Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b7/226018-0e06-435e-abfd-f5ffee1720c1/1/5QxErpgedJLTuiHihHIIAYA5jWQ.mft
File: 5QxErpgedJLTuiHihHIIAYA5jWQ.mft (raw, json)
Hash identifier: HgkO+88DVgutcq3tywE5PR69Ddd+7DDHmQ+bIP51R6s=
Subject key identifier: FE:32:D5:82:E2:26:E5:5C:1A:1E:E2:72:63:0E:A6:F8:34:26:D7:54
Authority key identifier: E5:0C:44:AE:98:1E:74:92:D3:BA:21:E2:84:72:08:01:80:39:8D:64
Certificate issuer: /CN=e50c44ae981e7492d3ba21e28472080180398d64
Certificate serial: 01A12C56D655B4F08CF0D3573B7956941DF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5QxErpgedJLTuiHihHIIAYA5jWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/226018-0e06-435e-abfd-f5ffee1720c1/1/5QxErpgedJLTuiHihHIIAYA5jWQ.mft
Manifest number: 1A9A
Signing time: Sun 11 Oct 2026 19:00:50 +0000
Manifest this update: Sun 11 Oct 2026 19:00:50 +0000
Manifest next update: Mon 12 Oct 2026 19:00:50 +0000
Files and hashes: 1: 5QxErpgedJLTuiHihHIIAYA5jWQ.crl (hash: u+xy1G+pN12l/0AMtpB6RYXQ93LcUGbyYhovxhfXYGw=)
2: e69PQnEzusQYZ-DbIlnf2eJlsBE.roa (hash: 4zZYbNl+2JdQefSGJOQxcNxDZWIZe2qXFHWTtyVsmQU=)
3: glYko7Sp1JLcpRtPgtRJtpgechE.roa (hash: I3eBEUtzH+51u13OfXKNVDxOVZpjsrqrlvg0BT9d+Dc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/226018-0e06-435e-abfd-f5ffee1720c1/1/5QxErpgedJLTuiHihHIIAYA5jWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/226018-0e06-435e-abfd-f5ffee1720c1/1/5QxErpgedJLTuiHihHIIAYA5jWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5QxErpgedJLTuiHihHIIAYA5jWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2c:56:d6:55:b4:f0:8c:f0:d3:57:3b:79:56:94:1d:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e50c44ae981e7492d3ba21e28472080180398d64
Validity
Not Before: Oct 11 19:00:50 2026 GMT
Not After : Oct 12 19:00:50 2026 GMT
Subject: CN=fe32d582e226e55c1a1ee272630ea6f83426d754
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:85:bf:17:9d:90:9b:6f:f8:f0:3a:9f:f9:6a:
cc:5f:0b:95:d6:18:f9:bd:de:35:e3:ed:4f:86:ef:
c0:f8:a7:4e:21:61:f4:16:8f:64:59:52:da:ad:b1:
d3:34:82:c0:bb:21:8f:2b:5e:e5:07:a0:ca:e0:ba:
83:07:e4:25:92:95:bf:62:e9:75:34:c1:60:0b:88:
5b:5c:7f:a6:3e:90:1d:e9:95:ee:46:1a:ae:e5:c5:
17:8c:9e:4e:ce:c5:e6:86:f9:f1:d0:86:35:81:b7:
44:f2:0c:d6:5d:df:c9:60:1b:13:55:17:6e:99:25:
e1:30:e6:59:a2:91:7a:71:00:a8:75:3c:2e:15:61:
87:af:e2:55:0e:c9:84:69:e3:c0:fa:f2:b0:b1:c9:
39:9a:7f:88:56:26:99:1f:84:e4:5f:3e:c5:3f:ae:
b8:df:18:38:ae:dc:2e:3d:ad:5f:1d:c9:0f:2c:ef:
9a:4e:8c:ad:52:23:d4:3a:b9:1c:9a:41:73:8d:9c:
d5:08:95:e0:44:ec:76:ac:c8:18:8c:59:34:c9:e7:
41:8a:c2:82:6f:54:bd:57:db:f1:8f:07:40:b8:af:
8b:88:53:52:5f:f1:91:ae:71:99:e4:26:85:07:7c:
9e:07:60:56:c1:64:1f:3c:86:e0:f3:59:a6:92:37:
99:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:32:D5:82:E2:26:E5:5C:1A:1E:E2:72:63:0E:A6:F8:34:26:D7:54
X509v3 Authority Key Identifier:
keyid:E5:0C:44:AE:98:1E:74:92:D3:BA:21:E2:84:72:08:01:80:39:8D:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5QxErpgedJLTuiHihHIIAYA5jWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/226018-0e06-435e-abfd-f5ffee1720c1/1/5QxErpgedJLTuiHihHIIAYA5jWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/226018-0e06-435e-abfd-f5ffee1720c1/1/5QxErpgedJLTuiHihHIIAYA5jWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:f8:7b:05:b2:90:1d:c6:ba:d1:dd:2d:f2:47:88:57:f4:c1:
90:be:12:e5:52:4f:1a:a0:41:50:5f:39:79:6a:6a:7c:3f:37:
ff:b7:2a:b8:df:78:26:dd:59:06:85:2a:3b:10:21:45:d6:4d:
7e:2b:35:e5:64:92:8e:e8:5d:dd:11:e8:80:81:75:4c:7f:e2:
d7:b3:69:04:43:c0:3b:45:39:63:66:df:54:9b:45:7b:71:68:
ed:a6:c0:bc:99:4a:f5:4d:e8:25:f1:14:46:71:57:73:bb:8e:
fc:a9:d4:53:28:7d:df:2a:01:97:d8:db:b8:55:df:cb:bf:95:
10:ee:df:1e:62:22:17:ec:1f:10:d5:61:0a:a1:1f:7f:15:af:
6c:be:5d:ae:5e:a3:e2:d3:3e:c4:2d:82:15:26:b9:b7:79:c1:
9e:b2:1c:c2:05:0d:39:54:8e:2b:57:b4:fc:3a:ef:4c:43:73:
bc:14:c0:04:cc:ab:2d:71:33:d1:bd:dc:ac:1d:19:0a:fd:7d:
11:3f:c1:f4:ab:e2:df:9e:ce:c9:32:45:b5:e1:61:ce:4b:86:
7c:3b:99:bf:1d:c9:bc:3e:47:e0:58:96:2c:9d:b4:84:c1:63:
1e:ce:38:5c:12:f0:be:15:61:50:64:5e:64:61:1a:2b:83:65:
8b:af:b9:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 22:06:57 2026 by rpki-client