Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.mft
File: 5BqMQuzom1-_whDce1VMcupPNUQ.mft (raw, json)
Hash identifier: Co7BCLGO4e5B89hKfrhyb0TVdgIfYeQxvEk64DmmHZc=
Subject key identifier: 0D:C4:25:30:C8:FA:36:71:7A:BC:BD:D8:35:4D:AC:95:F3:F6:E0:BB
Authority key identifier: E4:1A:8C:42:EC:E8:9B:5F:BF:C2:10:DC:7B:55:4C:72:EA:4F:35:44
Certificate issuer: /CN=e41a8c42ece89b5fbfc210dc7b554c72ea4f3544
Certificate serial: 019FAABE3A482AA467AFF26B07CEB368BD74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5BqMQuzom1-_whDce1VMcupPNUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.mft
Manifest number: 19D4
Signing time: Tue 28 Jul 2026 22:00:21 +0000
Manifest this update: Tue 28 Jul 2026 22:00:21 +0000
Manifest next update: Wed 29 Jul 2026 22:00:21 +0000
Files and hashes: 1: 5BqMQuzom1-_whDce1VMcupPNUQ.crl (hash: yMQVicqSCTSbGrZquNtmA3Tek28w9dYVyaHsPlqXHic=)
2: Gdko4-yr_mZQjbgGaX8sC4T_FPQ.roa (hash: 7AxIc/Z01v/Eqc2Dv0cTBhSNHD6F9wR4yoEfob5zH90=)
3: kf58GPD5iMVc4BLLn8IhfqKMsCY.roa (hash: Ic5aK1Q6lKzryOBda72Usz/9pqqGz+CIRUBEEUajD8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5BqMQuzom1-_whDce1VMcupPNUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:be:3a:48:2a:a4:67:af:f2:6b:07:ce:b3:68:bd:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e41a8c42ece89b5fbfc210dc7b554c72ea4f3544
Validity
Not Before: Jul 28 22:00:21 2026 GMT
Not After : Jul 29 22:00:21 2026 GMT
Subject: CN=0dc42530c8fa36717abcbdd8354dac95f3f6e0bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:75:fd:ce:91:63:5f:42:8a:68:19:af:66:7a:
35:a6:5f:8d:36:2c:ae:ff:b7:a0:67:07:97:d3:e4:
71:cf:68:c9:0e:9c:0c:50:0b:ee:64:54:23:3f:af:
17:55:82:b5:91:6d:27:a2:97:b5:48:ab:09:84:1a:
90:9c:35:2c:cf:dc:0e:2e:20:a6:3d:f1:e9:64:73:
06:71:37:1f:41:3d:6b:f4:43:eb:be:c0:f0:23:af:
f3:13:27:77:2d:39:53:6a:97:06:6a:af:0d:f3:d4:
18:d9:82:6f:5b:ea:7d:17:7e:27:b3:e9:ab:b9:ba:
90:86:9b:0f:b1:ae:26:dd:3d:25:99:bb:91:96:af:
85:6e:ea:9b:5d:c0:4c:f8:6c:f0:d3:a4:de:c9:77:
6c:e1:8a:4c:f9:86:86:f1:6e:91:27:f2:9d:ad:d0:
fd:e6:90:2f:c3:54:0c:c0:f6:ad:6a:b1:a7:90:28:
3a:2e:cb:00:7a:6e:46:9a:bf:84:0f:49:20:77:a6:
64:eb:fc:fa:c8:cf:ae:24:11:34:a4:ed:20:5b:6a:
21:2d:31:18:78:e4:09:12:04:44:cb:15:c9:c4:de:
4a:c1:b9:68:84:5e:e6:96:d0:37:e5:cc:8f:04:3d:
a9:f6:aa:1a:31:86:8e:4e:c1:22:d9:8b:e1:76:39:
82:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:C4:25:30:C8:FA:36:71:7A:BC:BD:D8:35:4D:AC:95:F3:F6:E0:BB
X509v3 Authority Key Identifier:
keyid:E4:1A:8C:42:EC:E8:9B:5F:BF:C2:10:DC:7B:55:4C:72:EA:4F:35:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5BqMQuzom1-_whDce1VMcupPNUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:ea:81:c6:2e:01:36:a0:0e:0b:f6:4e:1f:39:02:fc:b3:e3:
d9:48:50:98:87:68:52:fc:61:e9:eb:47:7a:a0:b3:c7:fb:80:
4b:86:55:10:1d:4b:d9:c8:d2:7f:55:26:78:2a:be:af:1f:10:
e1:f7:60:6e:65:f8:35:b3:3e:85:fc:ea:10:8a:72:57:23:83:
1e:69:5f:c5:93:40:4a:d3:4e:28:7b:5a:42:41:97:c5:4d:79:
ed:57:1d:58:e4:c2:9a:0c:89:86:b2:3c:78:30:5a:52:c5:da:
67:4d:62:a4:a1:31:c3:1b:ef:08:ff:12:ac:93:e7:7f:6b:b3:
f8:29:d9:52:44:af:4b:f2:a8:63:70:68:f7:49:b8:7a:48:1d:
12:af:a8:62:7a:0b:49:62:a9:00:87:aa:2c:1f:de:5f:40:24:
ca:74:ae:91:97:c8:59:e7:4c:4f:19:e0:75:a4:d9:54:ab:4f:
7e:0a:e0:e5:d6:37:0f:2b:16:c1:7b:4c:16:88:ce:13:6c:58:
18:c6:10:d0:c4:55:31:fd:8b:5d:72:b3:ba:ae:c6:f8:91:45:
58:e7:f9:d4:8a:fb:ca:53:d9:0e:8a:e4:fc:a5:2f:47:3d:ea:
5d:f9:58:b7:eb:40:02:75:83:ca:ec:64:4f:5a:4e:20:e1:1c:
c8:b3:ee:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:28:13 2026 by rpki-client