Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/9f5223-a56c-465b-ac65-fd152a6a0587/1/5ar3bSe6gS4NXOIwXxfFMYjCWAw.mft
File: 5ar3bSe6gS4NXOIwXxfFMYjCWAw.mft (raw, json)
Hash identifier: dkq4gUkfxmaiIvyMvElL8HLUl20Xf/i7azCP5mSnpeI=
Subject key identifier: A2:2C:4B:5C:89:9C:E6:76:78:EB:4E:2D:3B:B9:47:C9:8D:9B:AB:35
Authority key identifier: E5:AA:F7:6D:27:BA:81:2E:0D:5C:E2:30:5F:17:C5:31:88:C2:58:0C
Certificate issuer: /CN=e5aaf76d27ba812e0d5ce2305f17c53188c2580c
Certificate serial: 01A195B282579B8D9E16BC5AE214F41E9D87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5ar3bSe6gS4NXOIwXxfFMYjCWAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9f5223-a56c-465b-ac65-fd152a6a0587/1/5ar3bSe6gS4NXOIwXxfFMYjCWAw.mft
Manifest number: 0CE1
Signing time: Sun 01 Nov 2026 06:01:06 +0000
Manifest this update: Sun 01 Nov 2026 06:01:06 +0000
Manifest next update: Mon 02 Nov 2026 06:01:06 +0000
Files and hashes: 1: 5ar3bSe6gS4NXOIwXxfFMYjCWAw.crl (hash: S2z982fvWiMnjJN7IAPWzVmvoJauZ1DXNSU9THnEv0I=)
2: oPgrYeYQdKE5w12V1Qsc5asf-z0.roa (hash: DyrqcRbA6WGivtdHIlCxrVDtSLyegGOpED1YlRSd3w0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9f5223-a56c-465b-ac65-fd152a6a0587/1/5ar3bSe6gS4NXOIwXxfFMYjCWAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/9f5223-a56c-465b-ac65-fd152a6a0587/1/5ar3bSe6gS4NXOIwXxfFMYjCWAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5ar3bSe6gS4NXOIwXxfFMYjCWAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:95:b2:82:57:9b:8d:9e:16:bc:5a:e2:14:f4:1e:9d:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5aaf76d27ba812e0d5ce2305f17c53188c2580c
Validity
Not Before: Nov 1 06:01:06 2026 GMT
Not After : Nov 2 06:01:06 2026 GMT
Subject: CN=a22c4b5c899ce67678eb4e2d3bb947c98d9bab35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:af:25:c0:cc:f0:0e:19:23:34:e7:b9:03:6b:
a3:1f:d6:14:3d:a6:02:d1:ad:84:00:19:6d:bd:c4:
d2:9b:85:b9:dc:ae:88:00:77:12:6a:10:08:36:4f:
f6:21:df:ca:48:8b:48:d3:29:b1:a3:c6:3b:8f:07:
7c:a9:81:2c:76:9d:34:da:ed:69:48:b9:68:96:10:
8d:fb:5a:9f:0c:b5:de:ad:90:1e:0a:35:56:00:05:
f2:fa:e6:96:ba:15:cf:3b:8c:2f:64:4f:41:9f:0c:
9f:b0:3c:30:24:33:9a:39:04:82:c0:f1:7a:15:72:
17:9a:15:5b:4c:56:12:7b:e8:b0:7d:0a:a8:5c:dc:
6d:00:ab:79:2f:d1:62:1b:b7:a0:eb:b8:60:04:2b:
d2:01:84:ac:87:1d:87:85:51:4b:6b:2f:7d:f0:de:
68:08:62:72:32:cf:d8:f4:cd:0a:74:ec:d0:5c:7b:
46:b9:ba:63:fc:d7:80:a1:eb:df:b6:01:9c:dc:de:
f2:fa:05:e1:b0:4b:c1:48:22:be:5a:d2:66:a8:12:
61:3e:bd:6d:c7:16:c1:e9:bc:af:ef:9f:90:dd:6e:
d7:c2:dc:ec:17:97:40:42:f6:a9:f8:b8:68:0f:4a:
44:a2:3e:47:77:f9:aa:f7:de:2b:4e:e4:cd:6a:1f:
0c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:2C:4B:5C:89:9C:E6:76:78:EB:4E:2D:3B:B9:47:C9:8D:9B:AB:35
X509v3 Authority Key Identifier:
