Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.mft
File: 5aJ1VcGlxd3396zIOfpXeqfuepw.mft (raw, json)
Hash identifier: 5DGvBGr8eYNedCDBS7OxXUEguZgQOb20k5PWWbgAw/A=
Subject key identifier: 32:84:CC:44:5F:AC:0D:1B:CB:10:E2:84:2A:40:26:FE:2F:C7:E0:47
Authority key identifier: E5:A2:75:55:C1:A5:C5:DD:F7:F7:AC:C8:39:FA:57:7A:A7:EE:7A:9C
Certificate issuer: /CN=e5a27555c1a5c5ddf7f7acc839fa577aa7ee7a9c
Certificate serial: 019E1D22F4A07964135A35A1FFEFC1CECEE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5aJ1VcGlxd3396zIOfpXeqfuepw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.mft
Manifest number: 190A
Signing time: Tue 12 May 2026 17:01:30 +0000
Manifest this update: Tue 12 May 2026 17:01:30 +0000
Manifest next update: Wed 13 May 2026 17:01:30 +0000
Files and hashes: 1: 5aJ1VcGlxd3396zIOfpXeqfuepw.crl (hash: 09TAVVADjMrEMSiw5B1NErwLWdkblc1MYYZ0nwhfYHc=)
2: d5q3dL4EASzGPAAwnOfen6UJAcQ.roa (hash: oReaCreAqHsbklAkWbsJ/hVAQpba2f3VOsepsQ+XqOY=)
3: jQS3BAFCaZyv5m7n_ta1OKPwfLc.roa (hash: 8n/5W0nrqR/v9ZeOf9vjjYt0hTJWq/lXvjj2LJI4kOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5aJ1VcGlxd3396zIOfpXeqfuepw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:f4:a0:79:64:13:5a:35:a1:ff:ef:c1:ce:ce:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5a27555c1a5c5ddf7f7acc839fa577aa7ee7a9c
Validity
Not Before: May 12 17:01:30 2026 GMT
Not After : May 13 17:01:30 2026 GMT
Subject: CN=3284cc445fac0d1bcb10e2842a4026fe2fc7e047
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:fa:f3:81:4f:aa:3f:08:8b:1c:89:46:4c:20:
12:f1:b0:96:fd:05:1c:d0:4d:4e:a2:d8:4b:bc:eb:
be:71:7a:42:9a:19:ef:52:c0:39:1f:79:88:c6:73:
0d:c0:7e:77:6f:85:fc:bd:b2:e6:25:dc:f7:ae:19:
fe:f7:b8:9f:39:28:e9:ba:99:44:82:a4:93:e9:07:
f1:45:9a:e6:f8:53:93:1c:8d:ec:3e:4b:25:7e:c6:
2e:43:2e:0e:42:9a:30:f1:29:0a:64:d2:49:14:29:
0a:4a:46:58:ad:b0:54:1d:88:65:f4:26:e8:1e:4c:
e5:16:40:f7:50:ed:a4:2b:d9:b1:74:e1:aa:cb:6a:
f1:74:4c:38:a1:eb:84:89:dc:ad:b2:01:8f:0a:00:
b6:a7:19:16:ca:78:83:3e:ec:6f:85:4d:db:3b:4c:
c2:d9:d3:1b:13:77:e6:60:a7:2f:e5:3e:56:7a:f4:
4b:c9:c2:95:05:55:bd:0b:42:62:63:fb:e0:38:57:
25:12:ca:8d:4f:df:f6:97:f1:6a:5d:47:f9:84:a6:
b8:86:bc:85:83:2c:e3:b2:78:79:f3:ee:90:28:49:
8d:92:c0:39:47:78:e6:4f:5a:1e:87:6f:91:47:e9:
fd:5c:ea:4b:c4:02:4c:f4:bb:fc:5c:cf:f2:60:71:
37:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:84:CC:44:5F:AC:0D:1B:CB:10:E2:84:2A:40:26:FE:2F:C7:E0:47
X509v3 Authority Key Identifier:
