Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/003ca9-c390-4274-8fc6-7c504703bb02/1/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.mft
File: 5dqOnPyLFg7Fm1QPOdiXPUIYMSo.mft (raw, json)
Hash identifier: 1xLObc+Txj2GAtl2j8cU3YZfWMyVeiU9M8njlqiPYh8=
Subject key identifier: A2:07:88:4D:85:1F:40:8A:11:DD:70:95:A4:FC:3E:20:2B:97:80:6F
Authority key identifier: E5:DA:8E:9C:FC:8B:16:0E:C5:9B:54:0F:39:D8:97:3D:42:18:31:2A
Certificate issuer: /CN=e5da8e9cfc8b160ec59b540f39d8973d4218312a
Certificate serial: 019F374E71C7632832C4EFDDB343BA4A3D11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/003ca9-c390-4274-8fc6-7c504703bb02/1/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.mft
Manifest number: 02D6
Signing time: Mon 06 Jul 2026 12:01:55 +0000
Manifest this update: Mon 06 Jul 2026 12:01:55 +0000
Manifest next update: Tue 07 Jul 2026 12:01:55 +0000
Files and hashes: 1: 1Xd9T-vmTqWcRzDMcqdo4DeoQuQ.roa (hash: xBqelHlXV4izENr8HmikmcGOwsrcVkd1Rr1h+hdnJUI=)
2: 2zoKFMcGfaIUIi0gjgVI6WP5WyM.roa (hash: Is6VwvQ998n5+DQaPOHXWLSY0DuPhfOU5Gr/Ve2Nr3w=)
3: 5dqOnPyLFg7Fm1QPOdiXPUIYMSo.crl (hash: dBVzfJW/HFHJaA9y8JE2tpGLGysB3Ks5dZLXJHqbLiY=)
4: r7ykq-I8ljDq2QXxZrYFAqBWgd8.roa (hash: 8dNxZY7QKRfX/M2WT1sGj39y/DFg2Rn6j5AsES2fgtU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/003ca9-c390-4274-8fc6-7c504703bb02/1/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/003ca9-c390-4274-8fc6-7c504703bb02/1/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 12:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:37:4e:71:c7:63:28:32:c4:ef:dd:b3:43:ba:4a:3d:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5da8e9cfc8b160ec59b540f39d8973d4218312a
Validity
Not Before: Jul 6 12:01:55 2026 GMT
Not After : Jul 7 12:01:55 2026 GMT
Subject: CN=a207884d851f408a11dd7095a4fc3e202b97806f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:44:62:7c:97:bf:23:a7:39:c0:a5:d4:1e:86:
5a:b5:87:2d:3a:06:d8:15:9f:11:c2:91:e8:c8:53:
d5:d6:89:22:f2:7d:40:9f:06:fa:36:d5:6f:e6:73:
b4:8f:18:2a:21:92:52:89:90:3d:3a:39:c0:4c:ff:
30:12:37:9d:6c:6e:f9:f2:3c:ae:0c:de:c0:6f:8f:
6e:db:41:7a:02:36:a3:97:18:04:92:84:ee:d3:79:
e2:e6:30:a6:3d:07:d8:8d:91:4d:03:bd:14:64:01:
e9:29:cb:fd:db:a2:d5:53:52:1c:6b:2b:6d:46:41:
21:0b:f0:04:7e:c1:6c:51:f6:f6:25:7c:1b:32:60:
53:7b:a0:e3:c1:db:8c:f2:5c:43:77:cb:fa:ab:ad:
af:8e:c9:7a:06:dd:d7:e2:3d:89:09:a9:85:61:e4:
8d:92:55:cb:43:1d:f9:50:22:23:66:28:47:54:72:
f9:5b:b9:5d:0f:36:02:93:87:b1:9f:63:2c:69:98:
53:d6:e1:5c:a2:f3:81:80:0a:29:3f:5f:38:25:8a:
83:07:84:7f:96:07:90:17:34:4b:c3:3e:dd:54:f9:
29:9c:ff:11:83:8b:ed:0a:5c:11:47:2d:48:cf:be:
f8:05:37:dc:83:e1:3a:f8:6a:c0:d5:b5:5c:49:b6:
4e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:07:88:4D:85:1F:40:8A:11:DD:70:95:A4:FC:3E:20:2B:97:80:6F
X509v3 Authority Key Identifier:
keyid:E5:DA:8E:9C:FC:8B:16:0E:C5:9B:54:0F:39:D8:97:3D:42:18:31:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/003ca9-c390-4274-8fc6-7c504703bb02/1/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/003ca9-c390-4274-8fc6-7c504703bb02/1/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:9c:04:09:56:33:00:3f:0c:f1:fe:94:52:fc:56:ba:e6:08:
56:67:fe:f4:89:ee:a2:fe:b0:3c:a6:87:a3:3c:00:5e:f1:b9:
bb:2b:fa:52:b9:bc:a3:eb:67:0f:ed:eb:1f:c3:04:ce:2f:fb:
97:aa:5e:46:a9:f0:7a:e9:e4:2e:a7:9c:95:a2:a3:d2:93:f9:
32:ec:e4:3a:ab:83:b1:16:6e:80:5b:80:93:09:ed:fd:2a:2e:
47:0e:14:4a:46:3f:9b:e5:14:06:03:cd:78:c9:88:97:fe:3a:
eb:53:6f:e4:db:38:2e:6d:7d:97:17:e9:0c:05:79:ea:e0:66:
97:26:20:5b:5a:88:2d:38:af:27:da:e6:72:dc:e2:64:6e:8e:
65:33:6c:47:df:dc:a8:10:66:67:8f:c4:ff:42:04:c7:51:08:
8e:15:ae:7e:af:69:6c:54:41:8c:d3:6f:fc:e2:87:aa:ed:a2:
07:a5:b6:a0:88:3c:8e:fd:81:30:80:a4:f8:13:d5:2c:52:63:
60:4f:02:6a:7e:45:64:c4:6e:42:76:73:28:1d:51:62:d4:0a:
09:60:0d:ed:a3:32:5b:49:c8:d1:dd:1a:0c:1a:ac:72:fb:3e:
21:66:f3:8c:32:d2:f4:08:4b:6d:06:09:06:bc:10:50:08:b5:
72:c4:26:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:14:58 2026 by rpki-client