Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.mft
File: 5BqMQuzom1-_whDce1VMcupPNUQ.mft (raw, json)
Hash identifier: nLzKnroTLUFsliwN8KVLvibBBaqQt+dzNiFkjQ09zTM=
Subject key identifier: 86:8F:04:76:B0:5B:E9:7F:AF:20:D0:CD:55:B2:AC:1F:D3:ED:23:A6
Authority key identifier: E4:1A:8C:42:EC:E8:9B:5F:BF:C2:10:DC:7B:55:4C:72:EA:4F:35:44
Certificate issuer: /CN=e41a8c42ece89b5fbfc210dc7b554c72ea4f3544
Certificate serial: 019CAA21920087D44138F8D7963CD81F08A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5BqMQuzom1-_whDce1VMcupPNUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 16:00:52 +0000
Manifest this update: Sun 01 Mar 2026 16:00:52 +0000
Manifest next update: Mon 02 Mar 2026 16:00:52 +0000
Files and hashes: 1: 5BqMQuzom1-_whDce1VMcupPNUQ.crl (hash: ysLSrA5CM3Vk3wnEI0Yr0icON4odeLPCsQYBD+hFvcQ=)
2: Gdko4-yr_mZQjbgGaX8sC4T_FPQ.roa (hash: 7AxIc/Z01v/Eqc2Dv0cTBhSNHD6F9wR4yoEfob5zH90=)
3: kf58GPD5iMVc4BLLn8IhfqKMsCY.roa (hash: Ic5aK1Q6lKzryOBda72Usz/9pqqGz+CIRUBEEUajD8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5BqMQuzom1-_whDce1VMcupPNUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 16:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:92:00:87:d4:41:38:f8:d7:96:3c:d8:1f:08:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e41a8c42ece89b5fbfc210dc7b554c72ea4f3544
Validity
Not Before: Mar 1 16:00:52 2026 GMT
Not After : Mar 2 16:00:52 2026 GMT
Subject: CN=868f0476b05be97faf20d0cd55b2ac1fd3ed23a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:12:d9:16:87:3d:5c:a7:47:94:5a:ae:60:56:
91:44:a5:52:1a:28:cd:db:1c:14:28:0d:50:a3:b8:
f8:25:ad:30:58:5d:c6:fa:e8:6b:7c:21:22:ba:66:
2a:cd:a0:54:53:8e:ed:61:ae:d1:82:d1:a0:73:f4:
fe:97:8e:b8:a5:8b:7a:db:4b:ae:0d:f1:62:18:4b:
35:9f:ec:99:94:16:2a:5e:39:85:3f:68:32:42:36:
74:38:94:f8:5d:ae:9e:9c:16:50:62:47:11:fd:75:
16:62:56:d1:21:a3:d6:23:45:af:b3:e3:f8:4f:10:
50:88:f7:dc:5d:99:23:7b:31:78:26:40:78:9e:02:
1d:28:36:a4:17:a1:fd:6d:f2:d7:63:3c:f7:bb:e2:
d3:77:73:2a:55:9f:38:b7:45:55:37:40:39:75:99:
9a:e1:e0:94:e2:c3:92:36:d5:78:3f:71:be:05:71:
b5:58:13:3d:a3:20:70:4e:92:8e:ac:00:ba:eb:45:
76:1f:1a:b7:e9:4e:81:a0:e3:79:25:c1:e2:d9:86:
2f:4d:41:d7:24:27:3c:8a:45:90:79:dd:67:ac:6d:
49:39:73:57:66:83:de:a4:aa:e2:1a:77:ef:44:3b:
a7:a2:bc:f2:f4:b7:7a:ca:f1:52:bd:49:8d:c7:8b:
0b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:8F:04:76:B0:5B:E9:7F:AF:20:D0:CD:55:B2:AC:1F:D3:ED:23:A6
X509v3 Authority Key Identifier:
keyid:E4:1A:8C:42:EC:E8:9B:5F:BF:C2:10:DC:7B:55:4C:72:EA:4F:35:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5BqMQuzom1-_whDce1VMcupPNUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:44:57:5c:4b:b1:47:2c:fe:8f:39:f3:21:eb:f4:3d:44:1d:
d0:91:f4:72:8b:c5:7d:ee:cf:47:3d:03:5b:b1:58:65:b2:c5:
f8:04:d2:25:8b:8d:18:aa:ca:03:59:5c:29:41:39:b1:c9:d2:
73:3d:b5:d7:10:46:47:1b:de:a6:ff:dc:e4:e5:ce:ef:e8:75:
87:76:fe:ba:a8:1c:9d:4f:77:22:c7:15:16:c9:fb:7e:76:bf:
84:80:ca:d0:a1:91:46:14:96:5e:54:19:10:7b:e1:01:2b:04:
49:df:83:72:4e:76:b6:b5:d4:74:44:51:39:40:d2:cf:33:c1:
c7:65:93:96:46:f7:b1:91:52:98:a8:e7:9a:ba:fe:35:44:89:
03:04:dc:37:98:43:22:43:b9:e4:b2:61:2c:65:46:9a:8a:12:
17:11:86:d7:49:ed:3f:a9:1e:31:65:f3:fa:64:2c:5b:79:95:
67:b4:96:76:66:53:dd:b0:b8:8a:8d:9f:b4:80:f5:4e:10:ab:
ae:68:b1:fa:10:43:1e:19:84:18:4f:6b:cd:12:8a:ad:0b:dc:
4a:46:8b:e7:f8:77:ab:bc:a3:2a:f5:ed:03:fa:fe:79:2e:bf:
64:0f:55:a2:df:e2:60:16:7e:24:70:90:ed:57:e8:8f:6d:90:
99:26:3d:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:25:10 2026 by rpki-client