Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9f5223-a56c-465b-ac65-fd152a6a0587/1/5ar3bSe6gS4NXOIwXxfFMYjCWAw.mft
File: 5ar3bSe6gS4NXOIwXxfFMYjCWAw.mft (raw, json)
Hash identifier: /TJD0dSWXbL3IbWQBqFbjJ1eUOmBQYm4xBEkhM2VXPI=
Subject key identifier: 0A:FA:BD:13:D6:F3:97:3C:D2:D6:2F:7F:19:F4:57:AB:81:88:95:24
Authority key identifier: E5:AA:F7:6D:27:BA:81:2E:0D:5C:E2:30:5F:17:C5:31:88:C2:58:0C
Certificate issuer: /CN=e5aaf76d27ba812e0d5ce2305f17c53188c2580c
Certificate serial: 019FA93E853EC0CC1F2CC254BC414C41CDB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5ar3bSe6gS4NXOIwXxfFMYjCWAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9f5223-a56c-465b-ac65-fd152a6a0587/1/5ar3bSe6gS4NXOIwXxfFMYjCWAw.mft
Manifest number: 0BE2
Signing time: Tue 28 Jul 2026 15:01:14 +0000
Manifest this update: Tue 28 Jul 2026 15:01:14 +0000
Manifest next update: Wed 29 Jul 2026 15:01:14 +0000
Files and hashes: 1: 5ar3bSe6gS4NXOIwXxfFMYjCWAw.crl (hash: pdGWw9m06uaKUnMlrsXvMLyrXXZbUuX/s7+eD1X2ljQ=)
2: oPgrYeYQdKE5w12V1Qsc5asf-z0.roa (hash: DyrqcRbA6WGivtdHIlCxrVDtSLyegGOpED1YlRSd3w0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9f5223-a56c-465b-ac65-fd152a6a0587/1/5ar3bSe6gS4NXOIwXxfFMYjCWAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/9f5223-a56c-465b-ac65-fd152a6a0587/1/5ar3bSe6gS4NXOIwXxfFMYjCWAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5ar3bSe6gS4NXOIwXxfFMYjCWAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:3e:85:3e:c0:cc:1f:2c:c2:54:bc:41:4c:41:cd:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5aaf76d27ba812e0d5ce2305f17c53188c2580c
Validity
Not Before: Jul 28 15:01:14 2026 GMT
Not After : Jul 29 15:01:14 2026 GMT
Subject: CN=0afabd13d6f3973cd2d62f7f19f457ab81889524
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ee:89:a1:10:7c:e0:8e:37:b0:b3:cf:60:8f:
53:7a:78:1d:71:0e:54:a0:af:ab:e3:c1:38:cf:0f:
6d:1f:c1:7b:db:d1:70:13:22:65:51:4e:73:aa:26:
fb:62:60:e4:73:94:df:ed:01:ea:ed:a0:01:8a:e3:
fe:33:ee:df:a8:c8:32:3f:5f:ee:7f:58:99:25:4d:
55:5e:4a:51:70:ca:2a:90:86:57:d1:0b:49:8c:32:
6f:13:5a:5d:f7:c8:c2:d9:48:11:9c:b7:a1:95:56:
57:64:f7:2d:ca:cb:f9:10:31:6b:84:de:2d:b9:b0:
e3:ef:d8:d6:ba:26:c0:7d:dc:00:50:46:6d:b4:0c:
6f:66:8b:71:b5:f1:bd:c8:ca:31:4a:56:b1:37:3c:
9b:37:c3:d2:fe:6d:46:fa:0b:4b:e1:1e:b9:5a:90:
1c:06:41:73:aa:6d:3d:16:42:22:09:7f:fa:6b:79:
e7:43:29:89:fe:06:c8:4d:52:3c:05:b1:73:8a:ea:
10:da:4e:d3:9b:89:61:70:eb:37:1e:8a:dc:ee:75:
78:28:83:65:76:1b:7c:08:fb:c6:06:85:02:87:7d:
72:9e:3d:94:27:20:59:df:b4:8c:71:12:7e:11:ef:
ff:85:3a:1a:54:ba:7f:31:7a:2f:5c:5a:77:3b:cb:
ad:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:FA:BD:13:D6:F3:97:3C:D2:D6:2F:7F:19:F4:57:AB:81:88:95:24
X509v3 Authority Key Identifier:
keyid:E5:AA:F7:6D:27:BA:81:2E:0D:5C:E2:30:5F:17:C5:31:88:C2:58:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5ar3bSe6gS4NXOIwXxfFMYjCWAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9f5223-a56c-465b-ac65-fd152a6a0587/1/5ar3bSe6gS4NXOIwXxfFMYjCWAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9f5223-a56c-465b-ac65-fd152a6a0587/1/5ar3bSe6gS4NXOIwXxfFMYjCWAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:a8:37:7e:af:f0:20:e6:1c:72:6e:cd:fe:a3:82:05:43:88:
a7:89:6a:23:2a:36:af:e5:e6:12:e6:e3:a3:b9:4e:32:ab:22:
53:77:a7:b6:e5:b7:87:f0:a3:5c:c8:72:b0:50:c2:ef:ac:00:
64:ca:1e:ba:20:76:6e:a2:2c:43:66:e0:04:73:a3:86:35:29:
40:68:0c:3e:e3:1d:b8:17:f4:bb:75:30:07:c6:06:12:8e:c6:
8c:11:cc:00:25:4f:00:7a:38:24:38:23:16:82:73:ee:74:74:
ac:92:8a:9d:89:78:f7:98:f1:59:80:06:58:2e:ba:fa:88:f4:
db:a6:80:5a:91:09:3c:60:84:8c:5a:ec:9c:b2:ed:7d:83:e8:
52:81:9f:55:d2:a7:16:ea:11:13:1a:5c:a4:a2:96:56:49:6a:
47:1d:b5:53:48:ba:66:a0:1c:1e:c8:1f:bc:44:99:4a:aa:ba:
8f:d0:9e:33:4d:43:c8:62:d1:31:75:45:90:9f:2f:ad:62:ca:
08:56:35:e4:3a:c8:8a:86:f5:f6:ed:6d:c5:68:55:ae:b5:22:
4f:df:3b:32:23:cc:e3:2d:f9:75:dc:44:54:61:ff:57:d8:15:
35:fa:78:8a:e5:4f:fc:ec:43:4a:f7:11:c5:5f:53:de:67:3b:
cf:c8:b3:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:17:47 2026 by rpki-client