Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/6e457e-366d-440b-af2c-5cadbdcf2215/1/5J2_PERGjlJBHUhhhWvwvceQY-Q.mft
File: 5J2_PERGjlJBHUhhhWvwvceQY-Q.mft (raw, json)
Hash identifier: fnYr7kjQIfSgINwDbRhyKgL2s7pSF5pb+szTGv82Xb0=
Subject key identifier: EC:76:4D:C5:86:19:7B:85:2E:3C:52:52:2F:F1:C1:7E:38:27:FA:6B
Authority key identifier: E4:9D:BF:3C:44:46:8E:52:41:1D:48:61:85:6B:F0:BD:C7:90:63:E4
Certificate issuer: /CN=e49dbf3c44468e52411d4861856bf0bdc79063e4
Certificate serial: 019E1C467998B089653794419DBE80114852
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5J2_PERGjlJBHUhhhWvwvceQY-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/6e457e-366d-440b-af2c-5cadbdcf2215/1/5J2_PERGjlJBHUhhhWvwvceQY-Q.mft
Manifest number: 10D8
Signing time: Tue 12 May 2026 13:00:40 +0000
Manifest this update: Tue 12 May 2026 13:00:40 +0000
Manifest next update: Wed 13 May 2026 13:00:40 +0000
Files and hashes: 1: 5J2_PERGjlJBHUhhhWvwvceQY-Q.crl (hash: oD79+WE55XLT+fT0dix29AJs+owYQ3sKy5WYTyGDceg=)
2: YmHcrnOOhyVRFSzhb5LmKrSYZKs.roa (hash: 5Tv/E4FlLGmCFNLyr1qqDnFaOB6Omm/F5UCvSaKyKeA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/6e457e-366d-440b-af2c-5cadbdcf2215/1/5J2_PERGjlJBHUhhhWvwvceQY-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/6e457e-366d-440b-af2c-5cadbdcf2215/1/5J2_PERGjlJBHUhhhWvwvceQY-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/5J2_PERGjlJBHUhhhWvwvceQY-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 13:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:46:79:98:b0:89:65:37:94:41:9d:be:80:11:48:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e49dbf3c44468e52411d4861856bf0bdc79063e4
Validity
Not Before: May 12 13:00:40 2026 GMT
Not After : May 13 13:00:40 2026 GMT
Subject: CN=ec764dc586197b852e3c52522ff1c17e3827fa6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:db:a3:b1:59:26:e5:1a:a7:e3:b6:3d:61:a5:
44:c4:3c:1c:5b:f1:5f:f9:71:dd:d9:f5:a9:80:23:
d2:4f:51:e9:37:60:ab:cb:bb:ec:26:b2:f1:87:70:
23:b9:3f:bc:6b:b0:80:87:e3:19:2e:f2:2e:d7:43:
c4:ea:3c:76:0e:e2:22:d7:24:58:95:cb:38:a7:fe:
cc:09:e7:7f:70:99:25:72:b5:d4:f3:75:dc:d6:92:
cf:50:bd:fc:17:14:c3:82:b6:c1:79:a5:ad:0e:e3:
41:06:c6:80:7f:07:64:30:c5:c7:4e:71:96:4b:be:
35:4f:5a:27:ef:9b:9f:19:e5:3f:74:e3:f9:b9:95:
30:99:9b:c8:c0:ea:ae:93:cc:02:98:6b:ac:7f:21:
8d:ae:50:1f:f9:15:49:ef:ab:a9:53:5d:42:9a:45:
f5:fb:eb:53:85:e2:3c:04:f2:1c:32:78:5b:7b:5f:
93:75:1a:0c:39:e8:e2:9e:0f:14:9c:9f:e8:67:c7:
7e:42:3f:8f:c6:9b:aa:c5:03:43:88:95:7c:23:f3:
79:70:9c:18:78:5a:4d:16:dc:08:32:6e:b7:40:c8:
5e:67:6f:bb:0a:7a:ed:40:0d:b5:db:f1:fa:f0:e1:
f1:e4:9d:05:98:d2:15:2d:ad:04:46:15:c6:07:65:
2f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:76:4D:C5:86:19:7B:85:2E:3C:52:52:2F:F1:C1:7E:38:27:FA:6B
X509v3 Authority Key Identifier:
keyid:E4:9D:BF:3C:44:46:8E:52:41:1D:48:61:85:6B:F0:BD:C7:90:63:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5J2_PERGjlJBHUhhhWvwvceQY-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/6e457e-366d-440b-af2c-5cadbdcf2215/1/5J2_PERGjlJBHUhhhWvwvceQY-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/6e457e-366d-440b-af2c-5cadbdcf2215/1/5J2_PERGjlJBHUhhhWvwvceQY-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:9c:5e:4b:7f:24:46:ca:d5:c7:37:35:b0:b6:45:f2:62:af:
0e:d4:37:bd:c5:9d:cb:b5:98:35:84:54:99:86:8d:33:ee:ef:
a6:9a:6c:14:76:c8:07:e6:5a:35:f6:1f:ee:c2:aa:86:1e:00:
2b:17:dd:1c:33:9d:2c:99:32:2f:76:f5:83:65:29:dc:97:35:
7d:5f:85:cf:2c:80:cc:d3:23:4b:90:00:d2:ad:f9:cf:97:a2:
39:e7:f9:91:49:83:66:c5:ab:ab:ae:94:76:6e:b8:05:b5:dc:
20:f0:e3:e7:00:6f:cc:e9:fb:a9:28:96:47:69:3e:00:cc:a0:
6a:fa:ad:aa:f0:aa:19:15:59:95:f8:f7:dd:2c:b8:26:11:96:
37:3e:67:07:18:91:a6:f6:11:3b:43:7f:3f:8b:ab:30:c5:48:
b9:67:44:53:ee:cb:59:15:ae:47:b9:b5:e4:75:da:2c:a4:c1:
02:3a:dc:f3:3e:76:91:d5:44:39:a3:aa:de:38:8d:5b:ec:84:
ab:6f:c6:bf:e6:0c:d6:2e:13:8c:8e:50:6b:c8:fe:8f:72:f6:
a3:27:f9:49:1d:c4:09:93:48:ea:25:30:9c:b7:9a:16:05:35:
83:d6:eb:67:b0:f5:44:db:27:57:b9:7d:db:6a:f9:06:be:71:
6a:8e:1f:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:22:46 2026 by rpki-client