Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/2cc22c-2d71-46d6-9215-38c5b0c4f152/1/5aHlGcnOd1ddifB89xjzsMyG7FU.mft
File: 5aHlGcnOd1ddifB89xjzsMyG7FU.mft (raw, json)
Hash identifier: 5aYiAD2QZNdT2ytBy7PYulBnsmzFBizhFQyRQasDtFA=
Subject key identifier: E3:74:2A:1E:31:8E:0A:2E:6D:BE:2C:29:69:75:AF:F2:55:B3:9B:3F
Authority key identifier: E5:A1:E5:19:C9:CE:77:57:5D:89:F0:7C:F7:18:F3:B0:CC:86:EC:55
Certificate issuer: /CN=e5a1e519c9ce77575d89f07cf718f3b0cc86ec55
Certificate serial: 019E1D228A149775AA15DC61EC7F4CB6D4A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5aHlGcnOd1ddifB89xjzsMyG7FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/2cc22c-2d71-46d6-9215-38c5b0c4f152/1/5aHlGcnOd1ddifB89xjzsMyG7FU.mft
Manifest number: 1904
Signing time: Tue 12 May 2026 17:01:03 +0000
Manifest this update: Tue 12 May 2026 17:01:03 +0000
Manifest next update: Wed 13 May 2026 17:01:03 +0000
Files and hashes: 1: 5aHlGcnOd1ddifB89xjzsMyG7FU.crl (hash: dJZjtVEnjwRvqtP6gXCfT1mNmddX8VCWT+SNb8o7q8I=)
2: WG7wAcXOQAIG2_4E3zJbWmoA3W0.roa (hash: 7hBSMbb3+udDNajYBSGLEQiPuq6VzstQJyrB9xeEhCg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/2cc22c-2d71-46d6-9215-38c5b0c4f152/1/5aHlGcnOd1ddifB89xjzsMyG7FU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/2cc22c-2d71-46d6-9215-38c5b0c4f152/1/5aHlGcnOd1ddifB89xjzsMyG7FU.mft
rsync://rpki.ripe.net/repository/DEFAULT/5aHlGcnOd1ddifB89xjzsMyG7FU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:8a:14:97:75:aa:15:dc:61:ec:7f:4c:b6:d4:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5a1e519c9ce77575d89f07cf718f3b0cc86ec55
Validity
Not Before: May 12 17:01:03 2026 GMT
Not After : May 13 17:01:03 2026 GMT
Subject: CN=e3742a1e318e0a2e6dbe2c296975aff255b39b3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:52:c2:8a:d4:b2:55:7f:91:5f:cd:98:d3:4d:
96:46:b5:69:52:ef:43:0c:98:1f:8c:77:df:d2:78:
9e:1f:a7:fd:ac:fb:71:8d:98:03:e8:e0:c1:8e:74:
6a:7e:bd:c4:6f:16:b4:be:d6:11:08:b0:1b:47:7c:
6d:73:92:f0:51:7a:ec:23:ca:42:c0:8f:f0:08:c5:
66:a6:c7:07:53:d0:67:2f:ec:54:46:13:27:16:75:
9b:7f:31:3b:a4:9a:79:d7:f8:55:0a:2d:fc:3c:a9:
1f:37:5d:a1:c9:8f:1a:89:2c:a5:10:fc:41:5c:86:
82:04:aa:1d:4e:5e:76:3b:80:36:9d:ab:bf:bd:44:
cd:2d:e6:70:82:c3:51:b0:86:a0:02:ad:46:b2:d1:
2b:e8:2b:64:48:8c:da:ea:99:75:e6:e1:5f:a0:a9:
a5:a4:b8:b8:1a:d6:66:7b:f3:df:bd:40:ed:86:3a:
9d:d8:3b:c9:9e:94:97:9d:82:3b:8e:56:08:35:7d:
5a:f2:c6:82:77:46:b7:e1:35:02:c4:10:33:94:57:
86:50:8e:61:fd:29:c4:ba:a2:f8:b4:36:47:37:76:
c1:42:4c:25:17:14:ff:11:24:c6:de:94:1d:5c:23:
a1:f4:47:80:fb:e5:9f:10:c9:98:56:cc:db:04:ae:
18:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:74:2A:1E:31:8E:0A:2E:6D:BE:2C:29:69:75:AF:F2:55:B3:9B:3F
X509v3 Authority Key Identifier:
keyid:E5:A1:E5:19:C9:CE:77:57:5D:89:F0:7C:F7:18:F3:B0:CC:86:EC:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5aHlGcnOd1ddifB89xjzsMyG7FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2cc22c-2d71-46d6-9215-38c5b0c4f152/1/5aHlGcnOd1ddifB89xjzsMyG7FU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2cc22c-2d71-46d6-9215-38c5b0c4f152/1/5aHlGcnOd1ddifB89xjzsMyG7FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:e9:61:7b:de:a4:cf:22:d5:0f:c0:8a:c9:6e:9f:42:2a:20:
5e:b8:81:c0:50:4d:91:d8:96:13:26:a2:46:fb:d7:b7:53:93:
c0:9b:ab:ce:e9:cf:5b:9a:ee:5f:9b:8b:cf:e8:31:59:e1:a9:
f5:a0:ce:51:1a:e5:57:fe:9a:78:a7:02:da:f9:df:a0:5a:a7:
0d:2a:fd:c1:54:2b:26:06:d8:56:44:6f:96:2e:26:41:67:31:
a6:1a:93:26:94:ab:10:ad:94:3b:2d:45:9c:a7:21:4d:5e:db:
08:74:c0:b3:31:ed:c7:72:ed:1b:93:b1:94:ca:6d:85:4e:31:
62:3d:ea:0e:df:0e:09:27:d1:1f:85:21:91:5f:71:ae:c2:53:
32:7e:84:a1:d5:0d:4b:d5:a0:31:94:3f:f8:00:20:6e:61:38:
ca:9a:41:73:b7:cd:be:e2:9d:83:ef:ad:2a:70:f1:13:32:c5:
9a:03:37:a4:81:e4:4c:82:cb:28:10:95:f5:cc:16:7f:1f:7c:
a1:4d:f7:eb:f6:5d:9b:6a:f8:8c:77:f4:41:f6:64:27:d0:d8:
25:cb:e7:6e:14:35:e1:ed:13:61:09:ee:2e:c1:78:89:b3:a1:
a4:d9:b6:7b:a3:2d:d4:ae:a7:7f:47:2c:99:a8:e6:16:5d:ca:
81:f3:b1:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:29:40 2026 by rpki-client