Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/1ac379-ff55-48c7-9691-006c32d46a7b/1/Ah5bTkwtVfCR1JSjPYYG5k59p_c.mft
File: Ah5bTkwtVfCR1JSjPYYG5k59p_c.mft (raw, json)
Hash identifier: w2TQUURsSxcD94YXG43czO93WhvPWsIMMmqWv1leelY=
Subject key identifier: CF:AF:2C:35:73:39:E2:79:6D:28:83:FE:CA:6B:AF:CD:E0:B6:05:3A
Authority key identifier: 02:1E:5B:4E:4C:2D:55:F0:91:D4:94:A3:3D:86:06:E6:4E:7D:A7:F7
Certificate issuer: /CN=021e5b4e4c2d55f091d494a33d8606e64e7da7f7
Certificate serial: 019E1C7D952743FF162E09F92D9745A3FAD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ah5bTkwtVfCR1JSjPYYG5k59p_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/1ac379-ff55-48c7-9691-006c32d46a7b/1/Ah5bTkwtVfCR1JSjPYYG5k59p_c.mft
Manifest number: 2C
Signing time: Tue 12 May 2026 14:00:52 +0000
Manifest this update: Tue 12 May 2026 14:00:52 +0000
Manifest next update: Wed 13 May 2026 14:00:52 +0000
Files and hashes: 1: Ah5bTkwtVfCR1JSjPYYG5k59p_c.crl (hash: 1TbjqWICM6VlPzendezWBSK9M+t1vsGBdc0G5tIcKhI=)
2: VYFbbCZGX6OViZYJs2QJsv7BOWs.asa (hash: aA2l1O9+TsmhM1jTSdaJv3MOhZ42Fqiq9eSX13sVeZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/1ac379-ff55-48c7-9691-006c32d46a7b/1/Ah5bTkwtVfCR1JSjPYYG5k59p_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/1ac379-ff55-48c7-9691-006c32d46a7b/1/Ah5bTkwtVfCR1JSjPYYG5k59p_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ah5bTkwtVfCR1JSjPYYG5k59p_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:7d:95:27:43:ff:16:2e:09:f9:2d:97:45:a3:fa:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=021e5b4e4c2d55f091d494a33d8606e64e7da7f7
Validity
Not Before: May 12 14:00:52 2026 GMT
Not After : May 13 14:00:52 2026 GMT
Subject: CN=cfaf2c357339e2796d2883feca6bafcde0b6053a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ec:30:bf:f7:69:59:99:6c:3d:9c:19:95:fc:
ff:17:a4:8d:2e:cb:d7:be:0c:ba:62:94:a0:47:d4:
84:3a:56:31:1a:60:29:4d:6e:54:ac:04:e5:42:9f:
7f:58:22:78:66:46:34:6f:e5:7d:9c:ed:59:6d:f1:
3c:62:39:e7:fa:02:38:5d:82:ac:75:f4:8e:87:d1:
e1:8e:0b:f1:4d:90:e4:c5:f9:49:be:2a:b1:f4:47:
fd:36:ec:48:8b:28:f3:52:fb:89:41:29:15:63:8b:
1b:ff:e5:8f:e2:28:01:4f:8c:bc:f2:97:4e:12:cf:
46:da:96:84:62:65:e3:1a:51:78:e4:2d:76:59:21:
4d:70:27:13:fc:b5:0a:72:79:5c:73:ec:5d:fb:df:
42:f9:74:f1:e2:f1:3c:b0:ea:54:e8:bb:6e:0f:dd:
b6:37:98:7f:41:7e:3c:34:c6:86:f4:72:22:df:77:
46:f7:2b:a1:51:43:0e:a4:b4:92:1a:9d:e7:29:bf:
8b:01:20:57:ba:fa:c2:0f:7c:ee:2f:45:36:d2:0f:
29:ec:77:be:19:df:2d:f0:0b:08:85:79:43:0c:e1:
7e:3a:1c:9a:a3:9a:18:b1:15:f9:ce:1d:cc:19:a2:
a4:d5:07:43:f3:0c:27:bd:b0:1b:d3:d2:96:1a:3d:
da:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:AF:2C:35:73:39:E2:79:6D:28:83:FE:CA:6B:AF:CD:E0:B6:05:3A
X509v3 Authority Key Identifier:
keyid:02:1E:5B:4E:4C:2D:55:F0:91:D4:94:A3:3D:86:06:E6:4E:7D:A7:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ah5bTkwtVfCR1JSjPYYG5k59p_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/1ac379-ff55-48c7-9691-006c32d46a7b/1/Ah5bTkwtVfCR1JSjPYYG5k59p_c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/1ac379-ff55-48c7-9691-006c32d46a7b/1/Ah5bTkwtVfCR1JSjPYYG5k59p_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:53:66:db:56:1d:94:77:f3:23:08:78:ef:28:d3:a5:89:25:
5c:70:c1:e5:e7:8e:89:98:29:fa:8e:b5:34:b5:a9:bf:4c:4e:
71:72:b5:da:f2:4b:06:50:b2:95:46:0b:a7:e7:e7:f5:c3:ef:
9d:c8:03:59:a8:01:39:24:f7:09:ea:cb:eb:c1:03:27:ec:30:
f5:5d:31:5b:c1:74:7e:91:9c:82:87:4b:00:16:bf:42:b1:99:
4d:d4:08:45:4a:5b:a2:8f:d1:42:a0:81:d8:0d:2a:46:37:69:
63:9a:40:52:d4:5c:a0:bb:56:7e:f3:4f:84:8e:e4:bf:56:d5:
b0:53:fa:f0:ce:cc:32:47:58:e4:b9:9b:3a:5a:00:a5:bb:6f:
46:85:2b:25:d2:c1:ec:a9:eb:9c:9a:49:9c:4c:41:d5:7e:af:
9c:63:b1:c1:7a:e4:45:a6:7d:2c:d0:0e:f4:5b:ab:7b:78:0e:
fc:98:4e:54:12:4f:7d:59:0f:b7:20:66:7b:80:0e:da:db:95:
3e:a8:00:cc:44:6a:69:69:62:9f:3c:83:2a:19:0f:87:4f:db:
a3:0f:0b:b4:6a:ed:38:38:49:f1:09:94:2f:35:81:9a:37:c4:
ff:39:43:14:87:db:b2:c5:16:ea:bd:bb:21:5b:ec:b1:f5:51:
cb:50:b9:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:47:54 2026 by rpki-client