Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.mft
File: 5BqMQuzom1-_whDce1VMcupPNUQ.mft (raw, json)
Hash identifier: SdK7vQ2eUrbN1szGYzTKLtU60Xy6YcQWqH7u5QxVl3Q=
Subject key identifier: 2E:54:59:19:18:1C:29:3D:F3:64:6F:E5:50:66:E3:63:A0:B8:D4:E7
Authority key identifier: E4:1A:8C:42:EC:E8:9B:5F:BF:C2:10:DC:7B:55:4C:72:EA:4F:35:44
Certificate issuer: /CN=e41a8c42ece89b5fbfc210dc7b554c72ea4f3544
Certificate serial: 01A17E18879D2D3D5AD111B05979436E49ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5BqMQuzom1-_whDce1VMcupPNUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.mft
Manifest number: 1AC6
Signing time: Tue 27 Oct 2026 16:01:38 +0000
Manifest this update: Tue 27 Oct 2026 16:01:38 +0000
Manifest next update: Wed 28 Oct 2026 16:01:38 +0000
Files and hashes: 1: 5BqMQuzom1-_whDce1VMcupPNUQ.crl (hash: gAX30vidZ+hXgLqOwBYGJPn3sr5VbEZL657v3aDueMI=)
2: Gdko4-yr_mZQjbgGaX8sC4T_FPQ.roa (hash: 7AxIc/Z01v/Eqc2Dv0cTBhSNHD6F9wR4yoEfob5zH90=)
3: kf58GPD5iMVc4BLLn8IhfqKMsCY.roa (hash: Ic5aK1Q6lKzryOBda72Usz/9pqqGz+CIRUBEEUajD8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5BqMQuzom1-_whDce1VMcupPNUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 16:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:18:87:9d:2d:3d:5a:d1:11:b0:59:79:43:6e:49:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e41a8c42ece89b5fbfc210dc7b554c72ea4f3544
Validity
Not Before: Oct 27 16:01:38 2026 GMT
Not After : Oct 28 16:01:38 2026 GMT
Subject: CN=2e545919181c293df3646fe55066e363a0b8d4e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:70:f0:bb:61:4d:e0:49:7c:85:aa:62:d9:21:
5e:f5:1a:c0:47:a9:2f:95:87:3d:1d:e3:2e:3c:56:
2e:8e:0a:03:13:db:c3:90:4e:59:ab:34:7a:79:ac:
bd:5e:a3:b7:7e:07:f5:1a:82:05:c3:f6:73:ab:fa:
37:7d:3d:63:1c:2a:73:86:a8:bb:15:6d:88:82:9c:
d2:dd:c5:fe:ce:49:85:64:5a:af:ff:b5:3a:f9:1a:
a0:a9:6c:0f:b2:ad:d4:6d:df:15:27:f5:b8:f3:80:
db:6d:ea:47:17:9d:8d:02:d0:75:f3:a8:cb:45:86:
fb:0f:48:32:9e:cb:09:7f:ad:88:38:00:e7:18:64:
88:6e:3b:4b:b8:56:a2:aa:8e:c7:72:c9:10:fe:c8:
8d:ec:85:d8:d7:bd:05:c2:e5:d2:fe:99:df:a7:31:
27:b3:25:1e:46:8b:82:1a:b1:e8:1b:59:c4:2f:88:
5d:b9:c1:85:28:6c:f1:ea:3d:69:de:1a:0c:f3:28:
f9:e3:2c:b2:76:16:49:a6:89:bb:9f:86:b8:f1:47:
a7:43:6c:08:e3:6e:27:35:14:e2:4d:6c:86:7f:f6:
9a:a8:e4:4f:c7:c2:a9:4a:2e:78:2d:9c:bd:69:69:
29:4e:f1:74:38:1b:86:78:2f:1b:18:bb:79:30:b8:
c4:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:54:59:19:18:1C:29:3D:F3:64:6F:E5:50:66:E3:63:A0:B8:D4:E7
X509v3 Authority Key Identifier:
keyid:E4:1A:8C:42:EC:E8:9B:5F:BF:C2:10:DC:7B:55:4C:72:EA:4F:35:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5BqMQuzom1-_whDce1VMcupPNUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:e6:f1:96:e7:3e:d4:33:42:26:09:ae:44:3e:14:6a:65:47:
3b:68:45:6b:b8:02:a2:17:e4:05:00:14:1f:2b:5a:2b:80:d6:
0f:af:65:11:26:ca:91:6a:05:df:57:d1:3d:3a:d8:47:a2:85:
c2:43:cb:9d:4b:09:20:e7:13:82:a9:4a:2b:90:00:f8:c3:94:
49:8b:d4:ad:a3:33:9d:cd:2d:3a:ad:95:66:66:90:c2:97:55:
ed:16:a1:0e:d7:dd:38:ba:91:d3:77:58:04:d2:a4:17:59:ce:
ff:0d:ef:21:cd:a8:11:59:fd:67:18:79:b8:59:dc:d0:44:a4:
06:05:2e:5c:43:85:06:da:97:62:d8:9a:c3:7e:3c:7d:93:a7:
ce:59:06:1c:b9:5e:52:63:14:5e:13:e3:86:95:23:f2:90:94:
26:4e:cb:2f:2d:8c:2e:59:98:df:fb:86:d8:66:8a:5d:5b:b3:
e8:84:c9:dd:dd:4b:08:bb:e7:51:73:f0:53:33:9f:3b:2b:c8:
50:d4:a8:5f:8e:15:73:4c:70:0e:87:7b:8f:ed:75:b5:fd:9b:
d9:d3:88:16:45:6b:c9:7d:79:26:3e:76:f3:98:9b:19:e0:57:
52:63:80:2f:6b:0b:89:5d:87:43:2d:fb:8e:c1:00:cd:02:8d:
3e:16:a3:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 00:43:44 2026 by rpki-client