Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/9d64ff-d4da-4dc9-8825-7118f8384c77/1/5HQG9JgrYYJMj9RLge3gqZ_HJOA.mft
File: 5HQG9JgrYYJMj9RLge3gqZ_HJOA.mft (raw, json)
Hash identifier: szZ90Awzg223f+eZ96I91nt994fBT8+E4nVL36Z49KA=
Subject key identifier: 00:AE:6A:6C:59:97:3A:5F:F5:6D:A7:2A:4C:57:7D:C1:FB:6F:90:1A
Authority key identifier: E4:74:06:F4:98:2B:61:82:4C:8F:D4:4B:81:ED:E0:A9:9F:C7:24:E0
Certificate issuer: /CN=e47406f4982b61824c8fd44b81ede0a99fc724e0
Certificate serial: 01A1D981026579686AF930655589E1D8D4E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5HQG9JgrYYJMj9RLge3gqZ_HJOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/9d64ff-d4da-4dc9-8825-7118f8384c77/1/5HQG9JgrYYJMj9RLge3gqZ_HJOA.mft
Manifest number: 0FAA
Signing time: Sat 14 Nov 2026 10:01:12 +0000
Manifest this update: Sat 14 Nov 2026 10:01:12 +0000
Manifest next update: Sun 15 Nov 2026 10:01:12 +0000
Files and hashes: 1: 5HQG9JgrYYJMj9RLge3gqZ_HJOA.crl (hash: Is1lR0q2Aru0o17dOO6KiGP4IIC7qcYMtnDL0lCLlEk=)
2: 5IiWlb3vHBWlCp6tIVca2yVQHto.roa (hash: STYN3zexlvKSLuiZ3ZMU8hJ7HbklvtNxc22+hhIPD74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/9d64ff-d4da-4dc9-8825-7118f8384c77/1/5HQG9JgrYYJMj9RLge3gqZ_HJOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/9d64ff-d4da-4dc9-8825-7118f8384c77/1/5HQG9JgrYYJMj9RLge3gqZ_HJOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5HQG9JgrYYJMj9RLge3gqZ_HJOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 10:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:d9:81:02:65:79:68:6a:f9:30:65:55:89:e1:d8:d4:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e47406f4982b61824c8fd44b81ede0a99fc724e0
Validity
Not Before: Nov 14 10:01:12 2026 GMT
Not After : Nov 15 10:01:12 2026 GMT
Subject: CN=00ae6a6c59973a5ff56da72a4c577dc1fb6f901a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:36:85:3f:e0:b5:b3:b9:43:66:ec:3f:ab:64:
87:be:0a:9f:95:d5:07:6a:8c:92:aa:7b:4f:a9:5d:
b5:b6:c8:1e:68:48:86:de:b9:09:14:28:94:c9:cb:
48:1a:c1:f3:e5:7b:18:3b:49:ae:b9:a6:0f:0b:70:
0c:a1:b3:2c:96:95:09:68:dc:90:1b:12:e8:e7:62:
75:34:24:b0:04:52:9c:88:1d:ac:6a:51:60:b9:6a:
0d:50:af:24:fb:ab:ee:68:bc:e1:b5:0d:bd:92:25:
67:89:94:7a:0f:5d:c7:1b:00:41:96:88:24:81:73:
09:c7:22:2a:31:f6:e9:d4:51:c0:1e:45:82:18:9f:
75:ea:6a:a1:6f:47:4d:a4:52:20:81:85:7c:58:c0:
2c:05:92:ea:72:93:98:0f:78:9e:ef:dc:b4:4a:36:
12:48:df:6f:a8:90:2f:1e:8a:22:90:10:d0:77:b3:
54:02:6e:2e:2c:f0:e9:89:e9:5d:f7:81:a1:15:e7:
33:f8:cf:a2:61:50:d3:49:eb:1f:84:2e:ef:47:fb:
eb:67:29:ec:de:f4:4f:30:75:8c:d3:fe:a4:ee:00:
74:29:77:7b:da:85:43:28:cc:3e:4c:85:91:65:a0:
9a:e3:a3:48:f8:d5:9f:3c:9c:c8:61:1a:94:26:68:
5d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:AE:6A:6C:59:97:3A:5F:F5:6D:A7:2A:4C:57:7D:C1:FB:6F:90:1A
X509v3 Authority Key Identifier:
keyid:E4:74:06:F4:98:2B:61:82:4C:8F:D4:4B:81:ED:E0:A9:9F:C7:24:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5HQG9JgrYYJMj9RLge3gqZ_HJOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/9d64ff-d4da-4dc9-8825-7118f8384c77/1/5HQG9JgrYYJMj9RLge3gqZ_HJOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/9d64ff-d4da-4dc9-8825-7118f8384c77/1/5HQG9JgrYYJMj9RLge3gqZ_HJOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:3f:ee:a0:86:00:fc:88:40:9a:60:8c:17:3d:37:e8:77:f6:
74:28:fb:71:bf:24:f3:39:01:be:4d:d8:94:5b:fb:15:66:14:
94:54:16:fd:b7:a3:d8:49:ad:cc:c2:a3:5b:25:a9:15:dd:e2:
e3:6a:fc:bc:e7:a6:f8:8d:37:2a:9c:c0:42:52:34:c8:e4:86:
a6:29:3d:b5:a5:aa:09:e3:cf:38:35:a7:84:c0:73:9e:e6:df:
55:41:5e:9e:de:de:29:3a:f8:de:ca:4d:72:5b:8e:dd:15:76:
85:f0:41:cb:16:1b:4a:eb:17:ef:18:95:2d:7b:bc:5f:8b:74:
ef:d8:12:43:08:c0:c7:cf:08:93:26:cd:29:56:f3:32:66:4d:
31:fb:b9:a7:22:a6:ac:bc:bf:01:b1:f4:e4:31:7c:71:c5:08:
d6:b5:f3:b6:79:6b:c7:60:11:94:5a:a2:f5:a5:a5:39:91:f1:
bc:53:18:c9:4c:5f:fa:af:ca:87:86:c9:84:05:cc:93:23:84:
55:d7:6f:61:75:6b:65:16:54:29:1b:29:e3:98:c9:8e:1e:4d:
4d:25:7a:84:fd:73:34:bb:60:94:d2:55:4b:d2:e1:63:c3:83:
66:f7:f5:8c:29:94:35:cd:2f:ce:2d:d7:a7:3c:76:39:0b:25:
8a:76:ea:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 20:48:15 2026 by rpki-client