Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.mft
File: 5aJ1VcGlxd3396zIOfpXeqfuepw.mft (raw, json)
Hash identifier: iZNQnjf5zLomFCih3z/FRZ15iDkXFEl7Aji/KVoPFAg=
Subject key identifier: 33:86:F4:F9:DD:02:82:6C:D7:3E:C9:4C:77:07:57:0F:70:7F:06:BA
Authority key identifier: E5:A2:75:55:C1:A5:C5:DD:F7:F7:AC:C8:39:FA:57:7A:A7:EE:7A:9C
Certificate issuer: /CN=e5a27555c1a5c5ddf7f7acc839fa577aa7ee7a9c
Certificate serial: 019EBF5AE84025B81824C299BFA38AC17C53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5aJ1VcGlxd3396zIOfpXeqfuepw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.mft
Manifest number: 195E
Signing time: Sat 13 Jun 2026 05:01:06 +0000
Manifest this update: Sat 13 Jun 2026 05:01:06 +0000
Manifest next update: Sun 14 Jun 2026 05:01:06 +0000
Files and hashes: 1: 5aJ1VcGlxd3396zIOfpXeqfuepw.crl (hash: v+pNJy90yGC60CDboTyaDn649tYHDyFSj2Z+PCNU0TA=)
2: d5q3dL4EASzGPAAwnOfen6UJAcQ.roa (hash: oReaCreAqHsbklAkWbsJ/hVAQpba2f3VOsepsQ+XqOY=)
3: jQS3BAFCaZyv5m7n_ta1OKPwfLc.roa (hash: 8n/5W0nrqR/v9ZeOf9vjjYt0hTJWq/lXvjj2LJI4kOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5aJ1VcGlxd3396zIOfpXeqfuepw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:5a:e8:40:25:b8:18:24:c2:99:bf:a3:8a:c1:7c:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5a27555c1a5c5ddf7f7acc839fa577aa7ee7a9c
Validity
Not Before: Jun 13 05:01:06 2026 GMT
Not After : Jun 14 05:01:06 2026 GMT
Subject: CN=3386f4f9dd02826cd73ec94c7707570f707f06ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:38:bb:aa:33:0e:30:bc:97:82:8e:5e:0a:c2:
35:55:fd:05:65:81:70:68:d5:36:0b:a3:70:b8:32:
af:77:14:9e:93:08:63:c1:41:5e:dc:a2:f9:84:22:
01:24:d1:5e:66:24:39:8b:1c:31:36:d9:13:d9:d1:
6c:f3:de:db:d4:06:14:4f:86:0f:ab:ac:3c:63:f9:
fe:b2:71:fe:55:fa:7f:22:14:5c:05:28:b7:22:0c:
e0:40:f3:1e:93:78:38:a7:be:ab:67:d8:7d:7d:09:
0d:55:d6:92:41:ee:46:1d:21:39:a9:46:24:65:06:
ee:2a:ca:7d:ce:11:68:6c:41:95:f5:ad:87:55:31:
00:24:9a:20:a3:9d:ac:ba:ed:84:e1:f0:cd:7b:da:
0e:e2:4c:08:f9:7d:00:b6:10:ad:d8:06:f9:37:07:
e6:45:0e:97:7a:50:d8:84:cb:d2:d1:2e:b7:3c:6d:
cf:60:a4:67:f5:26:35:2c:0d:ba:32:38:96:52:da:
63:1f:76:03:e5:87:ca:a5:f9:57:cc:8f:62:cf:f5:
56:17:27:b6:29:1e:9f:fb:d5:83:1f:97:7c:9b:8f:
ba:f6:f4:e7:1a:03:6f:45:c9:de:c7:23:4f:83:e0:
96:89:f2:39:fd:77:48:5d:97:1c:46:80:a1:c5:4b:
b9:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:86:F4:F9:DD:02:82:6C:D7:3E:C9:4C:77:07:57:0F:70:7F:06:BA
X509v3 Authority Key Identifier:
