Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.mft
File: 5aJ1VcGlxd3396zIOfpXeqfuepw.mft (raw, json)
Hash identifier: 71cBm3CUUjr0DvH73EgriZFttDi86PSlzwtOOXeesvE=
Subject key identifier: E0:49:1F:F1:0D:38:67:C0:25:3D:B8:81:B9:97:18:75:82:DA:5A:2C
Authority key identifier: E5:A2:75:55:C1:A5:C5:DD:F7:F7:AC:C8:39:FA:57:7A:A7:EE:7A:9C
Certificate issuer: /CN=e5a27555c1a5c5ddf7f7acc839fa577aa7ee7a9c
Certificate serial: 01A0C2FBA13D283C410A151019618CDE7A06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5aJ1VcGlxd3396zIOfpXeqfuepw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.mft
Manifest number: 1A69
Signing time: Mon 21 Sep 2026 08:01:05 +0000
Manifest this update: Mon 21 Sep 2026 08:01:05 +0000
Manifest next update: Tue 22 Sep 2026 08:01:05 +0000
Files and hashes: 1: 5aJ1VcGlxd3396zIOfpXeqfuepw.crl (hash: N4hLmCo8whq+RgHIE/q/gePgaOxxdZLw+X3CXvZyQ+Q=)
2: d5q3dL4EASzGPAAwnOfen6UJAcQ.roa (hash: oReaCreAqHsbklAkWbsJ/hVAQpba2f3VOsepsQ+XqOY=)
3: jQS3BAFCaZyv5m7n_ta1OKPwfLc.roa (hash: 8n/5W0nrqR/v9ZeOf9vjjYt0hTJWq/lXvjj2LJI4kOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5aJ1VcGlxd3396zIOfpXeqfuepw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:fb:a1:3d:28:3c:41:0a:15:10:19:61:8c:de:7a:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5a27555c1a5c5ddf7f7acc839fa577aa7ee7a9c
Validity
Not Before: Sep 21 08:01:05 2026 GMT
Not After : Sep 22 08:01:05 2026 GMT
Subject: CN=e0491ff10d3867c0253db881b997187582da5a2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b9:a4:15:bb:f9:8b:32:00:61:68:8c:ac:2d:
a2:41:d1:a0:50:18:c9:68:85:6f:f6:60:97:3d:0e:
5a:0f:3d:c8:f1:92:7c:d6:90:6f:28:18:de:10:01:
03:9e:ad:2e:bc:22:78:5f:e1:72:bc:b0:b3:9a:b7:
00:d0:f1:b3:44:14:2a:09:b7:f0:71:5f:fb:6e:9c:
49:06:a2:ab:aa:55:de:91:ed:f7:49:9e:79:73:b3:
0d:96:46:76:99:1f:bd:5a:c8:8a:be:81:d0:ec:5f:
ea:86:ac:f8:d8:21:c9:52:bd:91:48:33:1d:90:8a:
85:c5:e2:cf:23:fc:08:5d:82:a2:f0:ab:68:1c:da:
0b:7a:1e:aa:02:e0:cc:80:7b:60:cc:16:5a:ba:7c:
14:fb:f6:4d:fc:34:85:75:4f:f4:5a:54:df:a9:5e:
7a:97:a9:82:fd:10:57:d1:b7:a2:f7:dc:8f:59:8f:
9b:f5:ec:1d:b3:0b:d2:c5:49:9f:e6:54:92:8c:10:
3f:2b:06:98:b9:45:2d:54:ae:d3:5f:f0:78:1f:14:
d0:9c:03:16:d9:5e:f6:94:d5:b8:96:41:35:9c:1c:
da:d9:fe:ef:6d:ba:d0:22:d2:71:57:c9:e4:40:fe:
7a:91:1a:57:bf:92:b3:90:c7:05:99:91:e1:8e:de:
ef:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:49:1F:F1:0D:38:67:C0:25:3D:B8:81:B9:97:18:75:82:DA:5A:2C
X509v3 Authority Key Identifier:
keyid:E5:A2:75:55:C1:A5:C5:DD:F7:F7:AC:C8:39:FA:57:7A:A7:EE:7A:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5aJ1VcGlxd3396zIOfpXeqfuepw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:ea:c8:01:a5:63:45:5d:cd:39:ab:3a:02:cf:55:2c:81:74:
b7:97:c1:39:49:0b:b8:fd:d0:50:3b:87:14:18:24:38:99:f8:
63:64:43:ef:15:c3:1b:5c:35:cd:68:95:bf:7d:00:b5:f2:1d:
89:46:93:c4:0d:31:75:94:61:c2:71:e4:a3:4b:31:ab:ef:06:
9f:13:33:fd:00:72:01:7d:4c:3f:98:ba:51:2c:ff:11:20:68:
64:02:84:96:68:7a:dd:d2:ea:e0:75:4c:84:0c:ff:b0:77:4a:
27:ff:68:6c:91:c2:ad:12:d1:c1:7a:d4:8f:ef:61:60:23:96:
c1:2f:93:14:60:36:86:8e:a4:55:c8:b8:bf:f9:e3:56:38:d3:
8a:31:49:85:ea:50:39:58:5b:11:0a:b3:1d:2a:4c:3c:c6:9b:
9b:ac:cc:de:f2:d5:f3:a0:80:3e:fb:a7:b2:c8:5e:c4:89:04:
f0:d7:f6:3b:8d:a9:c7:b6:de:e2:aa:c7:54:d0:d6:88:43:ad:
61:12:7a:36:f4:e1:76:dd:58:ad:0f:8c:b3:d6:67:92:bf:88:
fc:d1:b4:f4:be:39:db:2b:67:48:35:ff:8e:15:cf:d3:cd:49:
6d:04:b3:64:f9:72:e5:2c:ac:ad:76:d9:ec:e3:fa:26:c8:fe:
d8:c8:aa:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:36:05 2026 by rpki-client