Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/fc803f-9675-4355-80f6-77730159c8d4/1/5qVIUgd6AHg4MDwfYchDh8zN1oQ.mft
File: 5qVIUgd6AHg4MDwfYchDh8zN1oQ.mft (raw, json)
Hash identifier: 7nu3zoos3vusJ387Hh6qoYSVhhQMpjWNv3ELXwILMxs=
Subject key identifier: 54:3F:42:D8:5A:87:02:63:D0:FE:E8:D6:8E:D9:74:AE:7D:FB:63:D7
Authority key identifier: E6:A5:48:52:07:7A:00:78:38:30:3C:1F:61:C8:43:87:CC:CD:D6:84
Certificate issuer: /CN=e6a54852077a007838303c1f61c84387cccdd684
Certificate serial: 01A13ECB557F8DD6B52433533DDF2081ED4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5qVIUgd6AHg4MDwfYchDh8zN1oQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fc803f-9675-4355-80f6-77730159c8d4/1/5qVIUgd6AHg4MDwfYchDh8zN1oQ.mft
Manifest number: 0831
Signing time: Thu 15 Oct 2026 09:01:15 +0000
Manifest this update: Thu 15 Oct 2026 09:01:15 +0000
Manifest next update: Fri 16 Oct 2026 09:01:15 +0000
Files and hashes: 1: 5qVIUgd6AHg4MDwfYchDh8zN1oQ.crl (hash: zlrHXWS5bqQrZZCA3nA9urJhDzv+44urR4V4rJkreJs=)
2: y4_u6MP25DDbYftrjo0-BN4CqP0.roa (hash: P3A69WpiF0MyDiVo1cBJGQBqn5Zv2zHMeyZO0MmbAb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fc803f-9675-4355-80f6-77730159c8d4/1/5qVIUgd6AHg4MDwfYchDh8zN1oQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fc803f-9675-4355-80f6-77730159c8d4/1/5qVIUgd6AHg4MDwfYchDh8zN1oQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5qVIUgd6AHg4MDwfYchDh8zN1oQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:cb:55:7f:8d:d6:b5:24:33:53:3d:df:20:81:ed:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6a54852077a007838303c1f61c84387cccdd684
Validity
Not Before: Oct 15 09:01:15 2026 GMT
Not After : Oct 16 09:01:15 2026 GMT
Subject: CN=543f42d85a870263d0fee8d68ed974ae7dfb63d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:4a:0d:02:6a:ad:06:91:77:f8:0a:51:dc:a8:
81:df:b3:9a:b5:13:c1:42:c0:2c:ce:3b:4f:80:05:
69:1f:a3:8d:59:d2:74:10:d6:e0:8b:da:05:ca:b3:
78:d2:47:f8:f1:1c:25:75:44:03:3b:29:d4:1f:8e:
4c:a8:60:4f:62:e1:3c:64:ed:b4:e4:4b:bf:e3:b1:
a0:2f:e3:1a:73:b4:16:30:9f:8d:49:56:b0:14:fb:
4f:d4:88:e5:b1:2a:1a:64:1d:9e:d1:45:d0:e5:40:
17:e9:cc:b0:fd:62:16:68:91:a5:31:2a:00:c5:c0:
44:e5:1a:7a:54:c4:96:18:82:85:1e:8e:b3:cb:dd:
86:0e:a6:af:f0:a4:18:9b:75:d1:5f:9a:6a:2c:56:
9d:b9:5e:7e:4a:3c:da:88:b5:0b:20:6c:f5:87:9f:
78:80:22:9e:11:96:21:7d:55:fa:17:9c:aa:cb:f6:
5e:7d:b3:20:10:1e:a3:f7:bb:63:1c:34:74:a6:93:
f1:9e:0e:28:13:88:9e:8c:88:d6:69:5c:f4:74:7c:
ff:a0:c1:2c:13:b9:21:0a:06:31:a3:4d:02:e6:aa:
e8:42:5a:f3:d7:85:c7:60:99:6e:eb:30:43:e3:3c:
72:95:68:2d:4b:e6:97:b4:f2:e7:19:be:ab:93:c2:
47:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:3F:42:D8:5A:87:02:63:D0:FE:E8:D6:8E:D9:74:AE:7D:FB:63:D7
X509v3 Authority Key Identifier:
keyid:E6:A5:48:52:07:7A:00:78:38:30:3C:1F:61:C8:43:87:CC:CD:D6:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5qVIUgd6AHg4MDwfYchDh8zN1oQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fc803f-9675-4355-80f6-77730159c8d4/1/5qVIUgd6AHg4MDwfYchDh8zN1oQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fc803f-9675-4355-80f6-77730159c8d4/1/5qVIUgd6AHg4MDwfYchDh8zN1oQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:80:64:38:37:a2:1b:1d:c7:a3:8d:bc:0a:a4:c9:33:15:7b:
98:20:7b:c5:39:b7:da:e2:ad:39:c9:de:01:ff:70:c7:be:8c:
98:36:27:55:00:15:1f:9c:d1:84:fb:27:90:75:2a:82:54:e4:
ce:66:a7:fc:c5:e2:a6:33:3b:6b:a9:20:4d:6d:d2:60:c3:44:
23:46:a7:1d:96:47:8b:a7:0f:47:d4:eb:80:ce:24:3d:37:42:
b6:f0:7f:5e:36:8d:c8:c9:73:18:a2:56:7f:76:38:54:b6:18:
36:46:49:fd:b0:b5:62:82:11:74:07:34:bb:d3:a5:01:ac:7b:
34:53:e1:28:02:36:94:6f:5d:92:c1:ec:3b:9e:72:13:c5:bb:
02:16:8d:98:6e:7a:7a:db:7e:d5:43:1b:62:48:70:ca:e0:e1:
e1:b9:9d:31:66:10:35:3f:e3:6d:e8:23:56:06:7e:44:14:ff:
46:7f:df:7a:44:30:d4:a7:51:b9:6d:e8:4f:bf:85:00:c5:fc:
df:71:6a:95:63:a7:b7:d6:a1:0a:57:d8:57:07:6c:26:97:55:
12:0f:89:43:b2:ab:f1:46:7b:75:90:73:ce:20:7f:23:55:aa:
a1:da:a4:9d:b6:98:d8:56:db:6b:7c:75:fa:e4:9f:81:2b:da:
a6:ce:19:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 12:37:58 2026 by rpki-client