Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.mft
File: 5BqMQuzom1-_whDce1VMcupPNUQ.mft (raw, json)
Hash identifier: xBv2nkbHu2huhQ2iA+N81maYMRFCM1Udiibk6jLcIXc=
Subject key identifier: 92:1F:D3:49:84:F0:AD:48:A4:7D:A8:39:51:22:02:80:B4:36:EE:F1
Authority key identifier: E4:1A:8C:42:EC:E8:9B:5F:BF:C2:10:DC:7B:55:4C:72:EA:4F:35:44
Certificate issuer: /CN=e41a8c42ece89b5fbfc210dc7b554c72ea4f3544
Certificate serial: 01A0CA7DAC144DA24D422667FBCD64B4F0CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5BqMQuzom1-_whDce1VMcupPNUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.mft
Manifest number: 1A69
Signing time: Tue 22 Sep 2026 19:00:28 +0000
Manifest this update: Tue 22 Sep 2026 19:00:28 +0000
Manifest next update: Wed 23 Sep 2026 19:00:28 +0000
Files and hashes: 1: 5BqMQuzom1-_whDce1VMcupPNUQ.crl (hash: BHiS8nRTr2Kx8GixKK8RiplIi+RhVsGSJUbpxjIAu94=)
2: Gdko4-yr_mZQjbgGaX8sC4T_FPQ.roa (hash: 7AxIc/Z01v/Eqc2Dv0cTBhSNHD6F9wR4yoEfob5zH90=)
3: kf58GPD5iMVc4BLLn8IhfqKMsCY.roa (hash: Ic5aK1Q6lKzryOBda72Usz/9pqqGz+CIRUBEEUajD8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5BqMQuzom1-_whDce1VMcupPNUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:7d:ac:14:4d:a2:4d:42:26:67:fb:cd:64:b4:f0:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e41a8c42ece89b5fbfc210dc7b554c72ea4f3544
Validity
Not Before: Sep 22 19:00:28 2026 GMT
Not After : Sep 23 19:00:28 2026 GMT
Subject: CN=921fd34984f0ad48a47da83951220280b436eef1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:d2:86:02:74:2b:f5:bb:1c:c2:d6:0a:03:ec:
d8:ea:b3:7a:f9:1c:7e:6b:96:45:5d:8b:cf:48:62:
86:c2:f9:86:f5:62:08:7c:69:f5:b7:69:bb:c4:82:
47:6f:e8:7a:9d:cb:76:43:7b:9e:da:24:24:58:80:
d0:52:5c:1f:2f:41:1f:1d:af:d5:47:16:f8:83:95:
df:14:fb:f9:e9:85:b5:6a:f4:23:d9:da:d4:5d:48:
dc:94:08:0f:d9:fe:11:1d:5b:2d:c2:2e:c7:3b:ab:
00:e6:dd:76:ca:a8:bf:47:12:8e:71:4d:f9:a6:cb:
17:30:8f:9a:73:77:5d:fc:4e:bf:4a:59:78:a1:f2:
5b:16:f8:64:1b:a8:4c:25:0b:06:0f:d2:9a:35:b8:
80:99:ab:78:7c:da:ed:64:95:c5:be:f1:95:88:71:
8d:bf:a3:cb:f8:7a:dc:00:86:f0:ca:f4:a7:40:92:
a3:32:13:aa:45:8d:30:07:6e:b8:70:0e:b6:b9:89:
a6:ec:8c:9d:51:19:37:98:28:98:4c:be:4a:df:51:
36:98:96:33:35:dd:e7:98:d8:ad:07:81:48:fd:57:
a3:6a:6f:62:3f:dc:78:a4:8d:c9:d2:02:21:55:82:
af:01:4b:ee:42:1e:a4:7c:41:e2:ec:f3:80:39:89:
38:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:1F:D3:49:84:F0:AD:48:A4:7D:A8:39:51:22:02:80:B4:36:EE:F1
X509v3 Authority Key Identifier:
keyid:E4:1A:8C:42:EC:E8:9B:5F:BF:C2:10:DC:7B:55:4C:72:EA:4F:35:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5BqMQuzom1-_whDce1VMcupPNUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:93:64:46:07:10:a8:57:29:c6:6d:a0:bf:04:a0:e4:5e:43:
d1:1d:a0:02:05:ef:f8:24:78:68:90:5f:5a:17:91:3c:86:0c:
26:f6:35:ca:f7:e2:cb:4e:e4:08:bd:74:9b:3d:5d:5c:7d:15:
ac:21:72:cf:6c:73:0b:73:1e:53:30:6e:09:13:f7:65:a5:77:
4e:eb:79:fb:2c:8d:b2:4f:e6:21:13:15:11:6d:9e:5e:9b:ae:
cf:bf:ef:8a:30:36:a4:f6:2a:9c:f2:da:12:5c:b6:05:a5:57:
c7:1e:7c:3d:92:00:3e:bc:46:87:93:a2:13:15:3b:d0:07:4a:
86:60:45:71:a4:4b:20:88:a6:b0:7e:07:88:07:0f:81:b0:a3:
98:20:6d:40:e7:c4:43:e8:ac:c5:b6:06:b4:d2:54:3a:a9:53:
2e:4a:ed:46:7a:1b:26:a1:52:d1:ec:16:9a:eb:a7:ed:c6:7b:
03:aa:c0:3b:76:64:ce:17:16:3a:a3:19:03:42:eb:4f:b0:2a:
a6:df:d9:e8:d9:17:22:1e:02:4d:a2:aa:1a:0d:bd:78:e6:3d:
04:8f:0f:36:ad:ca:13:cf:61:a6:2a:3a:5d:7e:7e:d1:e1:2b:
55:b7:51:cb:3d:00:34:1e:ff:45:c0:5d:f5:66:dd:fd:77:0e:
00:26:d9:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 00:30:46 2026 by rpki-client