Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/6e457e-366d-440b-af2c-5cadbdcf2215/1/5J2_PERGjlJBHUhhhWvwvceQY-Q.mft
File: 5J2_PERGjlJBHUhhhWvwvceQY-Q.mft (raw, json)
Hash identifier: NsOBrphT0TyYI4N+iLc/47cgJL9jDcMFJN3k+hGAE3A=
Subject key identifier: 38:0D:C6:66:AC:B6:92:6B:B5:16:D5:3D:4B:0F:30:0E:40:3E:FA:95
Authority key identifier: E4:9D:BF:3C:44:46:8E:52:41:1D:48:61:85:6B:F0:BD:C7:90:63:E4
Certificate issuer: /CN=e49dbf3c44468e52411d4861856bf0bdc79063e4
Certificate serial: 01A12A68B10C35529C5B599D0EC1FF5749C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5J2_PERGjlJBHUhhhWvwvceQY-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/6e457e-366d-440b-af2c-5cadbdcf2215/1/5J2_PERGjlJBHUhhhWvwvceQY-Q.mft
Manifest number: 126D
Signing time: Sun 11 Oct 2026 10:01:06 +0000
Manifest this update: Sun 11 Oct 2026 10:01:06 +0000
Manifest next update: Mon 12 Oct 2026 10:01:06 +0000
Files and hashes: 1: 5J2_PERGjlJBHUhhhWvwvceQY-Q.crl (hash: Z0ooR55kfEkaFUl/nzhEE72jieDtvU8QwlOjhYiULR4=)
2: YmHcrnOOhyVRFSzhb5LmKrSYZKs.roa (hash: 5Tv/E4FlLGmCFNLyr1qqDnFaOB6Omm/F5UCvSaKyKeA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/6e457e-366d-440b-af2c-5cadbdcf2215/1/5J2_PERGjlJBHUhhhWvwvceQY-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/6e457e-366d-440b-af2c-5cadbdcf2215/1/5J2_PERGjlJBHUhhhWvwvceQY-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/5J2_PERGjlJBHUhhhWvwvceQY-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 10:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2a:68:b1:0c:35:52:9c:5b:59:9d:0e:c1:ff:57:49:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e49dbf3c44468e52411d4861856bf0bdc79063e4
Validity
Not Before: Oct 11 10:01:06 2026 GMT
Not After : Oct 12 10:01:06 2026 GMT
Subject: CN=380dc666acb6926bb516d53d4b0f300e403efa95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:14:d2:96:fb:c8:21:f3:c4:c8:74:0e:c9:d8:
bc:60:91:20:69:a8:45:a2:d2:2c:f3:99:5a:ee:02:
c4:0d:b2:f2:9c:7c:b0:35:d7:7a:33:77:40:4c:f8:
86:0e:f6:f4:c0:b1:6b:e0:32:5e:7c:69:5a:b6:01:
ad:52:5c:e7:73:ba:0d:a0:7c:ea:a5:e5:00:ee:ea:
96:0a:53:ac:f9:a3:e9:6c:93:15:63:c7:b0:6f:de:
dc:04:e4:81:f4:81:22:07:f7:31:15:17:ce:c0:35:
60:3f:f3:18:f6:a9:60:a2:4b:c7:cb:3d:39:a7:2b:
6f:18:2f:04:57:be:e1:c2:b6:12:2e:4a:70:99:82:
01:2f:51:f0:af:ac:ac:94:5c:de:cb:a8:42:14:38:
66:7e:88:9c:c2:8e:0d:f8:89:e6:32:47:ec:e0:fa:
77:cd:b3:62:81:3f:64:d9:88:fb:04:13:6d:50:0d:
49:f9:c4:0c:b5:70:f6:65:a7:62:43:ac:34:1b:62:
aa:87:c8:9d:d1:b1:33:61:68:bf:a9:27:e6:81:9e:
07:a1:71:93:0b:bd:68:33:ff:b8:5b:a1:44:33:6c:
3c:b2:0c:25:ca:69:0c:fc:68:a2:35:91:78:d8:4d:
28:a9:f4:3e:0b:fe:91:19:56:4a:54:e1:e4:05:18:
a6:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:0D:C6:66:AC:B6:92:6B:B5:16:D5:3D:4B:0F:30:0E:40:3E:FA:95
X509v3 Authority Key Identifier:
keyid:E4:9D:BF:3C:44:46:8E:52:41:1D:48:61:85:6B:F0:BD:C7:90:63:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5J2_PERGjlJBHUhhhWvwvceQY-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/6e457e-366d-440b-af2c-5cadbdcf2215/1/5J2_PERGjlJBHUhhhWvwvceQY-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/6e457e-366d-440b-af2c-5cadbdcf2215/1/5J2_PERGjlJBHUhhhWvwvceQY-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:01:1d:a3:32:c2:98:79:a8:99:7b:08:6a:39:e7:8c:19:51:
40:ca:73:02:2a:16:91:44:0d:95:93:36:9d:26:c3:c7:f0:24:
dc:3d:1d:fe:a3:1b:40:f9:f1:d5:7d:ec:15:94:f1:2c:4b:ef:
ad:a4:ca:97:37:db:38:a4:71:c6:a8:62:4d:e3:a2:40:33:2e:
0a:ba:81:b3:bb:7a:f4:a2:23:0a:e5:1d:7b:23:8c:d6:19:27:
92:be:32:6a:fc:b1:d5:11:e4:f0:ea:65:f5:fe:86:ca:d2:b3:
57:94:75:dd:b1:1b:ba:1c:6e:07:65:1a:6d:65:a7:f6:14:97:
99:1b:39:b5:76:ab:ac:f9:af:60:09:2a:06:c8:99:e0:29:0d:
a8:a5:5e:f1:8e:6d:4c:59:48:51:b2:da:c1:13:5f:f5:6c:44:
9a:8c:60:50:c7:58:96:84:66:19:2d:70:75:d2:89:bc:a4:6f:
da:ac:3d:71:84:2d:05:31:c4:ff:4d:b7:69:c6:74:e3:18:4b:
c1:b5:ed:12:2d:00:d3:bd:d3:0b:81:a2:b1:89:14:34:a5:70:
45:16:71:6f:e2:13:aa:6a:84:6d:85:43:71:4e:58:86:df:a5:
9a:95:e6:ab:7e:87:17:3f:83:17:ce:39:e0:e5:62:49:a0:09:
c0:9c:04:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEqaLEMNVKcW1mdDsH/V0nGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0OWRiZjNjNDQ0NjhlNTI0MTFkNDg2MTg1NmJmMGJkYzc5
MDYzZTQwHhcNMjYxMDExMTAwMTA2WhcNMjYxMDEyMTAwMTA2WjAzMTEwLwYDVQQD
EygzODBkYzY2NmFjYjY5MjZiYjUxNmQ1M2Q0YjBmMzAwZTQwM2VmYTk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1BTSlvvIIfPEyHQOydi8YJEgaahF
otIs85la7gLEDbLynHywNdd6M3dATPiGDvb0wLFr4DJefGlatgGtUlznc7oNoHzq
peUA7uqWClOs+aPpbJMVY8ewb97cBOSB9IEiB/cxFRfOwDVgP/MY9qlgokvHyz05
pytvGC8EV77hwrYSLkpwmYIBL1Hwr6yslFzey6hCFDhmfoicwo4N+InmMkfs4Pp3
zbNigT9k2Yj7BBNtUA1J+cQMtXD2ZadiQ6w0G2Kqh8id0bEzYWi/qSfmgZ4HoXGT
C71oM/+4W6FEM2w8sgwlymkM/GiiNZF42E0oqfQ+C/6RGVZKVOHkBRimvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDgNxmastpJrtRbVPUsPMA5APvqVMB8GA1UdIwQY
MBaAFOSdvzxERo5SQR1IYYVr8L3HkGPkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUoyX1BFUkdqbEpCSFVoaGhXdnd2Y2VRWS1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS82ZTQ1N2UtMzY2ZC00NDBiLWFmMmMt
NWNhZGJkY2YyMjE1LzEvNUoyX1BFUkdqbEpCSFVoaGhXdnd2Y2VRWS1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS82ZTQ1N2UtMzY2ZC00NDBiLWFmMmMtNWNhZGJkY2YyMjE1
LzEvNUoyX1BFUkdqbEpCSFVoaGhXdnd2Y2VRWS1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUgEdozLC
mHmomXsIajnnjBlRQMpzAioWkUQNlZM2nSbDx/Ak3D0d/qMbQPnx1X3sFZTxLEvv
raTKlzfbOKRxxqhiTeOiQDMuCrqBs7t69KIjCuUdeyOM1hknkr4yavyx1RHk8Opl
9f6GytKzV5R13bEbuhxuB2UabWWn9hSXmRs5tXarrPmvYAkqBsiZ4CkNqKVe8Y5t
TFlIUbLawRNf9WxEmoxgUMdYloRmGS1wddKJvKRv2qw9cYQtBTHE/023acZ04xhL
wbXtEi0A073TC4GisYkUNKVwRRZxb+ITqmqEbYVDcU5Yht+lmpXmq36HFz+DF845
4OViSaAJwJwESw==
-----END CERTIFICATE-----
Generated at Sun Oct 11 17:09:52 2026 by rpki-client