Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.mft
File: 5BqMQuzom1-_whDce1VMcupPNUQ.mft (raw, json)
Hash identifier: +1WATp1aE/O4/NAjLbGAeClreVL+lTrtDSH6+8Zy7po=
Subject key identifier: ED:9D:7E:D6:FA:80:00:74:B0:C8:E2:08:22:01:81:A9:AA:AF:7C:EC
Authority key identifier: E4:1A:8C:42:EC:E8:9B:5F:BF:C2:10:DC:7B:55:4C:72:EA:4F:35:44
Certificate issuer: /CN=e41a8c42ece89b5fbfc210dc7b554c72ea4f3544
Certificate serial: 01A08EA02EB17CE25D5E68C94BBAAFE605F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5BqMQuzom1-_whDce1VMcupPNUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.mft
Manifest number: 1A4A
Signing time: Fri 11 Sep 2026 04:00:57 +0000
Manifest this update: Fri 11 Sep 2026 04:00:57 +0000
Manifest next update: Sat 12 Sep 2026 04:00:57 +0000
Files and hashes: 1: 5BqMQuzom1-_whDce1VMcupPNUQ.crl (hash: j5P0snl45WI1uxnFZOaxZ4q8iZB1/iYXoryFKsJLvSc=)
2: Gdko4-yr_mZQjbgGaX8sC4T_FPQ.roa (hash: 7AxIc/Z01v/Eqc2Dv0cTBhSNHD6F9wR4yoEfob5zH90=)
3: kf58GPD5iMVc4BLLn8IhfqKMsCY.roa (hash: Ic5aK1Q6lKzryOBda72Usz/9pqqGz+CIRUBEEUajD8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5BqMQuzom1-_whDce1VMcupPNUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8e:a0:2e:b1:7c:e2:5d:5e:68:c9:4b:ba:af:e6:05:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e41a8c42ece89b5fbfc210dc7b554c72ea4f3544
Validity
Not Before: Sep 11 04:00:57 2026 GMT
Not After : Sep 12 04:00:57 2026 GMT
Subject: CN=ed9d7ed6fa800074b0c8e208220181a9aaaf7cec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:cb:84:de:28:7b:fa:f2:75:ef:da:7f:f0:45:
45:18:ec:5b:36:8f:ab:d8:7a:5f:32:2e:29:f3:3f:
d3:c0:1e:22:4f:60:4b:4a:78:6c:c7:a8:4f:2d:da:
4e:57:de:29:2c:d7:be:9c:07:d5:c4:cb:ed:45:f3:
aa:47:53:1f:90:95:39:56:93:93:ca:11:e6:f1:be:
99:81:35:03:b7:23:f1:29:0d:a8:7f:48:ae:28:fc:
79:f3:5d:c0:46:ce:ee:d8:c7:db:f5:bf:6b:a8:7e:
09:46:af:bd:39:05:b4:a4:76:53:95:06:c7:99:76:
7c:3a:77:73:b7:7f:5a:95:58:88:b3:9c:d8:77:f3:
3f:79:67:29:e9:f3:8e:85:39:ed:a8:94:32:ba:87:
cf:2a:30:13:ff:4b:27:44:67:92:1e:f1:29:54:fc:
59:d7:f3:5e:f7:07:88:07:8d:39:c6:4d:07:62:b2:
e7:c0:7e:d2:de:da:4d:6b:2d:a0:bc:24:b7:95:7a:
62:0b:b9:19:d1:49:45:bf:f3:69:af:d4:8d:db:92:
aa:b9:ed:55:a4:ac:6e:0a:7a:0d:45:74:43:69:9f:
18:90:d6:2a:79:1f:1b:6e:73:c7:5e:5d:a0:72:7c:
8e:85:32:a9:9a:ac:fb:49:df:59:01:7e:f4:e7:2e:
d0:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:9D:7E:D6:FA:80:00:74:B0:C8:E2:08:22:01:81:A9:AA:AF:7C:EC
X509v3 Authority Key Identifier:
keyid:E4:1A:8C:42:EC:E8:9B:5F:BF:C2:10:DC:7B:55:4C:72:EA:4F:35:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5BqMQuzom1-_whDce1VMcupPNUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:5a:f7:44:94:25:7e:c5:49:ab:e8:08:4d:84:e9:9f:83:11:
58:39:bd:35:29:52:bf:cf:56:cf:10:7f:bb:86:91:1c:ad:80:
33:4f:a0:3b:f6:97:a0:f7:bc:04:37:2a:c8:92:23:da:f7:97:
9d:9c:30:1e:b0:f2:80:f0:31:f6:b8:0d:70:12:b5:bc:ab:00:
dc:99:45:a9:90:98:30:31:f0:1f:18:a3:8b:e0:cc:00:1e:60:
b5:18:db:2c:f4:e5:7b:7a:08:d2:74:ca:25:54:ef:99:43:75:
b8:80:44:e7:d5:66:1a:87:c4:d0:a8:a5:fb:8d:3a:11:b9:5d:
3f:bc:37:b3:33:8b:12:f1:5c:a6:a2:c6:a1:f8:0e:8b:d9:c5:
15:0d:e4:91:f0:e1:19:d1:f4:ab:ef:7e:59:1f:24:b6:46:3f:
35:c5:cb:12:dc:32:e6:0c:e2:cd:fa:18:eb:49:c5:a9:f9:60:
32:b6:ac:58:a3:44:71:cc:e7:9d:23:4b:cc:c3:e2:1c:a0:18:
ee:e4:a8:22:93:a6:b9:d7:66:b1:ba:71:bf:de:a2:03:28:0b:
d7:2d:f0:55:fd:23:ca:52:cb:0c:f4:4a:b2:74:65:d7:f9:ce:
64:6d:42:eb:ca:32:33:b7:a6:20:64:90:a1:b1:ad:6d:96:37:
05:96:f0:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 05:58:02 2026 by rpki-client