Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/6e457e-366d-440b-af2c-5cadbdcf2215/1/5J2_PERGjlJBHUhhhWvwvceQY-Q.mft
File: 5J2_PERGjlJBHUhhhWvwvceQY-Q.mft (raw, json)
Hash identifier: 9e8EorjD5LHBG3R0oY6m4pnfZAwHpY8ffi1Gq7ncKwg=
Subject key identifier: D0:25:E2:46:78:40:29:76:5F:BA:4E:A4:C6:D2:59:D7:BC:C6:BB:BE
Authority key identifier: E4:9D:BF:3C:44:46:8E:52:41:1D:48:61:85:6B:F0:BD:C7:90:63:E4
Certificate issuer: /CN=e49dbf3c44468e52411d4861856bf0bdc79063e4
Certificate serial: 019CA97CE681406C13C0A199C6A14CE85E1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5J2_PERGjlJBHUhhhWvwvceQY-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/6e457e-366d-440b-af2c-5cadbdcf2215/1/5J2_PERGjlJBHUhhhWvwvceQY-Q.mft
Manifest number: 1018
Signing time: Sun 01 Mar 2026 13:01:00 +0000
Manifest this update: Sun 01 Mar 2026 13:01:00 +0000
Manifest next update: Mon 02 Mar 2026 13:01:00 +0000
Files and hashes: 1: 5J2_PERGjlJBHUhhhWvwvceQY-Q.crl (hash: ZfXAjS3o42RZtNHKhJY37LYNzWF/lVAqRjXDq7XBWQc=)
2: YmHcrnOOhyVRFSzhb5LmKrSYZKs.roa (hash: 5Tv/E4FlLGmCFNLyr1qqDnFaOB6Omm/F5UCvSaKyKeA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/6e457e-366d-440b-af2c-5cadbdcf2215/1/5J2_PERGjlJBHUhhhWvwvceQY-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/6e457e-366d-440b-af2c-5cadbdcf2215/1/5J2_PERGjlJBHUhhhWvwvceQY-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/5J2_PERGjlJBHUhhhWvwvceQY-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 13:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:7c:e6:81:40:6c:13:c0:a1:99:c6:a1:4c:e8:5e:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e49dbf3c44468e52411d4861856bf0bdc79063e4
Validity
Not Before: Mar 1 13:01:00 2026 GMT
Not After : Mar 2 13:01:00 2026 GMT
Subject: CN=d025e246784029765fba4ea4c6d259d7bcc6bbbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:84:f2:cd:5a:72:b4:a1:8c:ce:fc:9e:66:63:
07:41:2b:c8:0f:ef:a0:58:b2:84:b1:30:f8:fd:cb:
1e:ae:eb:0d:8f:bb:0c:42:41:ce:3d:73:ed:03:2f:
0f:4b:a0:40:29:3a:d0:7d:6c:7e:bc:14:36:19:ea:
e8:e7:2c:a3:cb:17:04:0b:fd:41:65:27:8c:18:d0:
c6:f0:7c:67:78:80:4c:10:04:7d:9c:20:ea:64:bb:
33:02:aa:45:b7:0b:e3:e6:5b:65:c9:43:65:86:4e:
fe:f5:ec:1e:7b:f1:df:7e:42:c7:9d:f1:6a:e6:30:
14:2b:c6:56:9d:38:0b:e9:44:6c:2b:c1:18:53:23:
f2:57:86:63:92:49:4e:cc:93:b7:e9:53:21:14:5f:
b1:b6:bb:7e:73:66:3e:60:f8:f4:05:0e:82:c8:80:
bc:be:75:23:8f:ee:07:20:2c:ec:62:ce:c6:29:d4:
55:6a:df:7a:21:e6:6b:fe:dd:2a:b5:0e:08:1a:b4:
c9:ac:5b:d0:f5:84:c8:8d:a2:6d:34:04:ae:69:90:
d5:90:77:f5:2b:ba:72:53:3d:f2:ed:13:00:92:32:
ff:3a:88:b3:c8:6f:42:2a:4f:dd:f7:02:d1:d8:3e:
ef:46:97:1c:4d:6f:cf:05:0d:26:75:52:70:b7:b5:
52:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:25:E2:46:78:40:29:76:5F:BA:4E:A4:C6:D2:59:D7:BC:C6:BB:BE
X509v3 Authority Key Identifier:
keyid:E4:9D:BF:3C:44:46:8E:52:41:1D:48:61:85:6B:F0:BD:C7:90:63:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5J2_PERGjlJBHUhhhWvwvceQY-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/6e457e-366d-440b-af2c-5cadbdcf2215/1/5J2_PERGjlJBHUhhhWvwvceQY-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/6e457e-366d-440b-af2c-5cadbdcf2215/1/5J2_PERGjlJBHUhhhWvwvceQY-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:97:54:f6:7b:6d:9b:f8:1c:79:94:26:bd:55:c7:2a:b6:24:
66:b8:39:f9:a4:cc:e3:b3:29:c2:c8:58:09:6d:5c:f8:c6:75:
bc:ce:e5:4a:07:b8:a9:26:78:fb:1f:21:94:9b:4d:0e:18:f9:
17:bf:d9:de:b5:ae:f9:eb:68:4c:90:55:cd:12:2a:f5:ee:e0:
c4:2d:c6:38:f3:11:b2:ca:1e:83:28:70:50:82:07:95:92:68:
54:42:f3:ec:e3:db:6a:70:5d:c8:3a:42:7a:ad:49:4d:23:7b:
9e:60:ed:c8:fc:87:6e:78:7d:d5:8b:a8:f9:df:32:e1:a0:09:
8d:58:fe:26:36:b0:14:74:70:88:09:25:f3:a7:93:10:75:5d:
f0:8c:b4:f9:98:98:8e:4b:b7:41:a1:58:a9:36:72:ee:f8:5b:
2e:06:3a:7c:e5:cd:4f:6f:76:31:73:ff:57:85:5e:d9:d9:a7:
44:35:e9:49:b9:20:57:9d:f0:97:ff:00:39:8f:b2:36:c0:03:
fe:cd:da:4b:f7:79:be:de:7d:8f:bf:ad:44:76:e3:70:e0:0c:
1c:07:fc:8e:17:a5:00:a6:2c:f6:d4:f4:df:88:a4:d6:08:2e:
9f:bf:56:f1:3a:b8:74:4f:dc:a3:69:90:13:f8:c1:19:02:51:
4f:75:c4:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:37 2026 by rpki-client