Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/1ac379-ff55-48c7-9691-006c32d46a7b/1/Ah5bTkwtVfCR1JSjPYYG5k59p_c.mft
File: Ah5bTkwtVfCR1JSjPYYG5k59p_c.mft (raw, json)
Hash identifier: 5H9BtdOAAKqbL0N9HfBCz5qALbF7iNAQwhr+agkEOOE=
Subject key identifier: 5D:22:32:FB:7B:E0:11:8C:4E:6A:E5:20:89:C9:16:FE:9A:9A:BE:77
Authority key identifier: 02:1E:5B:4E:4C:2D:55:F0:91:D4:94:A3:3D:86:06:E6:4E:7D:A7:F7
Certificate issuer: /CN=021e5b4e4c2d55f091d494a33d8606e64e7da7f7
Certificate serial: 01A1AC03A46B1CAFAB5F56852F0DFF13EFA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ah5bTkwtVfCR1JSjPYYG5k59p_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/1ac379-ff55-48c7-9691-006c32d46a7b/1/Ah5bTkwtVfCR1JSjPYYG5k59p_c.mft
Manifest number: 0204
Signing time: Thu 05 Nov 2026 14:01:22 +0000
Manifest this update: Thu 05 Nov 2026 14:01:22 +0000
Manifest next update: Fri 06 Nov 2026 14:01:22 +0000
Files and hashes: 1: Ah5bTkwtVfCR1JSjPYYG5k59p_c.crl (hash: wID8lTYIFAkDh+MqrVMC2Dk1gv21VzwQVcJnWdvMUJA=)
2: VYFbbCZGX6OViZYJs2QJsv7BOWs.asa (hash: aA2l1O9+TsmhM1jTSdaJv3MOhZ42Fqiq9eSX13sVeZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/1ac379-ff55-48c7-9691-006c32d46a7b/1/Ah5bTkwtVfCR1JSjPYYG5k59p_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/1ac379-ff55-48c7-9691-006c32d46a7b/1/Ah5bTkwtVfCR1JSjPYYG5k59p_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ah5bTkwtVfCR1JSjPYYG5k59p_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:ac:03:a4:6b:1c:af:ab:5f:56:85:2f:0d:ff:13:ef:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=021e5b4e4c2d55f091d494a33d8606e64e7da7f7
Validity
Not Before: Nov 5 14:01:22 2026 GMT
Not After : Nov 6 14:01:22 2026 GMT
Subject: CN=5d2232fb7be0118c4e6ae52089c916fe9a9abe77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:78:f3:1e:b0:82:9c:27:e0:2b:9a:2c:da:2d:
8c:50:c1:7f:45:66:64:e3:59:37:8a:00:25:92:c6:
a2:25:08:09:36:ed:ff:ee:8f:02:3c:4c:e0:65:08:
a9:c4:56:3b:5b:ea:33:d3:c6:70:54:b5:41:0b:41:
16:e1:eb:aa:15:0b:d4:f5:46:ac:53:a9:df:50:1c:
4e:b2:f8:47:2f:35:dc:08:c9:34:7b:5c:85:12:c2:
b3:40:9b:01:69:e4:b3:4c:7c:bf:a7:8f:d9:d7:5a:
9c:ea:d5:c1:5b:bb:8e:82:ed:34:1c:95:56:d3:62:
60:62:25:41:64:d1:76:7b:44:b6:0d:0a:84:82:14:
34:7e:03:59:14:b0:6a:3f:9c:81:a6:bd:95:ec:56:
35:16:ff:14:d2:cb:2e:8b:be:ee:d2:fd:90:7e:cd:
01:ef:6d:50:c8:21:a9:d0:0a:cc:c9:f6:2e:a8:a6:
06:99:61:78:f7:d2:43:16:0a:52:10:0e:cf:68:03:
a4:7b:06:29:5f:a1:ce:8e:6b:ab:0f:b5:ad:cd:6b:
2b:32:79:24:27:5c:cf:b3:ac:8a:1e:c7:26:00:9f:
58:5f:f5:9d:10:9f:ab:59:a7:76:8c:39:d4:2d:5a:
c3:27:96:04:3a:97:c6:aa:a0:89:46:b4:a2:54:42:
66:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:22:32:FB:7B:E0:11:8C:4E:6A:E5:20:89:C9:16:FE:9A:9A:BE:77
X509v3 Authority Key Identifier:
keyid:02:1E:5B:4E:4C:2D:55:F0:91:D4:94:A3:3D:86:06:E6:4E:7D:A7:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ah5bTkwtVfCR1JSjPYYG5k59p_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/1ac379-ff55-48c7-9691-006c32d46a7b/1/Ah5bTkwtVfCR1JSjPYYG5k59p_c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/1ac379-ff55-48c7-9691-006c32d46a7b/1/Ah5bTkwtVfCR1JSjPYYG5k59p_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:6c:2e:c7:37:20:d0:a1:ea:81:d6:88:59:ed:4d:93:5c:ca:
a3:81:a1:1d:88:a1:48:59:89:f9:bd:74:62:1b:75:2d:60:63:
4f:4e:63:6f:d0:df:3d:b9:c0:4a:0a:d3:33:d7:5e:92:dd:96:
7c:ff:0d:f3:2d:1b:42:51:42:fb:ee:4b:ea:a8:5f:c6:d8:0d:
62:24:22:60:f6:be:76:0c:8e:26:c8:7f:a8:68:05:8c:e8:67:
11:82:7d:02:62:3c:72:2d:c9:3c:77:91:02:15:fa:b9:fa:aa:
57:a9:a4:8a:2e:19:d3:34:b3:89:59:cd:03:09:97:3b:07:2c:
26:ce:9a:dc:17:97:f2:f3:fd:42:34:44:8c:92:45:82:02:70:
1e:84:06:5b:72:2b:c2:81:1a:40:f3:f9:80:7d:e0:20:e6:49:
10:c3:f7:76:c7:73:12:a6:43:11:28:c9:35:6c:d0:ca:ec:63:
14:ca:51:d9:7f:f2:b9:63:ec:51:a0:85:4e:24:29:40:39:e9:
d1:fb:cc:b7:97:dd:7a:7a:b6:cb:35:81:03:a5:ab:b1:57:5b:
19:18:5a:e6:e3:f3:85:d6:81:41:29:34:09:39:5e:24:69:3b:
31:8c:5b:85:e5:0c:75:4b:d9:aa:05:dc:47:ec:19:00:92:de:
01:8a:05:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 17:27:47 2026 by rpki-client