Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/2cc22c-2d71-46d6-9215-38c5b0c4f152/1/5aHlGcnOd1ddifB89xjzsMyG7FU.mft
File: 5aHlGcnOd1ddifB89xjzsMyG7FU.mft (raw, json)
Hash identifier: fRX9TqD9+6I0nkdHaadg+t97NghtQL3i4asKJzrva6Y=
Subject key identifier: 33:7D:99:9A:0D:BD:99:BB:DC:6C:58:F6:1C:2E:14:7D:E5:8E:FD:14
Authority key identifier: E5:A1:E5:19:C9:CE:77:57:5D:89:F0:7C:F7:18:F3:B0:CC:86:EC:55
Certificate issuer: /CN=e5a1e519c9ce77575d89f07cf718f3b0cc86ec55
Certificate serial: 01A0D45E012962740D6C4B504DCCD3495660
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5aHlGcnOd1ddifB89xjzsMyG7FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/2cc22c-2d71-46d6-9215-38c5b0c4f152/1/5aHlGcnOd1ddifB89xjzsMyG7FU.mft
Manifest number: 1A6C
Signing time: Thu 24 Sep 2026 17:02:05 +0000
Manifest this update: Thu 24 Sep 2026 17:02:05 +0000
Manifest next update: Fri 25 Sep 2026 17:02:05 +0000
Files and hashes: 1: 5aHlGcnOd1ddifB89xjzsMyG7FU.crl (hash: RVjjBUl56XcB5EoSjAi/LHg+EsVbRanG/wqezVz4cn4=)
2: WG7wAcXOQAIG2_4E3zJbWmoA3W0.roa (hash: 7hBSMbb3+udDNajYBSGLEQiPuq6VzstQJyrB9xeEhCg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/2cc22c-2d71-46d6-9215-38c5b0c4f152/1/5aHlGcnOd1ddifB89xjzsMyG7FU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/2cc22c-2d71-46d6-9215-38c5b0c4f152/1/5aHlGcnOd1ddifB89xjzsMyG7FU.mft
rsync://rpki.ripe.net/repository/DEFAULT/5aHlGcnOd1ddifB89xjzsMyG7FU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:5e:01:29:62:74:0d:6c:4b:50:4d:cc:d3:49:56:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5a1e519c9ce77575d89f07cf718f3b0cc86ec55
Validity
Not Before: Sep 24 17:02:05 2026 GMT
Not After : Sep 25 17:02:05 2026 GMT
Subject: CN=337d999a0dbd99bbdc6c58f61c2e147de58efd14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:37:78:c5:58:76:f7:71:5e:68:f5:34:ac:1f:
f0:bc:28:19:12:c1:45:fe:89:d1:7b:8d:08:03:22:
3b:eb:c0:72:f1:b4:b1:52:8e:49:36:72:19:ab:21:
bb:6a:e0:fd:c4:81:f8:d0:6c:8a:a1:c9:0c:7b:ec:
49:11:a8:d4:76:6c:1a:c7:34:2b:a9:4b:56:60:2c:
e7:ca:33:99:ac:97:d0:cc:c9:b0:80:53:f9:00:89:
65:07:4c:19:8a:65:5e:eb:f6:6c:1f:c6:f1:23:e3:
bf:1e:b2:61:f3:2d:bc:d3:b5:54:1b:66:cd:22:33:
6a:69:79:b4:5a:a2:cc:2a:54:c4:ed:ed:a8:8d:d6:
d4:2d:aa:03:94:86:b4:4a:df:47:93:99:d2:70:14:
fc:84:e8:2f:53:e9:a8:34:3a:57:e4:5d:47:3a:96:
2a:82:21:e9:b9:c2:3f:c7:3a:75:aa:45:da:bf:49:
c0:65:ae:ce:b7:2e:2b:d0:3f:1d:fb:6c:9f:cb:5a:
2f:9b:43:c7:38:4d:1a:da:7a:ef:6c:87:ca:8b:79:
14:e2:18:de:07:35:71:68:b6:ff:83:b8:58:3d:50:
2b:e4:42:6c:28:61:4e:f6:56:4e:df:4c:f8:a2:e3:
1c:22:6f:a5:25:c4:a5:5d:96:af:2b:3c:05:c5:1a:
2d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:7D:99:9A:0D:BD:99:BB:DC:6C:58:F6:1C:2E:14:7D:E5:8E:FD:14
X509v3 Authority Key Identifier:
keyid:E5:A1:E5:19:C9:CE:77:57:5D:89:F0:7C:F7:18:F3:B0:CC:86:EC:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5aHlGcnOd1ddifB89xjzsMyG7FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2cc22c-2d71-46d6-9215-38c5b0c4f152/1/5aHlGcnOd1ddifB89xjzsMyG7FU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2cc22c-2d71-46d6-9215-38c5b0c4f152/1/5aHlGcnOd1ddifB89xjzsMyG7FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:52:9b:a5:4c:6f:ab:7f:03:95:dc:d8:bd:52:94:c4:e2:d0:
b1:bd:cf:78:ac:6b:f1:0e:4f:00:20:a2:8e:19:2f:94:52:2c:
97:fa:49:d9:56:e1:85:d8:4c:75:e3:c5:c9:a6:e5:5c:bc:b4:
5e:fe:1d:17:16:3c:2d:be:fc:5b:b7:03:1d:5e:a2:a0:12:91:
fd:50:be:ed:37:5c:69:06:5a:ef:85:af:f8:43:f5:f9:79:d9:
72:a1:4e:a5:f8:d9:e6:4e:35:11:d0:9a:7c:60:b5:46:7e:c9:
eb:f3:4e:51:70:e5:00:16:61:94:f2:6f:2a:f7:a3:e3:d5:06:
dc:61:ba:dc:07:1c:5f:41:58:70:ef:33:21:af:3b:6a:2f:d7:
06:84:34:d4:5e:c5:3f:f8:6c:ec:40:82:1a:03:f8:ad:b4:b6:
e8:0a:90:93:2a:0f:68:65:9f:b7:b8:bc:4d:87:b7:13:04:0d:
d4:a5:d7:cd:9f:31:8d:e8:b0:01:f7:7b:b6:9d:f2:a5:3b:88:
54:59:92:82:87:ba:11:15:0b:1c:a3:e6:6c:b6:86:0d:89:0f:
c1:e0:f7:45:0f:c6:2f:61:40:b5:29:a2:86:d5:87:b2:87:a7:
b7:f9:ab:3c:d2:6f:8a:50:34:9f:e5:21:8e:47:b1:e9:43:3c:
d3:65:5d:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:54:02 2026 by rpki-client