Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.mft
File: 5BqMQuzom1-_whDce1VMcupPNUQ.mft (raw, json)
Hash identifier: 50A5IS0rtc+IzS7ABSYeJw2KHdI98xbz6fxcyoz6Ie0=
Subject key identifier: B2:D9:A2:F2:A4:4E:74:75:54:0A:6D:0A:AA:DF:1A:A5:32:6C:70:D9
Authority key identifier: E4:1A:8C:42:EC:E8:9B:5F:BF:C2:10:DC:7B:55:4C:72:EA:4F:35:44
Certificate issuer: /CN=e41a8c42ece89b5fbfc210dc7b554c72ea4f3544
Certificate serial: 019D27A87E7318B3DA139D41B77B66E7B74E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5BqMQuzom1-_whDce1VMcupPNUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 01:00:46 +0000
Manifest this update: Thu 26 Mar 2026 01:00:46 +0000
Manifest next update: Fri 27 Mar 2026 01:00:46 +0000
Files and hashes: 1: 5BqMQuzom1-_whDce1VMcupPNUQ.crl (hash: d7wDmhaRS1MegwVNkStj5KST8x1Tx0I2qsF4azmwC5o=)
2: Gdko4-yr_mZQjbgGaX8sC4T_FPQ.roa (hash: 7AxIc/Z01v/Eqc2Dv0cTBhSNHD6F9wR4yoEfob5zH90=)
3: kf58GPD5iMVc4BLLn8IhfqKMsCY.roa (hash: Ic5aK1Q6lKzryOBda72Usz/9pqqGz+CIRUBEEUajD8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5BqMQuzom1-_whDce1VMcupPNUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:7e:73:18:b3:da:13:9d:41:b7:7b:66:e7:b7:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e41a8c42ece89b5fbfc210dc7b554c72ea4f3544
Validity
Not Before: Mar 26 01:00:46 2026 GMT
Not After : Mar 27 01:00:46 2026 GMT
Subject: CN=b2d9a2f2a44e7475540a6d0aaadf1aa5326c70d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:4d:7a:11:df:17:a2:74:64:8e:8c:d3:8b:fb:
d8:18:74:6b:d7:42:0f:11:5d:84:da:46:14:ae:89:
23:7a:63:dc:b2:c3:eb:aa:4d:74:ab:ac:08:fe:fb:
8f:29:8b:99:b7:e3:5a:44:d1:ba:2d:e1:80:14:cd:
54:e1:08:48:0f:ee:0d:f6:9b:a4:42:66:51:80:92:
2f:62:d9:f4:1a:14:2d:70:63:05:39:39:11:f0:30:
2d:61:d4:cf:76:c0:54:ec:89:e4:ae:c4:30:b3:e5:
b4:ed:cd:d1:1a:0e:5d:1a:80:78:64:35:f7:66:59:
09:de:89:d5:47:31:f2:1e:c6:39:ec:a5:73:c1:47:
80:80:43:fa:e9:0c:06:ae:1b:89:61:05:85:3b:0f:
29:14:d4:f7:d2:ba:a6:cf:c8:d9:3f:4c:30:a7:4d:
4c:e9:02:29:f5:a9:f1:e1:b1:fa:ee:de:57:6c:f9:
9e:6d:36:86:d4:c7:cb:21:c2:32:77:3c:bc:bf:9e:
fb:e7:02:e2:0b:e5:e1:bf:50:ba:dc:c5:f1:0d:81:
a3:f6:ef:3a:1a:ef:51:b8:6d:36:99:9f:01:cf:84:
bb:4d:a6:b3:a5:9c:17:fb:d0:7f:38:2c:e3:6e:9f:
1c:27:12:60:47:1b:84:5f:b0:1d:d3:e7:99:b1:d5:
1a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:D9:A2:F2:A4:4E:74:75:54:0A:6D:0A:AA:DF:1A:A5:32:6C:70:D9
X509v3 Authority Key Identifier:
keyid:E4:1A:8C:42:EC:E8:9B:5F:BF:C2:10:DC:7B:55:4C:72:EA:4F:35:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5BqMQuzom1-_whDce1VMcupPNUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:9e:ca:d5:6a:71:ec:d7:28:c1:c2:81:f3:e8:8f:9a:3e:01:
c7:dc:22:31:56:c5:23:ac:2b:ad:12:8b:28:a3:fe:10:ed:43:
ef:5c:d3:90:3a:cc:28:da:af:ce:ad:0b:2f:bc:1b:ba:4c:ad:
4d:fc:34:8f:93:64:0e:da:a6:a5:ad:9a:24:e4:ca:1d:e6:67:
ab:b3:8d:a8:db:94:d8:9b:98:68:53:6e:ad:65:05:7d:ae:95:
a6:49:8b:00:cb:01:2b:b7:05:5b:7c:03:e9:c5:d5:ed:b5:82:
f7:3c:f2:be:91:02:51:4c:2b:0c:5e:07:07:78:a5:bd:b4:75:
44:a4:27:b5:5e:58:46:4c:e7:62:40:50:ac:b8:30:d8:35:06:
f8:f4:9f:9b:3a:04:10:46:2b:d4:83:d5:83:56:6f:30:37:15:
c0:30:c8:fd:25:0e:ec:dc:be:a3:81:9b:d7:82:46:ce:02:53:
b2:da:f4:dd:9f:c6:4a:1a:20:08:61:a9:a4:c9:a7:76:4d:ec:
46:3a:32:7f:3c:34:6f:b9:23:cd:43:e0:32:2e:53:ca:fc:4e:
24:c8:6f:89:93:bd:6b:86:eb:79:55:56:48:c8:ed:a2:f3:6b:
7e:3d:2b:99:d5:1e:76:87:df:b6:4e:9e:75:89:ee:c5:86:6a:
fb:2f:8a:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:55:25 2026 by rpki-client