Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/84/ea77fb-2aa9-4c96-924f-b0da5ddeec59/1/5J2vqVrcGabkVJloGNtWa8rkCKo.mft
File: 5J2vqVrcGabkVJloGNtWa8rkCKo.mft (raw, json)
Hash identifier: xjn9IgSuZA5f+mbhAJw27ciJufRSyfNqdWkbNiKAe4c=
Subject key identifier: 2A:B7:A7:65:F1:29:5C:22:8A:95:A0:68:8E:28:DC:FD:0A:BA:9B:8E
Authority key identifier: E4:9D:AF:A9:5A:DC:19:A6:E4:54:99:68:18:DB:56:6B:CA:E4:08:AA
Certificate issuer: /CN=e49dafa95adc19a6e454996818db566bcae408aa
Certificate serial: 01A17995DB4987983BE34599F9D8EB3DD1C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5J2vqVrcGabkVJloGNtWa8rkCKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/ea77fb-2aa9-4c96-924f-b0da5ddeec59/1/5J2vqVrcGabkVJloGNtWa8rkCKo.mft
Manifest number: 23
Signing time: Mon 26 Oct 2026 19:00:26 +0000
Manifest this update: Mon 26 Oct 2026 19:00:26 +0000
Manifest next update: Tue 27 Oct 2026 19:00:26 +0000
Files and hashes: 1: 5J2vqVrcGabkVJloGNtWa8rkCKo.crl (hash: bB2R/A5ldeNpfIGBNj4PD2rSydfKslaKbPC+9Sc4ylU=)
2: QUCvAXme2ZXJbvhzP50yT5W0KfM.asa (hash: 0LniheyqfGK5IqLBzlBmdzbpX7y8fW+DYFndQ1au4oE=)
3: gm6jLV3IlTLgtamw2RHRA4BkZuc.roa (hash: 6uA9Wzk6HXKBm964Qr081WL2SzCFVRp9bj3MkmKfdKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/ea77fb-2aa9-4c96-924f-b0da5ddeec59/1/5J2vqVrcGabkVJloGNtWa8rkCKo.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/ea77fb-2aa9-4c96-924f-b0da5ddeec59/1/5J2vqVrcGabkVJloGNtWa8rkCKo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5J2vqVrcGabkVJloGNtWa8rkCKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 19:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:79:95:db:49:87:98:3b:e3:45:99:f9:d8:eb:3d:d1:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e49dafa95adc19a6e454996818db566bcae408aa
Validity
Not Before: Oct 26 19:00:26 2026 GMT
Not After : Oct 27 19:00:26 2026 GMT
Subject: CN=2ab7a765f1295c228a95a0688e28dcfd0aba9b8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f4:5b:bf:7d:1c:da:f5:62:5a:4a:0d:b5:ca:
b1:16:9c:7c:04:9a:61:12:a4:f1:87:12:25:59:a9:
82:1b:49:91:59:ac:fa:3f:1b:dd:58:2e:ba:2e:50:
68:1f:42:c8:0e:66:6a:be:b3:a6:09:f4:14:72:13:
a8:f1:97:d7:45:0d:48:a7:f9:3f:d2:e7:34:ae:e2:
03:3c:9f:39:cc:8a:ed:27:9a:ec:0a:bb:88:29:8e:
3f:ac:73:5b:12:ec:46:a6:c3:08:ef:0c:cc:f1:2c:
ba:c4:f4:5d:2e:99:e7:83:b7:ff:45:8b:d7:ec:99:
aa:fa:7d:48:e8:bf:4b:dc:d9:9e:d3:14:46:ad:e8:
71:3f:f5:81:90:6c:39:4c:a1:e0:86:13:d6:1e:03:
f5:39:05:d5:3e:64:b7:d1:5b:6b:e6:a1:20:3a:83:
d9:f9:42:1a:3a:54:6e:5d:b8:36:d7:48:2b:11:58:
fb:65:0a:17:0e:7c:6f:9a:5f:b5:ad:2a:24:1c:4b:
41:67:b5:30:34:4d:d2:94:e1:d0:2b:13:48:86:a9:
cc:60:ec:37:dd:74:11:37:3e:95:8e:ea:73:32:79:
5d:ce:b3:9b:ef:34:e8:af:ef:19:da:90:05:c5:81:
e0:62:54:fc:d0:3b:51:73:58:fb:bd:3d:f2:70:40:
22:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:B7:A7:65:F1:29:5C:22:8A:95:A0:68:8E:28:DC:FD:0A:BA:9B:8E
X509v3 Authority Key Identifier:
