Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.mft
File: 5BqMQuzom1-_whDce1VMcupPNUQ.mft (raw, json)
Hash identifier: m3P+DNRdjX8byC30GQ94Vw1j/NunjAd0HfdVvRjp8rw=
Subject key identifier: 44:B2:3A:8D:BA:E8:C4:A0:21:C9:1D:36:06:A7:86:F1:8C:3C:7C:E3
Authority key identifier: E4:1A:8C:42:EC:E8:9B:5F:BF:C2:10:DC:7B:55:4C:72:EA:4F:35:44
Certificate issuer: /CN=e41a8c42ece89b5fbfc210dc7b554c72ea4f3544
Certificate serial: 01A0D614CF22F8BA14B8BCD362B7D26417C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5BqMQuzom1-_whDce1VMcupPNUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.mft
Manifest number: 1A6F
Signing time: Fri 25 Sep 2026 01:01:23 +0000
Manifest this update: Fri 25 Sep 2026 01:01:23 +0000
Manifest next update: Sat 26 Sep 2026 01:01:23 +0000
Files and hashes: 1: 5BqMQuzom1-_whDce1VMcupPNUQ.crl (hash: Ctfw8HO0U5deDLe+bbC3ZNmLdHx/6OdQejTK7ZkQ1pY=)
2: Gdko4-yr_mZQjbgGaX8sC4T_FPQ.roa (hash: 7AxIc/Z01v/Eqc2Dv0cTBhSNHD6F9wR4yoEfob5zH90=)
3: kf58GPD5iMVc4BLLn8IhfqKMsCY.roa (hash: Ic5aK1Q6lKzryOBda72Usz/9pqqGz+CIRUBEEUajD8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5BqMQuzom1-_whDce1VMcupPNUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:14:cf:22:f8:ba:14:b8:bc:d3:62:b7:d2:64:17:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e41a8c42ece89b5fbfc210dc7b554c72ea4f3544
Validity
Not Before: Sep 25 01:01:23 2026 GMT
Not After : Sep 26 01:01:23 2026 GMT
Subject: CN=44b23a8dbae8c4a021c91d3606a786f18c3c7ce3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:80:ff:cb:21:8b:0b:81:02:b9:3d:d2:4c:76:
19:2c:3b:14:f1:45:1d:88:a7:1d:c4:bb:78:d7:5f:
1f:e4:85:11:56:42:72:cd:c6:3e:38:f7:79:40:85:
55:ce:f4:3d:45:e1:46:7f:5c:4a:25:1c:03:95:36:
4a:41:1b:1d:3b:12:50:d1:67:78:82:32:d4:f9:1d:
1e:e9:cb:d0:25:b7:33:f3:83:e5:b4:10:62:1b:09:
c6:2c:2d:1d:2e:b5:5f:01:d1:32:63:1e:bd:5f:c1:
96:09:3a:63:dd:b5:29:0b:e3:e1:1e:77:24:d6:d2:
73:44:a0:2c:99:6f:15:72:82:cf:19:ab:7f:d9:54:
7d:6e:9d:0f:b7:d7:2e:9e:d9:fd:b1:bb:27:44:98:
e7:f0:17:a9:a9:a1:26:34:49:52:7b:3f:42:a8:8e:
4b:ab:26:14:cc:22:a7:92:ff:89:71:46:16:68:96:
38:02:b3:31:78:b6:ff:41:bd:0a:95:d9:b0:a7:86:
01:85:ae:70:38:d8:cb:18:9f:ac:a8:4d:73:37:72:
86:4e:be:51:cc:7e:76:4d:52:60:85:cd:de:70:c2:
fb:1e:93:4d:a8:18:f0:1f:74:f3:c5:3e:d8:78:f8:
79:4c:d7:a2:c0:70:b6:3c:46:72:bc:07:db:60:8b:
13:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:B2:3A:8D:BA:E8:C4:A0:21:C9:1D:36:06:A7:86:F1:8C:3C:7C:E3
X509v3 Authority Key Identifier:
