Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.mft
File: 5BqMQuzom1-_whDce1VMcupPNUQ.mft (raw, json)
Hash identifier: xkmDxl4BwOP+v4ZznC8+FML0EDj94kwJC+5bO3Od6Ik=
Subject key identifier: 45:A9:89:75:30:CA:E8:15:29:B2:66:FE:6A:F4:0C:1D:E5:01:6B:90
Authority key identifier: E4:1A:8C:42:EC:E8:9B:5F:BF:C2:10:DC:7B:55:4C:72:EA:4F:35:44
Certificate issuer: /CN=e41a8c42ece89b5fbfc210dc7b554c72ea4f3544
Certificate serial: 019D9998CE7A2BC728872F67CBFEA20CFC10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5BqMQuzom1-_whDce1VMcupPNUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 04:00:21 +0000
Manifest this update: Fri 17 Apr 2026 04:00:21 +0000
Manifest next update: Sat 18 Apr 2026 04:00:21 +0000
Files and hashes: 1: 5BqMQuzom1-_whDce1VMcupPNUQ.crl (hash: dhYLB+a98f5CRwV3ZGQdF3V/qE7lHwGkP+ypYSUD2dU=)
2: Gdko4-yr_mZQjbgGaX8sC4T_FPQ.roa (hash: 7AxIc/Z01v/Eqc2Dv0cTBhSNHD6F9wR4yoEfob5zH90=)
3: kf58GPD5iMVc4BLLn8IhfqKMsCY.roa (hash: Ic5aK1Q6lKzryOBda72Usz/9pqqGz+CIRUBEEUajD8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5BqMQuzom1-_whDce1VMcupPNUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:98:ce:7a:2b:c7:28:87:2f:67:cb:fe:a2:0c:fc:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e41a8c42ece89b5fbfc210dc7b554c72ea4f3544
Validity
Not Before: Apr 17 04:00:21 2026 GMT
Not After : Apr 18 04:00:21 2026 GMT
Subject: CN=45a9897530cae81529b266fe6af40c1de5016b90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:60:62:9f:0c:43:9b:3e:c3:e4:2e:c0:c0:b7:
ad:29:62:bc:9c:0b:59:07:b6:b5:e2:53:86:c0:c6:
a7:f9:fb:52:8c:05:0d:24:a9:3c:82:a5:75:5c:06:
17:be:6c:ee:aa:93:c3:49:5d:cf:63:c6:bd:fa:12:
4f:bd:49:b7:c9:49:f9:51:67:e5:00:3c:81:9a:d2:
34:03:b9:7f:fd:3c:59:66:d8:0a:56:df:cc:12:18:
f2:29:9f:9d:fc:e3:04:b3:22:37:b7:cf:e7:e5:83:
7a:f9:4b:09:87:30:1a:a9:ac:98:05:ea:27:f8:e9:
3d:c5:c2:0c:30:9c:bd:21:88:27:07:a6:52:ef:2b:
24:28:e7:bc:48:ea:6e:4b:f4:10:d2:09:b7:90:7f:
d9:a2:f3:dc:24:ed:ed:e2:83:68:0d:86:6b:b2:57:
70:3a:6e:22:64:9e:49:f0:73:ef:ed:9a:21:23:d7:
0c:8e:1a:73:20:62:fe:c2:ba:bd:05:2f:71:0c:67:
bc:51:c1:92:d9:c5:38:e8:ac:04:78:64:07:3d:d1:
76:b2:86:ad:97:fc:3e:c5:2e:04:61:44:76:36:62:
ce:7d:46:be:02:05:d5:9a:7a:15:27:28:47:4c:a8:
64:d8:70:d5:c8:da:58:0b:b0:79:99:0e:68:a0:d2:
31:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:A9:89:75:30:CA:E8:15:29:B2:66:FE:6A:F4:0C:1D:E5:01:6B:90
X509v3 Authority Key Identifier:
keyid:E4:1A:8C:42:EC:E8:9B:5F:BF:C2:10:DC:7B:55:4C:72:EA:4F:35:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5BqMQuzom1-_whDce1VMcupPNUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:6e:e3:f3:0b:fa:f9:20:48:80:24:be:05:40:b9:9e:dd:ca:
ce:23:6b:00:ff:e1:f9:13:c0:c8:b2:af:34:87:91:e7:34:3d:
c9:d6:b1:69:13:bc:7e:cf:f7:aa:b2:bb:0a:2f:73:44:92:69:
24:8e:99:a9:ce:59:fd:63:28:77:52:6e:2a:e1:1b:87:c1:ef:
13:fb:31:e5:d5:75:ed:02:62:5e:cf:63:14:63:6e:96:e0:da:
e9:fb:37:88:00:84:47:43:8d:ad:77:06:c5:ea:0c:ba:4d:6f:
fd:07:36:5b:43:06:53:d6:4a:e5:98:e2:67:92:bc:82:7d:e4:
7b:1b:76:a3:7a:4c:f3:f9:fe:a2:6e:a5:01:f6:c6:e5:76:43:
64:77:e7:3d:67:fa:85:6f:cb:69:f3:93:a5:14:a6:64:7f:ed:
55:b2:b6:08:3a:93:de:5f:b6:85:64:c0:ac:b7:44:44:d7:47:
03:91:fe:ce:7a:30:b3:46:27:0f:05:db:db:74:86:33:cc:a1:
a9:0f:e9:24:21:2d:46:46:dd:40:36:1b:90:3c:46:1e:3d:24:
39:52:8e:69:a4:0a:fb:8b:e2:b4:15:3c:f3:73:11:f8:3a:48:
3c:6b:9d:84:05:10:7b:70:93:55:ee:bb:b8:64:28:36:90:5c:
91:cd:3b:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:26:49 2026 by rpki-client