Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/2cc22c-2d71-46d6-9215-38c5b0c4f152/1/5aHlGcnOd1ddifB89xjzsMyG7FU.mft
File: 5aHlGcnOd1ddifB89xjzsMyG7FU.mft (raw, json)
Hash identifier: 1elA3A9yThvCIBiwyy45JZrA1NncZR9vZS4eSKSYuoA=
Subject key identifier: CE:5D:80:4D:77:A8:01:EB:EE:B0:E5:59:AA:24:7F:44:5E:E3:1A:C6
Authority key identifier: E5:A1:E5:19:C9:CE:77:57:5D:89:F0:7C:F7:18:F3:B0:CC:86:EC:55
Certificate issuer: /CN=e5a1e519c9ce77575d89f07cf718f3b0cc86ec55
Certificate serial: 01A13E94D025F88A5A5545C4980E3045F651
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5aHlGcnOd1ddifB89xjzsMyG7FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/2cc22c-2d71-46d6-9215-38c5b0c4f152/1/5aHlGcnOd1ddifB89xjzsMyG7FU.mft
Manifest number: 1AA3
Signing time: Thu 15 Oct 2026 08:01:42 +0000
Manifest this update: Thu 15 Oct 2026 08:01:42 +0000
Manifest next update: Fri 16 Oct 2026 08:01:42 +0000
Files and hashes: 1: 5aHlGcnOd1ddifB89xjzsMyG7FU.crl (hash: 6ag+Nbaobh41pRLDR7qZPJJaXL+mefdbDNm0SFlKS6U=)
2: WG7wAcXOQAIG2_4E3zJbWmoA3W0.roa (hash: 7hBSMbb3+udDNajYBSGLEQiPuq6VzstQJyrB9xeEhCg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/2cc22c-2d71-46d6-9215-38c5b0c4f152/1/5aHlGcnOd1ddifB89xjzsMyG7FU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/2cc22c-2d71-46d6-9215-38c5b0c4f152/1/5aHlGcnOd1ddifB89xjzsMyG7FU.mft
rsync://rpki.ripe.net/repository/DEFAULT/5aHlGcnOd1ddifB89xjzsMyG7FU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:94:d0:25:f8:8a:5a:55:45:c4:98:0e:30:45:f6:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5a1e519c9ce77575d89f07cf718f3b0cc86ec55
Validity
Not Before: Oct 15 08:01:42 2026 GMT
Not After : Oct 16 08:01:42 2026 GMT
Subject: CN=ce5d804d77a801ebeeb0e559aa247f445ee31ac6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:3a:ec:3f:af:70:8d:17:a6:bf:da:52:47:0e:
2a:22:fe:81:7e:89:32:f8:6e:a1:2e:72:7d:95:88:
71:f3:d6:69:50:34:1e:02:ac:db:a8:bd:33:56:4e:
82:d3:83:bb:49:7b:68:f0:31:cc:2f:5b:46:45:4b:
f5:e5:06:8a:a8:f6:a6:f8:ca:c7:a8:bd:e3:32:e0:
44:70:7c:dd:4d:2f:f7:a8:3f:de:d1:41:13:81:13:
94:f7:ca:63:1f:ea:d6:13:94:28:f9:2e:9e:6b:d0:
7e:4d:b0:52:30:4b:e2:14:ae:b0:6b:20:df:22:8f:
82:63:da:c6:89:96:53:6d:ee:fc:bc:e4:4c:6e:8f:
36:26:7b:26:ca:7d:96:66:26:d6:2f:cd:8e:8f:9a:
40:62:e3:19:1b:09:99:db:f9:a4:12:c5:d6:d8:5d:
4b:83:4a:eb:3c:92:c4:03:87:f0:36:0c:3f:03:a2:
31:a0:a8:bd:57:61:e5:29:63:44:d1:a6:1a:0d:6d:
01:62:28:1e:8f:14:2d:f1:06:3d:81:ad:0e:d7:c5:
66:49:f1:61:2f:8c:7a:e2:83:a6:b4:9f:e8:9e:59:
02:69:8e:52:ab:5d:a5:07:95:a4:eb:f2:43:9c:96:
75:31:69:36:68:e3:b5:09:40:4c:35:f2:42:45:84:
6b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:5D:80:4D:77:A8:01:EB:EE:B0:E5:59:AA:24:7F:44:5E:E3:1A:C6
X509v3 Authority Key Identifier:
keyid:E5:A1:E5:19:C9:CE:77:57:5D:89:F0:7C:F7:18:F3:B0:CC:86:EC:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5aHlGcnOd1ddifB89xjzsMyG7FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2cc22c-2d71-46d6-9215-38c5b0c4f152/1/5aHlGcnOd1ddifB89xjzsMyG7FU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2cc22c-2d71-46d6-9215-38c5b0c4f152/1/5aHlGcnOd1ddifB89xjzsMyG7FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:ea:08:8f:37:5f:cb:ca:18:ea:84:2d:b4:5e:b3:f4:9d:ed:
92:21:57:22:a6:21:75:88:ec:1e:14:6b:b1:e0:08:5c:9f:b4:
e2:14:b8:97:aa:ad:ff:e8:e5:3c:28:0c:5f:24:cb:8f:eb:08:
80:c1:d9:7a:17:c2:22:31:85:4f:39:cd:46:67:70:88:42:b0:
45:4a:94:d7:1e:6e:59:b1:a2:35:90:7f:54:48:26:85:c8:2d:
aa:c9:fb:68:0f:2c:1d:d4:eb:64:0d:da:a5:76:0a:e1:aa:93:
48:e7:8e:e7:9c:09:98:de:38:4c:49:64:57:76:51:a4:c0:85:
cc:27:3b:d9:ea:28:61:fb:7b:b1:3e:8e:a2:4a:c7:20:df:12:
98:ab:67:c8:52:2e:3e:97:9f:e5:e1:0c:b7:41:98:58:de:07:
fd:2e:8d:35:71:75:d8:bd:4f:68:6b:44:61:a6:b7:2c:0b:ef:
0b:e9:05:fb:e9:23:9d:5f:05:b3:50:0f:c4:39:76:89:18:9b:
b5:17:d4:2f:48:00:b1:46:1b:28:f7:ac:75:c8:a8:90:12:bb:
88:1b:88:89:a7:53:42:47:6f:67:c5:c2:d2:24:b5:fe:a5:8a:
8e:fc:b4:51:26:28:13:5a:c9:02:97:f6:c6:f9:8e:de:38:f7:
4c:d6:9a:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:21:03 2026 by rpki-client