Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.mft
File: 5BqMQuzom1-_whDce1VMcupPNUQ.mft (raw, json)
Hash identifier: eYM1isSiPMoJcW2ypPbl6Crl4GCAkzH3IC9dpYqvTlE=
Subject key identifier: 9F:2F:B9:D5:B0:90:16:D4:B2:E5:F7:6E:F8:42:C4:FB:76:E8:F7:FE
Authority key identifier: E4:1A:8C:42:EC:E8:9B:5F:BF:C2:10:DC:7B:55:4C:72:EA:4F:35:44
Certificate issuer: /CN=e41a8c42ece89b5fbfc210dc7b554c72ea4f3544
Certificate serial: 019D3AF87334DD007717E8453DEC6807A61D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5BqMQuzom1-_whDce1VMcupPNUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 19:00:54 +0000
Manifest this update: Sun 29 Mar 2026 19:00:54 +0000
Manifest next update: Mon 30 Mar 2026 19:00:54 +0000
Files and hashes: 1: 5BqMQuzom1-_whDce1VMcupPNUQ.crl (hash: ticF2FOm6PoNHgYmM3t+ksbB9yq1VKpGzj8/ZYQv1aE=)
2: Gdko4-yr_mZQjbgGaX8sC4T_FPQ.roa (hash: 7AxIc/Z01v/Eqc2Dv0cTBhSNHD6F9wR4yoEfob5zH90=)
3: kf58GPD5iMVc4BLLn8IhfqKMsCY.roa (hash: Ic5aK1Q6lKzryOBda72Usz/9pqqGz+CIRUBEEUajD8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5BqMQuzom1-_whDce1VMcupPNUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:f8:73:34:dd:00:77:17:e8:45:3d:ec:68:07:a6:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e41a8c42ece89b5fbfc210dc7b554c72ea4f3544
Validity
Not Before: Mar 29 19:00:54 2026 GMT
Not After : Mar 30 19:00:54 2026 GMT
Subject: CN=9f2fb9d5b09016d4b2e5f76ef842c4fb76e8f7fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:0b:b2:5e:cd:d6:43:ce:ed:bd:13:09:d9:6b:
1f:e4:f4:82:bb:a0:38:54:e1:2d:c0:8e:a9:89:26:
8d:9e:93:85:ad:eb:98:db:00:ac:c1:45:63:3d:d3:
fc:da:36:d0:10:9b:74:0e:bc:de:86:df:de:c5:2a:
9d:76:8b:4b:e1:f4:6c:d1:4b:30:8d:52:81:b7:bd:
d4:2b:e9:61:9a:17:2c:b8:1e:aa:0d:5f:09:5b:ca:
60:d7:e4:0f:64:06:89:00:a6:0c:e8:26:46:21:7d:
3c:10:3c:82:12:31:9d:3e:a4:55:00:ae:bf:f0:92:
30:d7:2f:24:23:63:14:ab:3e:c8:ad:e1:28:6c:95:
57:f0:b8:97:81:22:ff:39:d6:48:b1:94:f7:b1:fe:
82:96:83:14:e8:2c:73:55:1d:45:e0:b5:ab:c9:68:
d2:f5:e3:f0:d5:f5:ff:58:da:cb:c2:f4:78:42:f3:
be:b9:59:1f:15:e8:4e:a2:09:d7:ff:90:9e:8c:2a:
a1:a7:de:62:d7:8a:20:fe:01:ba:02:67:d2:60:8e:
0e:53:0a:1a:02:2a:55:32:ea:b2:6d:a1:d7:3d:b6:
e4:94:03:a8:e2:3f:17:06:d1:d9:ce:50:f0:e5:d8:
6b:07:40:fe:c3:64:e4:bf:7e:e4:47:22:e5:d9:e7:
45:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:2F:B9:D5:B0:90:16:D4:B2:E5:F7:6E:F8:42:C4:FB:76:E8:F7:FE
X509v3 Authority Key Identifier:
keyid:E4:1A:8C:42:EC:E8:9B:5F:BF:C2:10:DC:7B:55:4C:72:EA:4F:35:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5BqMQuzom1-_whDce1VMcupPNUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:c2:41:98:14:35:cb:b0:c7:cd:5d:d3:4e:2a:81:60:dc:9b:
24:2c:2f:d4:fb:42:92:42:80:da:c0:af:84:85:4c:39:24:9d:
bb:fe:16:7e:78:2d:cb:b4:8b:1a:da:c7:65:1e:f0:bb:34:98:
4f:a3:ec:fd:e9:54:c7:6d:ad:e0:c0:1c:fa:94:a1:b1:e9:68:
61:13:f5:28:9a:01:84:95:98:83:98:a4:80:06:f3:62:f7:d1:
a0:f9:2b:62:ea:16:d6:f1:f1:08:95:fd:9b:fa:64:19:a5:20:
87:8f:df:50:85:b3:60:fa:43:72:34:30:48:55:16:0e:12:53:
6d:b9:06:34:20:9f:c1:88:42:de:dd:d9:43:d4:07:62:fc:4b:
29:ac:46:78:e1:a2:4a:e3:00:ee:b0:fe:b4:1c:5b:17:13:9d:
dd:e0:12:7d:27:06:3a:74:36:51:ff:7d:4e:47:0b:9d:23:12:
c4:97:9b:4c:25:4f:60:84:26:98:ba:8b:e5:cc:37:19:54:9e:
a4:8b:a6:73:78:b3:1b:1a:d9:8e:27:d4:f2:45:6f:0c:ce:4e:
e5:31:6f:82:27:7e:6d:7c:7d:35:0a:90:71:25:d2:94:46:e0:
1a:b3:12:f8:21:eb:25:14:5d:12:46:ed:ef:18:8a:dc:45:fe:
ec:7b:2a:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 22:08:13 2026 by rpki-client