keyid:E4:1A:8C:42:EC:E8:9B:5F:BF:C2:10:DC:7B:55:4C:72:EA:4F:35:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5BqMQuzom1-_whDce1VMcupPNUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:f6:a8:82:5b:1e:90:b1:2f:a3:ee:9b:56:49:a3:ee:ba:48:
dc:fa:ca:74:84:3e:53:79:ad:55:77:2e:b4:cc:ac:d9:da:da:
c8:c4:70:a8:d4:4f:0d:25:d1:19:bd:7a:1c:97:1b:89:3e:9b:
6c:1b:dd:b7:58:5d:b7:f9:aa:af:07:f3:09:e5:82:8f:c7:3a:
a1:21:c1:5d:a8:80:8d:e0:0e:70:c8:92:87:24:38:2c:bd:b1:
99:46:26:16:08:a0:2d:a5:21:61:62:42:eb:3d:3a:6d:f4:e6:
98:d8:dd:41:1a:ce:14:92:69:ee:f3:29:e1:5b:f1:2b:78:9c:
75:a0:fd:9e:e2:f2:d0:f7:10:4e:fb:2f:2a:ff:3d:fc:33:d4:
17:77:fd:99:e1:dd:de:63:a0:10:f1:cd:11:27:26:39:23:69:
6b:3d:de:8d:1d:d9:e7:81:7e:b5:a8:a0:69:cc:a3:32:17:c6:
fc:04:f7:94:93:b3:7e:f1:6d:4d:9a:87:75:a5:45:45:28:11:
a5:d9:25:4c:5c:5f:b1:2c:0a:48:e3:d3:3b:90:06:49:69:2a:
1c:c8:23:b1:55:cb:53:c3:50:e4:b7:a2:5b:13:af:f9:f6:f8:
52:ac:81:e5:1b:4b:2b:bc:e1:f1:6f:c8:d7:a6:81:89:71:0e:
5b:1e:f1:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDWFM8i+LoUuLzTYrfSZBfIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0MWE4YzQyZWNlODliNWZiZmMyMTBkYzdiNTU0YzcyZWE0
ZjM1NDQwHhcNMjYwOTI1MDEwMTIzWhcNMjYwOTI2MDEwMTIzWjAzMTEwLwYDVQQD
Eyg0NGIyM2E4ZGJhZThjNGEwMjFjOTFkMzYwNmE3ODZmMThjM2M3Y2UzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+oD/yyGLC4ECuT3STHYZLDsU8UUd
iKcdxLt4118f5IURVkJyzcY+OPd5QIVVzvQ9ReFGf1xKJRwDlTZKQRsdOxJQ0Wd4
gjLU+R0e6cvQJbcz84PltBBiGwnGLC0dLrVfAdEyYx69X8GWCTpj3bUpC+PhHnck
1tJzRKAsmW8VcoLPGat/2VR9bp0Pt9cuntn9sbsnRJjn8BepqaEmNElSez9CqI5L
qyYUzCKnkv+JcUYWaJY4ArMxeLb/Qb0Kldmwp4YBha5wONjLGJ+sqE1zN3KGTr5R
zH52TVJghc3ecML7HpNNqBjwH3TzxT7YePh5TNeiwHC2PEZyvAfbYIsTwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFESyOo266MSgIckdNganhvGMPHzjMB8GA1UdIwQY
MBaAFOQajELs6Jtfv8IQ3HtVTHLqTzVEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUJxTVF1em9tMS1fd2hEY2UxVk1jdXBQTlVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9kMTljMmQtMzhjMy00NTI2LWE3Y2Yt
MWQ2NjZjNDIyYzZhLzEvNUJxTVF1em9tMS1fd2hEY2UxVk1jdXBQTlVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC9kMTljMmQtMzhjMy00NTI2LWE3Y2YtMWQ2NjZjNDIyYzZh
LzEvNUJxTVF1em9tMS1fd2hEY2UxVk1jdXBQTlVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgfaoglse
kLEvo+6bVkmj7rpI3PrKdIQ+U3mtVXcutMys2drayMRwqNRPDSXRGb16HJcbiT6b
bBvdt1hdt/mqrwfzCeWCj8c6oSHBXaiAjeAOcMiShyQ4LL2xmUYmFgigLaUhYWJC
6z06bfTmmNjdQRrOFJJp7vMp4VvxK3icdaD9nuLy0PcQTvsvKv89/DPUF3f9meHd
3mOgEPHNEScmOSNpaz3ejR3Z54F+taigacyjMhfG/AT3lJOzfvFtTZqHdaVFRSgR
pdklTFxfsSwKSOPTO5AGSWkqHMgjsVXLU8NQ5LeiWxOv+fb4UqyB5RtLK7zh8W/I
16aBiXEOWx7xYQ==
-----END CERTIFICATE-----
Generated at Fri Sep 25 06:03:32 2026 by rpki-client