Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/6e457e-366d-440b-af2c-5cadbdcf2215/1/5J2_PERGjlJBHUhhhWvwvceQY-Q.mft
File: 5J2_PERGjlJBHUhhhWvwvceQY-Q.mft (raw, json)
Hash identifier: XxCuZTbhlPUY/iVE+dkRxjms4AXHmYF3Upa3yuc1vdI=
Subject key identifier: A2:36:81:52:71:85:E2:37:C0:53:43:30:8E:69:56:2A:7E:80:5D:CF
Authority key identifier: E4:9D:BF:3C:44:46:8E:52:41:1D:48:61:85:6B:F0:BD:C7:90:63:E4
Certificate issuer: /CN=e49dbf3c44468e52411d4861856bf0bdc79063e4
Certificate serial: 019D2AE0814C49D2DE3680C33D5EB890C1C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5J2_PERGjlJBHUhhhWvwvceQY-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/6e457e-366d-440b-af2c-5cadbdcf2215/1/5J2_PERGjlJBHUhhhWvwvceQY-Q.mft
Manifest number: 105B
Signing time: Thu 26 Mar 2026 16:00:49 +0000
Manifest this update: Thu 26 Mar 2026 16:00:49 +0000
Manifest next update: Fri 27 Mar 2026 16:00:49 +0000
Files and hashes: 1: 5J2_PERGjlJBHUhhhWvwvceQY-Q.crl (hash: iaXVhHt7ZWdsh5Np4Gk23ZJRinO/f/rrU/9VKfzA2R8=)
2: YmHcrnOOhyVRFSzhb5LmKrSYZKs.roa (hash: 5Tv/E4FlLGmCFNLyr1qqDnFaOB6Omm/F5UCvSaKyKeA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/6e457e-366d-440b-af2c-5cadbdcf2215/1/5J2_PERGjlJBHUhhhWvwvceQY-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/6e457e-366d-440b-af2c-5cadbdcf2215/1/5J2_PERGjlJBHUhhhWvwvceQY-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/5J2_PERGjlJBHUhhhWvwvceQY-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e0:81:4c:49:d2:de:36:80:c3:3d:5e:b8:90:c1:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e49dbf3c44468e52411d4861856bf0bdc79063e4
Validity
Not Before: Mar 26 16:00:49 2026 GMT
Not After : Mar 27 16:00:49 2026 GMT
Subject: CN=a23681527185e237c05343308e69562a7e805dcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:67:0f:a4:67:3f:b2:79:1e:a1:90:31:30:f1:
46:57:a3:a6:f9:b9:1d:3a:e7:a7:89:10:94:aa:62:
3b:a9:8f:03:28:cc:58:dc:27:8e:db:c3:34:a2:ce:
7e:71:3b:2c:f4:5b:3f:dd:3f:ab:43:86:70:e2:e1:
cc:b6:56:64:23:3d:94:24:f2:e5:60:5a:2f:e2:9c:
fd:f3:83:63:2a:f0:6c:0f:28:35:70:65:20:1b:bb:
e8:6a:18:34:30:a8:3a:f8:96:9a:47:25:9c:92:ea:
fb:c5:98:cb:84:da:7b:dd:ce:33:48:bf:62:8a:06:
4d:e9:a9:d8:d1:39:1e:26:1a:5e:56:33:91:6b:5a:
9d:19:64:d6:42:50:ed:3c:84:f2:f0:86:17:8a:f9:
05:8d:eb:4b:56:67:08:42:0f:78:92:db:f2:c9:52:
40:42:08:9e:17:59:5f:9d:a9:aa:83:52:d8:0f:61:
39:26:b6:cd:f4:ba:88:b4:ed:4f:c3:7e:1e:15:f1:
c0:6e:c3:87:dd:aa:06:e2:87:73:b8:1a:60:29:be:
d9:1c:d0:f8:ce:49:dd:ef:9c:12:7c:28:55:3b:7f:
64:24:a0:25:73:ba:18:e3:9f:e8:b3:4e:12:ef:38:
7b:d4:3b:0b:6a:f4:48:ac:3b:a1:52:56:57:35:87:
38:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:36:81:52:71:85:E2:37:C0:53:43:30:8E:69:56:2A:7E:80:5D:CF
X509v3 Authority Key Identifier:
keyid:E4:9D:BF:3C:44:46:8E:52:41:1D:48:61:85:6B:F0:BD:C7:90:63:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5J2_PERGjlJBHUhhhWvwvceQY-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/6e457e-366d-440b-af2c-5cadbdcf2215/1/5J2_PERGjlJBHUhhhWvwvceQY-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/6e457e-366d-440b-af2c-5cadbdcf2215/1/5J2_PERGjlJBHUhhhWvwvceQY-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:36:67:8f:c3:a1:f8:73:26:56:51:27:d1:ee:69:5d:29:7a:
22:a9:43:04:81:5a:13:e9:06:1c:48:12:49:86:64:cb:14:ee:
9d:72:27:3c:45:e1:1e:7c:c3:a2:28:98:38:d7:c3:76:73:88:
e7:e8:33:a1:7c:78:91:31:2b:93:45:9a:c6:7e:b3:86:f1:b6:
65:74:e3:c9:79:bf:bc:6b:a9:81:2f:ad:44:ba:18:a8:cc:3a:
6f:02:8f:62:a8:53:46:2e:11:35:d8:50:5d:01:fc:e0:a9:97:
1a:0a:45:6c:35:54:7d:7b:fe:b8:cb:c2:49:c9:5e:57:fa:54:
b2:ba:7d:e7:37:f8:73:76:e5:bd:03:7c:bd:f1:8a:bb:5c:0c:
51:e3:32:ad:e9:4a:a9:55:98:5b:cc:cc:a9:c8:87:30:7e:2c:
29:60:f6:2e:cb:5e:6d:5f:2f:7f:19:4c:5e:41:c0:d8:63:af:
da:c8:50:d2:7d:08:4c:27:ea:46:02:72:2a:80:17:2a:24:6a:
3b:59:fb:19:5e:92:fe:9c:85:94:83:ba:04:d4:fe:3b:d3:75:
50:61:a1:bc:df:40:bc:74:c4:ff:a0:6c:83:c7:94:5a:3e:78:
c4:41:8b:16:58:56:0f:60:dd:81:f0:36:b1:43:27:92:a9:3d:
34:77:df:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:40:26 2026 by rpki-client