:7c:c1:2d:60:6b:36:d7:20:23:f4:41:80:da:2d:7f:02:e1:
78:24:3c:79:47:01:9b:77:8d:b4:23:79:8f:9b:f9:e3:f0:0a:
6c:84:09:ff:7a:e9:81:ea:b1:f6:72:4d:5b:e8:dd:ac:00:b3:
d1:c7:50:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 07:47:29 2026 by rpki-client