keyid:E5:A2:75:55:C1:A5:C5:DD:F7:F7:AC:C8:39:FA:57:7A:A7:EE:7A:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5aJ1VcGlxd3396zIOfpXeqfuepw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:df:3a:19:25:34:b9:9e:38:13:7b:2f:14:05:33:f0:8c:7a:
fa:50:11:93:56:f5:8e:c2:b0:b3:eb:b6:52:1b:28:c9:03:f1:
35:bf:4d:12:d1:77:3c:26:1c:80:16:86:12:58:c9:5e:7b:8f:
e2:10:60:04:5c:56:6c:e3:19:91:33:64:8e:af:72:ff:a6:99:
cd:78:10:28:f7:0f:ba:0b:4b:42:65:7a:1a:0c:29:1d:2e:0e:
04:b5:cd:33:c2:8b:7e:11:a9:0a:35:c4:ec:bf:4d:24:32:fa:
b9:b6:16:e4:0b:83:f3:46:f7:1c:c8:15:e7:1a:77:eb:9e:27:
e0:7c:52:d9:00:ba:86:65:63:be:26:93:fe:96:65:f6:32:91:
e2:f2:2a:84:47:75:6d:6f:7c:cf:77:e3:80:5b:91:5f:2e:03:
73:24:69:cc:e5:05:d3:c6:64:5f:63:ba:47:51:9d:f0:00:9b:
15:3a:74:ff:49:25:0f:8b:fb:23:10:46:be:bc:16:be:3a:25:
0a:ec:73:ed:62:95:6c:57:39:58:f7:9b:fa:5f:09:9d:98:54:
01:aa:66:9c:b9:5a:69:ed:71:3b:a2:75:2e:e8:84:34:27:d2:
3e:c7:cd:c1:16:b0:33:2a:4d:5b:f2:6c:02:2a:ab:4c:39:4f:
15:93:4b:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6/WuhAJbgYJMKZv6OKwXxTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1YTI3NTU1YzFhNWM1ZGRmN2Y3YWNjODM5ZmE1NzdhYTdl
ZTdhOWMwHhcNMjYwNjEzMDUwMTA2WhcNMjYwNjE0MDUwMTA2WjAzMTEwLwYDVQQD
EygzMzg2ZjRmOWRkMDI4MjZjZDczZWM5NGM3NzA3NTcwZjcwN2YwNmJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzi7qjMOMLyXgo5eCsI1Vf0FZYFw
aNU2C6NwuDKvdxSekwhjwUFe3KL5hCIBJNFeZiQ5ixwxNtkT2dFs897b1AYUT4YP
q6w8Y/n+snH+Vfp/IhRcBSi3IgzgQPMek3g4p76rZ9h9fQkNVdaSQe5GHSE5qUYk
ZQbuKsp9zhFobEGV9a2HVTEAJJogo52suu2E4fDNe9oO4kwI+X0AthCt2Ab5Nwfm
RQ6XelDYhMvS0S63PG3PYKRn9SY1LA26MjiWUtpjH3YD5YfKpflXzI9iz/VWFye2
KR6f+9WDH5d8m4+69vTnGgNvRcnexyNPg+CWifI5/XdIXZccRoChxUu5hwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDOG9PndAoJs1z7JTHcHVw9wfwa6MB8GA1UdIwQY
MBaAFOWidVXBpcXd9/esyDn6V3qn7nqcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWFKMVZjR2x4ZDMzOTZ6SU9mcFhlcWZ1ZXB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8xY2NkOWEtYzMwZS00ZThhLTg5NGEt
ZmQ3MTY2N2EyYjVmLzEvNWFKMVZjR2x4ZDMzOTZ6SU9mcFhlcWZ1ZXB3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC8xY2NkOWEtYzMwZS00ZThhLTg5NGEtZmQ3MTY2N2EyYjVm
LzEvNWFKMVZjR2x4ZDMzOTZ6SU9mcFhlcWZ1ZXB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaN86GSU0
uZ44E3svFAUz8Ix6+lARk1b1jsKws+u2UhsoyQPxNb9NEtF3PCYcgBaGEljJXnuP
4hBgBFxWbOMZkTNkjq9y/6aZzXgQKPcPugtLQmV6GgwpHS4OBLXNM8KLfhGpCjXE
7L9NJDL6ubYW5AuD80b3HMgV5xp3654n4HxS2QC6hmVjviaT/pZl9jKR4vIqhEd1
bW98z3fjgFuRXy4DcyRpzOUF08ZkX2O6R1Gd8ACbFTp0/0klD4v7IxBGvrwWvjol
Cuxz7WKVbFc5WPeb+l8JnZhUAapmnLlaae1xO6J1LuiENCfSPsfNwRawMypNW/Js
AiqrTDlPFZNL0w==
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:18:05 2026 by rpki-client