Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/4f0269-9818-4123-bcbf-7a652303a28a/1/_q5Ur85RVFR5wNoD8gGnTimSfXg.mft
File: _q5Ur85RVFR5wNoD8gGnTimSfXg.mft (raw, json)
Hash identifier: ppn70NmICZTGUmo05VJUv2jRNNf+XpT/1JvV6yoFZ2I=
Subject key identifier: 49:B7:DE:5A:C1:EE:3A:C6:B8:D0:E3:56:87:2E:9F:68:20:D3:6C:77
Authority key identifier: FE:AE:54:AF:CE:51:54:54:79:C0:DA:03:F2:01:A7:4E:29:92:7D:78
Certificate issuer: /CN=feae54afce51545479c0da03f201a74e29927d78
Certificate serial: 01A06C832A052A5A3EF1093C685BBC33A728
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_q5Ur85RVFR5wNoD8gGnTimSfXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/4f0269-9818-4123-bcbf-7a652303a28a/1/_q5Ur85RVFR5wNoD8gGnTimSfXg.mft
Manifest number: 0A67
Signing time: Fri 04 Sep 2026 13:02:10 +0000
Manifest this update: Fri 04 Sep 2026 13:02:10 +0000
Manifest next update: Sat 05 Sep 2026 13:02:10 +0000
Files and hashes: 1: IpDWhHDW_jjW4s7kmxssNqbsNL8.roa (hash: PZdGVIm+bNpQQVU0BxUiBJTaInqWv4810rxgD/JnG9o=)
2: _q5Ur85RVFR5wNoD8gGnTimSfXg.crl (hash: W0POIaJENfZA9YMKtMI0V9wq74lrSuRq2IejQUiXMbc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/4f0269-9818-4123-bcbf-7a652303a28a/1/_q5Ur85RVFR5wNoD8gGnTimSfXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/4f0269-9818-4123-bcbf-7a652303a28a/1/_q5Ur85RVFR5wNoD8gGnTimSfXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_q5Ur85RVFR5wNoD8gGnTimSfXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 07:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6c:83:2a:05:2a:5a:3e:f1:09:3c:68:5b:bc:33:a7:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=feae54afce51545479c0da03f201a74e29927d78
Validity
Not Before: Sep 4 13:02:10 2026 GMT
Not After : Sep 5 13:02:10 2026 GMT
Subject: CN=49b7de5ac1ee3ac6b8d0e356872e9f6820d36c77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f3:be:61:68:9e:3a:0c:93:9b:a3:e4:70:6a:
fc:5f:0b:a8:be:cd:da:8d:32:51:e8:e3:bc:8a:2e:
d5:dd:38:b0:a1:4a:2c:e7:61:c8:53:d7:b7:a8:2b:
b0:61:f0:bb:a4:a0:db:1a:53:fd:98:bf:29:43:0d:
07:78:50:61:38:07:f2:c8:8e:22:fd:06:b5:14:65:
33:4f:2c:87:ae:ec:53:7e:b8:31:64:de:ac:8d:09:
aa:de:45:65:5a:8b:a0:e6:f0:0f:8c:ca:6b:bb:38:
63:ed:99:26:8f:92:89:66:eb:19:e7:92:88:75:e0:
8a:35:9f:01:f2:d1:fc:09:16:15:c1:14:86:41:f1:
bf:51:cc:be:63:ef:09:36:a1:c2:81:c0:09:5b:72:
fe:a7:f1:95:1e:05:df:81:ce:fb:45:c6:11:53:0b:
b0:df:45:1f:38:92:54:74:9a:00:75:aa:55:15:2b:
11:ed:9e:5c:02:21:79:65:f4:90:c3:40:e5:55:40:
0f:81:d2:16:74:0e:7d:57:fe:91:80:f6:7f:a7:c0:
c9:15:a0:93:9b:e5:5e:f2:49:aa:8a:76:9d:74:ac:
47:b3:96:7d:8e:a4:1b:7f:ae:bf:bb:4b:b3:35:3a:
7f:d7:ec:3a:36:8d:d6:bc:92:78:48:e6:01:6c:c3:
a7:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:B7:DE:5A:C1:EE:3A:C6:B8:D0:E3:56:87:2E:9F:68:20:D3:6C:77
X509v3 Authority Key Identifier:
keyid:FE:AE:54:AF:CE:51:54:54:79:C0:DA:03:F2:01:A7:4E:29:92:7D:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_q5Ur85RVFR5wNoD8gGnTimSfXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/4f0269-9818-4123-bcbf-7a652303a28a/1/_q5Ur85RVFR5wNoD8gGnTimSfXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/4f0269-9818-4123-bcbf-7a652303a28a/1/_q5Ur85RVFR5wNoD8gGnTimSfXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:5a:65:73:f9:1f:92:5a:56:11:06:50:e2:9c:86:b6:4d:7f:
73:64:0d:da:00:6b:d2:76:b4:77:34:9c:49:a7:10:8c:0c:45:
09:b0:a7:e0:3e:b9:dc:4c:ba:e4:23:4a:fb:ca:6c:29:03:ae:
10:28:66:98:a9:51:82:ba:83:d8:85:c3:98:3e:0c:4d:26:70:
45:61:01:26:3f:b7:71:c4:e2:23:76:f8:1f:f6:72:9b:2d:b0:
59:d8:da:83:e0:f8:d5:83:13:ff:8e:e0:89:97:21:03:c2:3b:
f8:3d:ee:80:56:eb:a9:9f:8b:86:2e:8e:9e:ea:3a:fc:8f:87:
9d:d2:b3:73:8e:b4:dd:10:0e:1a:64:5b:37:f5:31:bb:90:14:
51:9b:91:8f:96:31:bd:96:7b:88:4b:f8:07:6b:e0:d5:3d:1c:
8a:a1:a3:c4:49:c2:11:75:f2:a9:37:f3:94:55:ca:b0:2d:99:
7f:0c:3f:e3:20:eb:71:33:da:a5:50:b5:b6:15:68:d7:29:59:
dd:95:1c:54:f0:60:01:2a:49:cf:58:d1:69:e5:80:6d:83:89:
32:bd:d8:2f:67:ee:bc:33:d0:56:5c:7c:de:93:ef:c4:a7:37:
cd:7c:b1:4f:39:85:14:72:0d:b7:db:7c:47:d2:b7:61:01:d8:
44:10:17:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 15:43:53 2026 by rpki-client