
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/4f0269-9818-4123-bcbf-7a652303a28a/1/_q5Ur85RVFR5wNoD8gGnTimSfXg.mft
File: _q5Ur85RVFR5wNoD8gGnTimSfXg.mft (raw, json)
Hash identifier: fw+Fhez1tQx7DalDEdwj/OZ0/K0s7P3q4/SG7c/kriQ=
Subject key identifier: E3:E5:60:7A:9D:F4:3A:52:85:AD:90:9B:84:37:A1:B5:CA:2B:4D:BF
Authority key identifier: FE:AE:54:AF:CE:51:54:54:79:C0:DA:03:F2:01:A7:4E:29:92:7D:78
Certificate issuer: /CN=feae54afce51545479c0da03f201a74e29927d78
Certificate serial: 01A10512D57D48650967F2EED3ECA2C264FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_q5Ur85RVFR5wNoD8gGnTimSfXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/4f0269-9818-4123-bcbf-7a652303a28a/1/_q5Ur85RVFR5wNoD8gGnTimSfXg.mft
Manifest number: 0AB6
Signing time: Sun 04 Oct 2026 04:01:22 +0000
Manifest this update: Sun 04 Oct 2026 04:01:22 +0000
Manifest next update: Mon 05 Oct 2026 04:01:22 +0000
Files and hashes: 1: IpDWhHDW_jjW4s7kmxssNqbsNL8.roa (hash: PZdGVIm+bNpQQVU0BxUiBJTaInqWv4810rxgD/JnG9o=)
2: _q5Ur85RVFR5wNoD8gGnTimSfXg.crl (hash: +H0YHrD77j8cbNnS/AkspSgqVa5J+M2ja3ljNtQ0brE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/4f0269-9818-4123-bcbf-7a652303a28a/1/_q5Ur85RVFR5wNoD8gGnTimSfXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/4f0269-9818-4123-bcbf-7a652303a28a/1/_q5Ur85RVFR5wNoD8gGnTimSfXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_q5Ur85RVFR5wNoD8gGnTimSfXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 00:44:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:05:12:d5:7d:48:65:09:67:f2:ee:d3:ec:a2:c2:64:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=feae54afce51545479c0da03f201a74e29927d78
Validity
Not Before: Oct 4 04:01:22 2026 GMT
Not After : Oct 5 04:01:22 2026 GMT
Subject: CN=e3e5607a9df43a5285ad909b8437a1b5ca2b4dbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:b6:29:a1:43:a5:16:5b:45:89:0e:38:5d:ed:
6e:2d:b9:d2:7b:1c:40:30:49:0b:0e:be:62:14:3d:
a0:54:6a:d8:57:eb:c2:2c:4c:f3:8b:51:ac:ee:35:
14:a2:83:87:16:62:d2:e0:4b:c4:1f:c0:56:b0:f3:
d7:c2:dd:c1:04:31:d7:68:f5:7d:8c:9d:5c:2e:65:
b4:52:57:61:1e:f1:cd:74:60:5b:d0:87:a0:e0:72:
8d:6e:47:60:91:f1:1a:d8:03:da:5e:c5:3a:64:1a:
6a:aa:5e:e2:db:51:99:62:ec:7a:0a:76:1a:7e:d9:
24:13:fa:e9:69:f0:5c:fc:ac:79:ed:d0:9e:f6:e3:
45:7f:9d:5a:af:e2:b5:a0:f8:1c:ea:49:02:87:28:
ee:4d:c0:ad:28:16:15:a0:60:fd:7d:35:fb:eb:dc:
56:ac:25:04:93:a5:a5:ae:40:1b:9c:13:1f:8e:77:
03:cd:f0:3d:a9:a6:53:8b:fc:1c:d8:1d:92:fb:fe:
77:dc:8f:4e:55:7e:58:e6:ce:cc:65:fb:68:e5:30:
7f:51:e3:84:43:00:5e:66:27:b5:06:38:f7:43:05:
c0:76:78:ab:90:53:d6:77:c2:4c:a4:ed:dc:20:0a:
db:06:0f:3d:cd:b6:f1:fc:05:df:69:7d:18:7f:dc:
17:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:E5:60:7A:9D:F4:3A:52:85:AD:90:9B:84:37:A1:B5:CA:2B:4D:BF
X509v3 Authority Key Identifier:
keyid:FE:AE:54:AF:CE:51:54:54:79:C0:DA:03:F2:01:A7:4E:29:92:7D:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_q5Ur85RVFR5wNoD8gGnTimSfXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/4f0269-9818-4123-bcbf-7a652303a28a/1/_q5Ur85RVFR5wNoD8gGnTimSfXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/4f0269-9818-4123-bcbf-7a652303a28a/1/_q5Ur85RVFR5wNoD8gGnTimSfXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:f8:63:52:ce:ca:47:35:22:b9:f2:90:a6:c8:04:44:42:3a:
a9:41:21:41:74:d2:91:cf:ca:e4:a8:94:3d:70:b6:5d:d0:57:
6e:f8:ac:8f:12:ab:a2:ea:de:b2:28:31:71:17:6a:99:90:72:
e1:fc:4d:10:db:14:7f:b1:15:5b:e7:df:80:6c:fb:6e:9b:da:
e1:4c:39:e8:9e:0a:84:65:3c:2c:04:03:23:9b:ec:d1:0b:24:
d0:be:a6:1d:15:df:ed:0d:16:9a:44:d3:1a:b4:ca:8e:59:87:
bc:f5:ec:cb:48:be:93:40:a8:60:35:3d:c0:f8:b6:7c:e6:7d:
d6:30:7e:3b:2a:0c:cc:53:62:1f:bd:7c:9f:e0:6d:9e:f3:75:
16:27:b1:ab:5b:d2:ed:01:04:34:ad:6a:a3:68:e7:38:db:ee:
ac:b9:b3:bb:2a:2c:14:13:6d:22:0c:fd:92:d3:26:1e:17:02:
bb:d0:95:b6:32:f3:8d:34:4e:fd:54:a7:5c:b7:63:20:26:12:
3c:0d:d5:fa:a3:1b:d1:2f:30:50:aa:0e:3e:14:bb:79:ab:e2:
eb:7a:64:0d:94:2f:f5:89:4c:e2:a6:d0:10:a0:2d:74:02:c2:
ae:6b:0a:1f:9c:a3:90:0d:8d:83:80:ee:a8:e7:39:e1:e2:2d:
c4:4d:c5:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 12:37:12 2026 by rpki-client