Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.mft
File: 5aJ1VcGlxd3396zIOfpXeqfuepw.mft (raw, json)
Hash identifier: Tq8UNlc5PGDxAUCF3cwawwjnk1tob+6hNe0N15B37us=
Subject key identifier: C0:FA:7C:EB:43:F6:AE:A0:25:91:87:2F:BB:23:69:8B:74:26:68:0F
Authority key identifier: E5:A2:75:55:C1:A5:C5:DD:F7:F7:AC:C8:39:FA:57:7A:A7:EE:7A:9C
Certificate issuer: /CN=e5a27555c1a5c5ddf7f7acc839fa577aa7ee7a9c
Certificate serial: 01A08AFA93D81863EDAB615E86EAC26926F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5aJ1VcGlxd3396zIOfpXeqfuepw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.mft
Manifest number: 1A4C
Signing time: Thu 10 Sep 2026 11:01:12 +0000
Manifest this update: Thu 10 Sep 2026 11:01:12 +0000
Manifest next update: Fri 11 Sep 2026 11:01:12 +0000
Files and hashes: 1: 5aJ1VcGlxd3396zIOfpXeqfuepw.crl (hash: HQTDsBR6/TtPVi4QXU5wG49JPbhLUjErlFiOKVoCoCU=)
2: d5q3dL4EASzGPAAwnOfen6UJAcQ.roa (hash: oReaCreAqHsbklAkWbsJ/hVAQpba2f3VOsepsQ+XqOY=)
3: jQS3BAFCaZyv5m7n_ta1OKPwfLc.roa (hash: 8n/5W0nrqR/v9ZeOf9vjjYt0hTJWq/lXvjj2LJI4kOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5aJ1VcGlxd3396zIOfpXeqfuepw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 11:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:fa:93:d8:18:63:ed:ab:61:5e:86:ea:c2:69:26:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5a27555c1a5c5ddf7f7acc839fa577aa7ee7a9c
Validity
Not Before: Sep 10 11:01:12 2026 GMT
Not After : Sep 11 11:01:12 2026 GMT
Subject: CN=c0fa7ceb43f6aea02591872fbb23698b7426680f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:13:f6:9a:f2:62:8f:b1:4f:ee:45:be:d9:ef:
2b:03:62:fd:9a:f3:3b:f9:e5:06:a5:e0:26:06:46:
84:2f:9f:d5:ff:ca:53:06:2f:ab:cc:06:35:bf:cb:
b3:6f:be:23:cf:cb:51:2e:2e:82:8a:92:e6:8c:6e:
d2:9f:a9:fe:4f:55:4f:85:61:88:89:00:85:b5:df:
45:6e:d0:bc:5d:b7:ab:42:d8:ce:c0:58:79:79:11:
31:79:21:9d:ac:6b:39:30:76:22:58:83:07:ac:dd:
ab:ba:43:ac:8c:5e:6a:7a:5c:dd:bb:a8:8a:ac:30:
2e:2d:4d:e6:00:74:e8:d7:71:56:99:02:22:a2:a4:
fb:b8:c2:d1:7a:87:ee:ab:e1:ef:a0:42:5d:ee:93:
81:38:9f:ce:5e:3d:78:64:b0:e9:fc:7b:9d:c1:dd:
b3:aa:8f:89:d2:f6:9f:ac:9c:b9:cd:21:56:4e:5d:
cd:b5:bf:9f:f3:f6:d7:5c:6e:77:30:25:fa:a1:f1:
3c:71:ad:0a:3e:f5:b7:08:b8:bd:f7:a1:44:1a:46:
d3:6d:2c:19:c9:53:c7:df:6c:dd:ef:0a:b0:60:9c:
a8:22:16:71:f0:a9:40:03:bd:bb:18:13:ad:9e:1f:
d4:d7:34:fc:0f:69:68:44:72:9d:db:8b:04:d7:d1:
ec:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:FA:7C:EB:43:F6:AE:A0:25:91:87:2F:BB:23:69:8B:74:26:68:0F
X509v3 Authority Key Identifier:
keyid:E5:A2:75:55:C1:A5:C5:DD:F7:F7:AC:C8:39:FA:57:7A:A7:EE:7A:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5aJ1VcGlxd3396zIOfpXeqfuepw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:5d:4d:b6:04:cb:1a:e9:76:b9:87:93:e8:6c:53:55:db:ee:
b1:87:46:fd:33:2d:17:00:bf:e7:55:f8:c0:60:aa:9d:7a:fd:
f5:4f:e9:bc:12:33:23:51:5d:f8:f6:46:61:20:87:b6:0b:1a:
1b:7d:8a:bb:8f:8d:af:bd:38:1b:b6:e3:94:e4:94:ac:c4:82:
74:6e:9c:76:8e:cd:7c:c4:ea:e1:7f:17:1a:94:67:a9:79:66:
8f:de:f3:4c:ce:b1:39:44:98:9a:bc:6f:ff:e8:5e:e5:86:55:
fc:1c:4a:83:cc:35:e7:08:df:b4:fd:31:5f:b9:38:d1:09:9a:
ba:48:59:e9:f7:b7:33:54:ed:25:63:63:52:18:b0:1a:7a:26:
c9:3a:8a:9f:fb:a2:31:74:00:0a:ba:77:fb:0e:7c:68:70:86:
99:e7:5f:03:f4:3a:bd:1c:3a:31:c5:f9:84:86:ce:c2:a8:26:
84:e3:e3:3c:6c:8b:13:2a:c1:33:d2:93:73:a0:bf:6b:65:86:
66:c4:ba:30:94:43:5d:a4:9c:34:a4:cf:98:b9:10:8c:3c:2d:
d7:f2:6c:0d:9c:2a:30:4d:8c:80:c1:ef:dc:21:19:a1:97:d0:
cc:30:93:94:80:ba:97:84:03:93:c0:f1:2c:d9:c0:c2:c2:7f:
21:33:36:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:17:03 2026 by rpki-client