
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/9f5223-a56c-465b-ac65-fd152a6a0587/1/5ar3bSe6gS4NXOIwXxfFMYjCWAw.mft
File: 5ar3bSe6gS4NXOIwXxfFMYjCWAw.mft (raw, json)
Hash identifier: QBBzW9kA7OrskuO79f+6xofN+2oygSJyIovAwkaT+/M=
Subject key identifier: B5:4C:0F:91:FD:3C:E9:9A:9B:44:DD:C0:32:87:91:E7:04:06:47:10
Authority key identifier: E5:AA:F7:6D:27:BA:81:2E:0D:5C:E2:30:5F:17:C5:31:88:C2:58:0C
Certificate issuer: /CN=e5aaf76d27ba812e0d5ce2305f17c53188c2580c
Certificate serial: 01A193C41F8319723C8C31567475BE6FACBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5ar3bSe6gS4NXOIwXxfFMYjCWAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9f5223-a56c-465b-ac65-fd152a6a0587/1/5ar3bSe6gS4NXOIwXxfFMYjCWAw.mft
Manifest number: 0CE0
Signing time: Sat 31 Oct 2026 21:01:06 +0000
Manifest this update: Sat 31 Oct 2026 21:01:06 +0000
Manifest next update: Sun 01 Nov 2026 21:01:06 +0000
Files and hashes: 1: 5ar3bSe6gS4NXOIwXxfFMYjCWAw.crl (hash: o5hpLP5k6I6dgWMb4I3lTUFOpPj/Rlwi4YWE6BfOkZU=)
2: oPgrYeYQdKE5w12V1Qsc5asf-z0.roa (hash: DyrqcRbA6WGivtdHIlCxrVDtSLyegGOpED1YlRSd3w0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9f5223-a56c-465b-ac65-fd152a6a0587/1/5ar3bSe6gS4NXOIwXxfFMYjCWAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/9f5223-a56c-465b-ac65-fd152a6a0587/1/5ar3bSe6gS4NXOIwXxfFMYjCWAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5ar3bSe6gS4NXOIwXxfFMYjCWAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:93:c4:1f:83:19:72:3c:8c:31:56:74:75:be:6f:ac:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5aaf76d27ba812e0d5ce2305f17c53188c2580c
Validity
Not Before: Oct 31 21:01:06 2026 GMT
Not After : Nov 1 21:01:06 2026 GMT
Subject: CN=b54c0f91fd3ce99a9b44ddc0328791e704064710
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:cc:7f:a2:12:f6:cb:24:83:0a:7a:46:92:41:
5f:a0:59:2f:60:73:bd:f4:30:b0:6b:b1:43:3f:6e:
72:cc:c6:e6:5c:db:b4:9a:df:dd:39:54:e0:96:e2:
d0:1f:85:93:6b:2e:6c:d0:c4:d1:93:a6:a7:68:c1:
76:f4:f5:70:67:43:3c:a5:9d:d5:da:a4:44:08:7e:
85:53:c5:10:39:16:b8:f5:a0:cc:43:17:da:9d:7e:
a6:a2:d2:45:d3:33:7f:58:06:63:05:b8:74:0f:e1:
f4:92:bb:be:31:c9:a6:1e:45:a9:2d:60:df:c1:18:
a0:41:a5:5a:f5:f6:b9:cb:f6:fb:b1:3c:83:a2:6c:
15:7e:75:69:ce:0d:b3:9f:e9:f2:5d:fd:9a:f6:54:
a8:63:b5:b3:1b:ad:0a:39:f3:51:ab:02:94:d1:de:
94:33:c2:d6:b9:ae:70:40:93:ed:ae:18:17:0b:71:
64:2b:83:86:b1:e6:33:8f:b4:50:2d:88:85:68:45:
04:75:04:4d:09:0d:c7:74:0e:61:42:20:42:31:53:
c8:a5:80:60:9a:fa:10:58:e1:e0:c9:79:ac:16:f3:
94:91:f2:68:e7:5d:27:c5:9d:d5:26:ec:0f:52:58:
9a:0f:40:d0:4a:42:79:fd:20:09:f0:ce:dc:a1:73:
10:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:4C:0F:91:FD:3C:E9:9A:9B:44:DD:C0:32:87:91:E7:04:06:47:10
X509v3 Authority Key Identifier:
keyid:E5:AA:F7:6D:27:BA:81:2E:0D:5C:E2:30:5F:17:C5:31:88:C2:58:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5ar3bSe6gS4NXOIwXxfFMYjCWAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9f5223-a56c-465b-ac65-fd152a6a0587/1/5ar3bSe6gS4NXOIwXxfFMYjCWAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9f5223-a56c-465b-ac65-fd152a6a0587/1/5ar3bSe6gS4NXOIwXxfFMYjCWAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:86:32:87:7b:08:29:0d:81:05:bf:bd:c4:32:f5:76:7b:94:
33:00:86:1d:51:28:82:d3:0f:81:0a:63:36:f0:8c:79:31:37:
f7:3c:5c:53:2d:eb:8b:a9:47:4d:7e:35:57:43:f8:9f:47:75:
a3:b3:ef:cf:69:92:23:d0:55:76:30:7f:1e:9b:a1:05:e0:14:
ce:1f:94:b9:95:1c:38:d8:df:5b:a0:5e:26:75:f8:6b:9c:40:
3e:8c:f7:32:81:a7:60:ac:2a:62:c1:6c:ba:7f:3d:45:cd:76:
94:94:35:9e:78:a7:4f:da:51:01:63:5f:5d:b0:52:7a:42:fb:
56:13:f8:0b:11:de:21:45:30:2a:1a:d9:8e:dc:ac:56:cd:41:
19:e5:47:d5:d6:1a:42:19:6b:b1:4e:f0:11:6c:1a:4d:ab:3f:
e7:ad:e2:6f:ff:a1:ca:4c:a1:e6:03:56:9d:76:90:c7:f2:a1:
23:87:1a:c6:ff:12:bb:d5:d7:84:70:ec:2d:7a:eb:99:8e:b1:
e5:b7:71:2d:15:92:93:de:37:90:c0:d9:dd:26:41:66:20:0a:
cb:94:4b:d6:88:02:b1:fd:66:49:cc:a1:75:78:81:dc:87:a0:
1e:12:8d:1d:63:30:df:9e:e6:67:d3:4f:05:82:e7:28:3b:8d:
55:33:2b:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 00:11:32 2026 by rpki-client