Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/549b43-396d-4b36-98d6-7c1a6447b0f7/1/5_qOTJFWwNgqMzJorS3h9RbLtyg.mft
File: 5_qOTJFWwNgqMzJorS3h9RbLtyg.mft (raw, json)
Hash identifier: 8y95GBt1ARbLhl9xect6Joa5sgd2ZZ/BXdAZl7+2IuI=
Subject key identifier: 51:E0:5D:D9:11:C9:C8:67:DA:62:D9:06:51:DC:BD:DF:20:B0:56:57
Authority key identifier: E7:FA:8E:4C:91:56:C0:D8:2A:33:32:68:AD:2D:E1:F5:16:CB:B7:28
Certificate issuer: /CN=e7fa8e4c9156c0d82a333268ad2de1f516cbb728
Certificate serial: 019F8F7E7856440526E78C0790E58C44D8DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_qOTJFWwNgqMzJorS3h9RbLtyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/549b43-396d-4b36-98d6-7c1a6447b0f7/1/5_qOTJFWwNgqMzJorS3h9RbLtyg.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 15:00:57 +0000
Manifest this update: Thu 23 Jul 2026 15:00:57 +0000
Manifest next update: Fri 24 Jul 2026 15:00:57 +0000
Files and hashes: 1: 1-EAsB25AZ4X-I_GY_t9vKuEY86Y.roa (hash: nav09sGI16l96Ot72m87rg0Es3Mohhog/elp3en7JIY=)
2: 5_qOTJFWwNgqMzJorS3h9RbLtyg.crl (hash: ALjz8B/QgeVoWAPbom+ex48DXDn0SSpPbK9FHlMrpWE=)
3: Bsq7GMA1R2db894oU-s06fODnuo.roa (hash: LpPlfP14MavJ3ktPMvPatzDAq6hmOJSWZygOY9GTomM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/549b43-396d-4b36-98d6-7c1a6447b0f7/1/5_qOTJFWwNgqMzJorS3h9RbLtyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/549b43-396d-4b36-98d6-7c1a6447b0f7/1/5_qOTJFWwNgqMzJorS3h9RbLtyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/5_qOTJFWwNgqMzJorS3h9RbLtyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:78:56:44:05:26:e7:8c:07:90:e5:8c:44:d8:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7fa8e4c9156c0d82a333268ad2de1f516cbb728
Validity
Not Before: Jul 23 15:00:57 2026 GMT
Not After : Jul 24 15:00:57 2026 GMT
Subject: CN=51e05dd911c9c867da62d90651dcbddf20b05657
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:fc:19:1a:b9:29:89:b8:cf:b5:8a:a0:73:f3:
bc:f0:b4:bf:08:7a:eb:2f:1c:ed:57:1f:52:f5:87:
33:f2:ee:7b:1b:a7:c2:c3:99:ca:82:2f:ab:f4:88:
8b:ff:ee:55:7d:b0:c9:e0:79:0f:06:a5:53:a0:7e:
0f:14:72:7b:6e:44:f1:2f:7d:3a:7e:56:a3:69:8e:
21:c5:0e:98:a0:cf:f2:c3:39:19:b6:d2:a6:ac:b8:
df:13:31:d4:13:ea:66:7a:81:50:b3:92:59:ad:57:
53:d8:3d:48:c0:70:5c:35:eb:9a:72:fa:59:44:2b:
66:e3:97:68:f4:30:96:44:20:2e:04:de:ed:15:4f:
28:f8:21:f1:1f:5a:81:d7:17:30:c8:f1:f7:fb:09:
dc:83:a9:d8:4f:25:90:bd:ec:a6:c0:05:48:3c:4b:
e1:4e:9c:76:28:8f:43:96:ec:9c:b6:da:58:79:dc:
9c:8c:7b:d9:b8:5a:43:38:e6:d7:fa:6e:98:81:d4:
83:d6:e9:a0:92:86:0e:76:cd:38:0b:3d:a5:52:84:
fd:8f:8a:c1:fd:98:f5:30:e0:77:11:d6:d3:d1:9c:
de:c6:c2:ed:53:21:49:d8:82:1c:21:13:b0:0f:e6:
e4:02:e2:f4:51:79:3f:40:0e:50:1c:16:35:8e:1f:
a7:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:E0:5D:D9:11:C9:C8:67:DA:62:D9:06:51:DC:BD:DF:20:B0:56:57
X509v3 Authority Key Identifier:
keyid:E7:FA:8E:4C:91:56:C0:D8:2A:33:32:68:AD:2D:E1:F5:16:CB:B7:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_qOTJFWwNgqMzJorS3h9RbLtyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/549b43-396d-4b36-98d6-7c1a6447b0f7/1/5_qOTJFWwNgqMzJorS3h9RbLtyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/549b43-396d-4b36-98d6-7c1a6447b0f7/1/5_qOTJFWwNgqMzJorS3h9RbLtyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:6e:82:0b:61:43:7d:d4:8d:26:35:d8:0c:4b:7d:bc:26:66:
ba:73:64:ce:a4:58:f9:65:4c:eb:50:ad:8e:12:85:b7:03:5a:
b3:d9:c5:ff:3b:e4:b1:59:ec:c8:0c:d8:a8:f6:01:57:ec:b4:
46:5d:b1:ad:a2:74:a5:2c:44:01:ca:e5:7c:3b:1c:1b:90:1b:
57:f9:9c:90:8f:5b:df:f3:de:eb:10:82:55:8b:92:37:20:56:
5a:5e:a2:b1:d1:cc:62:55:03:86:83:53:c3:9b:0f:d9:64:0a:
a9:da:0d:a2:18:5d:4c:7f:70:df:2e:19:5b:82:61:2e:65:59:
a4:1c:fc:33:b1:b3:77:1b:e4:2a:3c:17:79:97:0c:0a:dd:2c:
db:34:80:e2:99:3c:31:fa:9d:b3:8e:37:6f:73:04:82:f3:0f:
22:a2:07:51:3c:da:61:fb:5b:4a:2e:3b:70:e8:fc:b2:b5:35:
b8:2a:a7:90:9e:0d:0e:df:92:27:e2:cc:10:91:4a:06:66:63:
89:45:db:21:3e:0b:80:f8:0d:f8:3e:cd:07:6b:f5:66:5d:d9:
bf:38:d2:61:a1:f6:bd:d3:db:aa:1f:1a:55:7b:ee:dc:02:c3:
63:f8:9b:b8:68:5c:a2:f3:06:47:86:06:21:4b:53:2f:b6:ef:
bc:52:23:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:59:22 2026 by rpki-client