keyid:E5:A2:75:55:C1:A5:C5:DD:F7:F7:AC:C8:39:FA:57:7A:A7:EE:7A:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5aJ1VcGlxd3396zIOfpXeqfuepw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:0b:e1:50:93:df:f8:33:d2:0f:b9:5f:b3:94:a4:72:ac:1b:
10:b8:0d:6b:f1:d6:6e:8e:fd:86:3a:3e:55:d7:a7:20:1f:26:
f4:a8:a4:b3:f6:3e:67:c1:5a:96:68:44:2d:0f:57:37:63:96:
de:ee:a7:bc:83:5e:c4:71:a5:36:11:98:6b:f1:69:71:3a:46:
b3:b2:54:3e:bd:ed:d3:bd:df:78:ef:d8:8d:9c:ee:0b:a4:3c:
1d:ef:76:c6:24:9b:59:5d:5c:f7:c7:bb:dc:66:7a:c9:e8:b2:
ef:51:61:21:83:2b:e5:2f:0a:07:83:30:32:fc:11:06:ee:bd:
2a:cb:2c:73:ee:e9:23:89:7b:48:86:04:91:73:5c:da:1a:6d:
0f:0d:52:5a:7f:9b:e1:ad:ce:8a:b4:36:89:20:06:b8:12:7f:
1b:94:64:f3:2d:39:bf:ba:7e:38:cc:bf:ae:45:85:70:20:31:
2d:f9:11:7f:ec:4b:26:77:d3:6b:38:03:0e:7f:dd:e1:9c:cb:
58:56:7d:11:6c:76:36:48:18:ba:f2:25:af:60:8a:56:ee:9e:
ff:21:46:de:1a:87:41:2f:19:6b:af:9c:a3:d9:f1:63:0b:11:
f2:51:c8:e1:21:58:93:cd:d7:77:95:25:d1:ba:f6:da:3d:1b:
43:73:0c:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dIvSgeWQTWjWh/+/Bzs7lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1YTI3NTU1YzFhNWM1ZGRmN2Y3YWNjODM5ZmE1NzdhYTdl
ZTdhOWMwHhcNMjYwNTEyMTcwMTMwWhcNMjYwNTEzMTcwMTMwWjAzMTEwLwYDVQQD
EygzMjg0Y2M0NDVmYWMwZDFiY2IxMGUyODQyYTQwMjZmZTJmYzdlMDQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyfrzgU+qPwiLHIlGTCAS8bCW/QUc
0E1OothLvOu+cXpCmhnvUsA5H3mIxnMNwH53b4X8vbLmJdz3rhn+97ifOSjpuplE
gqST6QfxRZrm+FOTHI3sPkslfsYuQy4OQpow8SkKZNJJFCkKSkZYrbBUHYhl9Cbo
HkzlFkD3UO2kK9mxdOGqy2rxdEw4oeuEidytsgGPCgC2pxkWyniDPuxvhU3bO0zC
2dMbE3fmYKcv5T5WevRLycKVBVW9C0JiY/vgOFclEsqNT9/2l/FqXUf5hKa4hryF
gyzjsnh58+6QKEmNksA5R3jmT1oeh2+RR+n9XOpLxAJM9Lv8XM/yYHE3cQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDKEzERfrA0byxDihCpAJv4vx+BHMB8GA1UdIwQY
MBaAFOWidVXBpcXd9/esyDn6V3qn7nqcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWFKMVZjR2x4ZDMzOTZ6SU9mcFhlcWZ1ZXB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8xY2NkOWEtYzMwZS00ZThhLTg5NGEt
ZmQ3MTY2N2EyYjVmLzEvNWFKMVZjR2x4ZDMzOTZ6SU9mcFhlcWZ1ZXB3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC8xY2NkOWEtYzMwZS00ZThhLTg5NGEtZmQ3MTY2N2EyYjVm
LzEvNWFKMVZjR2x4ZDMzOTZ6SU9mcFhlcWZ1ZXB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQQvhUJPf
+DPSD7lfs5SkcqwbELgNa/HWbo79hjo+VdenIB8m9Kiks/Y+Z8FalmhELQ9XN2OW
3u6nvINexHGlNhGYa/FpcTpGs7JUPr3t073feO/YjZzuC6Q8He92xiSbWV1c98e7
3GZ6yeiy71FhIYMr5S8KB4MwMvwRBu69Ksssc+7pI4l7SIYEkXNc2hptDw1SWn+b
4a3OirQ2iSAGuBJ/G5Rk8y05v7p+OMy/rkWFcCAxLfkRf+xLJnfTazgDDn/d4ZzL
WFZ9EWx2NkgYuvIlr2CKVu6e/yFG3hqHQS8Za6+co9nxYwsR8lHI4SFYk83Xd5Ul
0br22j0bQ3MM4g==
-----END CERTIFICATE-----
Generated at Wed May 13 00:12:03 2026 by rpki-client