Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/2cc22c-2d71-46d6-9215-38c5b0c4f152/1/5aHlGcnOd1ddifB89xjzsMyG7FU.mft
File: 5aHlGcnOd1ddifB89xjzsMyG7FU.mft (raw, json)
Hash identifier: obVN3z0lfVPwAI0RWrrtvgX8vHRoeqx/M4jmrbg6HaM=
Subject key identifier: B3:C9:BE:30:94:F3:0F:04:C3:37:DD:98:76:44:48:D4:4D:12:B1:C8
Authority key identifier: E5:A1:E5:19:C9:CE:77:57:5D:89:F0:7C:F7:18:F3:B0:CC:86:EC:55
Certificate issuer: /CN=e5a1e519c9ce77575d89f07cf718f3b0cc86ec55
Certificate serial: 019EBF5B38E7B93409518C5ABC7715DCE254
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5aHlGcnOd1ddifB89xjzsMyG7FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/2cc22c-2d71-46d6-9215-38c5b0c4f152/1/5aHlGcnOd1ddifB89xjzsMyG7FU.mft
Manifest number: 1958
Signing time: Sat 13 Jun 2026 05:01:26 +0000
Manifest this update: Sat 13 Jun 2026 05:01:26 +0000
Manifest next update: Sun 14 Jun 2026 05:01:26 +0000
Files and hashes: 1: 5aHlGcnOd1ddifB89xjzsMyG7FU.crl (hash: qk9JX6SghuS9+c9uMgu3EQKcMZt2loT8s5Ex2twgGxw=)
2: WG7wAcXOQAIG2_4E3zJbWmoA3W0.roa (hash: 7hBSMbb3+udDNajYBSGLEQiPuq6VzstQJyrB9xeEhCg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/2cc22c-2d71-46d6-9215-38c5b0c4f152/1/5aHlGcnOd1ddifB89xjzsMyG7FU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/2cc22c-2d71-46d6-9215-38c5b0c4f152/1/5aHlGcnOd1ddifB89xjzsMyG7FU.mft
rsync://rpki.ripe.net/repository/DEFAULT/5aHlGcnOd1ddifB89xjzsMyG7FU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:5b:38:e7:b9:34:09:51:8c:5a:bc:77:15:dc:e2:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5a1e519c9ce77575d89f07cf718f3b0cc86ec55
Validity
Not Before: Jun 13 05:01:26 2026 GMT
Not After : Jun 14 05:01:26 2026 GMT
Subject: CN=b3c9be3094f30f04c337dd98764448d44d12b1c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:19:3a:98:c1:41:cc:75:4b:43:75:92:c0:45:
82:fd:48:d3:d4:f8:fb:6d:9e:cc:6d:3d:eb:bb:ff:
ba:5c:92:c0:65:a4:fc:19:16:b0:78:9b:1b:7c:53:
18:aa:79:c2:a1:fb:bf:63:03:cf:57:1d:ea:36:fc:
68:98:8e:57:d4:f9:87:08:6a:49:00:e3:62:b3:76:
92:ff:78:3f:88:0c:c2:ba:21:c5:b4:95:e3:28:ba:
d2:83:3b:5b:37:dc:31:e1:0c:f8:70:77:25:f1:be:
b0:d5:71:e0:51:5d:9e:59:4c:e2:bb:eb:84:1b:0e:
3e:f8:d0:64:60:7a:d5:22:51:c7:2e:c3:b5:f5:ea:
1b:ff:b4:a7:7e:18:77:a1:a2:3e:93:3e:64:6a:0e:
f9:41:6c:a7:ae:56:95:87:e8:47:90:30:c7:44:69:
72:89:fb:cb:64:d3:63:0d:0b:90:e6:f8:7c:bb:42:
35:83:9b:3c:b6:ff:a0:9c:79:dd:51:ae:de:b2:cc:
7e:f0:14:b3:3a:95:da:a9:a1:44:b7:6f:9a:84:c6:
1d:e6:34:96:8b:a7:45:ae:dd:17:06:f9:b9:dc:de:
fa:c1:99:cd:a8:41:c5:13:28:e2:ff:b2:1f:76:74:
f1:46:11:01:69:50:0e:d9:4d:34:8e:b7:cc:a2:f5:
92:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:C9:BE:30:94:F3:0F:04:C3:37:DD:98:76:44:48:D4:4D:12:B1:C8
X509v3 Authority Key Identifier:
