Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/549b43-396d-4b36-98d6-7c1a6447b0f7/1/5_qOTJFWwNgqMzJorS3h9RbLtyg.mft
File: 5_qOTJFWwNgqMzJorS3h9RbLtyg.mft (raw, json)
Hash identifier: dN6RpF6BCj52Y1MEIMbXuZ6HOM4f4iiY9vqwFMPqLYc=
Subject key identifier: B4:9A:04:54:5F:53:E9:E8:F8:DF:5E:28:75:E8:84:64:A9:4B:3E:4F
Authority key identifier: E7:FA:8E:4C:91:56:C0:D8:2A:33:32:68:AD:2D:E1:F5:16:CB:B7:28
Certificate issuer: /CN=e7fa8e4c9156c0d82a333268ad2de1f516cbb728
Certificate serial: 01A08C7AD74370C0B304B29C0F95DBEBD14C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_qOTJFWwNgqMzJorS3h9RbLtyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/549b43-396d-4b36-98d6-7c1a6447b0f7/1/5_qOTJFWwNgqMzJorS3h9RbLtyg.mft
Manifest number: C2
Signing time: Thu 10 Sep 2026 18:00:55 +0000
Manifest this update: Thu 10 Sep 2026 18:00:55 +0000
Manifest next update: Fri 11 Sep 2026 18:00:55 +0000
Files and hashes: 1: 1-EAsB25AZ4X-I_GY_t9vKuEY86Y.roa (hash: nav09sGI16l96Ot72m87rg0Es3Mohhog/elp3en7JIY=)
2: 5_qOTJFWwNgqMzJorS3h9RbLtyg.crl (hash: yIZjK2RMENZYUH71Bx1NZO7wd55rpj0o7HxemJyef18=)
3: Bsq7GMA1R2db894oU-s06fODnuo.roa (hash: LpPlfP14MavJ3ktPMvPatzDAq6hmOJSWZygOY9GTomM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/549b43-396d-4b36-98d6-7c1a6447b0f7/1/5_qOTJFWwNgqMzJorS3h9RbLtyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/549b43-396d-4b36-98d6-7c1a6447b0f7/1/5_qOTJFWwNgqMzJorS3h9RbLtyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/5_qOTJFWwNgqMzJorS3h9RbLtyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:7a:d7:43:70:c0:b3:04:b2:9c:0f:95:db:eb:d1:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7fa8e4c9156c0d82a333268ad2de1f516cbb728
Validity
Not Before: Sep 10 18:00:55 2026 GMT
Not After : Sep 11 18:00:55 2026 GMT
Subject: CN=b49a04545f53e9e8f8df5e2875e88464a94b3e4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5d:00:30:72:b5:19:8f:a7:34:e0:19:e4:4f:
70:f3:4d:88:80:31:1d:37:e7:73:0d:00:77:a5:e4:
da:f3:99:fd:12:5b:e3:8d:8d:c0:eb:3b:95:1b:e2:
43:ea:f3:c9:71:42:c6:95:61:60:36:b0:92:e0:38:
e6:4e:ba:4b:36:d9:2c:44:32:68:ed:cb:07:56:98:
40:ec:f6:29:f9:d7:ce:b4:d5:85:9b:87:25:c5:f3:
aa:3d:21:6e:95:96:5c:11:99:c9:42:65:25:5d:b8:
00:5e:14:fa:79:84:ca:bc:a6:9f:9b:92:26:40:a6:
ef:0f:b4:40:bc:f5:d1:07:8a:00:5b:46:63:ae:81:
b3:a3:58:86:e3:e4:99:35:50:ae:56:0c:77:85:3c:
47:81:53:0d:90:f2:16:0e:4e:e7:af:57:05:a7:60:
0a:c2:e1:f4:cf:52:62:bc:eb:e6:01:cf:24:67:d1:
f2:61:0e:ec:57:08:f1:fe:d5:8e:12:f9:27:e4:9a:
b3:c4:14:a0:77:7e:ed:22:bc:57:5f:4a:2a:70:de:
66:cd:ab:d5:90:be:72:ce:cb:f5:66:f1:e4:b4:7c:
98:af:f1:92:b1:ba:30:c2:b9:12:5e:07:1b:7d:89:
a7:85:73:30:42:3a:4c:40:f7:55:4e:17:eb:2b:ac:
db:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:9A:04:54:5F:53:E9:E8:F8:DF:5E:28:75:E8:84:64:A9:4B:3E:4F
X509v3 Authority Key Identifier:
