Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/2cc22c-2d71-46d6-9215-38c5b0c4f152/1/5aHlGcnOd1ddifB89xjzsMyG7FU.mft
File: 5aHlGcnOd1ddifB89xjzsMyG7FU.mft (raw, json)
Hash identifier: 31FfR+IBxltqxdcZDQ4xY6JgW3eFGl0+tSmod9mpfA0=
Subject key identifier: 1F:AA:85:1A:15:21:14:6F:CD:1D:71:FA:68:79:7E:45:89:40:91:7B
Authority key identifier: E5:A1:E5:19:C9:CE:77:57:5D:89:F0:7C:F7:18:F3:B0:CC:86:EC:55
Certificate issuer: /CN=e5a1e519c9ce77575d89f07cf718f3b0cc86ec55
Certificate serial: 01A0DC178E6052F4EF185E6332A7FEE4AA6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5aHlGcnOd1ddifB89xjzsMyG7FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/2cc22c-2d71-46d6-9215-38c5b0c4f152/1/5aHlGcnOd1ddifB89xjzsMyG7FU.mft
Manifest number: 1A70
Signing time: Sat 26 Sep 2026 05:02:06 +0000
Manifest this update: Sat 26 Sep 2026 05:02:06 +0000
Manifest next update: Sun 27 Sep 2026 05:02:06 +0000
Files and hashes: 1: 5aHlGcnOd1ddifB89xjzsMyG7FU.crl (hash: boWFiw5sQQfjD02TYMtzq9vszwCeHgn/OKowLXYUvYU=)
2: WG7wAcXOQAIG2_4E3zJbWmoA3W0.roa (hash: 7hBSMbb3+udDNajYBSGLEQiPuq6VzstQJyrB9xeEhCg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/2cc22c-2d71-46d6-9215-38c5b0c4f152/1/5aHlGcnOd1ddifB89xjzsMyG7FU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/2cc22c-2d71-46d6-9215-38c5b0c4f152/1/5aHlGcnOd1ddifB89xjzsMyG7FU.mft
rsync://rpki.ripe.net/repository/DEFAULT/5aHlGcnOd1ddifB89xjzsMyG7FU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:17:8e:60:52:f4:ef:18:5e:63:32:a7:fe:e4:aa:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5a1e519c9ce77575d89f07cf718f3b0cc86ec55
Validity
Not Before: Sep 26 05:02:06 2026 GMT
Not After : Sep 27 05:02:06 2026 GMT
Subject: CN=1faa851a1521146fcd1d71fa68797e458940917b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:67:21:6c:0a:72:3e:f7:f1:d1:7d:87:b8:54:
01:3c:2d:59:cc:93:07:37:a8:84:de:56:a7:82:9a:
cc:43:31:72:40:c5:0f:b3:c6:3f:f5:e8:22:76:91:
bf:1c:d6:a1:31:39:94:4e:36:99:9f:97:8f:94:1b:
4b:ec:e8:cd:53:02:1d:5b:fc:00:8f:aa:71:fc:50:
ef:4b:7a:e9:06:d3:1a:b4:14:6c:e5:f0:39:70:dd:
f4:6e:a5:34:5c:3b:a4:79:d8:19:57:8f:dc:97:68:
08:8e:ba:b0:ea:37:81:56:6c:1f:20:c9:22:d8:c8:
9f:78:56:e5:d4:e8:e0:44:bf:a3:63:5f:15:bf:03:
b8:94:fb:89:89:1d:e9:25:4c:cc:e8:02:cb:2e:a5:
5f:f6:9e:81:3e:3f:bf:d2:64:2f:55:4c:b1:33:1c:
ca:54:88:55:3d:b9:91:df:da:3c:3b:be:2e:fd:c6:
09:e5:bd:16:01:50:f0:78:b2:0e:e6:c0:33:0e:b6:
50:9d:a9:39:25:93:7b:a8:b9:a2:71:16:b1:22:12:
26:84:ab:c8:81:1a:23:b9:ef:84:07:53:07:27:d3:
4e:91:11:54:47:39:a1:5e:81:bf:de:98:b3:48:d3:
b1:4e:46:92:5f:f0:c2:67:e5:90:c2:6b:c5:57:db:
44:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:AA:85:1A:15:21:14:6F:CD:1D:71:FA:68:79:7E:45:89:40:91:7B
X509v3 Authority Key Identifier:
keyid:E5:A1:E5:19:C9:CE:77:57:5D:89:F0:7C:F7:18:F3:B0:CC:86:EC:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5aHlGcnOd1ddifB89xjzsMyG7FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2cc22c-2d71-46d6-9215-38c5b0c4f152/1/5aHlGcnOd1ddifB89xjzsMyG7FU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2cc22c-2d71-46d6-9215-38c5b0c4f152/1/5aHlGcnOd1ddifB89xjzsMyG7FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:87:b0:59:49:21:e2:34:b1:d0:7d:0c:2d:bd:7d:66:41:2b:
00:67:5a:76:f3:f4:6a:f3:f1:5f:07:a7:e6:b5:d1:6f:3d:b3:
61:38:11:df:7e:32:cc:95:a3:32:60:52:49:7f:e7:95:ab:6e:
34:02:22:a8:da:7f:a2:a7:31:f0:fe:20:36:ec:63:66:3f:f5:
12:fa:62:12:e1:76:39:a1:1a:3f:36:a1:72:59:43:2a:ac:af:
b7:2a:59:0f:52:83:83:fc:4d:12:1e:d8:80:d2:29:2d:aa:c0:
1a:70:36:6a:53:54:b9:43:58:16:5a:2b:b3:7b:5c:f6:ab:e7:
b0:e4:c9:94:36:ce:8b:c3:19:50:1b:a2:94:17:89:b6:cc:40:
2a:d1:f3:b4:b4:09:37:c1:e7:21:d9:ca:60:33:0c:2d:78:89:
05:c1:d1:77:f4:b1:c2:18:89:ed:21:e6:da:5e:f3:b5:94:2d:
34:56:3d:a5:8f:86:b9:ba:e5:16:14:82:e5:12:35:11:38:53:
31:d7:3b:6e:8a:b0:a2:5c:e3:02:89:95:1b:90:7e:f5:7b:09:
8c:42:35:01:2a:64:ee:a0:ac:4d:65:31:31:1d:5b:06:fc:66:
71:11:5e:f3:d0:5c:fe:fc:59:5a:dd:a6:6d:96:73:6b:c3:55:
22:4c:bb:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 12:49:06 2026 by rpki-client