Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.mft
File: 5aJ1VcGlxd3396zIOfpXeqfuepw.mft (raw, json)
Hash identifier: lxsUhi499ye0Ltwx7QO7hk1eJ3bo8EYQfd6eoQ/bq/0=
Subject key identifier: 2A:4E:42:BB:3A:A3:F8:6C:AA:93:0D:74:C8:25:96:3D:83:0B:98:FC
Authority key identifier: E5:A2:75:55:C1:A5:C5:DD:F7:F7:AC:C8:39:FA:57:7A:A7:EE:7A:9C
Certificate issuer: /CN=e5a27555c1a5c5ddf7f7acc839fa577aa7ee7a9c
Certificate serial: 019E3072D7D452284CFCFC3F801DA4CD00AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5aJ1VcGlxd3396zIOfpXeqfuepw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.mft
Manifest number: 1914
Signing time: Sat 16 May 2026 11:01:33 +0000
Manifest this update: Sat 16 May 2026 11:01:33 +0000
Manifest next update: Sun 17 May 2026 11:01:33 +0000
Files and hashes: 1: 5aJ1VcGlxd3396zIOfpXeqfuepw.crl (hash: nu/I6pmL8Gpf32keDx+nmBMmkF6g7veX52roU+9ZEtg=)
2: d5q3dL4EASzGPAAwnOfen6UJAcQ.roa (hash: oReaCreAqHsbklAkWbsJ/hVAQpba2f3VOsepsQ+XqOY=)
3: jQS3BAFCaZyv5m7n_ta1OKPwfLc.roa (hash: 8n/5W0nrqR/v9ZeOf9vjjYt0hTJWq/lXvjj2LJI4kOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5aJ1VcGlxd3396zIOfpXeqfuepw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 11:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:72:d7:d4:52:28:4c:fc:fc:3f:80:1d:a4:cd:00:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5a27555c1a5c5ddf7f7acc839fa577aa7ee7a9c
Validity
Not Before: May 16 11:01:33 2026 GMT
Not After : May 17 11:01:33 2026 GMT
Subject: CN=2a4e42bb3aa3f86caa930d74c825963d830b98fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:12:11:94:95:6f:6b:59:43:21:1b:18:be:d8:
68:e7:d6:70:4c:b1:aa:9d:89:c2:82:f1:06:4c:44:
3a:f7:b4:ad:28:0e:6f:2c:83:f7:13:c1:f4:06:db:
34:39:ac:c6:4a:fb:57:ff:62:f1:d3:59:2a:dc:14:
27:d4:34:b9:f4:37:57:1a:cb:8f:51:47:26:92:30:
a2:78:e2:d6:c4:48:59:2c:b6:9c:3e:51:b9:fc:42:
cb:86:27:37:57:bc:db:55:59:da:99:b9:fd:0d:1e:
da:3b:14:72:da:a0:8c:75:bf:66:6c:3b:62:bf:fd:
0f:e5:04:7a:47:fa:86:8b:51:de:56:1b:02:73:02:
1f:f8:77:27:16:ef:80:56:63:21:01:c4:33:b1:7a:
9a:1b:99:6e:74:92:06:fa:2f:0f:f2:63:1e:62:89:
99:4a:7f:2d:8c:fe:d9:5f:33:1a:55:15:2b:06:55:
bc:a3:80:ee:53:20:c5:4e:a6:6b:12:f0:85:15:a2:
21:83:d1:48:7c:0c:eb:41:f9:34:52:d2:b8:5b:0f:
a7:0a:01:cd:75:58:71:e2:02:f3:df:5c:b4:34:97:
73:e1:56:9e:a1:69:50:97:e0:0c:3b:d8:69:59:9c:
2e:b8:de:b6:ac:be:27:c8:f3:d9:0c:17:8d:43:31:
3a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:4E:42:BB:3A:A3:F8:6C:AA:93:0D:74:C8:25:96:3D:83:0B:98:FC
X509v3 Authority Key Identifier:
keyid:E5:A2:75:55:C1:A5:C5:DD:F7:F7:AC:C8:39:FA:57:7A:A7:EE:7A:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5aJ1VcGlxd3396zIOfpXeqfuepw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:af:54:74:80:0e:3e:b8:04:19:c8:fe:c9:50:d1:b2:90:88:
ba:1a:aa:98:c9:2f:9e:63:bf:c4:f1:2d:e9:85:e9:ab:b7:bf:
e6:59:df:ca:e7:55:46:96:61:12:2a:91:6c:24:b7:47:70:ec:
f8:d1:7d:25:49:07:b8:d3:38:cc:50:64:5c:e4:0a:84:ef:31:
09:1f:6d:63:6d:c1:5c:23:1e:50:95:fe:98:5f:42:df:a2:d0:
6f:d2:26:a1:f8:ad:29:0e:24:bd:50:ae:f7:36:95:93:47:7b:
a3:76:f1:89:b9:78:f2:71:28:0a:1c:68:59:01:e2:f8:e1:be:
6f:f8:da:10:e5:f0:d6:90:e3:3b:65:c7:a5:87:3f:f6:7e:ef:
9e:58:57:9a:95:8d:f5:39:37:b4:83:3b:8b:35:44:d6:c7:ce:
8f:b8:70:c4:c4:2b:bf:e8:85:52:7f:84:2c:74:38:25:df:67:
5f:0f:fe:49:f5:f9:69:fb:24:ef:2f:16:c8:48:21:a6:47:4b:
60:36:9c:12:79:31:00:95:34:02:a9:4e:d8:fc:5b:47:19:56:
09:bd:c2:a3:64:0a:4b:c4:a2:4e:4e:1a:8e:47:6b:e8:43:ca:
50:df:f5:e2:49:af:7e:52:66:ae:77:df:89:9e:b7:f4:5b:aa:
78:92:70:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:54:28 2026 by rpki-client