Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.mft
File: 5aJ1VcGlxd3396zIOfpXeqfuepw.mft (raw, json)
Hash identifier: UtUgFc181plXZA7XDXs4tP+KdQRWUSbQngpHaKwv2X4=
Subject key identifier: 21:F9:13:46:5D:F6:1F:EE:B9:36:D1:50:1B:2D:7F:A0:40:B9:93:90
Authority key identifier: E5:A2:75:55:C1:A5:C5:DD:F7:F7:AC:C8:39:FA:57:7A:A7:EE:7A:9C
Certificate issuer: /CN=e5a27555c1a5c5ddf7f7acc839fa577aa7ee7a9c
Certificate serial: 019D394152E03A27E23B9DB8AA95DE789938
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5aJ1VcGlxd3396zIOfpXeqfuepw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.mft
Manifest number: 1894
Signing time: Sun 29 Mar 2026 11:01:15 +0000
Manifest this update: Sun 29 Mar 2026 11:01:15 +0000
Manifest next update: Mon 30 Mar 2026 11:01:15 +0000
Files and hashes: 1: 5aJ1VcGlxd3396zIOfpXeqfuepw.crl (hash: 3X0ZJuVt1DlraLEiMhH55HagVMk4sphOK0F7Q4/x5FY=)
2: d5q3dL4EASzGPAAwnOfen6UJAcQ.roa (hash: oReaCreAqHsbklAkWbsJ/hVAQpba2f3VOsepsQ+XqOY=)
3: jQS3BAFCaZyv5m7n_ta1OKPwfLc.roa (hash: 8n/5W0nrqR/v9ZeOf9vjjYt0hTJWq/lXvjj2LJI4kOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5aJ1VcGlxd3396zIOfpXeqfuepw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:52:e0:3a:27:e2:3b:9d:b8:aa:95:de:78:99:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5a27555c1a5c5ddf7f7acc839fa577aa7ee7a9c
Validity
Not Before: Mar 29 11:01:15 2026 GMT
Not After : Mar 30 11:01:15 2026 GMT
Subject: CN=21f913465df61feeb936d1501b2d7fa040b99390
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:b3:79:4d:2d:67:27:47:7d:ea:2e:8f:ad:cb:
d4:17:12:94:9b:b6:b8:3a:60:f2:9d:8b:70:c5:8c:
c0:3b:26:df:4f:65:25:4b:d8:89:7f:f8:2a:bf:93:
82:8c:44:e3:59:09:15:29:36:c7:9f:0c:b4:f4:c7:
34:35:3a:92:f2:3f:ea:1d:7d:d0:07:08:11:72:da:
08:c8:57:64:9d:37:d3:9a:aa:7b:8a:d7:44:9a:27:
fa:71:1c:f1:ce:1a:1f:12:5a:e2:92:c0:6b:16:14:
44:48:76:3e:b2:1d:c1:91:fe:e1:f0:98:40:8a:70:
97:6e:f8:7e:af:01:91:75:b1:15:54:36:e6:c6:16:
1b:e4:a3:70:81:db:cf:de:08:47:6f:ec:85:5b:7e:
ec:1b:c2:b6:a2:16:7e:45:5e:75:36:09:f4:40:5a:
ea:ff:f8:35:97:0f:15:5e:c5:10:78:75:13:59:3a:
10:0b:9e:71:f8:2e:5e:79:c8:5e:e3:23:8a:f0:1e:
f8:9d:b7:f2:d8:df:3f:f4:f5:bb:ac:80:3e:bd:b2:
9b:b4:b3:04:01:d0:0b:08:eb:17:81:6a:1c:87:fb:
22:7d:52:9a:9b:44:8b:89:84:1e:dc:89:30:91:86:
28:12:7a:06:97:95:5e:8f:0c:96:1e:f0:53:08:f4:
e9:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:F9:13:46:5D:F6:1F:EE:B9:36:D1:50:1B:2D:7F:A0:40:B9:93:90
X509v3 Authority Key Identifier:
keyid:E5:A2:75:55:C1:A5:C5:DD:F7:F7:AC:C8:39:FA:57:7A:A7:EE:7A:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5aJ1VcGlxd3396zIOfpXeqfuepw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:c4:eb:17:e7:53:99:34:d4:cf:f4:78:02:9c:7f:8c:d0:f1:
f9:e8:07:b0:97:fe:12:d1:1c:e7:34:47:1e:78:7b:66:9b:5e:
ae:88:43:01:24:53:82:15:2a:f4:13:6f:ec:ee:1b:2d:c8:59:
5c:37:e5:a5:78:12:8e:73:08:b2:ca:d4:3a:3d:21:f3:cd:fd:
fb:64:ec:8a:bf:94:4b:ce:8d:9d:91:35:91:58:ca:0e:e2:93:
15:44:24:5d:b6:c3:37:e0:07:17:3f:be:ad:db:46:cc:07:60:
2e:74:25:c2:52:76:88:0f:6d:5e:9f:59:ff:8f:8e:67:f4:47:
fb:dc:22:e0:d4:7b:af:db:15:d6:c4:66:96:59:6a:70:82:7f:
da:a6:7b:72:ec:f4:a5:fb:1f:40:09:c6:12:c1:50:cf:59:a2:
b4:0a:48:23:7b:aa:9e:70:ce:b2:99:3b:db:b2:92:3d:ea:93:
e2:c5:d4:ac:aa:24:ec:63:e0:47:fe:4c:b5:a3:ee:c3:56:bf:
60:7f:d3:ae:2b:2a:a9:86:74:a0:52:6d:72:93:cc:1f:b7:34:
1b:29:10:14:3b:be:80:da:96:af:b4:81:44:14:6a:38:71:78:
42:7b:7a:47:76:13:34:9e:30:8b:09:7c:6c:fb:1e:81:9a:67:
a1:02:e9:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:54:47 2026 by rpki-client