keyid:E5:AA:F7:6D:27:BA:81:2E:0D:5C:E2:30:5F:17:C5:31:88:C2:58:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5ar3bSe6gS4NXOIwXxfFMYjCWAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9f5223-a56c-465b-ac65-fd152a6a0587/1/5ar3bSe6gS4NXOIwXxfFMYjCWAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9f5223-a56c-465b-ac65-fd152a6a0587/1/5ar3bSe6gS4NXOIwXxfFMYjCWAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:53:15:47:a2:b6:f9:e6:89:05:7b:6a:d3:7e:c5:df:4a:33:
9f:06:9e:9a:a5:73:1d:64:70:75:64:a8:90:ba:0f:cd:c5:66:
bd:e5:61:9d:ec:4d:91:48:d7:db:b3:28:2a:db:91:37:b6:f8:
59:37:84:91:67:62:90:fb:7f:fe:ef:bb:88:cd:f5:a2:c5:63:
e2:a4:80:8d:a3:5e:db:50:4e:95:68:8f:98:1a:7b:cf:32:df:
86:34:eb:dd:fc:af:ff:b4:be:e6:a5:ed:35:f7:5e:dd:e7:b1:
c5:4b:c7:b6:6c:3d:81:b8:a2:79:5a:4c:fc:f6:ea:e9:4a:0a:
93:c9:a0:9a:61:42:da:84:a8:8f:c1:4e:c3:75:ad:7c:c6:38:
a1:b2:da:9c:c5:5e:6e:85:62:88:84:6f:0f:55:28:cf:d7:ff:
bf:07:f5:c7:18:71:fc:1d:5a:a0:52:27:17:98:8b:87:00:46:
aa:17:9a:52:85:59:14:ae:fc:3a:60:ab:79:91:ea:18:78:d3:
a9:e1:e1:80:0b:ff:c9:fe:21:2e:f4:c4:3e:07:73:d7:b6:0b:
c3:4d:bc:a9:b2:ce:b7:26:88:57:37:4b:f3:80:dc:f1:04:7f:
c8:ed:82:e8:6f:d1:20:c2:94:c7:f1:00:a9:b2:2e:03:36:d0:
bc:d1:20:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGVsoJXm42eFrxa4hT0Hp2HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1YWFmNzZkMjdiYTgxMmUwZDVjZTIzMDVmMTdjNTMxODhj
MjU4MGMwHhcNMjYxMTAxMDYwMTA2WhcNMjYxMTAyMDYwMTA2WjAzMTEwLwYDVQQD
EyhhMjJjNGI1Yzg5OWNlNjc2NzhlYjRlMmQzYmI5NDdjOThkOWJhYjM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAja8lwMzwDhkjNOe5A2ujH9YUPaYC
0a2EABltvcTSm4W53K6IAHcSahAINk/2Id/KSItI0ymxo8Y7jwd8qYEsdp002u1p
SLlolhCN+1qfDLXerZAeCjVWAAXy+uaWuhXPO4wvZE9BnwyfsDwwJDOaOQSCwPF6
FXIXmhVbTFYSe+iwfQqoXNxtAKt5L9FiG7eg67hgBCvSAYSshx2HhVFLay998N5o
CGJyMs/Y9M0KdOzQXHtGubpj/NeAoevftgGc3N7y+gXhsEvBSCK+WtJmqBJhPr1t
xxbB6byv75+Q3W7XwtzsF5dAQvap+LhoD0pEoj5Hd/mq994rTuTNah8MVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKIsS1yJnOZ2eOtOLTu5R8mNm6s1MB8GA1UdIwQY
MBaAFOWq920nuoEuDVziMF8XxTGIwlgMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWFyM2JTZTZnUzROWE9Jd1h4ZkZNWWpDV0F3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC85ZjUyMjMtYTU2Yy00NjViLWFjNjUt
ZmQxNTJhNmEwNTg3LzEvNWFyM2JTZTZnUzROWE9Jd1h4ZkZNWWpDV0F3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC85ZjUyMjMtYTU2Yy00NjViLWFjNjUtZmQxNTJhNmEwNTg3
LzEvNWFyM2JTZTZnUzROWE9Jd1h4ZkZNWWpDV0F3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdlMVR6K2
+eaJBXtq037F30oznwaemqVzHWRwdWSokLoPzcVmveVhnexNkUjX27MoKtuRN7b4
WTeEkWdikPt//u+7iM31osVj4qSAjaNe21BOlWiPmBp7zzLfhjTr3fyv/7S+5qXt
Nfde3eexxUvHtmw9gbiieVpM/Pbq6UoKk8mgmmFC2oSoj8FOw3WtfMY4obLanMVe
boViiIRvD1Uoz9f/vwf1xxhx/B1aoFInF5iLhwBGqheaUoVZFK78OmCreZHqGHjT
qeHhgAv/yf4hLvTEPgdz17YLw028qbLOtyaIVzdL84Dc8QR/yO2C6G/RIMKUx/EA
qbIuAzbQvNEgDw==
-----END CERTIFICATE-----
Generated at Sun Nov 1 13:01:54 2026 by rpki-client