Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/6e457e-366d-440b-af2c-5cadbdcf2215/1/5J2_PERGjlJBHUhhhWvwvceQY-Q.mft
File: 5J2_PERGjlJBHUhhhWvwvceQY-Q.mft (raw, json)
Hash identifier: CzQF6tqz97RgbXFXktheJI50f/L13YLPSy64sHsGiYs=
Subject key identifier: 5D:72:0F:52:D6:BF:E4:51:9A:7E:1F:C2:1F:3A:5E:41:30:BD:31:D2
Authority key identifier: E4:9D:BF:3C:44:46:8E:52:41:1D:48:61:85:6B:F0:BD:C7:90:63:E4
Certificate issuer: /CN=e49dbf3c44468e52411d4861856bf0bdc79063e4
Certificate serial: 01A0C21F5FBDE121E672E92168D362514045
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5J2_PERGjlJBHUhhhWvwvceQY-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/6e457e-366d-440b-af2c-5cadbdcf2215/1/5J2_PERGjlJBHUhhhWvwvceQY-Q.mft
Manifest number: 1237
Signing time: Mon 21 Sep 2026 04:00:30 +0000
Manifest this update: Mon 21 Sep 2026 04:00:30 +0000
Manifest next update: Tue 22 Sep 2026 04:00:30 +0000
Files and hashes: 1: 5J2_PERGjlJBHUhhhWvwvceQY-Q.crl (hash: HPS1WETTbY/CuYLmDZ7PR6mRcM3XgDH3tkV2G0LFGIE=)
2: YmHcrnOOhyVRFSzhb5LmKrSYZKs.roa (hash: 5Tv/E4FlLGmCFNLyr1qqDnFaOB6Omm/F5UCvSaKyKeA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/6e457e-366d-440b-af2c-5cadbdcf2215/1/5J2_PERGjlJBHUhhhWvwvceQY-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/6e457e-366d-440b-af2c-5cadbdcf2215/1/5J2_PERGjlJBHUhhhWvwvceQY-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/5J2_PERGjlJBHUhhhWvwvceQY-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:1f:5f:bd:e1:21:e6:72:e9:21:68:d3:62:51:40:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e49dbf3c44468e52411d4861856bf0bdc79063e4
Validity
Not Before: Sep 21 04:00:30 2026 GMT
Not After : Sep 22 04:00:30 2026 GMT
Subject: CN=5d720f52d6bfe4519a7e1fc21f3a5e4130bd31d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:9a:a7:0e:57:17:18:19:9e:53:63:4b:b7:13:
66:a4:ce:11:d5:66:2c:46:3c:44:09:27:c8:48:b3:
27:b9:0b:e9:99:ca:9d:01:c5:48:c5:e2:57:7f:35:
8d:6a:3c:e1:10:1c:a2:db:33:43:1b:ff:c4:07:22:
af:80:3b:17:8f:da:05:d8:6b:31:66:e4:2c:b4:e0:
b4:3f:2d:67:1f:93:9a:86:92:19:4d:99:32:97:de:
25:d4:0a:27:27:08:90:51:45:e6:3c:2b:da:a3:2b:
bd:61:07:11:80:64:6a:d6:7e:f8:68:67:29:32:a0:
1b:5f:3e:05:b4:84:15:08:e0:47:b7:f4:bd:36:06:
a0:e0:6d:68:06:99:c1:f7:de:e5:0d:2c:c5:e5:34:
f6:11:99:67:c8:33:40:5d:42:fc:93:c1:cb:31:5c:
4e:7d:5f:74:2b:f4:5f:cd:31:1c:9c:58:12:1a:6c:
75:46:5e:37:36:10:17:cf:e9:bb:f9:74:45:9e:5a:
0c:69:54:2c:39:6e:eb:9f:3e:c8:ec:80:c9:d2:e2:
4e:11:b8:03:ae:d7:14:73:97:5b:8e:32:19:c6:d2:
72:0d:54:78:ce:4d:4d:20:3a:fd:32:e1:15:12:5e:
3c:9b:a5:1a:75:fc:c6:0c:65:bc:99:6f:f4:da:ad:
49:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:72:0F:52:D6:BF:E4:51:9A:7E:1F:C2:1F:3A:5E:41:30:BD:31:D2
X509v3 Authority Key Identifier:
keyid:E4:9D:BF:3C:44:46:8E:52:41:1D:48:61:85:6B:F0:BD:C7:90:63:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5J2_PERGjlJBHUhhhWvwvceQY-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/6e457e-366d-440b-af2c-5cadbdcf2215/1/5J2_PERGjlJBHUhhhWvwvceQY-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/6e457e-366d-440b-af2c-5cadbdcf2215/1/5J2_PERGjlJBHUhhhWvwvceQY-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:cf:3c:5f:5e:6b:b9:24:d8:e5:48:6e:fd:8e:50:f1:45:c9:
80:01:da:0c:93:7b:75:9e:d6:a2:11:d2:3f:56:db:d7:82:25:
88:e7:1b:6b:cb:8c:70:f7:da:e3:d2:54:36:88:6c:f9:b3:e8:
9d:13:d3:82:a5:ad:02:cc:fc:57:b0:7a:d9:41:90:30:61:eb:
d7:e0:9c:50:8a:30:60:a7:2c:39:aa:bb:03:9e:51:32:31:fe:
87:da:bb:70:72:58:e2:0a:20:6f:01:e6:b6:dc:f2:c9:00:61:
ee:6d:40:d3:fd:04:ba:90:2a:6a:d1:5c:d1:51:e1:38:db:a0:
d2:ab:01:b8:c9:58:38:c7:e4:41:2b:ec:5d:26:4d:f4:3e:14:
98:e6:e9:5e:7d:a4:46:b7:48:cc:b6:3e:06:ca:13:38:51:fc:
87:38:96:db:4b:2a:c9:0f:dc:1d:f7:64:0b:69:27:36:8c:66:
c2:ef:95:de:f5:12:9c:84:e4:78:2c:74:1b:af:10:2a:aa:14:
4f:a3:80:c7:08:fb:e3:7b:1a:24:7d:b5:a3:23:22:8a:88:42:
f8:b7:9a:da:fb:0a:92:19:f7:24:84:f4:d9:3a:b8:e2:f0:6c:
72:e4:65:52:ac:39:2c:c9:3c:dc:2e:b6:67:ad:16:2e:90:f0:
9b:5e:7d:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:10:07 2026 by rpki-client