keyid:E4:9D:AF:A9:5A:DC:19:A6:E4:54:99:68:18:DB:56:6B:CA:E4:08:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5J2vqVrcGabkVJloGNtWa8rkCKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/ea77fb-2aa9-4c96-924f-b0da5ddeec59/1/5J2vqVrcGabkVJloGNtWa8rkCKo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/ea77fb-2aa9-4c96-924f-b0da5ddeec59/1/5J2vqVrcGabkVJloGNtWa8rkCKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:20:6d:fc:87:bb:7b:1e:2b:ea:41:47:75:24:92:23:c0:17:
d2:b7:b2:25:77:7f:bc:c9:43:51:2d:7f:94:c7:a0:d6:2e:e5:
0f:49:ba:90:99:eb:0f:59:11:e3:f6:ff:85:0e:b5:cc:f9:93:
7d:6f:b1:9a:8c:18:b4:a6:5c:29:2a:80:06:18:77:0b:ed:9f:
ea:fe:35:cd:de:bc:53:32:52:30:e7:00:b1:e6:9b:e6:41:7b:
0b:50:c3:da:c8:41:22:d9:a9:99:36:98:d4:a1:f9:4b:61:c4:
3c:6c:4a:23:b4:bb:33:3e:e9:86:7e:64:7f:34:dd:35:66:e4:
96:9d:25:7d:39:94:05:c8:ed:af:a7:fb:65:e6:5f:5b:1a:30:
d9:d5:e9:6a:30:9e:53:ca:0e:a3:be:b0:56:7e:c5:07:23:b8:
6c:a9:85:7b:4f:fa:39:ea:9c:e1:a6:7f:b2:b2:59:b4:53:bb:
dd:a6:12:56:e5:05:8f:2a:cd:1d:f3:75:72:39:a6:5a:97:bc:
34:94:96:56:75:de:39:7a:70:c2:8f:40:30:7b:e8:0d:17:1c:
37:7a:7a:01:bf:c7:62:2e:4e:85:54:26:58:33:ff:b2:88:56:
b6:6f:29:df:f3:b0:24:54:c8:c7:05:10:90:fc:ea:c0:bd:2a:
8a:5c:f6:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF5ldtJh5g740WZ+djrPdHAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0OWRhZmE5NWFkYzE5YTZlNDU0OTk2ODE4ZGI1NjZiY2Fl
NDA4YWEwHhcNMjYxMDI2MTkwMDI2WhcNMjYxMDI3MTkwMDI2WjAzMTEwLwYDVQQD
EygyYWI3YTc2NWYxMjk1YzIyOGE5NWEwNjg4ZTI4ZGNmZDBhYmE5YjhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvRbv30c2vViWkoNtcqxFpx8BJph
EqTxhxIlWamCG0mRWaz6PxvdWC66LlBoH0LIDmZqvrOmCfQUchOo8ZfXRQ1Ip/k/
0uc0ruIDPJ85zIrtJ5rsCruIKY4/rHNbEuxGpsMI7wzM8Sy6xPRdLpnng7f/RYvX
7Jmq+n1I6L9L3Nme0xRGrehxP/WBkGw5TKHghhPWHgP1OQXVPmS30Vtr5qEgOoPZ
+UIaOlRuXbg210grEVj7ZQoXDnxvml+1rSokHEtBZ7UwNE3SlOHQKxNIhqnMYOw3
3XQRNz6VjupzMnldzrOb7zTor+8Z2pAFxYHgYlT80DtRc1j7vT3ycEAiiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCq3p2XxKVwiipWgaI4o3P0KupuOMB8GA1UdIwQY
MBaAFOSdr6la3Bmm5FSZaBjbVmvK5AiqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUoydnFWcmNHYWJrVkpsb0dOdFdhOHJrQ0tvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9lYTc3ZmItMmFhOS00Yzk2LTkyNGYt
YjBkYTVkZGVlYzU5LzEvNUoydnFWcmNHYWJrVkpsb0dOdFdhOHJrQ0tvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC9lYTc3ZmItMmFhOS00Yzk2LTkyNGYtYjBkYTVkZGVlYzU5
LzEvNUoydnFWcmNHYWJrVkpsb0dOdFdhOHJrQ0tvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMCBt/Ie7
ex4r6kFHdSSSI8AX0reyJXd/vMlDUS1/lMeg1i7lD0m6kJnrD1kR4/b/hQ61zPmT
fW+xmowYtKZcKSqABhh3C+2f6v41zd68UzJSMOcAseab5kF7C1DD2shBItmpmTaY
1KH5S2HEPGxKI7S7Mz7phn5kfzTdNWbklp0lfTmUBcjtr6f7ZeZfWxow2dXpajCe
U8oOo76wVn7FByO4bKmFe0/6Oeqc4aZ/srJZtFO73aYSVuUFjyrNHfN1cjmmWpe8
NJSWVnXeOXpwwo9AMHvoDRccN3p6Ab/HYi5OhVQmWDP/sohWtm8p3/OwJFTIxwUQ
kPzqwL0qilz2Hw==
-----END CERTIFICATE-----
Generated at Tue Oct 27 05:56:45 2026 by rpki-client