Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/003ca9-c390-4274-8fc6-7c504703bb02/1/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.mft
File: 5dqOnPyLFg7Fm1QPOdiXPUIYMSo.mft (raw, json)
Hash identifier: m14jiZ1OpIzsqJbFnEW8Sdp3qtXcd8rlgorHDS9vOrM=
Subject key identifier: DA:97:10:9B:C5:10:D3:79:FF:02:9C:2A:F7:E9:AC:26:EE:57:55:8F
Authority key identifier: E5:DA:8E:9C:FC:8B:16:0E:C5:9B:54:0F:39:D8:97:3D:42:18:31:2A
Certificate issuer: /CN=e5da8e9cfc8b160ec59b540f39d8973d4218312a
Certificate serial: 01A0D0B6A124C2A72C63377AB78FB751897B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/003ca9-c390-4274-8fc6-7c504703bb02/1/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.mft
Manifest number: 03AA
Signing time: Thu 24 Sep 2026 00:00:24 +0000
Manifest this update: Thu 24 Sep 2026 00:00:24 +0000
Manifest next update: Fri 25 Sep 2026 00:00:24 +0000
Files and hashes: 1: 1Xd9T-vmTqWcRzDMcqdo4DeoQuQ.roa (hash: xBqelHlXV4izENr8HmikmcGOwsrcVkd1Rr1h+hdnJUI=)
2: 2zoKFMcGfaIUIi0gjgVI6WP5WyM.roa (hash: Is6VwvQ998n5+DQaPOHXWLSY0DuPhfOU5Gr/Ve2Nr3w=)
3: 5dqOnPyLFg7Fm1QPOdiXPUIYMSo.crl (hash: kINHwJ8o2aHPrkNdroNd3mNlDnYtK3jP4PBJihHwG0c=)
4: r7ykq-I8ljDq2QXxZrYFAqBWgd8.roa (hash: 8dNxZY7QKRfX/M2WT1sGj39y/DFg2Rn6j5AsES2fgtU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/003ca9-c390-4274-8fc6-7c504703bb02/1/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/003ca9-c390-4274-8fc6-7c504703bb02/1/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:b6:a1:24:c2:a7:2c:63:37:7a:b7:8f:b7:51:89:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5da8e9cfc8b160ec59b540f39d8973d4218312a
Validity
Not Before: Sep 24 00:00:24 2026 GMT
Not After : Sep 25 00:00:24 2026 GMT
Subject: CN=da97109bc510d379ff029c2af7e9ac26ee57558f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f5:2d:ea:d2:b6:c5:b0:c8:87:20:0d:8a:6e:
cf:0b:c1:32:f5:3b:7f:65:3c:7f:e8:22:f2:b7:04:
ee:cb:43:e8:f1:ee:18:ab:e4:06:e3:d1:9e:c9:c3:
c2:ff:81:d7:98:3e:bc:6e:a5:bd:9d:61:3e:75:71:
53:9d:b9:b7:e4:e7:c8:53:43:72:1d:a8:f4:12:91:
3d:78:cb:43:5e:13:9f:f0:ca:14:7f:33:4b:8b:f0:
bd:30:5b:b3:3b:e7:80:de:c0:6c:05:e1:22:19:55:
bb:cf:22:9d:19:bb:09:e4:29:f2:f3:03:70:96:c7:
fa:b9:89:ab:43:ed:7b:4f:7e:5c:55:b0:ff:f1:62:
65:cb:0b:bb:41:0e:ac:4e:f0:99:55:bd:c7:91:8a:
1d:8c:ee:9a:03:8b:4a:0b:c9:88:56:44:f9:06:0b:
f1:d0:91:1d:b1:1c:2c:56:af:ee:35:d8:53:af:66:
3c:fa:e3:ed:94:a0:c7:63:83:46:9d:cd:c4:aa:59:
29:9f:6c:52:f5:4b:8c:45:c7:71:29:53:97:bb:8f:
a9:c3:c3:7f:d1:8a:b6:55:34:fc:07:2c:18:5c:99:
6b:87:42:d7:23:ea:ad:2e:85:8a:55:79:8d:e5:6b:
4c:29:ab:aa:db:a7:de:d9:3e:61:08:d0:bf:d0:27:
4b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:97:10:9B:C5:10:D3:79:FF:02:9C:2A:F7:E9:AC:26:EE:57:55:8F
X509v3 Authority Key Identifier:
keyid:E5:DA:8E:9C:FC:8B:16:0E:C5:9B:54:0F:39:D8:97:3D:42:18:31:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/003ca9-c390-4274-8fc6-7c504703bb02/1/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/003ca9-c390-4274-8fc6-7c504703bb02/1/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:01:c8:36:0b:5a:9f:59:82:d7:22:2d:b5:52:2c:50:13:be:
e1:c8:52:b8:f9:8b:f0:91:38:23:bf:57:a2:97:93:c8:bb:97:
0e:32:bf:ee:5a:eb:c2:e3:f3:d1:29:d1:d4:65:c8:b5:85:20:
5a:d9:96:ac:93:f7:c5:a8:13:c8:27:a3:ae:68:5c:af:0b:f4:
ea:6b:7a:c6:80:dc:34:51:62:4e:ca:a1:4f:bc:28:25:32:8f:
06:08:7a:c3:89:11:6c:87:8b:71:58:65:3a:d6:c8:4a:49:52:
8c:b1:cc:09:7f:a9:b5:23:61:08:4f:45:e5:f0:a7:96:21:c8:
55:c0:f7:0f:60:99:2b:48:65:fc:7a:fb:f4:39:b5:1f:2a:dc:
fa:77:45:25:74:dd:f7:4c:cb:b6:91:fc:ca:f6:a0:93:3d:6e:
9b:2e:c5:92:05:a7:2d:80:6d:ec:d9:38:14:5e:72:2a:33:a4:
39:91:e6:2e:5b:3f:14:f3:f6:67:02:5d:d9:1b:f2:d7:38:f9:
96:12:e3:9b:f9:92:d7:06:a5:aa:c1:a3:90:de:78:2c:3e:27:
2a:e8:e5:62:9e:8f:5f:de:65:e4:10:d3:29:b3:b4:57:05:ea:
01:9c:47:e1:7a:5b:67:61:02:02:ca:7b:a3:0e:3c:5b:fb:fc:
e3:80:f3:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 03:46:52 2026 by rpki-client