
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/290221-8f36-48ed-9b79-1d29c14b3800/1/5QUE0-6U3GjDIH7dcd-IQnlXQSU.mft
File: 5QUE0-6U3GjDIH7dcd-IQnlXQSU.mft (raw, json)
Hash identifier: fjR2ho18jJ2pH/Mr31Bd2HQlpR2nmpFkwbuPla138VI=
Subject key identifier: 49:7C:09:B7:2B:3B:FD:78:B2:EF:DB:6A:95:31:69:91:74:D9:CC:BF
Authority key identifier: E5:05:04:D3:EE:94:DC:68:C3:20:7E:DD:71:DF:88:42:79:57:41:25
Certificate issuer: /CN=e50504d3ee94dc68c3207edd71df884279574125
Certificate serial: 019F8F7F4E0D15AEB1DB223D3D12EB1044D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5QUE0-6U3GjDIH7dcd-IQnlXQSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/290221-8f36-48ed-9b79-1d29c14b3800/1/5QUE0-6U3GjDIH7dcd-IQnlXQSU.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 15:01:52 +0000
Manifest this update: Thu 23 Jul 2026 15:01:52 +0000
Manifest next update: Fri 24 Jul 2026 15:01:52 +0000
Files and hashes: 1: 5QUE0-6U3GjDIH7dcd-IQnlXQSU.crl (hash: xJEYhvPyDAwMzvogydrr3H0AzJ1lJwcOnKRq9YaedOU=)
2: uieVQKIrYQnOS10ZPQidTSptqvk.roa (hash: MivO7hC4cgF74++kcIqr2G3F0NA+YWEQTrP/kODx1y0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/290221-8f36-48ed-9b79-1d29c14b3800/1/5QUE0-6U3GjDIH7dcd-IQnlXQSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/290221-8f36-48ed-9b79-1d29c14b3800/1/5QUE0-6U3GjDIH7dcd-IQnlXQSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/5QUE0-6U3GjDIH7dcd-IQnlXQSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7f:4e:0d:15:ae:b1:db:22:3d:3d:12:eb:10:44:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e50504d3ee94dc68c3207edd71df884279574125
Validity
Not Before: Jul 23 15:01:52 2026 GMT
Not After : Jul 24 15:01:52 2026 GMT
Subject: CN=497c09b72b3bfd78b2efdb6a9531699174d9ccbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:52:7a:8b:c2:4a:23:27:65:ef:18:bd:8b:7e:
02:36:7e:19:48:fb:f1:75:d6:4c:f6:d2:b3:9d:00:
4b:1f:5a:8b:6c:70:07:26:5f:ba:94:ee:97:c3:4c:
c0:1c:4b:b8:7e:ee:5e:4c:63:46:74:b9:f2:75:ef:
8e:18:cc:8e:53:7b:ba:0c:f6:66:60:22:c8:56:ce:
62:97:dd:23:91:af:b7:b1:95:2c:64:39:3a:33:22:
67:54:fc:41:92:1a:f4:e2:ef:3b:a1:45:91:dc:de:
8b:5a:35:35:6d:52:16:58:0b:ce:f5:7c:76:04:e3:
f2:12:76:48:81:a2:2b:22:7b:51:c3:f4:09:df:2b:
ee:af:5a:a0:e1:e4:2a:08:e8:de:78:90:96:5b:96:
bf:dc:8b:e0:25:75:4d:ba:c3:ef:34:e5:94:0c:e0:
93:ee:df:a2:01:6e:62:8b:3c:8e:bb:1c:6a:a9:ef:
58:b1:a5:aa:e3:86:47:02:39:e9:d5:f0:a9:04:56:
17:ab:9a:3f:b4:db:3a:be:77:4c:a5:90:f9:c9:80:
2c:50:be:da:13:d1:af:03:17:60:f7:3e:fe:ab:ee:
f9:1a:d2:4e:7e:c3:fe:4e:f0:4c:df:74:de:86:d3:
2f:2e:a6:f8:96:d9:72:18:aa:9b:f4:b1:73:c5:e2:
5d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:7C:09:B7:2B:3B:FD:78:B2:EF:DB:6A:95:31:69:91:74:D9:CC:BF
X509v3 Authority Key Identifier:
keyid:E5:05:04:D3:EE:94:DC:68:C3:20:7E:DD:71:DF:88:42:79:57:41:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5QUE0-6U3GjDIH7dcd-IQnlXQSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/290221-8f36-48ed-9b79-1d29c14b3800/1/5QUE0-6U3GjDIH7dcd-IQnlXQSU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/290221-8f36-48ed-9b79-1d29c14b3800/1/5QUE0-6U3GjDIH7dcd-IQnlXQSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:60:04:14:9c:73:8b:ae:b8:c2:a1:ec:e7:61:fb:1f:99:9d:
b2:58:7a:61:86:2d:67:02:c4:1f:b8:d6:6f:44:dd:fb:c4:e6:
cb:ab:d5:b5:35:9a:9b:cf:d8:90:d6:13:cb:57:b3:b1:6e:11:
61:90:5d:14:7a:53:fd:f3:07:ac:94:da:a8:62:0c:8c:58:f9:
d5:ef:08:10:55:04:e3:af:15:f5:c6:ba:cf:ab:bf:c3:89:c9:
59:43:18:77:16:35:5f:66:c3:32:59:cf:f6:64:5a:c6:19:10:
8f:1e:f4:f5:b3:2c:38:66:e9:05:95:4b:de:42:8a:73:e1:bd:
1b:0d:e3:93:ad:6a:4d:74:59:ec:f0:86:28:45:1b:34:1c:2a:
3f:59:2d:a1:ed:57:e7:d5:df:6d:2f:11:b0:73:b9:c5:16:23:
8d:76:4a:39:b0:ac:3a:81:64:73:20:31:8e:7c:9e:89:e9:9a:
73:04:36:6b:e3:c0:d3:ac:62:53:ed:3d:0a:15:b1:c5:90:6c:
a7:4f:f2:5c:cf:1b:18:20:cb:3c:b6:bc:dd:16:fd:55:2d:c4:
2f:42:ff:1c:bf:4b:e1:91:b8:06:ba:09:8a:f2:8e:bb:b4:b7:
98:56:c4:dd:d0:98:15:c1:bf:a2:00:ad:39:82:2a:74:f2:52:
de:d4:2f:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:35:50 2026 by rpki-client