Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/549b43-396d-4b36-98d6-7c1a6447b0f7/1/5_qOTJFWwNgqMzJorS3h9RbLtyg.mft
File: 5_qOTJFWwNgqMzJorS3h9RbLtyg.mft (raw, json)
Hash identifier: Mbrfyvb4oiUjBagd9ywQSRcz6L9bNP7ZrNphDinZ9C0=
Subject key identifier: 14:3F:C4:3C:BF:37:6A:04:A4:40:33:E2:A5:87:B6:64:E4:1B:44:E8
Authority key identifier: E7:FA:8E:4C:91:56:C0:D8:2A:33:32:68:AD:2D:E1:F5:16:CB:B7:28
Certificate issuer: /CN=e7fa8e4c9156c0d82a333268ad2de1f516cbb728
Certificate serial: 01A17A04A0988D7CA7DF618B2AD17063D028
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_qOTJFWwNgqMzJorS3h9RbLtyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/549b43-396d-4b36-98d6-7c1a6447b0f7/1/5_qOTJFWwNgqMzJorS3h9RbLtyg.mft
Manifest number: 013D
Signing time: Mon 26 Oct 2026 21:01:25 +0000
Manifest this update: Mon 26 Oct 2026 21:01:25 +0000
Manifest next update: Tue 27 Oct 2026 21:01:25 +0000
Files and hashes: 1: 1-EAsB25AZ4X-I_GY_t9vKuEY86Y.roa (hash: nav09sGI16l96Ot72m87rg0Es3Mohhog/elp3en7JIY=)
2: 5_qOTJFWwNgqMzJorS3h9RbLtyg.crl (hash: iKdddDjItPDWysHO1UqCUoOEuDDQRDuodvwAjCNbH08=)
3: Bsq7GMA1R2db894oU-s06fODnuo.roa (hash: LpPlfP14MavJ3ktPMvPatzDAq6hmOJSWZygOY9GTomM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/549b43-396d-4b36-98d6-7c1a6447b0f7/1/5_qOTJFWwNgqMzJorS3h9RbLtyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/549b43-396d-4b36-98d6-7c1a6447b0f7/1/5_qOTJFWwNgqMzJorS3h9RbLtyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/5_qOTJFWwNgqMzJorS3h9RbLtyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:04:a0:98:8d:7c:a7:df:61:8b:2a:d1:70:63:d0:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7fa8e4c9156c0d82a333268ad2de1f516cbb728
Validity
Not Before: Oct 26 21:01:25 2026 GMT
Not After : Oct 27 21:01:25 2026 GMT
Subject: CN=143fc43cbf376a04a44033e2a587b664e41b44e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:70:31:55:d1:47:7d:46:c1:b2:99:76:fc:ce:
e4:85:88:e4:57:8a:ca:53:57:b3:ea:21:72:39:3b:
51:02:94:91:f5:0a:3b:d3:86:b0:e8:fc:14:13:55:
9c:30:c2:8a:4e:db:b6:10:8a:93:0b:a3:80:7c:aa:
37:fc:b3:3e:32:5f:b7:35:78:ba:21:05:e1:5c:de:
d9:90:1d:8b:90:c2:cd:16:8b:6f:c2:66:a0:18:e4:
12:66:31:64:9d:d1:00:70:c5:cd:e8:72:92:8e:02:
a3:8a:be:b5:9b:11:41:e0:8a:2b:c6:df:96:ec:67:
d6:6b:2d:e8:c6:11:b6:bb:89:05:52:a8:79:c6:f5:
0a:37:f1:88:69:23:a9:9e:b8:a9:2a:e6:83:ac:cc:
09:d8:a1:64:86:4b:4f:0f:38:5e:c1:1d:3a:85:87:
04:40:16:7d:78:12:4d:d0:7b:db:6f:9a:ca:b7:24:
a8:50:82:39:00:4a:80:40:59:23:ad:2c:37:14:3c:
eb:07:3e:da:f5:2f:1f:a8:a2:17:df:dc:be:f8:44:
6a:af:aa:05:42:cb:a4:33:d6:57:02:69:42:c3:91:
eb:cc:b1:32:ed:3e:ea:42:b2:6a:16:34:df:67:e7:
ac:8e:99:0d:bd:68:73:e0:36:84:03:a8:99:5b:8d:
dd:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:3F:C4:3C:BF:37:6A:04:A4:40:33:E2:A5:87:B6:64:E4:1B:44:E8
X509v3 Authority Key Identifier:
keyid:E7:FA:8E:4C:91:56:C0:D8:2A:33:32:68:AD:2D:E1:F5:16:CB:B7:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_qOTJFWwNgqMzJorS3h9RbLtyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/549b43-396d-4b36-98d6-7c1a6447b0f7/1/5_qOTJFWwNgqMzJorS3h9RbLtyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/549b43-396d-4b36-98d6-7c1a6447b0f7/1/5_qOTJFWwNgqMzJorS3h9RbLtyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:a3:b4:60:2a:4f:ed:89:19:b0:a8:a1:36:f2:63:0e:ee:af:
86:49:ff:8d:91:3d:5b:e4:03:64:4a:c6:2b:7a:3d:a1:2e:39:
23:1a:cf:d4:8d:0f:f7:74:b7:5e:db:78:3f:2c:b2:24:48:f6:
56:fb:1c:d7:c1:71:58:63:cc:e5:36:d5:1b:ab:83:7e:d6:56:
0e:9b:01:57:56:75:89:ee:12:9e:f6:7a:0f:5e:5b:42:dc:bf:
96:e7:c6:1d:d1:e1:ac:88:43:e7:8b:8e:fc:4c:20:16:cd:59:
18:67:09:03:41:16:a9:6b:05:cf:22:c4:cb:a8:a7:63:07:35:
3c:98:3d:57:ea:a4:c6:24:d5:de:c7:06:a3:93:a7:4f:be:15:
95:6c:dd:61:51:50:a9:b8:b3:54:d1:1b:4e:79:36:2b:36:28:
aa:71:92:e0:f7:cd:16:44:7d:7b:44:4a:3e:d4:77:81:bc:ca:
f9:8b:c6:ae:b8:1c:1c:05:45:60:32:2e:1a:66:10:9d:9c:6f:
42:26:3a:e9:8f:a7:30:56:50:02:66:17:e9:30:7f:9b:db:9c:
51:1e:dd:c5:b8:71:ec:03:27:16:fb:e9:00:a1:ec:b8:e3:97:
be:e8:ce:8a:30:4f:0b:26:69:6d:77:5c:24:86:07:f3:28:6a:
36:14:76:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 06:12:46 2026 by rpki-client