Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/003ca9-c390-4274-8fc6-7c504703bb02/1/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.mft
File: 5dqOnPyLFg7Fm1QPOdiXPUIYMSo.mft (raw, json)
Hash identifier: gZDHW6wQXt9TYhQr48v6Hzv4pwZqRLZ9B4ZjUHcGctk=
Subject key identifier: E1:2B:5A:2E:70:32:ED:E7:F3:ED:E6:BF:88:29:9B:58:1F:2D:0E:7D
Authority key identifier: E5:DA:8E:9C:FC:8B:16:0E:C5:9B:54:0F:39:D8:97:3D:42:18:31:2A
Certificate issuer: /CN=e5da8e9cfc8b160ec59b540f39d8973d4218312a
Certificate serial: 01A1144EC934AD4AA2C32E05819066E3B7B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/003ca9-c390-4274-8fc6-7c504703bb02/1/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.mft
Manifest number: 03CD
Signing time: Wed 07 Oct 2026 03:01:09 +0000
Manifest this update: Wed 07 Oct 2026 03:01:09 +0000
Manifest next update: Thu 08 Oct 2026 03:01:09 +0000
Files and hashes: 1: 1Xd9T-vmTqWcRzDMcqdo4DeoQuQ.roa (hash: xBqelHlXV4izENr8HmikmcGOwsrcVkd1Rr1h+hdnJUI=)
2: 2zoKFMcGfaIUIi0gjgVI6WP5WyM.roa (hash: Is6VwvQ998n5+DQaPOHXWLSY0DuPhfOU5Gr/Ve2Nr3w=)
3: 5dqOnPyLFg7Fm1QPOdiXPUIYMSo.crl (hash: HRmZHgbHEyIFEm9yur2QvU96sZWHQJODj3iohAJiHlc=)
4: r7ykq-I8ljDq2QXxZrYFAqBWgd8.roa (hash: 8dNxZY7QKRfX/M2WT1sGj39y/DFg2Rn6j5AsES2fgtU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/003ca9-c390-4274-8fc6-7c504703bb02/1/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/003ca9-c390-4274-8fc6-7c504703bb02/1/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 22:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:14:4e:c9:34:ad:4a:a2:c3:2e:05:81:90:66:e3:b7:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5da8e9cfc8b160ec59b540f39d8973d4218312a
Validity
Not Before: Oct 7 03:01:09 2026 GMT
Not After : Oct 8 03:01:09 2026 GMT
Subject: CN=e12b5a2e7032ede7f3ede6bf88299b581f2d0e7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:aa:cc:ec:d6:1b:3f:4f:f6:d7:d2:35:dd:39:
87:ef:88:af:0b:6d:2f:69:49:40:fc:79:80:78:c3:
1d:a2:5b:f1:e8:d5:e6:41:81:af:f2:95:97:f2:d6:
77:9c:30:75:25:f3:77:65:d3:6b:02:a2:c9:73:9a:
fb:e5:85:e5:ad:22:05:20:5b:ae:08:a0:1a:e8:1b:
51:6c:4c:7b:fa:1f:2a:14:9b:34:47:89:5f:f2:41:
21:1d:d9:fe:fb:94:21:42:75:49:09:16:91:a5:b7:
be:12:bc:ab:fc:1e:11:8a:2a:aa:e9:30:41:ac:b3:
b9:8d:24:c8:53:35:54:5d:5d:36:03:a7:e4:84:57:
b8:a8:0b:6a:7e:ae:05:e5:97:3a:2c:33:1f:fd:45:
ea:3b:80:d5:de:0b:6d:66:4e:1a:bc:1c:ff:3d:a0:
95:ec:7f:ec:de:12:e0:1f:d1:8b:4c:22:56:41:95:
07:19:2d:0d:1d:f9:2d:5f:a8:18:cb:14:a2:0b:fe:
9c:d4:33:68:86:e6:73:56:be:0d:b1:5e:20:f7:9f:
9f:94:0e:2a:28:a0:ef:8b:15:1f:1e:14:cb:bc:61:
79:02:6d:76:db:17:e7:5b:e8:2e:3a:38:92:2b:f8:
61:97:f8:64:ea:76:16:ee:d3:a3:a7:a3:62:a6:6c:
81:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:2B:5A:2E:70:32:ED:E7:F3:ED:E6:BF:88:29:9B:58:1F:2D:0E:7D
X509v3 Authority Key Identifier:
keyid:E5:DA:8E:9C:FC:8B:16:0E:C5:9B:54:0F:39:D8:97:3D:42:18:31:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/003ca9-c390-4274-8fc6-7c504703bb02/1/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/003ca9-c390-4274-8fc6-7c504703bb02/1/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:1e:2c:77:cb:2a:72:bb:7b:95:e5:6a:cd:a8:b4:10:e5:7d:
97:55:64:e6:5c:df:37:c4:65:23:fe:0b:ef:08:87:06:e6:7d:
56:22:8f:dd:0a:77:d6:54:ce:81:42:8f:42:89:6c:a9:01:da:
e1:a8:f9:a1:a8:2a:88:6a:34:56:19:0d:d5:dc:65:75:1f:42:
02:2d:76:b0:59:8b:c5:cf:97:c3:7c:dd:2c:72:5a:91:7c:cf:
08:e1:a8:33:5a:aa:9c:a9:d1:92:e5:ad:c4:6b:85:e1:78:be:
69:0d:05:8f:84:29:5f:a2:6f:82:ca:a3:a8:eb:12:55:7c:63:
20:03:96:8d:9b:55:64:61:73:ec:03:30:78:5d:e0:54:22:79:
38:20:82:36:56:8e:77:f1:e1:96:5f:a1:91:be:da:f3:e1:09:
e6:ae:8b:e3:e5:11:5e:36:29:d9:51:30:35:1b:68:64:27:8b:
18:3e:8c:31:7e:8b:3a:71:28:6b:da:cb:b4:11:2a:3e:09:73:
e7:33:87:af:32:1b:2f:e1:37:e2:50:38:c3:f3:66:17:24:74:
90:0c:be:d7:c4:6d:f9:10:11:32:43:a5:7b:b6:81:ff:54:35:
a6:75:c5:cf:91:e4:42:52:cd:ff:97:86:af:92:01:4c:0a:ec:
c6:cb:55:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 07:53:52 2026 by rpki-client