Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/063ebe-67f0-40e9-bbff-a409ca37a3ea/1/5-QyokmU5XnrJJmh9vNMZSEY40Q.mft
File: 5-QyokmU5XnrJJmh9vNMZSEY40Q.mft (raw, json)
Hash identifier: dq9a08KfJORWHa1FyY7WOLoZHXtkcz+cNdFNsER1OCg=
Subject key identifier: 98:D1:05:14:24:36:56:05:51:09:D2:CA:CF:02:81:02:62:9B:A3:4E
Authority key identifier: E7:E4:32:A2:49:94:E5:79:EB:24:99:A1:F6:F3:4C:65:21:18:E3:44
Certificate issuer: /CN=e7e432a24994e579eb2499a1f6f34c652118e344
Certificate serial: 01A0D6B9BBF5F41DE96D6FF63A4C0312BED1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5-QyokmU5XnrJJmh9vNMZSEY40Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/063ebe-67f0-40e9-bbff-a409ca37a3ea/1/5-QyokmU5XnrJJmh9vNMZSEY40Q.mft
Manifest number: 1A02
Signing time: Fri 25 Sep 2026 04:01:31 +0000
Manifest this update: Fri 25 Sep 2026 04:01:31 +0000
Manifest next update: Sat 26 Sep 2026 04:01:31 +0000
Files and hashes: 1: 5-QyokmU5XnrJJmh9vNMZSEY40Q.crl (hash: uXji0XybNwUawf8ov7Bwsxwh/thRRFeOkDr4GNNJRVk=)
2: PVnKaPf91mf4o0pWWoMoyuOYLn0.roa (hash: bvYxvgOHnbm7x6gXSSyrjK4YHdzAS2cBUxtYdZAEIX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/063ebe-67f0-40e9-bbff-a409ca37a3ea/1/5-QyokmU5XnrJJmh9vNMZSEY40Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/063ebe-67f0-40e9-bbff-a409ca37a3ea/1/5-QyokmU5XnrJJmh9vNMZSEY40Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/5-QyokmU5XnrJJmh9vNMZSEY40Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 04:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:b9:bb:f5:f4:1d:e9:6d:6f:f6:3a:4c:03:12:be:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7e432a24994e579eb2499a1f6f34c652118e344
Validity
Not Before: Sep 25 04:01:31 2026 GMT
Not After : Sep 26 04:01:31 2026 GMT
Subject: CN=98d10514243656055109d2cacf028102629ba34e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a5:01:21:bf:fe:27:1c:3e:f9:3e:f9:c6:ca:
48:ba:0d:21:9a:c6:75:f3:07:8b:5a:a1:18:f8:a1:
b2:09:c7:c1:b3:2e:6c:af:c2:dd:7c:68:60:e5:be:
49:c1:8a:f1:57:61:73:22:2d:73:37:98:a5:16:d7:
6d:ec:7d:09:e5:cc:18:7a:b2:69:d2:ea:37:8e:a7:
35:21:c7:67:71:85:b5:ef:3e:fd:3c:0c:1b:62:43:
a8:da:72:c7:52:63:4d:e8:9e:22:e1:2a:94:3d:04:
a2:28:b3:91:a9:77:98:f1:e2:f9:09:9f:36:98:74:
c1:61:b5:fe:94:a3:a7:ed:49:c0:05:fc:fb:75:76:
2f:7d:58:d2:9e:fe:17:77:ac:08:bb:76:a4:d3:2b:
4a:e9:eb:40:8b:f4:19:31:b4:b6:8d:43:90:c3:da:
7a:3d:11:1a:48:0c:ce:7e:6d:8f:6d:9a:5f:68:43:
a5:5a:07:04:b0:1c:d5:a4:ac:67:b3:04:6c:28:bf:
6b:f0:d3:d6:f1:8a:5a:6a:9e:bd:9f:06:b5:e4:3d:
81:42:93:a7:ce:19:01:07:ed:bb:7c:2a:4a:8f:e5:
12:f0:40:db:dc:e0:01:65:03:96:24:d3:64:8b:af:
0d:e7:9e:9c:84:70:81:66:06:73:be:46:dc:70:72:
36:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:D1:05:14:24:36:56:05:51:09:D2:CA:CF:02:81:02:62:9B:A3:4E
X509v3 Authority Key Identifier:
keyid:E7:E4:32:A2:49:94:E5:79:EB:24:99:A1:F6:F3:4C:65:21:18:E3:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5-QyokmU5XnrJJmh9vNMZSEY40Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/063ebe-67f0-40e9-bbff-a409ca37a3ea/1/5-QyokmU5XnrJJmh9vNMZSEY40Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/063ebe-67f0-40e9-bbff-a409ca37a3ea/1/5-QyokmU5XnrJJmh9vNMZSEY40Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:56:8a:c6:65:61:0e:5a:d3:9b:3d:9b:82:d7:3d:f6:bb:81:
11:7b:63:5f:46:cc:d5:a3:56:7e:02:91:a7:5a:53:91:bc:dc:
46:48:fa:30:58:f8:cf:e1:2f:87:ef:05:d7:ef:c7:c0:cb:5f:
23:38:55:7f:00:5c:1e:3a:1f:5d:06:54:33:da:09:ed:d9:ca:
66:9f:c3:75:88:71:b9:dc:7b:94:a8:af:d6:02:95:af:67:35:
3f:eb:30:43:c8:6f:8b:6b:8c:01:cb:2b:56:84:e5:52:8b:f5:
26:50:88:20:eb:4a:ff:b1:59:31:98:54:e1:f3:a1:72:6a:80:
38:6b:87:3f:ca:fc:a0:51:6d:a7:14:49:d0:10:1f:31:ca:74:
fa:55:1b:60:58:45:cd:67:94:85:5b:cd:b7:0a:17:a1:57:1f:
13:69:e9:a2:97:6e:d2:fe:f4:05:44:82:51:2e:32:e6:63:db:
d4:a2:d4:85:f3:3a:ba:d5:fa:2d:c8:3f:94:c1:a3:c7:1b:6d:
66:88:89:a0:ef:c2:63:80:2e:6b:a0:57:40:f1:02:bd:7a:db:
37:e4:b4:bd:d3:13:f7:b1:11:67:e8:2b:a6:74:45:51:26:ab:
8a:dc:ee:1d:ae:2a:4f:ac:6d:df:4d:d8:b8:29:cc:70:cf:29:
5e:16:df:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 15:07:45 2026 by rpki-client