Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/063ebe-67f0-40e9-bbff-a409ca37a3ea/1/5-QyokmU5XnrJJmh9vNMZSEY40Q.mft
File: 5-QyokmU5XnrJJmh9vNMZSEY40Q.mft (raw, json)
Hash identifier: LgTJ1xZuCowx6uCxyvJTR9hYqmk1yH8+QU6bpPhU+w8=
Subject key identifier: D4:93:A3:F3:8F:69:B1:BD:8C:3F:22:8F:7F:20:73:8D:0C:BE:B0:7C
Authority key identifier: E7:E4:32:A2:49:94:E5:79:EB:24:99:A1:F6:F3:4C:65:21:18:E3:44
Certificate issuer: /CN=e7e432a24994e579eb2499a1f6f34c652118e344
Certificate serial: 019D37BFFE3E03B02F90B1938246FBAF4A7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5-QyokmU5XnrJJmh9vNMZSEY40Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/063ebe-67f0-40e9-bbff-a409ca37a3ea/1/5-QyokmU5XnrJJmh9vNMZSEY40Q.mft
Manifest number: 1822
Signing time: Sun 29 Mar 2026 04:00:22 +0000
Manifest this update: Sun 29 Mar 2026 04:00:22 +0000
Manifest next update: Mon 30 Mar 2026 04:00:22 +0000
Files and hashes: 1: 5-QyokmU5XnrJJmh9vNMZSEY40Q.crl (hash: 2IF8WKo1SCSbNdmtppqgRFH23ZS/JkKsodVzyYPor7Y=)
2: PVnKaPf91mf4o0pWWoMoyuOYLn0.roa (hash: bvYxvgOHnbm7x6gXSSyrjK4YHdzAS2cBUxtYdZAEIX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/063ebe-67f0-40e9-bbff-a409ca37a3ea/1/5-QyokmU5XnrJJmh9vNMZSEY40Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/063ebe-67f0-40e9-bbff-a409ca37a3ea/1/5-QyokmU5XnrJJmh9vNMZSEY40Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/5-QyokmU5XnrJJmh9vNMZSEY40Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:bf:fe:3e:03:b0:2f:90:b1:93:82:46:fb:af:4a:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7e432a24994e579eb2499a1f6f34c652118e344
Validity
Not Before: Mar 29 04:00:22 2026 GMT
Not After : Mar 30 04:00:22 2026 GMT
Subject: CN=d493a3f38f69b1bd8c3f228f7f20738d0cbeb07c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9a:b4:30:c0:5d:20:cf:8a:63:54:f3:07:db:
b2:e1:db:85:82:a6:fe:a5:6a:8b:23:2f:d1:12:19:
4c:6f:3a:be:0e:60:08:da:fb:2a:e1:89:a7:24:68:
c2:a9:30:b1:7f:09:31:ea:34:3a:ea:e1:e7:ed:2b:
66:07:66:19:f5:2f:ba:85:8f:23:5b:67:39:a1:6d:
b7:03:9a:ed:f0:f5:97:7e:b1:86:b0:e0:dd:ec:09:
36:1d:b1:b1:7c:fc:91:16:f3:93:90:84:22:17:a8:
81:d0:94:8c:e8:70:ec:c1:dd:f7:6f:76:f5:ec:b5:
02:5f:7f:b9:49:b2:2b:98:3f:de:40:a9:00:58:34:
98:e5:e4:94:ca:cb:3d:af:d7:98:6d:f9:11:78:72:
18:0b:32:3c:bf:e5:13:1a:83:75:59:ea:d5:04:69:
52:80:66:db:ac:46:14:2d:e2:24:1b:11:a1:25:2b:
74:31:4c:57:ad:c9:f6:5f:b2:e6:60:4d:a4:61:57:
16:19:ef:56:7e:c3:5e:23:42:be:ba:fc:c7:9b:3f:
e5:3c:c9:03:35:7a:13:88:31:e3:ee:ba:50:d9:7b:
ff:22:3c:f8:81:41:ab:34:a0:29:2c:86:2d:45:9f:
96:c8:49:b8:56:f2:d6:72:bb:c2:62:68:9d:8d:06:
cb:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:93:A3:F3:8F:69:B1:BD:8C:3F:22:8F:7F:20:73:8D:0C:BE:B0:7C
X509v3 Authority Key Identifier:
keyid:E7:E4:32:A2:49:94:E5:79:EB:24:99:A1:F6:F3:4C:65:21:18:E3:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5-QyokmU5XnrJJmh9vNMZSEY40Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/063ebe-67f0-40e9-bbff-a409ca37a3ea/1/5-QyokmU5XnrJJmh9vNMZSEY40Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/063ebe-67f0-40e9-bbff-a409ca37a3ea/1/5-QyokmU5XnrJJmh9vNMZSEY40Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:a8:18:6c:a6:60:5b:ec:57:14:4f:ed:69:e2:4d:19:2f:46:
1c:15:16:21:e6:8c:4b:f6:cc:8b:e0:5e:3a:51:16:4b:a6:b2:
98:c4:ea:90:ee:7d:4b:87:b6:11:b0:e0:b9:cd:4d:9c:1d:cf:
64:93:e2:50:18:b0:fe:03:67:ad:57:93:3e:e8:50:8e:10:87:
67:e8:a1:76:68:34:88:67:e1:8d:65:bc:8c:2c:de:c0:ff:7b:
b4:fa:05:c5:b8:42:55:b3:74:e0:a3:5e:de:a6:ea:29:f8:49:
fc:3b:af:1f:57:89:e8:71:c2:51:f2:f3:de:f2:66:ff:57:00:
bf:d4:c6:08:85:34:00:de:37:c4:d1:4b:94:bb:e4:ac:7f:21:
83:f9:1a:23:b0:18:60:a1:b0:30:67:d8:20:35:62:16:ac:29:
b2:fa:39:a9:98:fc:f8:86:e9:27:8b:f4:88:b1:d0:62:c4:3a:
be:62:f9:9f:26:30:33:0b:52:3a:e9:9a:96:11:44:fb:fc:0a:
63:2e:37:29:99:b3:97:7a:f3:a8:5c:ee:8c:3f:77:55:c7:a0:
19:fd:b2:9e:77:24:39:66:35:f6:b8:de:61:b8:b4:7d:be:51:
a0:4d:3e:ea:7a:19:93:58:40:fd:50:93:6e:e5:13:67:e6:6b:
61:98:51:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:34 2026 by rpki-client