keyid:E5:A1:E5:19:C9:CE:77:57:5D:89:F0:7C:F7:18:F3:B0:CC:86:EC:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5aHlGcnOd1ddifB89xjzsMyG7FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2cc22c-2d71-46d6-9215-38c5b0c4f152/1/5aHlGcnOd1ddifB89xjzsMyG7FU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2cc22c-2d71-46d6-9215-38c5b0c4f152/1/5aHlGcnOd1ddifB89xjzsMyG7FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:4c:9b:b8:84:74:6e:5f:35:4f:58:4a:1d:12:9c:ad:bc:26:
8a:15:56:ce:60:64:e8:e2:9a:b3:49:53:fc:f8:07:d7:58:b4:
44:33:37:0c:70:85:e7:9e:8b:07:60:bb:27:d8:1e:7e:f9:9d:
31:74:ac:74:76:14:b8:37:e8:a5:11:4f:3c:47:11:68:78:d6:
f5:ea:3e:9d:56:5a:9e:33:29:3b:d9:c6:63:18:c0:e3:77:ff:
c3:29:f2:d4:0d:b4:1b:63:6c:44:5f:f6:2a:f1:26:87:74:a0:
35:4a:c7:f9:08:4d:f1:a0:43:11:32:1c:a4:42:60:dd:2c:ca:
a1:b8:c8:12:a4:ca:2c:43:0d:63:67:b3:0f:07:5b:13:dd:05:
cc:65:62:d7:19:00:32:19:63:0f:1c:05:8e:41:f2:ec:eb:fb:
d7:35:0f:de:a4:06:aa:d2:47:12:04:5f:ce:75:4c:22:f7:74:
04:23:27:38:57:7f:1f:f7:e9:e2:8c:86:bf:25:d8:e6:cf:a5:
c2:a8:d9:05:a2:df:67:65:bb:61:a1:0b:01:f1:36:72:ac:28:
26:64:21:17:3e:aa:17:73:11:db:99:e2:68:bc:94:cd:41:fb:
47:6a:0d:0e:c0:94:d3:b7:c5:ac:3b:4a:a5:a6:c7:36:56:f6:
06:57:28:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6/WzjnuTQJUYxavHcV3OJUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1YTFlNTE5YzljZTc3NTc1ZDg5ZjA3Y2Y3MThmM2IwY2M4
NmVjNTUwHhcNMjYwNjEzMDUwMTI2WhcNMjYwNjE0MDUwMTI2WjAzMTEwLwYDVQQD
EyhiM2M5YmUzMDk0ZjMwZjA0YzMzN2RkOTg3NjQ0NDhkNDRkMTJiMWM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Bk6mMFBzHVLQ3WSwEWC/UjT1Pj7
bZ7MbT3ru/+6XJLAZaT8GRaweJsbfFMYqnnCofu/YwPPVx3qNvxomI5X1PmHCGpJ
AONis3aS/3g/iAzCuiHFtJXjKLrSgztbN9wx4Qz4cHcl8b6w1XHgUV2eWUziu+uE
Gw4++NBkYHrVIlHHLsO19eob/7Snfhh3oaI+kz5kag75QWynrlaVh+hHkDDHRGly
ifvLZNNjDQuQ5vh8u0I1g5s8tv+gnHndUa7essx+8BSzOpXaqaFEt2+ahMYd5jSW
i6dFrt0XBvm53N76wZnNqEHFEyji/7IfdnTxRhEBaVAO2U00jrfMovWS6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLPJvjCU8w8EwzfdmHZESNRNErHIMB8GA1UdIwQY
MBaAFOWh5RnJzndXXYnwfPcY87DMhuxVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWFIbEdjbk9kMWRkaWZCODl4anpzTXlHN0ZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8yY2MyMmMtMmQ3MS00NmQ2LTkyMTUt
MzhjNWIwYzRmMTUyLzEvNWFIbEdjbk9kMWRkaWZCODl4anpzTXlHN0ZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy8yY2MyMmMtMmQ3MS00NmQ2LTkyMTUtMzhjNWIwYzRmMTUy
LzEvNWFIbEdjbk9kMWRkaWZCODl4anpzTXlHN0ZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASEybuIR0
bl81T1hKHRKcrbwmihVWzmBk6OKas0lT/PgH11i0RDM3DHCF556LB2C7J9gefvmd
MXSsdHYUuDfopRFPPEcRaHjW9eo+nVZanjMpO9nGYxjA43f/wyny1A20G2NsRF/2
KvEmh3SgNUrH+QhN8aBDETIcpEJg3SzKobjIEqTKLEMNY2ezDwdbE90FzGVi1xkA
MhljDxwFjkHy7Ov71zUP3qQGqtJHEgRfznVMIvd0BCMnOFd/H/fp4oyGvyXY5s+l
wqjZBaLfZ2W7YaELAfE2cqwoJmQhFz6qF3MR25niaLyUzUH7R2oNDsCU07fFrDtK
pabHNlb2Blcouw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:48:00 2026 by rpki-client