Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/6e457e-366d-440b-af2c-5cadbdcf2215/1/5J2_PERGjlJBHUhhhWvwvceQY-Q.mft
File: 5J2_PERGjlJBHUhhhWvwvceQY-Q.mft (raw, json)
Hash identifier: 3cs8yyOK1ZZILm2ABn/t02K+Z23sevIyqLu9qWpfNl8=
Subject key identifier: 2F:C5:C2:1F:86:3B:84:AD:C6:39:AD:51:DE:E5:AF:46:23:CD:C5:51
Authority key identifier: E4:9D:BF:3C:44:46:8E:52:41:1D:48:61:85:6B:F0:BD:C7:90:63:E4
Certificate issuer: /CN=e49dbf3c44468e52411d4861856bf0bdc79063e4
Certificate serial: 01A0D38328314F8D4D65F5977E39F1694DEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5J2_PERGjlJBHUhhhWvwvceQY-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/6e457e-366d-440b-af2c-5cadbdcf2215/1/5J2_PERGjlJBHUhhhWvwvceQY-Q.mft
Manifest number: 1240
Signing time: Thu 24 Sep 2026 13:03:02 +0000
Manifest this update: Thu 24 Sep 2026 13:03:02 +0000
Manifest next update: Fri 25 Sep 2026 13:03:02 +0000
Files and hashes: 1: 5J2_PERGjlJBHUhhhWvwvceQY-Q.crl (hash: hJtF4BJdTmME29Bp9qnCb5tZA5y+591OS6e+ViJRL44=)
2: YmHcrnOOhyVRFSzhb5LmKrSYZKs.roa (hash: 5Tv/E4FlLGmCFNLyr1qqDnFaOB6Omm/F5UCvSaKyKeA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/6e457e-366d-440b-af2c-5cadbdcf2215/1/5J2_PERGjlJBHUhhhWvwvceQY-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/6e457e-366d-440b-af2c-5cadbdcf2215/1/5J2_PERGjlJBHUhhhWvwvceQY-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/5J2_PERGjlJBHUhhhWvwvceQY-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 13:03:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:83:28:31:4f:8d:4d:65:f5:97:7e:39:f1:69:4d:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e49dbf3c44468e52411d4861856bf0bdc79063e4
Validity
Not Before: Sep 24 13:03:02 2026 GMT
Not After : Sep 25 13:03:02 2026 GMT
Subject: CN=2fc5c21f863b84adc639ad51dee5af4623cdc551
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:04:df:ca:33:c9:32:fb:7d:7a:4a:6c:0c:92:
c6:53:f0:60:63:4b:e5:fc:9e:29:07:6c:f7:7e:f7:
06:63:2e:ce:74:49:d6:6d:76:d1:ff:85:56:e5:1d:
19:2b:15:ac:ab:c7:a5:73:9a:48:2f:21:9e:cf:56:
30:f2:d6:9d:47:5c:64:4a:f6:aa:8e:08:2a:7f:20:
41:b8:f0:67:aa:75:d6:d6:c6:64:cf:03:4a:ed:da:
27:04:63:5b:8f:e8:d1:8c:ce:bb:92:08:0c:18:f6:
be:77:80:fc:41:78:64:eb:9c:e4:5c:c3:ab:0a:89:
9a:69:80:c0:0b:ea:c0:09:32:46:51:d3:41:de:cf:
df:d0:74:45:07:01:a6:8f:d2:f9:c6:eb:41:c3:31:
ba:61:4f:d4:41:45:18:60:3d:1c:ac:00:ca:5f:22:
a0:90:cb:83:c4:04:58:90:9e:70:65:b8:52:14:d7:
25:42:c7:ee:c8:25:b5:2e:d4:ce:c6:49:d5:3c:3c:
df:3e:66:f8:d3:cf:81:59:d0:89:4e:f2:c5:03:04:
e7:5d:b2:02:62:65:2b:69:41:50:e6:c6:fb:d1:a9:
dd:71:f0:3e:12:2e:21:42:fa:8c:19:72:fd:3c:c9:
0f:15:0b:d4:6a:9d:e6:66:42:2c:56:5a:ec:8c:ab:
cd:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:C5:C2:1F:86:3B:84:AD:C6:39:AD:51:DE:E5:AF:46:23:CD:C5:51
X509v3 Authority Key Identifier:
keyid:E4:9D:BF:3C:44:46:8E:52:41:1D:48:61:85:6B:F0:BD:C7:90:63:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5J2_PERGjlJBHUhhhWvwvceQY-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/6e457e-366d-440b-af2c-5cadbdcf2215/1/5J2_PERGjlJBHUhhhWvwvceQY-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/6e457e-366d-440b-af2c-5cadbdcf2215/1/5J2_PERGjlJBHUhhhWvwvceQY-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:af:53:79:9b:14:08:65:59:bc:a5:5e:59:a2:23:62:b0:84:
8d:14:db:7f:70:46:85:c5:f5:dd:38:80:79:03:82:1c:d1:e4:
d9:49:d1:a1:4e:47:de:53:d4:70:bf:82:d9:c9:46:b7:7f:14:
ca:45:c0:3e:67:29:25:15:a3:ef:13:ce:c3:6f:29:63:df:59:
9f:b0:7f:0e:a7:17:87:49:be:32:65:53:f7:02:08:75:8b:b8:
88:1d:33:29:a9:71:fe:2a:dd:b2:86:6a:87:ce:eb:d3:fb:be:
5f:2c:88:af:81:52:6f:34:ea:50:16:14:f8:1b:28:b9:6a:9d:
5b:73:cd:ec:be:92:2b:08:4a:e4:1b:5f:3f:0e:f5:ca:be:04:
63:e8:2e:5e:2c:80:5c:cf:c3:2b:10:37:49:9b:bc:b4:12:7c:
17:99:10:43:6f:7c:f7:f0:0d:5b:b3:b9:a9:cc:0b:9d:e3:6e:
30:5b:d2:bd:80:4d:fb:55:5c:c2:90:1e:35:4a:85:34:e9:c9:
c7:c0:b7:f3:5a:c9:af:a8:1a:02:9e:c1:42:f6:b8:e5:7b:c9:
4c:8d:0d:84:67:13:78:17:46:a0:81:0b:f2:7a:28:ac:0f:74:
bd:30:e8:c4:98:32:a9:0f:c7:05:ef:28:dc:4c:96:bd:0a:c7:
9b:a7:2d:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:14:36 2026 by rpki-client