Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/290221-8f36-48ed-9b79-1d29c14b3800/1/5QUE0-6U3GjDIH7dcd-IQnlXQSU.mft
File: 5QUE0-6U3GjDIH7dcd-IQnlXQSU.mft (raw, json)
Hash identifier: yAsYSYcVbrYlhV7LsOMX6U9yf/zgSdPQL3balDgzfp8=
Subject key identifier: 80:88:B2:A7:AB:BD:E6:38:DC:73:21:88:A4:EA:FA:3F:32:9E:9E:A6
Authority key identifier: E5:05:04:D3:EE:94:DC:68:C3:20:7E:DD:71:DF:88:42:79:57:41:25
Certificate issuer: /CN=e50504d3ee94dc68c3207edd71df884279574125
Certificate serial: 019FAA8844B2F103659737F7256F20EF1493
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5QUE0-6U3GjDIH7dcd-IQnlXQSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/290221-8f36-48ed-9b79-1d29c14b3800/1/5QUE0-6U3GjDIH7dcd-IQnlXQSU.mft
Manifest number: 4D
Signing time: Tue 28 Jul 2026 21:01:24 +0000
Manifest this update: Tue 28 Jul 2026 21:01:24 +0000
Manifest next update: Wed 29 Jul 2026 21:01:24 +0000
Files and hashes: 1: 5QUE0-6U3GjDIH7dcd-IQnlXQSU.crl (hash: A4FLFun4yxeVj+MZ1GMV8AfKsXQiXL0Hq68J7uivnRA=)
2: uieVQKIrYQnOS10ZPQidTSptqvk.roa (hash: MivO7hC4cgF74++kcIqr2G3F0NA+YWEQTrP/kODx1y0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/290221-8f36-48ed-9b79-1d29c14b3800/1/5QUE0-6U3GjDIH7dcd-IQnlXQSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/290221-8f36-48ed-9b79-1d29c14b3800/1/5QUE0-6U3GjDIH7dcd-IQnlXQSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/5QUE0-6U3GjDIH7dcd-IQnlXQSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:88:44:b2:f1:03:65:97:37:f7:25:6f:20:ef:14:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e50504d3ee94dc68c3207edd71df884279574125
Validity
Not Before: Jul 28 21:01:24 2026 GMT
Not After : Jul 29 21:01:24 2026 GMT
Subject: CN=8088b2a7abbde638dc732188a4eafa3f329e9ea6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:19:f6:d6:23:ea:01:ce:da:4e:84:b1:08:85:
d5:de:fd:39:92:aa:89:00:5b:be:62:09:7f:50:e9:
97:65:94:ae:11:95:19:9a:55:c2:94:2a:26:01:d6:
3a:00:36:6b:f6:45:05:df:54:f7:ce:2e:54:7f:9a:
d2:4a:5c:7b:4e:8f:75:e8:1d:ce:74:30:d3:f2:35:
b2:b4:45:72:77:fe:1c:4e:eb:b7:b7:8d:0b:b7:ee:
5f:3a:11:93:44:1c:ac:9d:70:20:1d:20:87:d7:9d:
5b:1e:c7:99:fc:19:72:8f:e6:18:6e:41:90:59:50:
74:d8:65:08:4b:0d:4a:5e:8b:40:f0:d2:13:9c:fd:
e3:bf:93:ee:b1:7d:b2:dc:31:68:02:4c:5f:c9:ca:
f9:66:89:28:94:85:98:c5:2d:b4:58:6d:d7:22:9a:
77:55:3d:5b:36:7e:40:e0:43:e7:e7:0f:60:af:23:
d6:f3:85:17:74:af:75:d3:39:0f:73:64:46:48:5f:
9a:9d:f7:d7:22:5f:cb:1d:78:e1:74:6a:b7:8c:d7:
ca:b0:01:9d:32:14:15:a9:5c:3c:15:a3:aa:8d:5e:
4c:20:a3:35:91:3d:8d:27:16:55:26:dc:d2:33:47:
ae:29:79:8a:04:0e:f7:a7:41:27:61:ed:17:d4:a7:
2c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:88:B2:A7:AB:BD:E6:38:DC:73:21:88:A4:EA:FA:3F:32:9E:9E:A6
X509v3 Authority Key Identifier:
keyid:E5:05:04:D3:EE:94:DC:68:C3:20:7E:DD:71:DF:88:42:79:57:41:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5QUE0-6U3GjDIH7dcd-IQnlXQSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/290221-8f36-48ed-9b79-1d29c14b3800/1/5QUE0-6U3GjDIH7dcd-IQnlXQSU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/290221-8f36-48ed-9b79-1d29c14b3800/1/5QUE0-6U3GjDIH7dcd-IQnlXQSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:0a:b1:34:3c:42:ae:9f:fb:a1:d2:7e:1b:91:c8:31:f7:d1:
02:54:4e:1e:f3:ef:34:ae:d4:b7:0b:35:25:d4:e5:fb:e0:22:
85:48:44:6f:a4:52:49:cf:31:78:61:ba:47:32:00:9d:36:05:
eb:f3:c5:40:d8:96:c7:98:4d:50:f9:aa:02:3f:d3:fb:e8:ed:
c9:05:57:24:b8:ea:48:40:74:8b:d7:88:47:c0:c8:d5:84:ba:
a1:f0:89:a1:bf:0b:f2:5a:e5:b1:11:8d:16:f9:98:0f:95:6c:
25:fe:3d:18:4f:c4:1e:64:ea:f6:24:cd:2c:c1:19:ed:bc:08:
06:e2:f2:28:9e:4d:a8:4d:78:a8:b9:a5:38:19:01:51:d6:40:
7c:48:4c:dc:1e:03:60:ad:30:8e:48:ec:a9:04:18:8d:ee:e4:
31:a4:23:be:d7:d6:77:cc:08:d1:45:c9:24:17:e7:ce:f8:21:
8a:ec:90:9b:9e:2f:0a:a4:73:58:f1:f5:06:93:6d:e3:7b:2b:
cf:09:b0:48:fd:e8:ce:41:c5:bf:f2:a6:ef:ad:ca:dd:f3:34:
69:d8:c2:b7:d2:af:11:5d:89:03:06:19:52:c7:0e:ce:bd:b0:
48:ab:9d:9f:88:a6:ba:bc:99:79:36:e8:4c:7a:22:0c:91:d9:
e8:45:c4:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:34:32 2026 by rpki-client