Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.mft
File: 5aJ1VcGlxd3396zIOfpXeqfuepw.mft (raw, json)
Hash identifier: XtuqCeyO2NIz6u6/asSwBcpGOpKBUJoWxnaPi9JKJOs=
Subject key identifier: AF:02:C0:86:BE:C0:8E:D8:D5:5D:94:0B:67:6C:EF:B5:8E:61:AD:E5
Authority key identifier: E5:A2:75:55:C1:A5:C5:DD:F7:F7:AC:C8:39:FA:57:7A:A7:EE:7A:9C
Certificate issuer: /CN=e5a27555c1a5c5ddf7f7acc839fa577aa7ee7a9c
Certificate serial: 01A1803D6D73D7B09B37C8F8D0F4BAD4969A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5aJ1VcGlxd3396zIOfpXeqfuepw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.mft
Manifest number: 1ACB
Signing time: Wed 28 Oct 2026 02:01:11 +0000
Manifest this update: Wed 28 Oct 2026 02:01:11 +0000
Manifest next update: Thu 29 Oct 2026 02:01:11 +0000
Files and hashes: 1: 5aJ1VcGlxd3396zIOfpXeqfuepw.crl (hash: 6ux/j6WafEQNnRtA75fbIBBfx1ZXvyAWiCfDDfeT1gg=)
2: d5q3dL4EASzGPAAwnOfen6UJAcQ.roa (hash: oReaCreAqHsbklAkWbsJ/hVAQpba2f3VOsepsQ+XqOY=)
3: jQS3BAFCaZyv5m7n_ta1OKPwfLc.roa (hash: 8n/5W0nrqR/v9ZeOf9vjjYt0hTJWq/lXvjj2LJI4kOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5aJ1VcGlxd3396zIOfpXeqfuepw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:3d:6d:73:d7:b0:9b:37:c8:f8:d0:f4:ba:d4:96:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5a27555c1a5c5ddf7f7acc839fa577aa7ee7a9c
Validity
Not Before: Oct 28 02:01:11 2026 GMT
Not After : Oct 29 02:01:11 2026 GMT
Subject: CN=af02c086bec08ed8d55d940b676cefb58e61ade5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ff:a3:19:8b:3a:f1:92:d4:0d:1e:62:c0:98:
c0:02:ac:9b:40:0c:d9:09:c0:5e:cb:b3:a3:3d:f5:
b2:e7:d0:65:73:d9:31:6b:6e:0c:18:14:4f:c7:a3:
7d:34:af:05:94:7c:cc:bc:6d:e7:e2:18:a8:27:2c:
04:1f:0f:e7:22:6f:db:0b:d4:30:e6:ff:a0:ae:c4:
40:1f:55:26:05:7c:ac:fb:2e:49:c9:35:e9:4a:81:
49:f8:8f:e5:23:89:ac:03:3f:2a:66:2c:90:8f:4e:
2f:dc:41:d0:92:43:f5:bf:63:fb:81:84:65:41:80:
9d:ff:b7:4b:05:f6:d1:77:21:be:be:c4:6b:23:6c:
af:4c:76:c3:4c:eb:0b:c5:35:0b:7c:17:81:42:d6:
75:e7:f7:c6:a6:ff:c1:f9:99:25:cb:80:34:97:e5:
4a:c2:74:92:39:68:36:bd:f7:7a:03:30:78:53:86:
a6:f7:ea:28:ef:05:21:12:b2:59:28:6c:8a:b7:c0:
4f:3d:c6:ef:43:94:04:d3:5c:ed:9e:85:e6:9f:9d:
38:f3:aa:d0:83:69:b4:b7:58:f2:d7:87:97:b7:2f:
d1:32:ff:d0:e3:66:ec:63:f2:03:ba:f7:81:d8:11:
3f:35:85:f8:62:da:c2:60:f3:af:94:46:4a:eb:af:
0a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:02:C0:86:BE:C0:8E:D8:D5:5D:94:0B:67:6C:EF:B5:8E:61:AD:E5
X509v3 Authority Key Identifier:
keyid:E5:A2:75:55:C1:A5:C5:DD:F7:F7:AC:C8:39:FA:57:7A:A7:EE:7A:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5aJ1VcGlxd3396zIOfpXeqfuepw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:be:a3:ed:48:cd:24:54:c7:b5:32:da:a7:b9:24:04:76:5d:
fb:e3:5b:22:8e:50:df:ba:47:fb:02:df:74:d7:da:0e:70:73:
03:14:45:e9:20:6d:bb:2d:e0:1d:52:2c:69:40:09:0c:18:ad:
43:95:f8:ff:c6:b1:c3:4f:d5:79:b0:e9:5c:87:1d:77:9e:b1:
c4:75:50:af:bd:42:b4:ef:b7:ac:7d:e1:17:21:46:cf:89:15:
47:db:86:84:6c:ce:6f:7a:ae:7a:80:d1:46:02:33:c2:98:bd:
c3:1c:6f:67:c8:92:07:50:a1:b5:3f:ee:3c:6b:89:40:db:1a:
f8:9b:48:48:04:c8:91:0e:29:ac:b5:2f:87:90:4b:e5:4e:bd:
8c:5d:cb:e4:e0:8c:ee:b0:a6:66:60:e0:8a:ed:53:06:d8:61:
eb:1f:e3:8c:a4:d0:ea:65:90:37:a3:a1:6e:fd:93:1a:6b:42:
00:5f:d3:27:06:15:5a:83:b5:08:aa:23:a4:2d:bd:4c:b7:76:
33:01:9a:25:17:1b:65:b1:0a:e8:2c:99:4e:aa:d2:71:6e:20:
c7:1f:b0:66:41:c9:4d:3c:00:1c:c1:32:25:66:13:78:e9:6c:
63:27:e6:cb:17:34:c5:8d:a8:25:c2:66:18:b0:26:8e:b9:c8:
44:e5:28:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 04:39:37 2026 by rpki-client