Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/549b43-396d-4b36-98d6-7c1a6447b0f7/1/5_qOTJFWwNgqMzJorS3h9RbLtyg.mft
File: 5_qOTJFWwNgqMzJorS3h9RbLtyg.mft (raw, json)
Hash identifier: R2SQOPjkJT/yQpuCf3LUUAtxuDasTwutpxMwn5utKoA=
Subject key identifier: 88:99:71:BD:60:05:57:EF:D5:E7:83:D7:E8:C2:AE:5D:69:95:4C:D8
Authority key identifier: E7:FA:8E:4C:91:56:C0:D8:2A:33:32:68:AD:2D:E1:F5:16:CB:B7:28
Certificate issuer: /CN=e7fa8e4c9156c0d82a333268ad2de1f516cbb728
Certificate serial: 019FA8997307AB1956C53ADED72C96ED4D7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_qOTJFWwNgqMzJorS3h9RbLtyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/549b43-396d-4b36-98d6-7c1a6447b0f7/1/5_qOTJFWwNgqMzJorS3h9RbLtyg.mft
Manifest number: 4C
Signing time: Tue 28 Jul 2026 12:00:56 +0000
Manifest this update: Tue 28 Jul 2026 12:00:56 +0000
Manifest next update: Wed 29 Jul 2026 12:00:56 +0000
Files and hashes: 1: 1-EAsB25AZ4X-I_GY_t9vKuEY86Y.roa (hash: nav09sGI16l96Ot72m87rg0Es3Mohhog/elp3en7JIY=)
2: 5_qOTJFWwNgqMzJorS3h9RbLtyg.crl (hash: xj5bAOjBdEJ3dPZXSVNl4W1DgEMr9SiZyRWj2BtwBaU=)
3: Bsq7GMA1R2db894oU-s06fODnuo.roa (hash: LpPlfP14MavJ3ktPMvPatzDAq6hmOJSWZygOY9GTomM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/549b43-396d-4b36-98d6-7c1a6447b0f7/1/5_qOTJFWwNgqMzJorS3h9RbLtyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/549b43-396d-4b36-98d6-7c1a6447b0f7/1/5_qOTJFWwNgqMzJorS3h9RbLtyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/5_qOTJFWwNgqMzJorS3h9RbLtyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 07:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:73:07:ab:19:56:c5:3a:de:d7:2c:96:ed:4d:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7fa8e4c9156c0d82a333268ad2de1f516cbb728
Validity
Not Before: Jul 28 12:00:56 2026 GMT
Not After : Jul 29 12:00:56 2026 GMT
Subject: CN=889971bd600557efd5e783d7e8c2ae5d69954cd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:1c:30:35:71:0a:b0:2d:d9:e1:36:47:68:23:
0f:2e:71:87:4e:e0:f8:cc:98:dc:5f:36:81:53:4f:
4f:b3:ce:36:ac:60:e7:df:89:e5:24:9f:5d:b3:46:
fa:1e:5c:40:62:60:46:a1:44:6d:b7:06:06:14:49:
a0:ca:0a:b1:5b:dd:bc:54:0f:3c:d5:d7:35:91:40:
17:ed:77:d7:bb:5c:1b:5c:23:ff:a5:ce:0a:71:a4:
e3:e8:01:24:1c:90:f4:6c:31:dc:03:c6:8a:58:ef:
da:d6:62:df:c2:a8:b8:c8:c5:e7:6b:b2:d6:6c:2e:
5f:29:d2:f3:d5:28:ba:09:ca:b9:76:ea:83:28:45:
7e:45:8e:ce:6f:05:db:0b:76:b0:e4:01:94:b8:0e:
08:a2:de:df:b0:2e:0c:c1:58:2b:43:15:a6:eb:26:
6c:75:85:85:db:8c:2b:d2:6d:9d:e1:6d:ad:75:03:
24:f4:08:2b:90:8f:07:c9:46:01:92:8d:f6:46:37:
26:2f:eb:dd:e6:88:1d:65:92:bc:b9:21:74:56:2e:
62:ad:ba:f0:2b:c2:5e:1a:3e:67:e9:16:5c:68:6b:
98:ca:d1:bb:8e:21:7f:02:a4:06:0c:fb:9a:88:7b:
6a:b5:12:a5:88:e4:5b:19:16:b1:77:e5:19:87:4d:
d4:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:99:71:BD:60:05:57:EF:D5:E7:83:D7:E8:C2:AE:5D:69:95:4C:D8
X509v3 Authority Key Identifier:
keyid:E7:FA:8E:4C:91:56:C0:D8:2A:33:32:68:AD:2D:E1:F5:16:CB:B7:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_qOTJFWwNgqMzJorS3h9RbLtyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/549b43-396d-4b36-98d6-7c1a6447b0f7/1/5_qOTJFWwNgqMzJorS3h9RbLtyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/549b43-396d-4b36-98d6-7c1a6447b0f7/1/5_qOTJFWwNgqMzJorS3h9RbLtyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:48:e1:92:28:c2:de:97:76:05:d4:b9:cb:6e:b6:82:24:73:
f9:e6:da:de:94:0f:ff:6b:9c:44:09:06:cf:d6:72:b7:e3:f2:
d2:37:2e:b8:c4:8d:fd:ec:c5:d5:ff:6e:06:6e:26:9b:2c:6e:
2c:84:cd:34:d5:e8:e6:69:b7:0a:11:01:8e:48:7b:b8:ca:ef:
e6:af:09:7d:d4:aa:ba:18:85:4b:e3:09:73:38:93:51:6c:6c:
a3:a3:fa:8a:78:84:b9:62:81:39:b6:06:e8:18:e3:e5:fb:78:
eb:8d:e2:d8:b0:91:3d:43:51:6d:63:6e:12:13:1b:19:e8:c7:
e3:25:d6:de:74:38:cd:fe:75:24:c9:fc:1f:f2:75:c2:3b:da:
d4:91:68:1c:68:0f:d7:0c:73:5f:71:19:4f:59:82:dc:b3:ac:
82:36:93:e5:68:73:fd:13:d8:cd:58:ba:c7:7a:95:a7:53:91:
c5:ae:f7:ce:b7:b6:92:e0:f3:6c:e6:d5:48:19:81:23:82:0a:
e9:1d:e8:a3:66:e9:65:2c:f5:96:0b:38:d2:df:34:68:96:d0:
ba:b1:2f:41:0d:c6:80:8b:1f:d0:ac:b8:70:e2:b6:96:97:26:
12:99:90:2e:10:b4:37:eb:30:04:4e:eb:cb:0a:0e:12:25:8a:
8f:3e:98:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 14:41:59 2026 by rpki-client