Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/063ebe-67f0-40e9-bbff-a409ca37a3ea/1/5-QyokmU5XnrJJmh9vNMZSEY40Q.mft
File: 5-QyokmU5XnrJJmh9vNMZSEY40Q.mft (raw, json)
Hash identifier: 4C55c+K+rO4oVCpUhJR59NIpx2HGd74fBRNIYEn24X8=
Subject key identifier: 74:D8:79:0F:E2:9B:6F:31:95:A9:05:FE:E5:E5:62:87:03:CF:CD:06
Authority key identifier: E7:E4:32:A2:49:94:E5:79:EB:24:99:A1:F6:F3:4C:65:21:18:E3:44
Certificate issuer: /CN=e7e432a24994e579eb2499a1f6f34c652118e344
Certificate serial: 01A0E061BF403B7B1F3E7989AA2D6EA2B425
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5-QyokmU5XnrJJmh9vNMZSEY40Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/063ebe-67f0-40e9-bbff-a409ca37a3ea/1/5-QyokmU5XnrJJmh9vNMZSEY40Q.mft
Manifest number: 1A07
Signing time: Sun 27 Sep 2026 01:01:37 +0000
Manifest this update: Sun 27 Sep 2026 01:01:37 +0000
Manifest next update: Mon 28 Sep 2026 01:01:37 +0000
Files and hashes: 1: 5-QyokmU5XnrJJmh9vNMZSEY40Q.crl (hash: cGisSSGqWQvqB4Iqdcx+wMZ87K3fdOWo6Ti487CMoEo=)
2: PVnKaPf91mf4o0pWWoMoyuOYLn0.roa (hash: bvYxvgOHnbm7x6gXSSyrjK4YHdzAS2cBUxtYdZAEIX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/063ebe-67f0-40e9-bbff-a409ca37a3ea/1/5-QyokmU5XnrJJmh9vNMZSEY40Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/063ebe-67f0-40e9-bbff-a409ca37a3ea/1/5-QyokmU5XnrJJmh9vNMZSEY40Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/5-QyokmU5XnrJJmh9vNMZSEY40Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 01:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:61:bf:40:3b:7b:1f:3e:79:89:aa:2d:6e:a2:b4:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7e432a24994e579eb2499a1f6f34c652118e344
Validity
Not Before: Sep 27 01:01:37 2026 GMT
Not After : Sep 28 01:01:37 2026 GMT
Subject: CN=74d8790fe29b6f3195a905fee5e5628703cfcd06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:40:03:4e:62:b7:83:00:50:5f:4d:68:8d:c0:
b9:5a:28:e2:48:c9:25:06:41:4d:f8:9a:e7:5a:ce:
c2:63:dd:f0:92:0b:4e:34:b9:d3:5a:04:a9:e4:2e:
78:d0:00:c4:b4:93:ec:39:5d:a9:f3:ff:1e:f5:6e:
e1:4a:0f:9c:eb:38:9d:b2:7d:04:d4:80:04:67:47:
a5:e0:4d:48:a4:07:81:c2:d9:4c:60:86:65:22:bd:
d3:83:cf:3e:a3:f2:d1:73:eb:1d:22:24:86:c9:43:
73:e4:40:cf:7f:90:5a:75:af:f3:51:d6:97:cb:6e:
4a:2c:3f:74:9a:4c:df:e7:b9:20:28:3d:f0:e0:2c:
9e:96:9f:25:61:b8:90:95:ff:d3:05:85:ed:73:0e:
fd:3e:66:97:42:a0:a8:87:80:00:f4:93:8a:cc:a2:
77:36:da:c7:a6:18:71:e4:02:71:34:3d:8d:aa:31:
0d:4d:08:94:ac:f1:81:aa:ab:1a:1b:99:f0:d6:f1:
ed:4f:5c:7c:82:a0:f4:92:8e:7e:12:42:83:38:5b:
6a:fc:0f:48:9c:da:90:8c:4a:91:1b:a7:f1:4d:3a:
e9:83:2b:52:81:9a:e4:1a:9b:d2:b6:0a:d5:e6:b7:
7f:30:cb:f0:74:eb:04:52:28:24:c2:3f:90:72:c5:
a0:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:D8:79:0F:E2:9B:6F:31:95:A9:05:FE:E5:E5:62:87:03:CF:CD:06
X509v3 Authority Key Identifier:
keyid:E7:E4:32:A2:49:94:E5:79:EB:24:99:A1:F6:F3:4C:65:21:18:E3:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5-QyokmU5XnrJJmh9vNMZSEY40Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/063ebe-67f0-40e9-bbff-a409ca37a3ea/1/5-QyokmU5XnrJJmh9vNMZSEY40Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/063ebe-67f0-40e9-bbff-a409ca37a3ea/1/5-QyokmU5XnrJJmh9vNMZSEY40Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:47:f3:97:ea:45:8c:6c:d0:43:a6:4b:b0:1b:7c:5c:83:d1:
df:2f:31:e8:bf:b2:4c:c5:f6:31:5d:55:89:40:fd:73:e6:89:
27:a9:0e:6a:19:0b:76:a0:85:f3:e0:8c:74:57:77:42:18:34:
6b:50:b3:f7:13:ab:5d:70:a3:63:48:13:ba:66:d1:08:2d:47:
2c:c8:f4:81:91:fc:94:d0:d1:ee:7e:e3:3a:72:ed:a5:60:66:
f7:80:3a:07:5f:b5:93:19:31:d0:78:fd:a5:4c:18:11:fb:26:
52:bb:4e:22:59:1e:84:e7:51:23:cb:e5:93:93:57:62:68:a9:
c8:fd:5b:2c:c8:04:fe:13:5c:17:37:f2:a0:19:65:05:41:6d:
27:67:35:b4:a4:65:a0:26:68:d0:97:54:cf:1a:fd:5f:e4:6d:
02:bb:07:76:73:7c:69:4c:b7:8f:7c:98:7c:85:ef:99:e6:8b:
5b:35:e5:17:86:ed:24:9d:07:56:3c:2a:d5:b5:8b:e5:ef:e4:
b1:13:fb:98:1c:6d:17:72:a1:48:79:04:25:c3:2f:8c:a0:ad:
73:53:37:3e:1f:10:57:f8:00:1d:14:8b:8c:c8:7f:1d:9d:cf:
12:4d:28:6c:f4:1e:18:5b:83:37:61:ff:03:71:8a:da:65:60:
a0:c2:14:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:37:05 2026 by rpki-client