Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/9d64ff-d4da-4dc9-8825-7118f8384c77/1/5HQG9JgrYYJMj9RLge3gqZ_HJOA.mft
File: 5HQG9JgrYYJMj9RLge3gqZ_HJOA.mft (raw, json)
Hash identifier: H1kFWwKpF+vkig3XETZ6JuS+23weEfxOnLx59Qh//h4=
Subject key identifier: C9:3F:F9:2C:A3:4D:2F:46:08:52:C5:72:A7:0E:61:C1:4E:3B:96:18
Authority key identifier: E4:74:06:F4:98:2B:61:82:4C:8F:D4:4B:81:ED:E0:A9:9F:C7:24:E0
Certificate issuer: /CN=e47406f4982b61824c8fd44b81ede0a99fc724e0
Certificate serial: 01A0CEFFDE3D63CEC98F59BD03E3F53D2ED5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5HQG9JgrYYJMj9RLge3gqZ_HJOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/9d64ff-d4da-4dc9-8825-7118f8384c77/1/5HQG9JgrYYJMj9RLge3gqZ_HJOA.mft
Manifest number: 0F20
Signing time: Wed 23 Sep 2026 16:01:09 +0000
Manifest this update: Wed 23 Sep 2026 16:01:09 +0000
Manifest next update: Thu 24 Sep 2026 16:01:09 +0000
Files and hashes: 1: 5HQG9JgrYYJMj9RLge3gqZ_HJOA.crl (hash: bQ+UiiS5WzVXEGYYFJsMd6kAvabgNwIB6yHOn6bwdsM=)
2: 5IiWlb3vHBWlCp6tIVca2yVQHto.roa (hash: STYN3zexlvKSLuiZ3ZMU8hJ7HbklvtNxc22+hhIPD74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/9d64ff-d4da-4dc9-8825-7118f8384c77/1/5HQG9JgrYYJMj9RLge3gqZ_HJOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/9d64ff-d4da-4dc9-8825-7118f8384c77/1/5HQG9JgrYYJMj9RLge3gqZ_HJOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5HQG9JgrYYJMj9RLge3gqZ_HJOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:ff:de:3d:63:ce:c9:8f:59:bd:03:e3:f5:3d:2e:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e47406f4982b61824c8fd44b81ede0a99fc724e0
Validity
Not Before: Sep 23 16:01:09 2026 GMT
Not After : Sep 24 16:01:09 2026 GMT
Subject: CN=c93ff92ca34d2f460852c572a70e61c14e3b9618
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:41:77:80:80:48:6a:36:e9:2e:39:c6:08:c0:
b5:2c:b2:ca:5a:8c:45:da:fa:41:ba:46:e8:8f:bb:
17:17:4d:f8:83:22:74:4b:b4:eb:b3:4c:59:19:58:
5e:b0:28:d0:6c:2f:66:41:40:7c:bf:0b:88:0d:90:
b9:1c:82:27:73:bf:d8:f7:21:0d:71:9c:ef:ae:aa:
3d:92:c9:2a:b0:2a:90:2a:2f:f9:2b:70:79:55:b5:
cd:0f:bd:2d:dc:9c:ec:76:1e:4f:23:62:16:eb:db:
70:67:c0:5e:d7:1b:7e:c0:f2:16:6d:54:cd:ed:21:
cf:3e:37:6d:44:aa:7e:d8:38:b9:23:50:0b:cb:55:
c0:1e:a5:c4:ba:44:a9:c2:33:0b:33:b7:31:1d:85:
a0:7c:b9:5c:fe:03:20:57:31:91:ef:8f:e5:d4:da:
e4:85:0d:5c:67:d2:6f:31:db:30:b4:e9:89:ed:b4:
a4:85:5d:5d:0b:27:2f:f0:72:b1:70:ff:fa:99:a9:
dd:6b:d1:d4:15:5b:26:03:4f:e5:a6:54:db:07:73:
a0:f8:cb:e5:36:07:d9:4c:b4:66:e6:a8:6d:aa:6f:
26:94:a2:05:90:3f:75:a8:12:9e:60:ce:c9:11:5d:
82:5f:f5:3d:04:7c:76:a5:db:4e:a1:50:16:87:55:
d1:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:3F:F9:2C:A3:4D:2F:46:08:52:C5:72:A7:0E:61:C1:4E:3B:96:18
X509v3 Authority Key Identifier:
keyid:E4:74:06:F4:98:2B:61:82:4C:8F:D4:4B:81:ED:E0:A9:9F:C7:24:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5HQG9JgrYYJMj9RLge3gqZ_HJOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/9d64ff-d4da-4dc9-8825-7118f8384c77/1/5HQG9JgrYYJMj9RLge3gqZ_HJOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/9d64ff-d4da-4dc9-8825-7118f8384c77/1/5HQG9JgrYYJMj9RLge3gqZ_HJOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:1a:22:b0:bc:c0:68:cc:91:a2:ac:b8:54:24:09:4b:1a:55:
ad:71:22:64:2d:45:17:de:6d:d6:24:55:3a:48:f6:05:2d:31:
03:95:67:25:ff:34:5b:63:11:a1:23:40:0a:f8:a6:ab:4d:45:
3b:ad:43:fc:0f:a5:6b:8e:c9:77:4c:37:e7:9f:3a:7e:07:ac:
0a:ca:af:55:87:49:6b:90:9f:d4:fc:f0:85:01:91:05:03:6c:
d4:b6:99:14:22:1a:34:15:10:6f:b6:2b:0f:5a:b8:c3:de:02:
44:75:05:1a:b9:d2:07:17:f7:20:5f:a9:d3:8f:a9:0d:f2:40:
d1:6a:de:e9:e5:b9:d4:65:8d:13:05:50:de:ff:fa:2c:5d:13:
8a:c9:ea:ae:18:f8:91:66:77:c1:9a:9a:17:9c:55:86:d9:4b:
f3:b9:52:90:84:3c:87:30:a9:33:e1:fd:34:04:b3:35:6c:bc:
14:89:77:39:00:e5:41:c6:f5:66:98:5e:fd:d2:e7:f9:3e:17:
3d:91:95:19:f3:38:81:10:71:53:8a:01:68:62:c8:cd:0e:34:
86:f2:d5:cd:97:9a:d7:60:b6:2a:3f:40:a1:01:88:2c:34:fa:
83:8d:84:72:03:ad:a3:be:5e:b2:b5:84:7a:ef:e3:a9:cd:83:
d2:6d:c1:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDO/949Y87Jj1m9A+P1PS7VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0NzQwNmY0OTgyYjYxODI0YzhmZDQ0YjgxZWRlMGE5OWZj
NzI0ZTAwHhcNMjYwOTIzMTYwMTA5WhcNMjYwOTI0MTYwMTA5WjAzMTEwLwYDVQQD
EyhjOTNmZjkyY2EzNGQyZjQ2MDg1MmM1NzJhNzBlNjFjMTRlM2I5NjE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3UF3gIBIajbpLjnGCMC1LLLKWoxF
2vpBukboj7sXF034gyJ0S7Trs0xZGVhesCjQbC9mQUB8vwuIDZC5HIInc7/Y9yEN
cZzvrqo9kskqsCqQKi/5K3B5VbXND70t3Jzsdh5PI2IW69twZ8Be1xt+wPIWbVTN
7SHPPjdtRKp+2Di5I1ALy1XAHqXEukSpwjMLM7cxHYWgfLlc/gMgVzGR74/l1Nrk
hQ1cZ9JvMdswtOmJ7bSkhV1dCycv8HKxcP/6manda9HUFVsmA0/lplTbB3Og+Mvl
NgfZTLRm5qhtqm8mlKIFkD91qBKeYM7JEV2CX/U9BHx2pdtOoVAWh1XRQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMk/+SyjTS9GCFLFcqcOYcFOO5YYMB8GA1UdIwQY
MBaAFOR0BvSYK2GCTI/US4Ht4KmfxyTgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUhRRzlKZ3JZWUpNajlSTGdlM2dxWl9ISk9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS85ZDY0ZmYtZDRkYS00ZGM5LTg4MjUt
NzExOGY4Mzg0Yzc3LzEvNUhRRzlKZ3JZWUpNajlSTGdlM2dxWl9ISk9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS85ZDY0ZmYtZDRkYS00ZGM5LTg4MjUtNzExOGY4Mzg0Yzc3
LzEvNUhRRzlKZ3JZWUpNajlSTGdlM2dxWl9ISk9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAphoisLzA
aMyRoqy4VCQJSxpVrXEiZC1FF95t1iRVOkj2BS0xA5VnJf80W2MRoSNACvimq01F
O61D/A+la47Jd0w35586fgesCsqvVYdJa5Cf1PzwhQGRBQNs1LaZFCIaNBUQb7Yr
D1q4w94CRHUFGrnSBxf3IF+p04+pDfJA0Wre6eW51GWNEwVQ3v/6LF0Tisnqrhj4
kWZ3wZqaF5xVhtlL87lSkIQ8hzCpM+H9NASzNWy8FIl3OQDlQcb1Zphe/dLn+T4X
PZGVGfM4gRBxU4oBaGLIzQ40hvLVzZea12C2Kj9AoQGILDT6g42EcgOto75esrWE
eu/jqc2D0m3BCw==
-----END CERTIFICATE-----
Generated at Thu Sep 24 00:14:38 2026 by rpki-client