Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.mft
File: 5BqMQuzom1-_whDce1VMcupPNUQ.mft (raw, json)
Hash identifier: vLy9V3d22slCZpGY77qW297LmdxSsZn9WrlQPTyRSDw=
Subject key identifier: D4:A3:F3:5E:A8:79:6B:31:AE:C2:80:47:92:A9:D6:DE:4F:91:68:83
Authority key identifier: E4:1A:8C:42:EC:E8:9B:5F:BF:C2:10:DC:7B:55:4C:72:EA:4F:35:44
Certificate issuer: /CN=e41a8c42ece89b5fbfc210dc7b554c72ea4f3544
Certificate serial: 019EB76A4CF6F0005BD44C680C70DCEDF55E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5BqMQuzom1-_whDce1VMcupPNUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.mft
Manifest number: 1956
Signing time: Thu 11 Jun 2026 16:00:57 +0000
Manifest this update: Thu 11 Jun 2026 16:00:57 +0000
Manifest next update: Fri 12 Jun 2026 16:00:57 +0000
Files and hashes: 1: 5BqMQuzom1-_whDce1VMcupPNUQ.crl (hash: Ll/4CNs1myJvXjv9mCQPrxqfZDn1xGTXaECs7ORRPzw=)
2: Gdko4-yr_mZQjbgGaX8sC4T_FPQ.roa (hash: 7AxIc/Z01v/Eqc2Dv0cTBhSNHD6F9wR4yoEfob5zH90=)
3: kf58GPD5iMVc4BLLn8IhfqKMsCY.roa (hash: Ic5aK1Q6lKzryOBda72Usz/9pqqGz+CIRUBEEUajD8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5BqMQuzom1-_whDce1VMcupPNUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 16:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:6a:4c:f6:f0:00:5b:d4:4c:68:0c:70:dc:ed:f5:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e41a8c42ece89b5fbfc210dc7b554c72ea4f3544
Validity
Not Before: Jun 11 16:00:57 2026 GMT
Not After : Jun 12 16:00:57 2026 GMT
Subject: CN=d4a3f35ea8796b31aec2804792a9d6de4f916883
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:92:21:f0:34:c9:d7:74:b8:11:db:78:01:14:
2c:e1:17:ce:02:54:00:00:7a:ef:4a:9b:56:35:f6:
e4:5b:02:7e:fa:94:10:ec:de:87:01:53:68:90:3f:
28:9a:27:69:da:8c:f1:7c:da:2d:e1:e2:40:73:e5:
48:b0:6d:23:f9:a7:4c:e5:e2:a2:ba:65:e2:6e:4e:
1e:d4:46:54:ed:43:a9:0b:db:62:c9:da:98:d6:83:
3c:da:8f:85:21:26:35:cb:5d:b6:01:53:97:20:43:
59:79:2c:05:90:ef:48:b4:7e:4b:1d:3c:51:1b:3c:
59:31:00:e3:e5:c3:d4:84:5a:82:3a:03:c2:a6:28:
17:9b:ff:d2:5f:1f:ad:12:47:fa:07:f6:42:9d:14:
03:48:10:8e:5a:ec:db:37:59:db:bf:b5:31:00:98:
a1:92:03:86:37:12:29:f1:74:90:71:cc:e6:54:4b:
15:14:03:e5:3e:4c:9b:c5:1c:a6:43:8a:3c:cd:bd:
47:b0:67:3d:bc:ee:62:e3:47:a6:a3:f0:fe:58:73:
2c:9d:bf:ca:fc:47:ed:2c:57:7a:06:77:bd:dd:53:
b4:44:48:88:04:c3:a0:46:7e:65:19:df:07:e3:97:
48:1c:19:21:3b:a4:50:da:19:f2:50:40:0f:5b:04:
32:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:A3:F3:5E:A8:79:6B:31:AE:C2:80:47:92:A9:D6:DE:4F:91:68:83
X509v3 Authority Key Identifier:
keyid:E4:1A:8C:42:EC:E8:9B:5F:BF:C2:10:DC:7B:55:4C:72:EA:4F:35:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5BqMQuzom1-_whDce1VMcupPNUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:ff:50:83:02:f8:f6:4a:ee:81:cf:3c:2d:91:e4:6c:44:3c:
3a:e4:98:49:b3:8e:24:48:4d:32:6a:74:f2:b5:ae:cf:b3:85:
ae:2c:9f:12:22:a8:0e:6c:78:c1:29:a2:8b:d2:02:10:86:47:
4a:1a:60:6e:ba:f3:c0:07:e1:d9:47:cf:e3:e4:a6:73:91:d4:
c6:d5:9a:93:9b:3c:f7:27:dc:1a:15:b6:06:1c:9a:c6:e2:ff:
a5:6c:0a:c8:e6:71:b5:b9:95:41:49:06:14:79:6a:a2:50:c7:
4a:5f:e9:fe:4d:59:e6:a2:89:a9:44:f6:b4:e5:99:c5:4f:a8:
70:96:17:f6:2c:19:67:f9:4f:5e:79:10:a9:ab:25:c1:2a:aa:
48:b9:d1:a2:31:29:a6:f5:f0:2d:b3:ba:96:d5:53:b1:c0:60:
3a:cf:d0:24:9d:73:25:a1:b0:91:2c:7d:d1:c0:bf:49:18:2d:
67:d1:89:ff:a9:c9:d6:93:c3:a5:0f:15:2b:8d:43:67:35:aa:
d5:69:6d:f1:68:0b:36:a5:20:d5:60:8c:d7:bd:fb:9e:14:2c:
51:2c:3d:41:fa:2a:00:4f:d8:61:30:21:c5:f7:b5:b1:11:b7:
9a:e2:85:4f:80:96:a3:6d:8e:8c:8d:0d:2d:74:ba:75:96:f6:
81:98:c4:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ63akz28ABb1ExoDHDc7fVeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0MWE4YzQyZWNlODliNWZiZmMyMTBkYzdiNTU0YzcyZWE0
ZjM1NDQwHhcNMjYwNjExMTYwMDU3WhcNMjYwNjEyMTYwMDU3WjAzMTEwLwYDVQQD
EyhkNGEzZjM1ZWE4Nzk2YjMxYWVjMjgwNDc5MmE5ZDZkZTRmOTE2ODgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZIh8DTJ13S4Edt4ARQs4RfOAlQA
AHrvSptWNfbkWwJ++pQQ7N6HAVNokD8omidp2ozxfNot4eJAc+VIsG0j+adM5eKi
umXibk4e1EZU7UOpC9tiydqY1oM82o+FISY1y122AVOXIENZeSwFkO9ItH5LHTxR
GzxZMQDj5cPUhFqCOgPCpigXm//SXx+tEkf6B/ZCnRQDSBCOWuzbN1nbv7UxAJih
kgOGNxIp8XSQcczmVEsVFAPlPkybxRymQ4o8zb1HsGc9vO5i40emo/D+WHMsnb/K
/EftLFd6Bne93VO0REiIBMOgRn5lGd8H45dIHBkhO6RQ2hnyUEAPWwQyywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNSj816oeWsxrsKAR5Kp1t5PkWiDMB8GA1UdIwQY
MBaAFOQajELs6Jtfv8IQ3HtVTHLqTzVEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUJxTVF1em9tMS1fd2hEY2UxVk1jdXBQTlVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9kMTljMmQtMzhjMy00NTI2LWE3Y2Yt
MWQ2NjZjNDIyYzZhLzEvNUJxTVF1em9tMS1fd2hEY2UxVk1jdXBQTlVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC9kMTljMmQtMzhjMy00NTI2LWE3Y2YtMWQ2NjZjNDIyYzZh
LzEvNUJxTVF1em9tMS1fd2hEY2UxVk1jdXBQTlVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjP9QgwL4
9krugc88LZHkbEQ8OuSYSbOOJEhNMmp08rWuz7OFriyfEiKoDmx4wSmii9ICEIZH
ShpgbrrzwAfh2UfP4+Smc5HUxtWak5s89yfcGhW2BhyaxuL/pWwKyOZxtbmVQUkG
FHlqolDHSl/p/k1Z5qKJqUT2tOWZxU+ocJYX9iwZZ/lPXnkQqaslwSqqSLnRojEp
pvXwLbO6ltVTscBgOs/QJJ1zJaGwkSx90cC/SRgtZ9GJ/6nJ1pPDpQ8VK41DZzWq
1Wlt8WgLNqUg1WCM1737nhQsUSw9QfoqAE/YYTAhxfe1sRG3muKFT4CWo22OjI0N
LXS6dZb2gZjEeQ==
-----END CERTIFICATE-----
Generated at Thu Jun 11 23:55:35 2026 by rpki-client