Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/f9f773-121e-450d-b606-98bf4289df3b/1/5qTLdM9STBgSHVO1MsA8BvSta-Y.mft
File: 5qTLdM9STBgSHVO1MsA8BvSta-Y.mft (raw, json)
Hash identifier: quQ6PidsgHclzsvwpLp6M5xX0T53U1lVzMSF5iMr5wA=
Subject key identifier: 41:38:65:43:5A:1E:73:C2:9D:D7:34:A0:C5:BB:C5:35:9D:11:30:01
Authority key identifier: E6:A4:CB:74:CF:52:4C:18:12:1D:53:B5:32:C0:3C:06:F4:AD:6B:E6
Certificate issuer: /CN=e6a4cb74cf524c18121d53b532c03c06f4ad6be6
Certificate serial: 01A0C4B2C433E0A2B4CFA3BD94DBC0D9B019
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5qTLdM9STBgSHVO1MsA8BvSta-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/f9f773-121e-450d-b606-98bf4289df3b/1/5qTLdM9STBgSHVO1MsA8BvSta-Y.mft
Manifest number: 1460
Signing time: Mon 21 Sep 2026 16:00:44 +0000
Manifest this update: Mon 21 Sep 2026 16:00:44 +0000
Manifest next update: Tue 22 Sep 2026 16:00:44 +0000
Files and hashes: 1: 5qTLdM9STBgSHVO1MsA8BvSta-Y.crl (hash: g4GjI2i4QS/4dkcP9ZJhUBjDQtPbUu1nmOWzGE0/B7w=)
2: PHHmlI_lozSBsIeTe7D4ho8MMgk.roa (hash: Q0/1mQZnoW0veYxUY+kdm56TFO9WzQm4B7+icQrGOc4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/f9f773-121e-450d-b606-98bf4289df3b/1/5qTLdM9STBgSHVO1MsA8BvSta-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/f9f773-121e-450d-b606-98bf4289df3b/1/5qTLdM9STBgSHVO1MsA8BvSta-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/5qTLdM9STBgSHVO1MsA8BvSta-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:b2:c4:33:e0:a2:b4:cf:a3:bd:94:db:c0:d9:b0:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6a4cb74cf524c18121d53b532c03c06f4ad6be6
Validity
Not Before: Sep 21 16:00:44 2026 GMT
Not After : Sep 22 16:00:44 2026 GMT
Subject: CN=413865435a1e73c29dd734a0c5bbc5359d113001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ad:43:ca:ed:0c:43:93:07:f3:5f:ac:7e:71:
b2:2b:05:8f:26:ee:28:06:89:96:f3:5a:ff:0a:a4:
60:73:41:27:08:f5:ef:70:ed:ba:ff:71:3a:ad:8a:
d2:e6:e2:6c:bb:ae:d9:af:66:1a:68:0c:7b:42:d9:
3a:fe:a4:3a:15:b0:f0:97:1e:c2:79:ad:93:29:53:
18:65:8c:b0:f1:a1:26:bf:6a:13:aa:83:a1:32:a0:
0d:c3:0c:ed:0c:17:27:29:b8:70:ff:64:6d:cf:5c:
06:f8:02:0f:b9:75:88:31:67:bd:04:c7:73:a5:ad:
fa:be:ec:12:7f:a3:bc:bd:0e:1e:0e:a5:8e:5d:00:
64:46:39:ff:80:59:9c:68:17:19:a2:d2:3e:42:4f:
40:31:e9:9f:7b:dc:24:c9:2c:1b:3c:79:d7:e1:ed:
9d:fa:30:77:0b:c7:92:04:9e:cb:28:3d:1e:be:cd:
23:b1:3a:d6:32:d3:2d:e6:28:6b:36:37:d3:47:74:
34:69:d0:de:f5:ed:b9:0b:8e:8f:30:b3:16:24:18:
d0:35:16:ac:57:fc:da:0a:a5:6a:fd:fc:cf:eb:42:
8e:11:8b:ff:74:f6:c9:6d:25:5b:56:1e:f7:24:6b:
a6:8b:50:d7:bc:50:5a:a3:4d:5f:ad:7f:b0:88:d3:
cb:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:38:65:43:5A:1E:73:C2:9D:D7:34:A0:C5:BB:C5:35:9D:11:30:01
X509v3 Authority Key Identifier:
keyid:E6:A4:CB:74:CF:52:4C:18:12:1D:53:B5:32:C0:3C:06:F4:AD:6B:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5qTLdM9STBgSHVO1MsA8BvSta-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/f9f773-121e-450d-b606-98bf4289df3b/1/5qTLdM9STBgSHVO1MsA8BvSta-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/f9f773-121e-450d-b606-98bf4289df3b/1/5qTLdM9STBgSHVO1MsA8BvSta-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:2b:93:d7:2a:32:7c:77:00:a1:a5:b7:91:88:6a:9c:80:d6:
33:b4:4c:da:95:5b:a2:e3:ce:23:cd:d1:25:9a:0e:08:b0:4d:
87:0f:2c:f4:44:e2:55:3c:06:f7:5b:3c:ea:97:e5:ce:3c:ca:
d4:e8:d8:07:1e:21:74:61:70:17:7a:71:21:4d:5d:53:43:d8:
83:3c:a8:1d:b0:f7:a5:44:02:3f:04:00:a3:db:4b:45:45:5f:
c1:67:89:b4:c6:f9:a2:2c:a6:fe:b9:05:7d:8d:e2:23:a4:9e:
48:8e:15:46:ef:c8:6f:e5:f5:40:2b:d3:35:a8:28:9a:97:02:
0b:7a:4c:27:2a:46:03:f4:ca:2e:eb:1c:0d:f5:e6:1a:05:b8:
98:b3:d3:47:69:b5:18:46:fa:13:ae:87:3c:48:49:b9:5f:fe:
53:61:8c:91:56:9b:29:bb:aa:ba:af:23:29:3d:29:9e:f9:85:
51:64:76:ed:df:ee:a5:87:8a:60:9b:4f:6b:85:4b:d3:86:1d:
42:72:2e:a0:fb:5a:91:aa:dd:ff:cd:9d:05:18:73:e4:d7:d6:
37:4d:bc:87:da:a9:f0:6d:06:7b:94:1d:07:23:28:cf:24:6d:
3d:50:eb:7f:76:36:1c:c1:8b:d8:6b:c8:be:0b:95:f0:71:22:
d1:bf:f6:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:45:15 2026 by rpki-client