Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.mft
File: 5BqMQuzom1-_whDce1VMcupPNUQ.mft (raw, json)
Hash identifier: 6xl1llf5XwObGiXV3hY4bCO/3iLHY1vCRWPeoz6Bi2Q=
Subject key identifier: AE:8E:80:B1:46:EB:F5:CC:03:31:53:39:97:08:12:07:6F:7C:F2:07
Authority key identifier: E4:1A:8C:42:EC:E8:9B:5F:BF:C2:10:DC:7B:55:4C:72:EA:4F:35:44
Certificate issuer: /CN=e41a8c42ece89b5fbfc210dc7b554c72ea4f3544
Certificate serial: 019F8FB57CEC2FD4D3D6CAB80E494C3214A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5BqMQuzom1-_whDce1VMcupPNUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.mft
Manifest number: 19C6
Signing time: Thu 23 Jul 2026 16:01:03 +0000
Manifest this update: Thu 23 Jul 2026 16:01:03 +0000
Manifest next update: Fri 24 Jul 2026 16:01:03 +0000
Files and hashes: 1: 5BqMQuzom1-_whDce1VMcupPNUQ.crl (hash: d6dn2BD5umQd8lmhe4x8wStVzFDw0eMEJh8gm8aBL/8=)
2: Gdko4-yr_mZQjbgGaX8sC4T_FPQ.roa (hash: 7AxIc/Z01v/Eqc2Dv0cTBhSNHD6F9wR4yoEfob5zH90=)
3: kf58GPD5iMVc4BLLn8IhfqKMsCY.roa (hash: Ic5aK1Q6lKzryOBda72Usz/9pqqGz+CIRUBEEUajD8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5BqMQuzom1-_whDce1VMcupPNUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:b5:7c:ec:2f:d4:d3:d6:ca:b8:0e:49:4c:32:14:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e41a8c42ece89b5fbfc210dc7b554c72ea4f3544
Validity
Not Before: Jul 23 16:01:03 2026 GMT
Not After : Jul 24 16:01:03 2026 GMT
Subject: CN=ae8e80b146ebf5cc03315339970812076f7cf207
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:85:59:40:1d:2d:1d:e6:dd:be:cb:f6:c6:f1:
e4:de:ea:fc:78:c1:c3:b5:73:76:8a:92:00:58:ff:
58:d2:4a:fe:72:03:77:8f:d0:10:d8:5c:38:c2:07:
8f:11:66:0a:cb:24:83:2c:df:06:8e:4d:4a:28:6c:
a5:37:28:fb:39:a1:b6:6f:7d:b0:88:a9:87:af:5b:
dc:91:6c:7f:f8:bd:f6:e0:86:63:bd:a3:2b:32:d6:
d3:1f:30:32:22:00:82:18:fa:97:88:6d:22:e8:e8:
a4:42:96:a8:e2:b4:3f:60:91:e1:76:bc:4f:03:e6:
00:2f:2a:82:4e:1e:13:cd:63:39:55:67:0c:5f:98:
2a:d4:ca:06:bb:8f:49:1a:0b:50:07:cf:38:ab:2b:
3e:42:3b:d1:f8:d7:21:1e:bb:00:df:2f:fa:9f:fa:
59:eb:3a:10:ce:1d:48:e9:f1:41:98:3a:ea:a0:7f:
e7:d1:5a:b0:81:a1:35:66:a1:d6:11:6e:df:16:16:
d3:80:e7:eb:62:aa:ed:98:4e:f1:bf:29:d9:ad:ac:
07:89:8f:01:74:52:b9:a8:a0:a1:15:ee:a9:ad:6c:
c0:de:76:4e:83:1e:1b:bf:49:64:01:f1:f9:f4:49:
4e:b6:78:c8:3c:23:f0:39:a3:9c:5c:5f:26:a7:8d:
8e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:8E:80:B1:46:EB:F5:CC:03:31:53:39:97:08:12:07:6F:7C:F2:07
X509v3 Authority Key Identifier:
keyid:E4:1A:8C:42:EC:E8:9B:5F:BF:C2:10:DC:7B:55:4C:72:EA:4F:35:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5BqMQuzom1-_whDce1VMcupPNUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:13:7a:76:03:eb:6a:5d:87:c2:9a:f8:ca:38:65:4d:a5:b5:
5c:97:76:f0:09:f1:c1:0b:04:ee:21:97:f1:bf:89:57:9a:5b:
9d:7f:36:6a:af:0d:33:d1:df:f0:12:04:5e:dd:ef:0e:a2:a9:
4f:d0:98:f7:c3:2f:7a:b7:ba:03:fd:2c:99:c4:8d:13:ec:da:
3c:c1:22:ab:6c:c6:98:c8:ac:db:75:83:d0:2f:ab:f8:06:a2:
ad:ba:22:75:93:58:57:0f:cc:af:6c:a7:8e:51:14:53:ef:90:
db:a5:fd:65:d7:aa:52:aa:27:00:e1:f0:cf:bc:a8:7e:96:ca:
8f:94:93:c1:24:4b:2e:5c:b8:e4:04:94:f4:fb:4e:4e:80:ca:
d9:68:52:72:c1:59:ca:3d:06:20:82:f5:23:a8:04:11:1d:15:
d7:be:3d:8e:d6:54:6a:ff:3b:40:c8:8f:37:0a:fb:ae:d7:f3:
33:22:93:cf:97:0d:f0:2b:cb:cc:be:3c:02:bd:b6:95:15:fa:
8c:6f:0c:89:6d:14:30:c1:ff:16:35:ad:7e:35:09:b9:da:88:
5c:5a:a8:6e:01:4f:15:75:ba:b6:32:9d:32:27:93:a2:ea:c5:
19:ad:a4:12:12:60:10:60:dc:66:d6:1c:c7:30:28:73:e1:6a:
79:f1:77:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:18:53 2026 by rpki-client