
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/ea1725-dcd5-4990-9448-0eb3ba51374c/1/5q1QzkYdtcs3pYPnKbcVSZjssRc.mft
File: 5q1QzkYdtcs3pYPnKbcVSZjssRc.mft (raw, json)
Hash identifier: BzYlxbVpmSozexr1zP6p0ekuqf6NmO7T3MJLZHwxct4=
Subject key identifier: 0B:30:F5:AD:3A:7A:2C:80:EA:FE:0B:E7:3C:14:FE:96:2A:16:07:B1
Authority key identifier: E6:AD:50:CE:46:1D:B5:CB:37:A5:83:E7:29:B7:15:49:98:EC:B1:17
Certificate issuer: /CN=e6ad50ce461db5cb37a583e729b7154998ecb117
Certificate serial: 019E1C7DB8C5FAAE5D608BEB88E16B5FC6C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5q1QzkYdtcs3pYPnKbcVSZjssRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/ea1725-dcd5-4990-9448-0eb3ba51374c/1/5q1QzkYdtcs3pYPnKbcVSZjssRc.mft
Manifest number: 06BA
Signing time: Tue 12 May 2026 14:01:01 +0000
Manifest this update: Tue 12 May 2026 14:01:01 +0000
Manifest next update: Wed 13 May 2026 14:01:01 +0000
Files and hashes: 1: 5q1QzkYdtcs3pYPnKbcVSZjssRc.crl (hash: g+m8UYOvBHpora+WK20HxOKAyLYoajBSS72zOCXzIMY=)
2: yOjcC_v9jLEMw3DzVhlmsqmU6Yk.roa (hash: xoF0GSXbpt7M9bWTlnPF/z3jkbpV3tEKSL94Epm3XBU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/ea1725-dcd5-4990-9448-0eb3ba51374c/1/5q1QzkYdtcs3pYPnKbcVSZjssRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/ea1725-dcd5-4990-9448-0eb3ba51374c/1/5q1QzkYdtcs3pYPnKbcVSZjssRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/5q1QzkYdtcs3pYPnKbcVSZjssRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:7d:b8:c5:fa:ae:5d:60:8b:eb:88:e1:6b:5f:c6:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6ad50ce461db5cb37a583e729b7154998ecb117
Validity
Not Before: May 12 14:01:01 2026 GMT
Not After : May 13 14:01:01 2026 GMT
Subject: CN=0b30f5ad3a7a2c80eafe0be73c14fe962a1607b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:38:de:dd:42:34:6f:bf:44:43:9e:2c:21:5a:
dc:b3:4c:f6:ed:46:71:48:2b:93:cd:fa:1c:ac:d7:
d4:57:56:3a:59:af:da:a4:7b:b1:10:35:3c:25:47:
a1:7c:b5:1c:4b:e0:97:2a:24:0d:64:82:c4:3b:af:
37:75:cc:18:42:1b:06:0c:88:d5:f5:54:b9:45:80:
af:da:f4:69:33:0e:0f:10:70:a7:40:e0:27:14:a1:
74:60:7f:1d:82:55:d0:8e:b0:60:a6:1a:19:f9:21:
8a:2a:5d:c3:5b:9a:ba:4c:7f:41:57:a0:79:81:88:
33:ab:aa:bc:1b:55:26:15:70:9d:dc:50:72:5d:cc:
79:c0:22:e7:f0:60:8f:48:46:7b:f8:6c:0d:02:af:
77:50:b5:7b:47:67:84:5b:2d:a1:32:9c:73:f6:83:
7e:dc:21:19:81:49:73:cd:84:c5:c2:dd:20:74:fa:
a1:dd:96:74:e4:1c:f4:ab:7f:e5:50:c0:c0:c5:81:
45:0c:02:eb:86:3c:dd:35:0a:8f:c4:7a:cf:06:21:
00:62:da:09:0a:4b:d5:61:a6:03:c9:15:62:97:8e:
15:ce:84:96:05:48:b5:11:6f:de:0f:7b:a8:05:bf:
e8:89:27:d5:20:71:ac:5c:1b:ab:5c:38:22:ba:8f:
f8:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:30:F5:AD:3A:7A:2C:80:EA:FE:0B:E7:3C:14:FE:96:2A:16:07:B1
X509v3 Authority Key Identifier:
keyid:E6:AD:50:CE:46:1D:B5:CB:37:A5:83:E7:29:B7:15:49:98:EC:B1:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5q1QzkYdtcs3pYPnKbcVSZjssRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/ea1725-dcd5-4990-9448-0eb3ba51374c/1/5q1QzkYdtcs3pYPnKbcVSZjssRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/ea1725-dcd5-4990-9448-0eb3ba51374c/1/5q1QzkYdtcs3pYPnKbcVSZjssRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:f3:00:4a:2f:e7:d1:61:4c:78:62:26:21:60:e3:79:4f:ec:
21:04:fa:73:c9:cd:cc:47:53:ee:f1:86:fa:90:b0:bd:d2:28:
76:34:15:55:37:39:04:a2:3d:d6:81:31:3b:c6:fb:ee:22:9e:
c6:99:40:64:0a:49:08:31:6c:db:76:cd:10:e9:a5:f4:28:6b:
17:b1:9a:77:d9:21:68:22:a4:7a:a1:eb:03:c9:95:da:80:7c:
2c:28:3f:23:ee:75:46:37:02:54:42:d3:fe:d7:72:45:53:93:
2a:b1:d2:cd:a6:41:16:99:80:b0:5e:11:11:cf:0d:23:40:0e:
81:ad:14:44:21:91:b5:6d:4f:08:e3:d4:63:fc:1c:bf:4c:92:
f6:74:14:e9:6f:ee:be:b7:61:23:1e:31:d8:72:6a:a4:72:22:
05:aa:8f:17:3e:f7:f8:a3:b3:2a:17:6c:e8:22:98:e4:1c:28:
fc:31:8d:41:22:85:b6:9d:2f:39:c5:05:3c:bc:17:09:9e:4a:
65:fb:25:c1:b7:45:77:30:6e:cc:de:07:cc:65:20:f0:ef:97:
c9:c9:4a:71:3a:b7:53:b7:83:bd:be:33:8c:d1:11:4a:47:2d:
75:9f:54:e2:1d:78:88:fe:38:2e:0c:8a:8c:24:07:82:c9:65:
88:5b:96:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:37:46 2026 by rpki-client