Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/549b43-396d-4b36-98d6-7c1a6447b0f7/1/5_qOTJFWwNgqMzJorS3h9RbLtyg.mft
File: 5_qOTJFWwNgqMzJorS3h9RbLtyg.mft (raw, json)
Hash identifier: 8nh1Xzw8Dpb63tl/t5Wvygdo8GMQlSA9upOz4//L//s=
Subject key identifier: 9E:A8:85:94:C6:3D:E7:BD:41:09:00:F2:78:EA:96:E4:8A:F6:E1:12
Authority key identifier: E7:FA:8E:4C:91:56:C0:D8:2A:33:32:68:AD:2D:E1:F5:16:CB:B7:28
Certificate issuer: /CN=e7fa8e4c9156c0d82a333268ad2de1f516cbb728
Certificate serial: 019FA2CE59FBC8B738A4CC0FAEEEA55820C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_qOTJFWwNgqMzJorS3h9RbLtyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/549b43-396d-4b36-98d6-7c1a6447b0f7/1/5_qOTJFWwNgqMzJorS3h9RbLtyg.mft
Manifest number: 49
Signing time: Mon 27 Jul 2026 09:01:00 +0000
Manifest this update: Mon 27 Jul 2026 09:01:00 +0000
Manifest next update: Tue 28 Jul 2026 09:01:00 +0000
Files and hashes: 1: 1-EAsB25AZ4X-I_GY_t9vKuEY86Y.roa (hash: nav09sGI16l96Ot72m87rg0Es3Mohhog/elp3en7JIY=)
2: 5_qOTJFWwNgqMzJorS3h9RbLtyg.crl (hash: GLW+C1UO7eu51Ab5N9Xm3dOScrUgfEtbFZewcLAeqdA=)
3: Bsq7GMA1R2db894oU-s06fODnuo.roa (hash: LpPlfP14MavJ3ktPMvPatzDAq6hmOJSWZygOY9GTomM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/549b43-396d-4b36-98d6-7c1a6447b0f7/1/5_qOTJFWwNgqMzJorS3h9RbLtyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/549b43-396d-4b36-98d6-7c1a6447b0f7/1/5_qOTJFWwNgqMzJorS3h9RbLtyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/5_qOTJFWwNgqMzJorS3h9RbLtyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 09:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:ce:59:fb:c8:b7:38:a4:cc:0f:ae:ee:a5:58:20:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7fa8e4c9156c0d82a333268ad2de1f516cbb728
Validity
Not Before: Jul 27 09:01:00 2026 GMT
Not After : Jul 28 09:01:00 2026 GMT
Subject: CN=9ea88594c63de7bd410900f278ea96e48af6e112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ee:fb:6c:6b:6d:61:6c:68:69:b2:c6:ad:f3:
ee:3a:87:6f:33:f8:54:7f:d4:04:93:c3:6b:ef:14:
02:59:12:c3:05:31:d4:1d:89:22:4f:63:37:1b:a1:
ee:06:10:ee:63:ad:35:df:bb:2b:77:e7:97:51:56:
02:1d:d8:2d:d2:9c:fc:4c:a6:ae:ef:ef:f5:17:4f:
e7:96:f8:4e:68:a2:b4:fc:45:bd:3d:be:06:e3:4c:
46:d9:fb:63:11:87:81:c0:13:bf:7d:b3:cf:98:96:
73:2c:56:e6:f4:9a:46:18:13:97:80:65:6c:86:80:
a0:43:2e:25:19:b8:36:29:67:77:73:50:8c:d9:c6:
6a:31:18:54:24:3a:dd:4f:ac:19:86:d6:ce:e1:7f:
c4:6e:85:64:0f:c0:99:18:a2:01:e9:20:b8:6a:80:
76:27:28:8c:9b:33:0d:8e:a6:2c:09:42:d5:95:a6:
f8:9f:eb:e2:14:21:de:24:f0:a8:fe:d9:87:e0:5a:
42:83:62:c4:1f:7a:22:d6:85:5a:58:eb:f7:b6:98:
11:11:2d:44:95:24:a1:e0:e5:3d:03:cd:f5:17:39:
41:5b:b6:c2:cf:6f:8e:f7:1f:09:28:75:be:14:a0:
dd:eb:3b:b8:dc:8f:e4:81:b8:d7:67:01:8b:47:1f:
17:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:A8:85:94:C6:3D:E7:BD:41:09:00:F2:78:EA:96:E4:8A:F6:E1:12
X509v3 Authority Key Identifier:
keyid:E7:FA:8E:4C:91:56:C0:D8:2A:33:32:68:AD:2D:E1:F5:16:CB:B7:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_qOTJFWwNgqMzJorS3h9RbLtyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/549b43-396d-4b36-98d6-7c1a6447b0f7/1/5_qOTJFWwNgqMzJorS3h9RbLtyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/549b43-396d-4b36-98d6-7c1a6447b0f7/1/5_qOTJFWwNgqMzJorS3h9RbLtyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:ac:17:a7:a3:58:a2:93:14:98:73:f8:eb:d3:cb:86:97:4f:
f7:92:cd:32:c6:bd:47:0a:1e:96:62:06:06:9c:59:30:ac:0d:
4c:bd:01:a9:45:51:c1:6a:36:a5:8c:06:9d:63:86:f3:e2:1e:
d2:e7:1d:d2:54:cc:1f:cd:a8:3f:51:2f:76:70:65:13:cc:3f:
53:55:0b:38:f2:3d:5b:6e:15:ae:9d:88:52:a3:9c:d8:e3:2f:
44:fc:50:a4:f0:6a:b8:be:63:60:a1:58:e1:8d:af:7a:7b:9a:
cf:07:d2:d9:22:c0:7b:ff:03:10:39:e8:9b:94:b1:07:27:c7:
42:c6:41:6b:a1:77:23:d9:ec:4e:40:4f:93:3f:d9:fa:9c:ef:
d4:f3:63:3c:a3:11:10:3f:8f:ca:27:62:60:80:0e:35:c5:34:
66:0f:e6:1d:a1:45:15:be:cf:5a:42:19:ac:94:9d:5a:52:67:
be:ee:cb:43:20:d2:16:a3:32:44:93:40:ce:2f:a3:93:b6:0f:
ef:26:0a:ac:8c:6e:64:f6:13:53:d4:7a:ba:24:32:ab:fd:01:
d4:7b:11:03:be:6e:ca:8f:8e:bf:a9:26:3c:38:9e:09:4d:46:
ec:68:a4:4f:db:dc:bf:c9:af:02:39:18:da:c9:39:03:75:eb:
2a:68:83:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 14:52:59 2026 by rpki-client