Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.mft
File: 5aJ1VcGlxd3396zIOfpXeqfuepw.mft (raw, json)
Hash identifier: DAlAecnD8S6Dhmig1is3dl/cOvEVhl5frkfkWfBg+Ds=
Subject key identifier: 26:EB:C0:A9:7E:97:B7:A8:87:0C:1F:F2:36:5F:17:43:03:37:8E:60
Authority key identifier: E5:A2:75:55:C1:A5:C5:DD:F7:F7:AC:C8:39:FA:57:7A:A7:EE:7A:9C
Certificate issuer: /CN=e5a27555c1a5c5ddf7f7acc839fa577aa7ee7a9c
Certificate serial: 019D27E02E656EE1B71DEBE608C44E6F9909
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5aJ1VcGlxd3396zIOfpXeqfuepw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.mft
Manifest number: 188B
Signing time: Thu 26 Mar 2026 02:01:36 +0000
Manifest this update: Thu 26 Mar 2026 02:01:36 +0000
Manifest next update: Fri 27 Mar 2026 02:01:36 +0000
Files and hashes: 1: 5aJ1VcGlxd3396zIOfpXeqfuepw.crl (hash: m7qbMmtZpOOlLZH465kNy953Qul0leO3jAGMEHmmOnA=)
2: d5q3dL4EASzGPAAwnOfen6UJAcQ.roa (hash: oReaCreAqHsbklAkWbsJ/hVAQpba2f3VOsepsQ+XqOY=)
3: jQS3BAFCaZyv5m7n_ta1OKPwfLc.roa (hash: 8n/5W0nrqR/v9ZeOf9vjjYt0hTJWq/lXvjj2LJI4kOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5aJ1VcGlxd3396zIOfpXeqfuepw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:2e:65:6e:e1:b7:1d:eb:e6:08:c4:4e:6f:99:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5a27555c1a5c5ddf7f7acc839fa577aa7ee7a9c
Validity
Not Before: Mar 26 02:01:36 2026 GMT
Not After : Mar 27 02:01:36 2026 GMT
Subject: CN=26ebc0a97e97b7a8870c1ff2365f174303378e60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:05:b6:70:23:32:e1:3c:a0:b2:a2:69:3a:8b:
31:16:42:c0:4d:67:c7:f8:df:e2:30:a0:78:b2:cb:
07:a6:f3:31:36:05:06:bd:7e:80:a5:61:f1:93:85:
fb:a7:cb:8c:53:ae:89:9b:63:60:dd:02:f5:d7:b0:
04:2b:44:ad:b1:9b:fe:50:c7:c5:89:77:61:a6:29:
c6:47:1c:53:c2:fe:6b:7e:56:ad:79:56:52:e6:d9:
01:9a:9a:7d:2b:11:06:53:de:f2:8a:3e:85:f6:f1:
3b:79:2a:55:14:1a:fa:01:71:d2:63:06:ad:5e:6a:
43:85:91:0e:1d:99:91:09:04:3b:86:e1:17:a5:af:
b1:35:a6:a1:d8:ec:57:bd:72:99:0c:1e:e0:2c:8e:
12:14:6c:ad:ac:0d:14:b0:10:71:a9:51:4f:b8:3f:
b5:5b:1e:9e:6d:86:b7:e1:97:3a:f6:e3:61:fa:df:
04:6b:2d:2b:9b:d9:36:1e:e8:e6:c6:aa:cd:05:b0:
5f:74:6b:85:26:70:7d:44:fb:ea:97:d9:2a:0c:c1:
81:68:b4:d1:a8:54:af:05:f8:ce:aa:31:19:20:69:
51:12:60:d2:59:08:37:a6:77:c9:99:66:60:56:11:
18:f3:95:52:c9:60:fa:36:f8:c3:15:d5:9e:d1:46:
e1:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:EB:C0:A9:7E:97:B7:A8:87:0C:1F:F2:36:5F:17:43:03:37:8E:60
X509v3 Authority Key Identifier:
