Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/d5df03-b5ee-4bf7-aedf-8d8e9ea14325/1/0q5eM4eU5g1di1I72yto7ErHYs4.mft
File: 0q5eM4eU5g1di1I72yto7ErHYs4.mft (raw, json)
Hash identifier: JrHHOF3QQwP/U289Lh0kilcFALR+14ej1XY5n8whoj8=
Subject key identifier: 5B:10:BE:41:6C:70:00:B6:F0:5F:3B:A4:34:E1:89:8E:08:3C:F4:33
Authority key identifier: D2:AE:5E:33:87:94:E6:0D:5D:8B:52:3B:DB:2B:68:EC:4A:C7:62:CE
Certificate issuer: /CN=d2ae5e338794e60d5d8b523bdb2b68ec4ac762ce
Certificate serial: 01A1C555D839B2C3D53A8DE2E9F087BB272B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0q5eM4eU5g1di1I72yto7ErHYs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/d5df03-b5ee-4bf7-aedf-8d8e9ea14325/1/0q5eM4eU5g1di1I72yto7ErHYs4.mft
Manifest number: 1AEE
Signing time: Tue 10 Nov 2026 12:01:39 +0000
Manifest this update: Tue 10 Nov 2026 12:01:39 +0000
Manifest next update: Wed 11 Nov 2026 12:01:39 +0000
Files and hashes: 1: 0q5eM4eU5g1di1I72yto7ErHYs4.crl (hash: 2dNGhfT013Ga4HbpH5VDTekY26IRih8QvTep886XWd8=)
2: TsEeS06BRtfUnD0nBFcpdNoJZpI.roa (hash: 0npomOaU1CPA/lCqnhXlEsByCa+iM4LMEDRJdI6ifoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/d5df03-b5ee-4bf7-aedf-8d8e9ea14325/1/0q5eM4eU5g1di1I72yto7ErHYs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/d5df03-b5ee-4bf7-aedf-8d8e9ea14325/1/0q5eM4eU5g1di1I72yto7ErHYs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0q5eM4eU5g1di1I72yto7ErHYs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 12:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c5:55:d8:39:b2:c3:d5:3a:8d:e2:e9:f0:87:bb:27:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2ae5e338794e60d5d8b523bdb2b68ec4ac762ce
Validity
Not Before: Nov 10 12:01:39 2026 GMT
Not After : Nov 11 12:01:39 2026 GMT
Subject: CN=5b10be416c7000b6f05f3ba434e1898e083cf433
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ce:44:5b:43:8c:ac:63:1a:ce:07:4a:f9:a7:
85:cc:85:a9:ca:f6:73:c5:b1:69:fa:ed:dd:32:67:
68:59:80:cc:6f:e1:57:ef:91:e5:d6:bc:42:22:49:
d0:6f:75:3c:f5:8a:39:f1:be:2b:89:e3:aa:23:e1:
f1:1d:ef:6d:19:da:e5:2f:9d:7a:0b:58:4c:b6:69:
c2:87:4b:26:96:b3:bb:df:33:d9:cd:5d:d8:c7:ec:
4e:4a:4b:c2:86:3e:1f:66:6d:ae:49:52:4b:bc:e5:
4e:37:9f:9c:4c:e6:39:22:f3:83:a5:a2:73:ec:7f:
b1:01:44:e5:65:4e:ba:a0:f4:5e:42:01:87:37:f8:
d6:b8:60:08:39:fa:61:02:eb:32:12:99:11:5f:56:
4b:32:32:9f:74:d1:aa:46:98:a9:92:6d:11:8b:95:
9c:82:f4:a1:d1:1f:6b:9f:f8:4d:f8:db:1f:f3:df:
5f:63:84:09:00:2b:10:3a:50:0c:49:ce:72:dd:f6:
d2:af:49:4c:b8:9f:f5:35:b9:0b:d3:5f:75:ed:a4:
4d:e9:14:90:83:7f:9f:e6:de:e0:8f:68:d4:7e:7a:
99:66:f3:5e:b7:f5:11:69:16:6c:34:b7:c3:90:78:
90:07:09:f8:86:18:d9:96:a7:06:bc:20:a2:c4:77:
4a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:10:BE:41:6C:70:00:B6:F0:5F:3B:A4:34:E1:89:8E:08:3C:F4:33
X509v3 Authority Key Identifier:
keyid:D2:AE:5E:33:87:94:E6:0D:5D:8B:52:3B:DB:2B:68:EC:4A:C7:62:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0q5eM4eU5g1di1I72yto7ErHYs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/d5df03-b5ee-4bf7-aedf-8d8e9ea14325/1/0q5eM4eU5g1di1I72yto7ErHYs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/d5df03-b5ee-4bf7-aedf-8d8e9ea14325/1/0q5eM4eU5g1di1I72yto7ErHYs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:d1:8f:40:ed:e0:9c:bd:09:38:9b:a1:a8:45:71:43:09:01:
8b:06:20:d8:5d:0d:b0:33:2e:6c:21:9f:84:65:cd:f3:fd:c9:
88:1a:b8:3f:13:46:09:cd:09:ce:ca:f2:1d:20:4c:cc:68:96:
a6:2a:c6:9c:46:79:c1:b6:31:d1:48:60:b7:c9:f1:c3:1d:79:
1a:97:f2:0c:73:d6:f0:df:56:12:b6:89:81:8e:5a:05:f1:c4:
ef:ad:a9:3e:49:9e:f9:47:1a:6a:3d:77:26:d4:1d:cc:2a:e3:
4c:8a:25:72:42:90:bc:1c:be:a2:10:85:53:87:3a:af:79:0b:
7b:84:fc:44:6c:54:20:be:48:22:f8:73:a1:33:db:97:b8:74:
54:d9:6a:9a:64:5b:01:ca:07:83:bd:a0:7f:4a:7f:1f:e4:ae:
49:61:4f:9e:d4:2f:df:1d:ab:43:8d:6a:d8:01:0e:74:ea:d8:
d5:92:2d:3d:fd:57:40:ef:ce:73:d1:31:18:fb:81:9a:83:e8:
f3:1a:9c:f9:af:7b:76:c3:1b:f8:0b:49:e7:bc:c6:7e:f7:f2:
13:46:42:68:2e:10:7e:46:d3:8b:2d:bf:9a:45:a7:ee:d8:50:
db:a8:8d:27:0f:3f:ff:3d:ea:d1:7d:25:b0:8c:f5:c0:70:e2:
52:d1:35:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 19:54:49 2026 by rpki-client