Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/6e457e-366d-440b-af2c-5cadbdcf2215/1/5J2_PERGjlJBHUhhhWvwvceQY-Q.mft
File: 5J2_PERGjlJBHUhhhWvwvceQY-Q.mft (raw, json)
Hash identifier: /mkq3cTd9pT+3rG99l/6F7i/x/+jujs9JgKZIGsKNV4=
Subject key identifier: 35:5E:33:32:73:FF:EC:16:C0:B8:90:68:29:68:5A:46:72:47:5F:DA
Authority key identifier: E4:9D:BF:3C:44:46:8E:52:41:1D:48:61:85:6B:F0:BD:C7:90:63:E4
Certificate issuer: /CN=e49dbf3c44468e52411d4861856bf0bdc79063e4
Certificate serial: 019D38655E01C6ECC712AFD39AEDC34F2397
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5J2_PERGjlJBHUhhhWvwvceQY-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/6e457e-366d-440b-af2c-5cadbdcf2215/1/5J2_PERGjlJBHUhhhWvwvceQY-Q.mft
Manifest number: 1062
Signing time: Sun 29 Mar 2026 07:01:00 +0000
Manifest this update: Sun 29 Mar 2026 07:01:00 +0000
Manifest next update: Mon 30 Mar 2026 07:01:00 +0000
Files and hashes: 1: 5J2_PERGjlJBHUhhhWvwvceQY-Q.crl (hash: vLjIMMQ9zCTZdz01aUrBKB2a01sj3gzu52dPHMRvAVo=)
2: YmHcrnOOhyVRFSzhb5LmKrSYZKs.roa (hash: 5Tv/E4FlLGmCFNLyr1qqDnFaOB6Omm/F5UCvSaKyKeA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/6e457e-366d-440b-af2c-5cadbdcf2215/1/5J2_PERGjlJBHUhhhWvwvceQY-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/6e457e-366d-440b-af2c-5cadbdcf2215/1/5J2_PERGjlJBHUhhhWvwvceQY-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/5J2_PERGjlJBHUhhhWvwvceQY-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:5e:01:c6:ec:c7:12:af:d3:9a:ed:c3:4f:23:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e49dbf3c44468e52411d4861856bf0bdc79063e4
Validity
Not Before: Mar 29 07:01:00 2026 GMT
Not After : Mar 30 07:01:00 2026 GMT
Subject: CN=355e333273ffec16c0b8906829685a4672475fda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:e5:53:6d:b3:b5:83:e8:7e:5f:38:46:6a:7b:
64:0a:30:da:fc:9e:4f:ec:e2:3f:9e:26:76:6a:0c:
78:6b:ce:32:13:75:c3:30:78:a8:61:d4:20:b0:21:
29:f0:8f:5d:99:30:3e:c1:2e:19:1a:34:a9:af:c1:
f0:10:31:2c:50:de:62:e5:60:bd:38:1c:b4:51:a1:
c9:a3:70:4b:54:6f:fe:00:c7:ae:4e:b8:13:11:1c:
e5:76:8b:bd:a4:29:4c:9e:70:3f:ab:f9:e0:48:35:
2b:3b:66:40:76:2e:6e:85:2f:98:d5:b8:6d:74:87:
ee:a1:d4:fc:79:5b:6d:bf:af:2a:89:7a:d4:ca:e7:
c5:d3:f6:f7:cd:b7:fa:8f:e4:4d:88:e1:a1:1c:ef:
df:1e:57:c1:57:7c:e1:bb:e2:5a:48:28:40:1e:ac:
29:3a:e7:68:b0:3d:a1:ca:40:54:ef:f0:c4:a1:df:
20:05:00:20:a2:03:98:ec:1b:96:a1:5d:0f:6c:93:
a3:f2:b1:a5:36:d2:c1:b0:6b:c0:5f:67:4b:cb:3a:
8e:7d:f0:64:01:8e:b9:10:75:2d:5e:e8:f5:4f:76:
9d:de:e7:09:94:b4:13:ec:6d:ba:44:44:f9:5d:3a:
8d:79:2d:0a:41:1b:70:9f:25:3d:a0:7f:af:b6:b8:
3d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:5E:33:32:73:FF:EC:16:C0:B8:90:68:29:68:5A:46:72:47:5F:DA
X509v3 Authority Key Identifier:
keyid:E4:9D:BF:3C:44:46:8E:52:41:1D:48:61:85:6B:F0:BD:C7:90:63:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5J2_PERGjlJBHUhhhWvwvceQY-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/6e457e-366d-440b-af2c-5cadbdcf2215/1/5J2_PERGjlJBHUhhhWvwvceQY-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/6e457e-366d-440b-af2c-5cadbdcf2215/1/5J2_PERGjlJBHUhhhWvwvceQY-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:54:bf:4b:e7:c5:e7:71:c9:2e:e8:66:b9:a8:ad:81:87:25:
26:25:c2:cd:7d:00:b3:b3:90:23:64:ce:62:53:9e:b2:ed:86:
c3:59:7f:92:fd:95:d6:c6:6f:aa:c3:d3:29:40:a3:d6:c3:0f:
b3:6e:e6:33:a5:8f:22:3d:6a:5f:9d:0f:90:82:a6:3e:4c:03:
e3:d0:59:51:cd:03:20:37:39:a0:10:03:96:00:94:14:3f:e7:
07:9b:86:24:fc:b5:16:d1:fb:1b:a5:15:7b:53:82:c8:21:6d:
34:58:24:56:71:d0:95:11:fa:36:a9:24:dd:a5:bd:fa:73:06:
37:11:e0:d4:0f:5c:91:9c:ef:47:b0:4a:63:72:86:b6:bb:d9:
90:3e:58:85:eb:5e:f0:76:a7:7f:ed:9e:ba:19:06:e1:53:7b:
59:c4:b9:64:90:f3:b4:d2:cf:24:7c:cd:25:a7:4f:4e:12:9e:
c1:f1:2d:60:8f:08:70:85:3f:d3:d3:51:b5:51:c5:45:82:7a:
da:9c:9d:9e:ca:22:ae:2a:2c:67:e0:01:ad:8a:c7:3e:d5:e2:
ae:16:46:4c:e5:28:2b:0e:f5:3a:14:a4:8d:f1:fb:0c:f1:23:
0e:83:3f:da:2b:b7:42:42:a3:75:3d:43:6b:7c:b6:a5:4f:d9:
50:a6:3e:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:03:56 2026 by rpki-client