keyid:E5:A2:75:55:C1:A5:C5:DD:F7:F7:AC:C8:39:FA:57:7A:A7:EE:7A:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5aJ1VcGlxd3396zIOfpXeqfuepw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:fd:30:13:3e:4c:88:ae:1e:10:7b:3f:d0:fa:64:7f:4a:24:
35:c2:d2:87:8a:37:8d:90:4b:af:e6:77:7c:97:f0:f4:c3:63:
ef:65:cb:78:ff:16:b3:f1:d6:78:cc:3a:64:94:df:23:6d:46:
cb:14:62:73:5a:24:71:14:d5:8a:b6:1f:fc:e9:a6:91:9e:7b:
7d:34:95:b7:17:16:00:a0:be:fe:26:cf:e2:75:49:f2:f2:d8:
f9:72:62:bf:27:b0:89:47:f7:48:87:ef:30:d8:01:26:ed:40:
b7:f9:98:18:0e:44:0f:4d:a7:02:eb:2c:0e:df:27:d0:66:07:
2b:ca:9f:4a:e6:e4:00:80:c3:08:7c:bd:64:ef:f8:65:99:dd:
42:4a:d5:d4:43:01:1e:d4:ca:3c:5c:de:01:94:82:dc:e7:5d:
a5:5b:16:7a:12:0e:52:f3:bd:01:04:ac:80:a6:d7:70:60:e1:
e4:70:cf:3c:3c:8b:1d:a6:32:59:d1:c1:79:9c:36:12:02:31:
39:c4:bb:ae:0b:9e:2a:47:58:9c:e4:67:cc:29:15:02:7e:c2:
dc:e7:88:52:0d:12:0a:23:c8:48:2a:46:4c:a5:4f:70:c9:e4:
f0:93:46:91:6a:f5:8d:27:bd:ae:b0:dd:c0:d3:3d:a3:70:0f:
e7:f6:0a:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0n4C5lbuG3HevmCMROb5kJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1YTI3NTU1YzFhNWM1ZGRmN2Y3YWNjODM5ZmE1NzdhYTdl
ZTdhOWMwHhcNMjYwMzI2MDIwMTM2WhcNMjYwMzI3MDIwMTM2WjAzMTEwLwYDVQQD
EygyNmViYzBhOTdlOTdiN2E4ODcwYzFmZjIzNjVmMTc0MzAzMzc4ZTYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1wW2cCMy4TygsqJpOosxFkLATWfH
+N/iMKB4sssHpvMxNgUGvX6ApWHxk4X7p8uMU66Jm2Ng3QL117AEK0StsZv+UMfF
iXdhpinGRxxTwv5rflateVZS5tkBmpp9KxEGU97yij6F9vE7eSpVFBr6AXHSYwat
XmpDhZEOHZmRCQQ7huEXpa+xNaah2OxXvXKZDB7gLI4SFGytrA0UsBBxqVFPuD+1
Wx6ebYa34Zc69uNh+t8Eay0rm9k2HujmxqrNBbBfdGuFJnB9RPvql9kqDMGBaLTR
qFSvBfjOqjEZIGlREmDSWQg3pnfJmWZgVhEY85VSyWD6NvjDFdWe0UbhaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCbrwKl+l7eohwwf8jZfF0MDN45gMB8GA1UdIwQY
MBaAFOWidVXBpcXd9/esyDn6V3qn7nqcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWFKMVZjR2x4ZDMzOTZ6SU9mcFhlcWZ1ZXB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8xY2NkOWEtYzMwZS00ZThhLTg5NGEt
ZmQ3MTY2N2EyYjVmLzEvNWFKMVZjR2x4ZDMzOTZ6SU9mcFhlcWZ1ZXB3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC8xY2NkOWEtYzMwZS00ZThhLTg5NGEtZmQ3MTY2N2EyYjVm
LzEvNWFKMVZjR2x4ZDMzOTZ6SU9mcFhlcWZ1ZXB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQf0wEz5M
iK4eEHs/0Ppkf0okNcLSh4o3jZBLr+Z3fJfw9MNj72XLeP8Ws/HWeMw6ZJTfI21G
yxRic1okcRTVirYf/OmmkZ57fTSVtxcWAKC+/ibP4nVJ8vLY+XJivyewiUf3SIfv
MNgBJu1At/mYGA5ED02nAussDt8n0GYHK8qfSubkAIDDCHy9ZO/4ZZndQkrV1EMB
HtTKPFzeAZSC3OddpVsWehIOUvO9AQSsgKbXcGDh5HDPPDyLHaYyWdHBeZw2EgIx
OcS7rgueKkdYnORnzCkVAn7C3OeIUg0SCiPISCpGTKVPcMnk8JNGkWr1jSe9rrDd
wNM9o3AP5/YKfQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:37:57 2026 by rpki-client