Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/ea1725-dcd5-4990-9448-0eb3ba51374c/1/5q1QzkYdtcs3pYPnKbcVSZjssRc.mft
File: 5q1QzkYdtcs3pYPnKbcVSZjssRc.mft (raw, json)
Hash identifier: uWQX8Z5tWFQLxEj8zP7wmd9YMbw1zz3yR2npsX4wtJA=
Subject key identifier: A0:1E:2F:68:1B:0A:71:9D:01:A1:2D:91:A0:DD:D1:3F:D7:61:41:C2
Authority key identifier: E6:AD:50:CE:46:1D:B5:CB:37:A5:83:E7:29:B7:15:49:98:EC:B1:17
Certificate issuer: /CN=e6ad50ce461db5cb37a583e729b7154998ecb117
Certificate serial: 019F8F47792BED7C1197C9C4A9A4BF407DD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5q1QzkYdtcs3pYPnKbcVSZjssRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/ea1725-dcd5-4990-9448-0eb3ba51374c/1/5q1QzkYdtcs3pYPnKbcVSZjssRc.mft
Manifest number: 077A
Signing time: Thu 23 Jul 2026 14:00:53 +0000
Manifest this update: Thu 23 Jul 2026 14:00:53 +0000
Manifest next update: Fri 24 Jul 2026 14:00:53 +0000
Files and hashes: 1: 5q1QzkYdtcs3pYPnKbcVSZjssRc.crl (hash: YHZcBuP3hIa0VpNSCOqOAcAzkSIWphh3FDUdUDrwHt8=)
2: yOjcC_v9jLEMw3DzVhlmsqmU6Yk.roa (hash: xoF0GSXbpt7M9bWTlnPF/z3jkbpV3tEKSL94Epm3XBU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/ea1725-dcd5-4990-9448-0eb3ba51374c/1/5q1QzkYdtcs3pYPnKbcVSZjssRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/ea1725-dcd5-4990-9448-0eb3ba51374c/1/5q1QzkYdtcs3pYPnKbcVSZjssRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/5q1QzkYdtcs3pYPnKbcVSZjssRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:47:79:2b:ed:7c:11:97:c9:c4:a9:a4:bf:40:7d:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6ad50ce461db5cb37a583e729b7154998ecb117
Validity
Not Before: Jul 23 14:00:53 2026 GMT
Not After : Jul 24 14:00:53 2026 GMT
Subject: CN=a01e2f681b0a719d01a12d91a0ddd13fd76141c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:1a:fd:09:8e:26:19:b9:b7:32:e4:d2:9e:d4:
55:45:4a:dc:81:ad:ab:9d:8f:88:d5:06:49:3b:d3:
d8:b3:bd:85:32:aa:db:4f:c1:8a:20:ea:4a:78:25:
3a:48:7a:88:9e:06:e4:09:9f:a0:f4:b8:59:d5:9c:
ca:7d:9a:cd:5f:0c:e9:53:b0:2f:58:f8:81:01:d5:
94:b2:8c:44:52:0c:d2:8f:86:89:bb:89:31:58:eb:
75:19:16:73:7a:fa:f8:e6:24:cd:b5:04:65:d7:19:
32:15:27:77:eb:af:2f:76:e2:3c:5c:0c:58:d7:50:
59:cc:ae:18:3c:33:3f:3a:12:73:f9:c1:6e:53:e3:
98:a7:02:b7:7c:e7:98:6d:2a:4a:ac:3a:87:dc:30:
df:3a:e2:99:b0:e8:3d:4d:c4:1a:7e:6a:aa:46:fe:
ae:04:f2:d8:3b:7d:bc:bf:3a:d0:ab:01:3e:19:ed:
72:18:5e:54:6a:30:d5:c6:b3:b9:eb:d9:8a:1b:ad:
16:4c:f7:2d:fc:7d:f8:fc:ca:b9:de:2a:17:45:3e:
fb:55:22:ba:81:f8:db:f1:ce:ba:c0:22:93:28:87:
d5:bc:0b:cb:e9:a4:51:28:d4:d2:23:da:cc:43:2e:
50:c5:50:ac:c0:18:e6:33:b2:0b:6a:e3:68:68:c1:
80:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:1E:2F:68:1B:0A:71:9D:01:A1:2D:91:A0:DD:D1:3F:D7:61:41:C2
X509v3 Authority Key Identifier:
keyid:E6:AD:50:CE:46:1D:B5:CB:37:A5:83:E7:29:B7:15:49:98:EC:B1:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5q1QzkYdtcs3pYPnKbcVSZjssRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/ea1725-dcd5-4990-9448-0eb3ba51374c/1/5q1QzkYdtcs3pYPnKbcVSZjssRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/ea1725-dcd5-4990-9448-0eb3ba51374c/1/5q1QzkYdtcs3pYPnKbcVSZjssRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:ed:d1:c1:e9:52:98:9e:63:ef:64:50:6d:04:22:33:f9:1b:
59:6c:4e:38:15:ab:60:05:49:0b:9e:6f:dd:47:e4:f3:fa:14:
f8:36:98:53:76:48:1d:93:f1:29:42:7f:e9:36:38:98:79:ce:
dd:19:d4:85:e0:07:59:02:a5:e4:8a:30:0f:cc:14:44:6e:e8:
6a:63:3e:8c:37:c5:bf:36:50:f9:d9:29:a0:34:40:6c:69:3d:
b7:a8:d6:7c:4b:6e:83:a5:d7:32:f7:5f:e7:f1:dd:e0:e3:37:
96:9a:5f:9f:fb:a1:8d:c3:2a:5d:1b:a1:4c:2d:9c:31:0e:07:
b1:76:d6:39:62:df:1f:ec:3c:13:44:e7:d3:a6:f7:96:fb:cd:
4b:b7:ff:8f:1a:6a:fd:4e:f9:95:fa:f8:68:50:ec:9c:39:82:
96:3a:b8:b5:c6:eb:b8:2b:b0:15:98:ad:04:81:00:58:1f:97:
25:26:d7:89:01:27:7e:03:43:04:b6:fb:cd:d5:1e:42:23:b3:
ce:71:4e:6b:6c:ad:b1:bb:34:7a:19:43:1f:f0:35:8b:d8:53:
11:00:b5:90:d7:d4:f4:5b:08:7f:2d:2b:bc:07:cc:7a:75:68:
3d:e1:71:78:0e:2d:f2:2f:83:6d:97:48:7a:be:dc:df:d0:08:
8b:08:82:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:16:45 2026 by rpki-client