Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/290221-8f36-48ed-9b79-1d29c14b3800/1/5QUE0-6U3GjDIH7dcd-IQnlXQSU.mft
File: 5QUE0-6U3GjDIH7dcd-IQnlXQSU.mft (raw, json)
Hash identifier: lTBv7pW8k4TtXHVg5x3+2pjitdJdFMf+hDi3UWNL0OM=
Subject key identifier: EC:99:B0:5A:12:9C:D3:F2:FC:0E:35:2F:15:A3:9E:29:1F:E3:4A:E3
Authority key identifier: E5:05:04:D3:EE:94:DC:68:C3:20:7E:DD:71:DF:88:42:79:57:41:25
Certificate issuer: /CN=e50504d3ee94dc68c3207edd71df884279574125
Certificate serial: 01A0DBA8E660C8CE6C1C0D5B259020DD603F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5QUE0-6U3GjDIH7dcd-IQnlXQSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/290221-8f36-48ed-9b79-1d29c14b3800/1/5QUE0-6U3GjDIH7dcd-IQnlXQSU.mft
Manifest number: EB
Signing time: Sat 26 Sep 2026 03:01:14 +0000
Manifest this update: Sat 26 Sep 2026 03:01:14 +0000
Manifest next update: Sun 27 Sep 2026 03:01:14 +0000
Files and hashes: 1: 5QUE0-6U3GjDIH7dcd-IQnlXQSU.crl (hash: 4soM4TQkgetPLf5kcQfW4qNnKsXTuAh7TuDsnWLj/N4=)
2: uieVQKIrYQnOS10ZPQidTSptqvk.roa (hash: MivO7hC4cgF74++kcIqr2G3F0NA+YWEQTrP/kODx1y0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/290221-8f36-48ed-9b79-1d29c14b3800/1/5QUE0-6U3GjDIH7dcd-IQnlXQSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/290221-8f36-48ed-9b79-1d29c14b3800/1/5QUE0-6U3GjDIH7dcd-IQnlXQSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/5QUE0-6U3GjDIH7dcd-IQnlXQSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 00:06:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:a8:e6:60:c8:ce:6c:1c:0d:5b:25:90:20:dd:60:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e50504d3ee94dc68c3207edd71df884279574125
Validity
Not Before: Sep 26 03:01:14 2026 GMT
Not After : Sep 27 03:01:14 2026 GMT
Subject: CN=ec99b05a129cd3f2fc0e352f15a39e291fe34ae3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:c1:55:77:84:68:37:76:55:bd:ec:e4:a6:31:
33:51:6f:be:7f:11:84:25:54:73:f0:7e:52:21:ea:
ae:f6:f4:36:76:c5:1d:0e:72:ff:78:cc:b8:88:d1:
f7:dc:53:55:d6:dc:28:34:01:08:7c:94:6d:52:15:
eb:c4:c4:71:7a:00:43:67:ea:83:01:f5:d3:22:05:
8f:94:15:96:5e:c5:53:dd:f1:a7:9c:fb:4c:de:d8:
61:cc:cc:c6:aa:53:52:d6:31:f9:f8:5f:3d:f3:c2:
c5:6d:22:5f:23:a7:cf:dd:36:2a:ca:f9:71:86:8a:
49:f3:df:47:0b:b3:00:1b:ff:9b:c7:0f:4a:a0:bf:
a9:99:92:d9:c7:20:d5:0b:26:a7:9a:40:9a:84:a7:
9a:d2:de:7e:41:21:27:ac:61:22:53:9a:10:40:d6:
48:54:e4:e3:a0:01:9e:d1:5d:b3:3f:10:6c:ac:15:
35:df:5d:d5:df:ea:b6:63:be:2d:04:0f:d3:f7:41:
26:1f:cb:55:ed:c5:2d:35:5d:b3:7c:9d:b1:32:55:
c0:ed:45:96:89:f8:65:5e:92:7c:d5:5e:54:2a:35:
37:a8:15:02:9e:dd:28:0f:a1:dd:17:75:39:74:cd:
ae:8b:0d:f6:a5:19:8f:d4:d7:9f:8f:56:46:b2:5b:
ad:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:99:B0:5A:12:9C:D3:F2:FC:0E:35:2F:15:A3:9E:29:1F:E3:4A:E3
X509v3 Authority Key Identifier:
keyid:E5:05:04:D3:EE:94:DC:68:C3:20:7E:DD:71:DF:88:42:79:57:41:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5QUE0-6U3GjDIH7dcd-IQnlXQSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/290221-8f36-48ed-9b79-1d29c14b3800/1/5QUE0-6U3GjDIH7dcd-IQnlXQSU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/290221-8f36-48ed-9b79-1d29c14b3800/1/5QUE0-6U3GjDIH7dcd-IQnlXQSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:f3:4b:f2:99:6b:75:73:7a:fd:2f:00:79:81:a9:7b:d0:b8:
23:40:09:21:1b:f0:86:54:08:50:63:c3:8c:5e:9b:d8:2f:73:
ec:79:ec:49:3e:d5:bc:db:76:ea:5b:b3:e5:74:a5:be:62:86:
86:a1:5b:2f:9f:93:bc:dd:75:20:1f:0d:07:dc:67:d2:ff:59:
3f:d8:9e:a2:44:39:d8:e3:af:7a:2a:c9:fb:0b:19:75:33:5f:
46:df:17:77:12:e1:ed:9b:6d:06:26:a3:0a:a6:40:d8:0b:84:
cb:26:1d:f9:de:51:a9:dd:a7:0e:1c:1a:89:09:03:c2:46:3a:
0a:9c:dc:c2:0c:c8:77:fd:c3:3d:56:a5:37:18:50:00:99:6e:
c9:dc:b6:22:e5:a9:13:b0:df:7f:e5:97:0b:27:24:af:6e:dd:
80:17:3f:ad:67:d5:4d:07:35:2d:e1:87:55:42:eb:29:98:d3:
4f:f4:6b:a6:82:42:65:07:ae:50:32:82:bc:05:9e:77:0f:35:
21:72:5e:a2:db:e2:8d:18:09:fa:d1:c1:65:6b:f5:f4:3e:ec:
69:29:f1:ea:23:54:cc:cb:28:8c:dd:5c:a5:c1:84:a6:fd:1c:
47:dc:91:ae:2c:d4:07:83:d6:fa:8d:a3:d0:dc:d9:65:70:c9:
7a:57:41:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 05:11:12 2026 by rpki-client