Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/6e457e-366d-440b-af2c-5cadbdcf2215/1/5J2_PERGjlJBHUhhhWvwvceQY-Q.mft
File: 5J2_PERGjlJBHUhhhWvwvceQY-Q.mft (raw, json)
Hash identifier: yhfstBfE9xwnRyxrgOgBjapf69Gutgc7dQOnkhSvV+s=
Subject key identifier: 40:7F:09:B1:D2:E0:F5:53:08:2F:21:14:52:A8:3D:6B:21:D9:FC:26
Authority key identifier: E4:9D:BF:3C:44:46:8E:52:41:1D:48:61:85:6B:F0:BD:C7:90:63:E4
Certificate issuer: /CN=e49dbf3c44468e52411d4861856bf0bdc79063e4
Certificate serial: 01A1287A4FE50A98FEB8FEE6CFB3D0CBAEBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5J2_PERGjlJBHUhhhWvwvceQY-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/6e457e-366d-440b-af2c-5cadbdcf2215/1/5J2_PERGjlJBHUhhhWvwvceQY-Q.mft
Manifest number: 126C
Signing time: Sun 11 Oct 2026 01:01:06 +0000
Manifest this update: Sun 11 Oct 2026 01:01:06 +0000
Manifest next update: Mon 12 Oct 2026 01:01:06 +0000
Files and hashes: 1: 5J2_PERGjlJBHUhhhWvwvceQY-Q.crl (hash: kFqlGE98HIp5yLWP2ZDARi8XiwDphbnNeYT76R3TQp4=)
2: YmHcrnOOhyVRFSzhb5LmKrSYZKs.roa (hash: 5Tv/E4FlLGmCFNLyr1qqDnFaOB6Omm/F5UCvSaKyKeA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/6e457e-366d-440b-af2c-5cadbdcf2215/1/5J2_PERGjlJBHUhhhWvwvceQY-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/6e457e-366d-440b-af2c-5cadbdcf2215/1/5J2_PERGjlJBHUhhhWvwvceQY-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/5J2_PERGjlJBHUhhhWvwvceQY-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 01:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:28:7a:4f:e5:0a:98:fe:b8:fe:e6:cf:b3:d0:cb:ae:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e49dbf3c44468e52411d4861856bf0bdc79063e4
Validity
Not Before: Oct 11 01:01:06 2026 GMT
Not After : Oct 12 01:01:06 2026 GMT
Subject: CN=407f09b1d2e0f553082f211452a83d6b21d9fc26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2d:3e:81:9e:c8:fe:ec:37:65:15:dd:77:c6:
8c:35:b0:e8:56:3c:da:fa:87:ed:e1:56:d5:9e:ea:
c4:e4:3e:30:ad:02:80:52:95:49:9a:9d:6a:7e:05:
00:c3:5e:4b:13:cf:5b:dd:a9:a3:c0:03:84:e2:02:
cf:2b:bd:81:ee:c9:fd:b9:26:e0:67:65:4f:f3:eb:
f6:18:db:5f:8c:eb:8b:d9:f4:ca:46:09:26:e8:e7:
65:13:b9:2b:c3:20:b9:a5:05:3e:4e:af:d8:1a:4a:
4a:3f:f3:81:d9:6f:ad:3b:b3:e9:57:9f:ba:87:61:
0f:a6:29:4a:de:78:5d:ba:21:fd:8e:55:be:a9:d9:
a2:e6:7e:85:9e:4f:78:c1:ef:ae:76:4d:a6:35:9e:
cb:d2:44:c2:cc:6d:32:41:3f:7a:ae:61:31:97:f9:
9a:ad:84:9c:6c:58:85:6a:6a:76:04:89:77:de:83:
72:94:ff:09:d7:41:bc:49:99:3c:64:48:59:16:b5:
6d:f4:47:b7:5b:8e:f7:42:d6:c0:09:f5:4d:b8:a4:
56:74:72:73:61:e1:d4:8f:dc:9b:b6:ab:ce:05:ee:
fe:01:10:dd:c2:01:0b:dd:6a:54:f1:79:ab:e6:ce:
0e:eb:49:fd:6f:1a:e2:05:b2:32:b8:56:90:ad:a3:
83:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:7F:09:B1:D2:E0:F5:53:08:2F:21:14:52:A8:3D:6B:21:D9:FC:26
X509v3 Authority Key Identifier:
keyid:E4:9D:BF:3C:44:46:8E:52:41:1D:48:61:85:6B:F0:BD:C7:90:63:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5J2_PERGjlJBHUhhhWvwvceQY-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/6e457e-366d-440b-af2c-5cadbdcf2215/1/5J2_PERGjlJBHUhhhWvwvceQY-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/6e457e-366d-440b-af2c-5cadbdcf2215/1/5J2_PERGjlJBHUhhhWvwvceQY-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:d7:1a:5d:91:08:cb:e9:34:4c:9f:04:1f:46:d9:b0:ba:5e:
df:40:8c:9e:98:ab:31:71:bb:7c:db:30:10:86:c1:eb:b1:de:
ff:ea:c3:7b:e6:26:0d:cb:83:17:e2:da:26:c2:79:d1:10:0d:
35:64:6b:5b:2e:a5:8d:d7:31:ba:53:42:0f:99:14:05:03:b0:
2f:a8:9b:f2:68:cc:78:03:bb:69:1b:df:4a:07:1d:d5:8d:84:
39:f0:e5:31:26:0c:cb:31:83:8c:21:e8:f9:41:8f:61:81:f9:
88:a8:ae:d6:4d:66:ef:59:28:3f:e3:26:81:aa:dd:d7:ed:40:
66:a0:a0:bb:ed:e7:2d:08:7e:70:9e:6c:53:a4:48:c8:d0:7e:
f4:d4:35:7a:eb:fe:8b:d1:ed:2b:ab:f2:a6:e7:2c:df:80:02:
46:fd:5a:d2:90:88:d3:a2:b6:ae:79:4a:74:75:48:f5:9c:f2:
a9:d9:b5:c1:7b:28:e1:a7:a5:b8:b2:0a:ef:75:a2:dd:37:1a:
19:5d:d8:8e:9e:ae:70:22:24:06:23:27:e2:9c:3a:70:d6:93:
a5:cf:39:ba:00:b6:c5:71:5f:d0:1b:16:22:5a:42:b0:11:d4:
59:20:4e:b8:1a:6f:82:12:98:e0:4d:47:3a:3a:4d:0c:e0:ce:
b2:06:22:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 09:24:06 2026 by rpki-client