Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.mft
File: 5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.mft (raw, json)
Hash identifier: 2+3ZojzZKWbBVqTibTfYSN/si7l8NR/zK6VnbOzB/LY=
Subject key identifier: CD:46:28:0E:D3:C6:9E:72:B9:AA:A3:DB:65:20:D3:2A:B6:58:1C:19
Authority key identifier: E5:A6:79:4B:91:B8:14:06:41:2A:13:78:70:BF:DE:3B:17:0D:E0:94
Certificate issuer: /CN=e5a6794b91b81406412a137870bfde3b170de094
Certificate serial: 019DCF75FA5EA12110F6DC6CF0B1FA946A5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.mft
Manifest number: 13C3
Signing time: Mon 27 Apr 2026 15:01:48 +0000
Manifest this update: Mon 27 Apr 2026 15:01:48 +0000
Manifest next update: Tue 28 Apr 2026 15:01:48 +0000
Files and hashes: 1: 5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.crl (hash: t2PG+7I9ShYk91DW1onM0eYnROtnhNKM6lVLSg5ERvQ=)
2: 9wxon_jSPGs29d0oz5cGIJC4nyg.roa (hash: Xz4cE3NQ80mMRNxOjLbkBn+IL5J1nET+/jUfxtIVjP8=)
3: GR0moaidu9mIStt-zm-cvuX-WDg.roa (hash: RV/X/dbPCJTmst6CLCu9ZvlvMnLGaT8HGpULXJtWGI0=)
4: KbTR7aHwwLpZYX34f5JnyinWFjs.roa (hash: SB5fokkBufwe+kAeEHnmUVt4YkIfxrCsr/69Y8UsTR8=)
5: mO6Fb7S41xAj_RDQIm69ljJKwSs.roa (hash: mzwHry2L+FiTcVlvwHZhbyETQYyjQEIEkkpwQQwfOpM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 15:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:75:fa:5e:a1:21:10:f6:dc:6c:f0:b1:fa:94:6a:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5a6794b91b81406412a137870bfde3b170de094
Validity
Not Before: Apr 27 15:01:48 2026 GMT
Not After : Apr 28 15:01:48 2026 GMT
Subject: CN=cd46280ed3c69e72b9aaa3db6520d32ab6581c19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:01:02:9a:b7:72:13:7b:e2:33:cd:3b:91:e8:
b1:f9:a9:02:4b:01:5c:2e:1e:2d:12:42:4f:1c:80:
76:27:5b:f7:75:08:13:b6:c6:45:59:ab:ae:e7:c2:
13:9e:a7:ee:10:c6:2e:7a:a6:3c:f4:4a:f8:87:70:
af:f5:51:dd:96:ee:49:c3:f7:a1:08:91:d6:26:94:
15:1a:cc:9a:2f:82:ba:e5:87:ed:4e:d6:40:f0:4f:
d5:7f:fe:2e:aa:a4:fc:4c:43:bd:68:4a:2c:90:af:
ca:67:c9:b5:71:5f:3b:45:ba:f0:f4:c5:4d:bd:b5:
81:4b:f0:8a:b2:d7:85:4d:29:f3:48:8c:5e:00:f9:
6e:55:47:65:a2:6b:30:a4:6b:95:cf:4a:f4:91:a2:
9b:55:87:88:f0:fa:8c:26:6c:02:57:b0:df:1c:4e:
f1:a7:d9:a0:1f:00:6f:c1:d5:9d:85:18:9f:a1:80:
32:7e:c3:63:01:48:db:02:7b:01:53:fc:52:b6:31:
38:73:49:d6:4d:63:d9:e7:78:d7:d6:c0:2f:52:d4:
94:88:77:2c:98:a3:1c:4d:52:7f:52:a0:77:36:37:
58:80:d3:60:1e:f4:fe:e0:ec:43:a9:fe:7a:d7:1c:
eb:fc:a1:b0:ea:33:dd:77:ad:4f:2c:eb:81:4e:30:
7f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:46:28:0E:D3:C6:9E:72:B9:AA:A3:DB:65:20:D3:2A:B6:58:1C:19
X509v3 Authority Key Identifier:
keyid:E5:A6:79:4B:91:B8:14:06:41:2A:13:78:70:BF:DE:3B:17:0D:E0:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:08:24:ae:6e:f8:84:31:a4:c0:70:d7:8b:d3:06:3a:78:ea:
6f:cf:e2:ad:be:e0:dd:46:27:37:58:70:5a:d3:63:f7:fb:4c:
ac:f0:e5:69:a3:66:4d:7c:9b:f0:94:cb:ec:c8:ea:85:7f:12:
b9:57:64:7f:fb:dc:1c:97:f6:74:66:2c:1a:82:6c:d1:1a:0e:
d8:25:67:2c:49:63:7f:2b:e7:4d:c0:69:51:a7:db:82:8d:0a:
20:be:fd:bc:00:23:80:23:3a:1b:49:6d:05:08:f4:49:40:cf:
bd:84:91:95:20:0c:8a:a4:df:69:63:11:8b:36:cb:87:c1:22:
06:d4:67:e2:83:81:8f:60:1f:34:63:17:15:cc:d8:ea:a3:85:
12:60:23:e6:f4:c3:06:ec:c0:cb:53:00:61:5a:fc:0f:63:d9:
84:65:32:11:c5:42:34:dd:bc:87:84:27:c9:3e:5c:a7:73:7d:
8c:a9:2f:2f:78:61:3b:b7:fe:75:8d:38:23:77:b3:c9:1f:14:
d7:81:ce:33:93:7b:35:07:4b:bc:ac:6e:bb:f2:38:c5:58:db:
3d:ea:72:9b:36:2c:77:34:5f:22:eb:ac:34:d5:a3:7f:60:12:
e3:df:ef:38:bc:6a:e2:99:93:9f:dc:47:5f:9b:43:48:90:4b:
22:3b:24:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 22:29:58 2026 by rpki-client