Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/549b43-396d-4b36-98d6-7c1a6447b0f7/1/5_qOTJFWwNgqMzJorS3h9RbLtyg.mft
File: 5_qOTJFWwNgqMzJorS3h9RbLtyg.mft (raw, json)
Hash identifier: t0Ot2RSRv5cQpLbmm7/TK4700GrfecTzLBt7NT5cpjk=
Subject key identifier: 77:2D:0B:28:BB:F9:CC:C1:34:02:9C:CE:AB:AE:83:92:24:50:3F:7A
Authority key identifier: E7:FA:8E:4C:91:56:C0:D8:2A:33:32:68:AD:2D:E1:F5:16:CB:B7:28
Certificate issuer: /CN=e7fa8e4c9156c0d82a333268ad2de1f516cbb728
Certificate serial: 01A10437443D7AA976E8253EE7EA0067381E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_qOTJFWwNgqMzJorS3h9RbLtyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/549b43-396d-4b36-98d6-7c1a6447b0f7/1/5_qOTJFWwNgqMzJorS3h9RbLtyg.mft
Manifest number: 0100
Signing time: Sun 04 Oct 2026 00:01:33 +0000
Manifest this update: Sun 04 Oct 2026 00:01:33 +0000
Manifest next update: Mon 05 Oct 2026 00:01:33 +0000
Files and hashes: 1: 1-EAsB25AZ4X-I_GY_t9vKuEY86Y.roa (hash: nav09sGI16l96Ot72m87rg0Es3Mohhog/elp3en7JIY=)
2: 5_qOTJFWwNgqMzJorS3h9RbLtyg.crl (hash: Hzy5tmjZPfLuvde/emDKMb3krwunIL3m2iK0cnnRdTM=)
3: Bsq7GMA1R2db894oU-s06fODnuo.roa (hash: LpPlfP14MavJ3ktPMvPatzDAq6hmOJSWZygOY9GTomM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/549b43-396d-4b36-98d6-7c1a6447b0f7/1/5_qOTJFWwNgqMzJorS3h9RbLtyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/549b43-396d-4b36-98d6-7c1a6447b0f7/1/5_qOTJFWwNgqMzJorS3h9RbLtyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/5_qOTJFWwNgqMzJorS3h9RbLtyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 00:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:04:37:44:3d:7a:a9:76:e8:25:3e:e7:ea:00:67:38:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7fa8e4c9156c0d82a333268ad2de1f516cbb728
Validity
Not Before: Oct 4 00:01:33 2026 GMT
Not After : Oct 5 00:01:33 2026 GMT
Subject: CN=772d0b28bbf9ccc134029cceabae839224503f7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:0a:4d:8b:98:c3:f7:87:40:7b:92:e7:77:c2:
9e:47:eb:cb:ab:a9:77:c8:90:c5:87:55:75:98:c1:
8e:71:4e:73:7a:ec:9c:c9:13:da:c9:fe:03:4c:da:
88:45:c6:46:d9:91:13:37:44:ac:18:38:3d:45:40:
15:f7:d5:cd:3f:9d:dc:cb:0c:72:86:66:05:40:07:
71:3b:76:88:87:a1:48:c0:4f:ac:0f:a9:22:49:c7:
5f:49:9e:3c:3a:98:c8:3b:c7:93:1b:d4:63:dc:de:
55:00:f7:50:07:9f:4e:db:ef:f8:df:0a:a6:2d:f6:
7b:22:f0:c7:68:6f:af:53:0f:65:5a:5b:26:c5:54:
ae:d1:79:d1:6a:bc:4e:ac:d7:de:1c:a2:4a:a9:ee:
2c:09:d1:1c:01:90:eb:73:f0:05:09:47:df:16:c8:
f0:ed:01:46:d8:8e:0b:56:e0:4f:87:53:ac:e1:20:
b3:04:26:69:34:e4:ec:41:ca:2c:66:27:88:e8:61:
07:7b:ac:5d:8d:23:8b:99:30:eb:b8:b6:bb:15:64:
d8:3c:e5:11:34:41:8a:ec:02:71:e2:59:d9:8b:14:
52:c2:f3:6b:a7:12:3b:f9:0b:52:ed:89:ae:77:1b:
fb:1f:85:b8:60:09:91:0d:ba:15:09:51:7b:68:d5:
2c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:2D:0B:28:BB:F9:CC:C1:34:02:9C:CE:AB:AE:83:92:24:50:3F:7A
X509v3 Authority Key Identifier:
keyid:E7:FA:8E:4C:91:56:C0:D8:2A:33:32:68:AD:2D:E1:F5:16:CB:B7:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_qOTJFWwNgqMzJorS3h9RbLtyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/549b43-396d-4b36-98d6-7c1a6447b0f7/1/5_qOTJFWwNgqMzJorS3h9RbLtyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/549b43-396d-4b36-98d6-7c1a6447b0f7/1/5_qOTJFWwNgqMzJorS3h9RbLtyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:a1:1b:cd:33:aa:7b:71:27:93:78:49:d7:74:14:e9:9e:19:
39:6a:79:c5:88:98:20:70:e7:9b:8d:f5:3a:00:7a:f5:1c:11:
5c:9a:5d:7e:d3:32:0c:b3:df:f6:60:e6:fe:9d:ed:96:bf:d8:
ae:9b:7d:92:16:92:bf:7c:9d:22:62:0c:9b:fe:ee:7f:1b:6f:
06:08:05:0c:fd:27:9a:18:25:53:5a:ac:29:3a:83:1d:ad:79:
bc:99:c3:b2:f7:b3:c5:da:cf:89:a5:58:b3:fd:5f:6f:f9:bb:
38:60:37:f9:d3:05:94:28:9c:e2:2e:8e:c9:52:28:8a:95:a9:
b4:0f:92:ea:c6:4c:b6:c2:36:b1:23:60:a8:b1:6b:b3:dc:e5:
55:41:9b:44:ee:fc:95:e1:15:7d:82:a9:8f:b6:60:f8:63:e9:
c5:2a:f4:dd:1e:8e:70:25:2b:6d:31:dc:b0:85:c7:a5:35:3e:
87:3f:4d:d9:d3:68:2f:06:7d:98:c2:9b:f3:2e:9f:ca:da:51:
fd:a4:64:7c:b0:61:43:c7:fd:5f:84:a8:e2:4c:df:06:dc:9a:
0a:97:8a:84:12:cc:5d:27:27:a1:ec:50:a0:d6:69:b3:a2:16:
a0:c9:6a:7f:bf:73:af:71:b5:cb:c9:1e:23:0c:7e:a7:a8:12:
6f:43:a1:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 08:29:54 2026 by rpki-client