keyid:E7:FA:8E:4C:91:56:C0:D8:2A:33:32:68:AD:2D:E1:F5:16:CB:B7:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_qOTJFWwNgqMzJorS3h9RbLtyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/549b43-396d-4b36-98d6-7c1a6447b0f7/1/5_qOTJFWwNgqMzJorS3h9RbLtyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/549b43-396d-4b36-98d6-7c1a6447b0f7/1/5_qOTJFWwNgqMzJorS3h9RbLtyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:96:c2:be:ad:63:92:82:1a:26:af:55:44:8b:cf:5d:43:0d:
e4:df:41:db:79:0a:24:dd:03:d4:da:98:b5:a8:37:2a:81:93:
08:3c:fc:cb:78:dd:0b:02:47:ab:fd:bb:b6:00:56:01:dd:62:
95:61:03:db:28:13:6a:90:58:16:b1:a2:f3:91:81:b6:d2:fd:
7c:0c:91:2b:85:e5:ab:05:92:7b:da:f5:69:91:2f:c4:78:12:
07:67:2b:bf:4e:65:a0:17:c0:c6:e5:76:09:b8:cf:50:f9:c6:
6c:d3:02:5f:35:bf:06:45:34:65:ac:b7:94:d4:f2:56:97:60:
36:2b:ec:6b:4a:90:72:65:2e:5d:90:f1:b1:ee:0d:84:27:91:
9e:fe:a7:c9:b1:20:3d:d1:4f:2f:76:4a:30:b4:c1:6e:a7:7c:
9a:b2:c0:54:57:e2:00:fe:dc:58:a3:97:00:75:21:aa:87:3f:
52:85:75:ca:09:bf:4b:72:3e:ab:14:00:8c:4e:f4:a8:b0:d3:
58:9e:fa:32:32:ba:c0:2c:74:08:76:3d:4d:73:b9:62:b2:28:
20:d7:f5:74:e4:0d:6e:1d:b2:01:9c:e7:e7:5a:82:22:0f:e0:
e1:af:be:4f:73:79:92:e3:00:75:12:f0:41:3e:0c:a6:c2:2d:
5a:4c:a3:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCMetdDcMCzBLKcD5Xb69FMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3ZmE4ZTRjOTE1NmMwZDgyYTMzMzI2OGFkMmRlMWY1MTZj
YmI3MjgwHhcNMjYwOTEwMTgwMDU1WhcNMjYwOTExMTgwMDU1WjAzMTEwLwYDVQQD
EyhiNDlhMDQ1NDVmNTNlOWU4ZjhkZjVlMjg3NWU4ODQ2NGE5NGIzZTRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArV0AMHK1GY+nNOAZ5E9w802IgDEd
N+dzDQB3peTa85n9ElvjjY3A6zuVG+JD6vPJcULGlWFgNrCS4DjmTrpLNtksRDJo
7csHVphA7PYp+dfOtNWFm4clxfOqPSFulZZcEZnJQmUlXbgAXhT6eYTKvKafm5Im
QKbvD7RAvPXRB4oAW0ZjroGzo1iG4+SZNVCuVgx3hTxHgVMNkPIWDk7nr1cFp2AK
wuH0z1JivOvmAc8kZ9HyYQ7sVwjx/tWOEvkn5JqzxBSgd37tIrxXX0oqcN5mzavV
kL5yzsv1ZvHktHyYr/GSsbowwrkSXgcbfYmnhXMwQjpMQPdVThfrK6zbXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLSaBFRfU+no+N9eKHXohGSpSz5PMB8GA1UdIwQY
MBaAFOf6jkyRVsDYKjMyaK0t4fUWy7coMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNV9xT1RKRld3TmdxTXpKb3JTM2g5UmJMdHlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi81NDliNDMtMzk2ZC00YjM2LTk4ZDYt
N2MxYTY0NDdiMGY3LzEvNV9xT1RKRld3TmdxTXpKb3JTM2g5UmJMdHlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi81NDliNDMtMzk2ZC00YjM2LTk4ZDYtN2MxYTY0NDdiMGY3
LzEvNV9xT1RKRld3TmdxTXpKb3JTM2g5UmJMdHlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA5bCvq1j
koIaJq9VRIvPXUMN5N9B23kKJN0D1NqYtag3KoGTCDz8y3jdCwJHq/27tgBWAd1i
lWED2ygTapBYFrGi85GBttL9fAyRK4XlqwWSe9r1aZEvxHgSB2crv05loBfAxuV2
CbjPUPnGbNMCXzW/BkU0Zay3lNTyVpdgNivsa0qQcmUuXZDxse4NhCeRnv6nybEg
PdFPL3ZKMLTBbqd8mrLAVFfiAP7cWKOXAHUhqoc/UoV1ygm/S3I+qxQAjE70qLDT
WJ76MjK6wCx0CHY9TXO5YrIoINf1dOQNbh2yAZzn51qCIg/g4a++T3N5kuMAdRLw
QT4MpsItWkyjzQ==
-----END CERTIFICATE-----
Generated at Thu Sep 10 21:05:13 2026 by rpki-client