Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ac/387720-5784-4e03-813c-13b290750fb9/1/peC5TwtOTIRu-c8nzciBEIdrHPM.mft
File: peC5TwtOTIRu-c8nzciBEIdrHPM.mft (raw, json)
Hash identifier: D7HqF/rDENsZeWq0ctHhodrbDN7XWkGwWtwBv3W+to8=
Subject key identifier: 5A:AF:12:57:6D:F8:D5:B9:55:34:21:B2:72:EF:72:9B:E0:30:9F:E2
Authority key identifier: A5:E0:B9:4F:0B:4E:4C:84:6E:F9:CF:27:CD:C8:81:10:87:6B:1C:F3
Certificate issuer: /CN=a5e0b94f0b4e4c846ef9cf27cdc88110876b1cf3
Certificate serial: 01A08AFA57FEB50F9FFC3F61E3FC43BA6B46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/peC5TwtOTIRu-c8nzciBEIdrHPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/387720-5784-4e03-813c-13b290750fb9/1/peC5TwtOTIRu-c8nzciBEIdrHPM.mft
Manifest number: 1A4A
Signing time: Thu 10 Sep 2026 11:00:57 +0000
Manifest this update: Thu 10 Sep 2026 11:00:57 +0000
Manifest next update: Fri 11 Sep 2026 11:00:57 +0000
Files and hashes: 1: pbzEOsOOyDKksxCPhBhG-xag72U.roa (hash: iF4hi9XQEfO4uOx6Je7Sgz4Viq0kEg/cT2o7PAWCJTI=)
2: peC5TwtOTIRu-c8nzciBEIdrHPM.crl (hash: JHzlA/bYWwOxXiw0y+C5NYVAS50Vq6bNE4lVbyfp3BA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/387720-5784-4e03-813c-13b290750fb9/1/peC5TwtOTIRu-c8nzciBEIdrHPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/387720-5784-4e03-813c-13b290750fb9/1/peC5TwtOTIRu-c8nzciBEIdrHPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/peC5TwtOTIRu-c8nzciBEIdrHPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 11:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:fa:57:fe:b5:0f:9f:fc:3f:61:e3:fc:43:ba:6b:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5e0b94f0b4e4c846ef9cf27cdc88110876b1cf3
Validity
Not Before: Sep 10 11:00:57 2026 GMT
Not After : Sep 11 11:00:57 2026 GMT
Subject: CN=5aaf12576df8d5b9553421b272ef729be0309fe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:d3:73:f6:ed:9c:0f:1f:bc:d9:20:1d:ad:97:
da:88:bc:71:80:fb:ce:f0:b3:28:8a:5f:b8:f8:d4:
3c:fc:5d:67:83:08:7b:10:21:3f:df:8f:8d:46:c5:
fd:44:33:8c:55:15:66:7b:5e:70:90:48:7e:74:b5:
5d:28:b5:22:0b:7e:a4:9d:f1:d0:6e:7e:7b:bf:e0:
98:d2:71:17:65:ff:7b:03:b2:48:ff:f2:af:18:0b:
a9:52:19:b2:27:f8:8b:ea:0b:7b:d3:4e:cd:fa:bf:
cd:7b:71:3a:39:db:3a:9e:43:3f:b2:d7:b3:1b:e1:
36:de:f2:a9:93:fe:b1:8f:00:59:92:f5:ad:12:da:
fc:ab:77:0a:b6:a1:fc:2d:5a:c1:15:b8:c1:ea:d5:
97:47:32:45:a2:6c:1c:2d:0f:3e:3d:ec:58:1e:b2:
ec:2d:08:3d:d3:c4:31:9e:00:9e:db:a5:f4:8f:42:
f8:d3:da:92:a2:93:0a:e4:60:cc:56:45:9c:2a:e5:
b4:0b:eb:ef:3f:91:69:4d:05:fb:b2:83:32:b4:15:
e8:b4:86:a1:f5:9c:37:04:fe:84:3e:c4:6d:ae:24:
25:8b:bf:f7:6b:69:28:38:60:16:60:bf:60:e7:45:
83:c0:ac:75:77:1c:f0:8f:ff:3a:60:2d:a4:f6:08:
06:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:AF:12:57:6D:F8:D5:B9:55:34:21:B2:72:EF:72:9B:E0:30:9F:E2
X509v3 Authority Key Identifier:
keyid:A5:E0:B9:4F:0B:4E:4C:84:6E:F9:CF:27:CD:C8:81:10:87:6B:1C:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/peC5TwtOTIRu-c8nzciBEIdrHPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/387720-5784-4e03-813c-13b290750fb9/1/peC5TwtOTIRu-c8nzciBEIdrHPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/387720-5784-4e03-813c-13b290750fb9/1/peC5TwtOTIRu-c8nzciBEIdrHPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:fa:f8:64:fe:62:6d:91:50:f3:ca:85:1c:44:71:76:34:35:
f3:b2:12:cb:62:23:87:4f:0b:9c:2c:30:f1:25:9a:ed:d9:9f:
5c:69:fd:fd:7c:31:11:af:9f:e2:fe:b5:8b:1d:2b:30:c4:84:
30:3c:6e:41:f7:6b:04:cb:77:74:25:8f:bf:b3:c4:e4:9c:3a:
a8:1e:46:7e:73:85:82:22:14:a7:08:09:70:f8:ac:b7:92:05:
97:5e:f4:28:a1:8d:19:d1:38:2c:15:10:07:e1:f3:c5:69:ed:
af:ea:f9:05:3e:88:10:76:3e:0a:2b:36:b7:61:1b:66:78:dc:
e4:3f:51:c7:4e:1d:75:ad:47:4e:c3:88:7c:54:e2:ae:be:8e:
5d:ac:84:fb:bd:20:77:6d:e6:09:79:4f:d4:dc:d4:4c:cc:b9:
3b:2e:5b:a5:9a:48:0b:46:55:7d:cb:88:5b:9c:8a:e5:09:34:
9c:d5:6f:e5:4d:fd:97:3d:a2:b0:d6:9b:c2:6a:f0:31:30:ac:
e3:86:04:f3:86:ec:a9:ea:2e:db:fd:e0:92:66:17:a7:3e:6e:
bd:f2:1e:44:fc:23:81:91:aa:47:31:b9:92:3d:b4:6e:c7:58:
e6:9c:eb:58:75:3d:63:4f:05:e0:35:e9:ef:3d:42:33:06:b1:
2e:c2:36:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:14:01 2026 by rpki-client