Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/6e457e-366d-440b-af2c-5cadbdcf2215/1/5J2_PERGjlJBHUhhhWvwvceQY-Q.mft
File: 5J2_PERGjlJBHUhhhWvwvceQY-Q.mft (raw, json)
Hash identifier: FDxoWRzLvbfCQXWTrFcxiTNAAqZMtfrYkSOZjG0AQwM=
Subject key identifier: 84:0A:D9:0E:50:21:56:B5:81:9E:DC:D4:34:52:B0:6F:6C:D0:08:B8
Authority key identifier: E4:9D:BF:3C:44:46:8E:52:41:1D:48:61:85:6B:F0:BD:C7:90:63:E4
Certificate issuer: /CN=e49dbf3c44468e52411d4861856bf0bdc79063e4
Certificate serial: 019D9AE372F2F2F783940E05BAFF4A525F1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5J2_PERGjlJBHUhhhWvwvceQY-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/6e457e-366d-440b-af2c-5cadbdcf2215/1/5J2_PERGjlJBHUhhhWvwvceQY-Q.mft
Manifest number: 1095
Signing time: Fri 17 Apr 2026 10:01:30 +0000
Manifest this update: Fri 17 Apr 2026 10:01:30 +0000
Manifest next update: Sat 18 Apr 2026 10:01:30 +0000
Files and hashes: 1: 5J2_PERGjlJBHUhhhWvwvceQY-Q.crl (hash: SwsBG785G7cd/NSGnCzdRGtqz0FY/sz+4Y3UhIyaboo=)
2: YmHcrnOOhyVRFSzhb5LmKrSYZKs.roa (hash: 5Tv/E4FlLGmCFNLyr1qqDnFaOB6Omm/F5UCvSaKyKeA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/6e457e-366d-440b-af2c-5cadbdcf2215/1/5J2_PERGjlJBHUhhhWvwvceQY-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/6e457e-366d-440b-af2c-5cadbdcf2215/1/5J2_PERGjlJBHUhhhWvwvceQY-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/5J2_PERGjlJBHUhhhWvwvceQY-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:72:f2:f2:f7:83:94:0e:05:ba:ff:4a:52:5f:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e49dbf3c44468e52411d4861856bf0bdc79063e4
Validity
Not Before: Apr 17 10:01:30 2026 GMT
Not After : Apr 18 10:01:30 2026 GMT
Subject: CN=840ad90e502156b5819edcd43452b06f6cd008b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d6:70:c0:77:7e:1a:a9:a4:39:42:be:aa:6d:
6b:98:c9:d0:8e:22:4b:37:fb:4d:b5:06:9d:99:ab:
5a:39:c9:66:d5:3d:06:3b:d6:ac:d6:aa:f4:40:73:
e0:72:55:30:7f:e7:93:26:9f:43:f1:73:8b:77:ce:
e4:9e:e2:ea:f8:07:2a:0a:9b:ff:df:20:71:17:20:
56:e9:6a:15:e2:2d:7c:75:73:0d:3a:5a:34:4b:63:
5a:56:61:76:06:ad:80:1e:ab:89:b6:7f:71:2e:2c:
76:b6:dd:92:d3:c1:91:aa:91:c4:22:fa:f8:64:c2:
a9:bf:48:1f:c0:da:e0:e0:75:9d:cc:56:9d:d6:a4:
ef:db:b5:d3:e5:9e:c5:8b:97:87:08:3c:9c:0b:ce:
24:9c:33:cb:b0:af:dd:77:1e:e8:e0:9c:83:58:94:
18:87:38:a3:21:b7:14:2a:4c:d3:06:18:42:b1:44:
b1:4b:b0:5b:f6:ca:4a:d2:de:41:c4:ff:16:b3:fd:
d6:6b:3b:59:d9:1a:09:d0:1b:0c:dc:32:83:47:c4:
9b:25:e7:a9:9b:34:9e:6b:ad:56:a4:31:b6:5c:56:
c4:b5:e8:1b:cc:ca:22:f3:2c:4e:ca:06:c0:4a:bf:
15:cb:6e:40:fe:69:41:07:b6:fb:64:e2:37:e1:bc:
33:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:0A:D9:0E:50:21:56:B5:81:9E:DC:D4:34:52:B0:6F:6C:D0:08:B8
X509v3 Authority Key Identifier:
keyid:E4:9D:BF:3C:44:46:8E:52:41:1D:48:61:85:6B:F0:BD:C7:90:63:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5J2_PERGjlJBHUhhhWvwvceQY-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/6e457e-366d-440b-af2c-5cadbdcf2215/1/5J2_PERGjlJBHUhhhWvwvceQY-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/6e457e-366d-440b-af2c-5cadbdcf2215/1/5J2_PERGjlJBHUhhhWvwvceQY-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:15:4f:c6:f1:e7:9e:21:8a:d8:6c:96:14:b9:4a:27:f2:1e:
53:c5:47:df:da:77:e2:0a:1e:21:99:db:44:80:5a:68:26:e8:
22:8d:50:ee:e7:e5:4e:e9:72:26:0d:07:25:51:5f:2b:14:6a:
09:bb:19:00:a6:0e:bb:70:ff:d0:22:e7:b8:c9:5b:42:cd:8b:
b5:23:92:90:e5:f4:ce:69:53:56:4c:07:3a:49:88:73:cf:f6:
c8:6c:82:9d:de:cf:18:a4:c4:72:09:36:15:98:8b:55:40:92:
25:50:00:4b:7e:29:28:2d:38:84:53:85:0a:60:aa:bc:19:3e:
77:1e:71:07:79:0c:b1:25:8e:14:7f:5c:bd:9e:77:67:95:32:
8b:c5:99:cb:dc:0c:1f:56:cf:0d:b1:a8:8f:f2:9e:25:36:e6:
63:9c:3a:d2:97:c6:e8:99:bf:13:a3:4a:26:1f:1d:c8:01:41:
e8:bc:f2:91:d9:94:a6:65:9d:94:97:5b:0d:8b:32:af:9a:b0:
1f:8f:96:c3:66:8a:90:f0:4c:4c:2e:45:90:4d:8f:81:f9:04:
21:cd:33:f6:6e:90:12:10:fe:89:08:1b:12:f0:f5:e6:2e:a6:
3d:62:70:c9:a0:4a:68:3c:3e:9b:2a:01:de:f2:53:4e:38:d3:
ea:0c:02:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:33:22 2026 by rpki-client