Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9a/ea1725-dcd5-4990-9448-0eb3ba51374c/1/5q1QzkYdtcs3pYPnKbcVSZjssRc.mft
File: 5q1QzkYdtcs3pYPnKbcVSZjssRc.mft (raw, json)
Hash identifier: AticZT2k4Xfg3kmYzty0eF/yGbujxAe/uyApfNkycdI=
Subject key identifier: C2:91:B8:8A:7D:7D:7B:DD:EF:17:27:F5:E6:0A:2A:87:E6:47:F2:06
Authority key identifier: E6:AD:50:CE:46:1D:B5:CB:37:A5:83:E7:29:B7:15:49:98:EC:B1:17
Certificate issuer: /CN=e6ad50ce461db5cb37a583e729b7154998ecb117
Certificate serial: 01A13DEF15D776F6ED4635A56E26D5D0FB75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5q1QzkYdtcs3pYPnKbcVSZjssRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/ea1725-dcd5-4990-9448-0eb3ba51374c/1/5q1QzkYdtcs3pYPnKbcVSZjssRc.mft
Manifest number: 0859
Signing time: Thu 15 Oct 2026 05:00:41 +0000
Manifest this update: Thu 15 Oct 2026 05:00:41 +0000
Manifest next update: Fri 16 Oct 2026 05:00:41 +0000
Files and hashes: 1: 5q1QzkYdtcs3pYPnKbcVSZjssRc.crl (hash: C2TsQqtfHbHPJhjzjPGswFigWOrlXahbXEEboBsfNIo=)
2: yOjcC_v9jLEMw3DzVhlmsqmU6Yk.roa (hash: xoF0GSXbpt7M9bWTlnPF/z3jkbpV3tEKSL94Epm3XBU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/ea1725-dcd5-4990-9448-0eb3ba51374c/1/5q1QzkYdtcs3pYPnKbcVSZjssRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/ea1725-dcd5-4990-9448-0eb3ba51374c/1/5q1QzkYdtcs3pYPnKbcVSZjssRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/5q1QzkYdtcs3pYPnKbcVSZjssRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 05:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:ef:15:d7:76:f6:ed:46:35:a5:6e:26:d5:d0:fb:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6ad50ce461db5cb37a583e729b7154998ecb117
Validity
Not Before: Oct 15 05:00:41 2026 GMT
Not After : Oct 16 05:00:41 2026 GMT
Subject: CN=c291b88a7d7d7bddef1727f5e60a2a87e647f206
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:34:ce:91:bc:73:80:db:10:06:75:9a:9a:6d:
04:99:62:ac:2d:de:3d:eb:95:7f:ab:3d:62:54:5a:
bd:7d:ff:27:c7:ba:95:35:8d:0a:b5:8b:57:15:7f:
30:50:01:4b:5c:63:62:ec:15:b4:9d:7a:d5:e2:b3:
24:eb:d8:c8:09:41:f6:7c:53:28:c0:8a:81:29:c4:
5c:86:0e:2e:23:11:ee:af:45:b0:ee:9d:ed:d4:9a:
cc:12:18:15:62:26:de:2d:32:25:8a:99:dd:ad:60:
eb:e8:2e:08:97:c8:42:89:d8:b0:24:b6:6f:af:be:
c2:4e:d6:f8:42:b4:45:42:8e:39:93:4b:e5:6b:3b:
d2:46:cd:55:11:61:b7:48:6a:ba:17:bf:b8:be:87:
ca:fe:e7:e0:c4:0f:97:c6:e1:6a:1e:b0:e3:f5:81:
14:d9:7e:44:7d:c5:6c:80:c1:ae:aa:9a:b1:a5:e2:
4d:c8:5b:c8:ba:7c:79:56:1b:1f:39:c4:08:d0:c0:
93:60:33:30:db:7b:97:8a:0b:6a:af:a8:21:c2:1f:
e6:53:ec:58:a3:a3:85:d7:c4:1e:1d:3f:bc:9a:9f:
f0:9a:44:7c:ba:be:8e:85:fd:1a:62:70:25:92:1b:
66:e7:b2:ac:d6:2f:69:d0:bf:49:e1:43:af:23:15:
1f:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:91:B8:8A:7D:7D:7B:DD:EF:17:27:F5:E6:0A:2A:87:E6:47:F2:06
X509v3 Authority Key Identifier:
keyid:E6:AD:50:CE:46:1D:B5:CB:37:A5:83:E7:29:B7:15:49:98:EC:B1:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5q1QzkYdtcs3pYPnKbcVSZjssRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/ea1725-dcd5-4990-9448-0eb3ba51374c/1/5q1QzkYdtcs3pYPnKbcVSZjssRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/ea1725-dcd5-4990-9448-0eb3ba51374c/1/5q1QzkYdtcs3pYPnKbcVSZjssRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:2e:19:f0:8c:78:fb:c4:6f:bb:86:71:c0:d0:06:6d:cc:8d:
07:78:56:89:88:16:5b:2f:1d:57:3a:f1:04:3d:ef:6c:e8:03:
29:ce:4b:e1:99:57:44:3d:62:84:7f:d4:e9:b4:5b:23:66:57:
0a:02:6b:d9:77:88:83:e7:f8:65:f9:00:5c:9c:f2:5d:e2:13:
57:e4:c6:98:2e:3b:57:38:66:e8:24:36:4f:9b:83:e5:ee:0f:
35:92:98:11:c1:a9:81:f0:ff:78:a9:ea:eb:3a:ed:83:f8:78:
0a:44:a2:54:9b:e2:92:e3:8a:fe:8a:d2:9e:6f:22:82:58:ee:
9c:2b:5b:34:33:a9:e2:1a:dd:ba:48:64:9f:f8:a0:0f:b1:e9:
9d:50:f1:cd:05:e5:3e:99:f2:4b:56:59:b7:2c:c4:e0:39:c2:
2b:86:9e:92:21:a3:8e:d6:e1:d1:f4:61:9b:ad:a5:c3:f0:85:
e1:ba:29:72:6b:ea:3a:54:3d:40:9d:87:39:5f:45:a5:ca:52:
60:b5:59:f6:e4:1a:64:ae:84:47:0c:b9:fd:38:19:f3:79:12:
ac:ab:01:71:d6:06:cf:27:01:b7:61:6c:ef:45:f1:53:c9:da:
b8:d4:5f:4c:b1:2c:f8:7e:84:dc:59:c2:f5:80:81:ce:2b:39:
45:02:1c:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 14:18:21 2026 by rpki-client