Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.mft
File: 5aJ1VcGlxd3396zIOfpXeqfuepw.mft (raw, json)
Hash identifier: lxg9ybwGkfMASdwL41+GFy/4/WS64qo1M0l64lse4Uk=
Subject key identifier: 9F:AC:56:94:06:BD:33:CB:9A:BB:D7:3C:9D:99:DB:EA:B7:6F:44:CE
Authority key identifier: E5:A2:75:55:C1:A5:C5:DD:F7:F7:AC:C8:39:FA:57:7A:A7:EE:7A:9C
Certificate issuer: /CN=e5a27555c1a5c5ddf7f7acc839fa577aa7ee7a9c
Certificate serial: 019CAA58EFE278A16B32E0104E3B6DDC8ACE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5aJ1VcGlxd3396zIOfpXeqfuepw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.mft
Manifest number: 184A
Signing time: Sun 01 Mar 2026 17:01:21 +0000
Manifest this update: Sun 01 Mar 2026 17:01:21 +0000
Manifest next update: Mon 02 Mar 2026 17:01:21 +0000
Files and hashes: 1: 5aJ1VcGlxd3396zIOfpXeqfuepw.crl (hash: 4u38C7VqbKcvh3dTaRSJZIJ3olOozFCw9Y7P6Y/3R2s=)
2: d5q3dL4EASzGPAAwnOfen6UJAcQ.roa (hash: oReaCreAqHsbklAkWbsJ/hVAQpba2f3VOsepsQ+XqOY=)
3: jQS3BAFCaZyv5m7n_ta1OKPwfLc.roa (hash: 8n/5W0nrqR/v9ZeOf9vjjYt0hTJWq/lXvjj2LJI4kOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5aJ1VcGlxd3396zIOfpXeqfuepw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:ef:e2:78:a1:6b:32:e0:10:4e:3b:6d:dc:8a:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5a27555c1a5c5ddf7f7acc839fa577aa7ee7a9c
Validity
Not Before: Mar 1 17:01:21 2026 GMT
Not After : Mar 2 17:01:21 2026 GMT
Subject: CN=9fac569406bd33cb9abbd73c9d99dbeab76f44ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a5:61:2c:ad:b9:d6:95:8c:83:cf:d1:64:88:
fa:7f:34:4c:f9:3f:3f:8c:f9:9b:c6:7b:9d:72:5e:
36:ab:d7:6b:b5:18:72:0a:62:7f:be:7e:f7:d1:5a:
25:dd:da:aa:de:39:8d:86:5c:0c:f7:1a:12:8d:56:
6b:d9:30:da:ee:52:e6:37:1f:0a:90:2c:14:bd:4c:
51:42:32:e8:87:d3:4d:b1:22:c7:7a:06:13:02:07:
1e:cb:12:2d:68:e5:e9:ea:08:55:12:15:f1:14:4c:
19:6f:c3:80:52:68:35:75:7f:61:57:59:e7:02:f4:
fd:2b:0e:5a:d5:05:12:c9:20:fa:e7:6e:27:dc:bc:
34:40:dd:a9:75:54:f5:6f:32:d8:f3:48:ad:d6:9c:
53:77:34:71:05:75:c7:5d:73:38:a2:b7:a2:c5:eb:
cf:aa:6b:15:6b:63:d9:f6:b4:ae:d4:2b:e2:47:72:
46:69:8b:8e:4d:27:09:2b:41:97:ea:94:93:4a:6f:
a7:c3:03:d2:d1:6f:1b:fa:7e:82:cb:8d:f5:30:39:
8a:62:15:77:9d:56:74:b3:90:4a:86:98:f7:35:f6:
c9:88:03:84:0e:95:f5:1d:ce:ca:40:31:24:b3:1a:
8a:15:85:07:50:be:11:6e:b1:4c:82:b7:43:71:f1:
bf:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:AC:56:94:06:BD:33:CB:9A:BB:D7:3C:9D:99:DB:EA:B7:6F:44:CE
X509v3 Authority Key Identifier:
keyid:E5:A2:75:55:C1:A5:C5:DD:F7:F7:AC:C8:39:FA:57:7A:A7:EE:7A:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5aJ1VcGlxd3396zIOfpXeqfuepw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:d5:0c:64:07:aa:1c:46:6a:b3:eb:07:51:ea:ba:bb:49:ec:
a0:5b:41:5c:6b:7c:a1:e9:f4:8e:5c:d6:ac:2b:f7:e5:1f:f8:
25:3d:c8:b2:3b:fd:09:11:cb:bf:84:6e:af:8e:e1:a9:90:3b:
ad:62:e8:c2:c1:f9:4d:32:20:14:b5:31:1c:f5:6d:69:eb:a4:
be:eb:ad:d9:92:0a:fc:8a:fb:64:50:31:c1:9c:03:ea:06:b7:
b7:56:1c:aa:3c:d8:7f:2d:bd:f5:a8:a7:7e:c3:0b:3a:d6:7f:
18:f2:b8:34:68:02:94:67:b2:c1:a7:fa:f5:fd:76:94:25:4c:
61:cc:0a:99:4f:ee:ea:83:a7:44:5e:e6:2d:ef:19:11:ef:b4:
5a:e5:8d:41:b8:dc:f8:14:56:5d:f8:c2:8f:1e:11:c0:99:b0:
11:6b:ef:b5:d1:52:60:fa:32:3c:e5:64:3e:f0:bd:63:98:77:
8b:1c:d3:87:cc:aa:b4:e0:d1:a8:fe:7e:1b:cc:ba:c0:20:de:
4c:a8:56:b0:25:d9:c9:2f:d3:62:e3:85:fa:2b:9d:76:56:5a:
30:af:ee:f9:61:c1:9b:61:8f:4a:f6:e2:18:9b:82:e2:51:bb:
95:85:fe:5d:d4:fc:50:7d:07:94:c7:07:14:8e:ec:8c:37:69:
4c:41:78:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:54:46 2026 by rpki-client