
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/9f5223-a56c-465b-ac65-fd152a6a0587/1/5ar3bSe6gS4NXOIwXxfFMYjCWAw.mft
File: 5ar3bSe6gS4NXOIwXxfFMYjCWAw.mft (raw, json)
Hash identifier: YGjhP4AYpc3pCrA6aPJFkpuUghvZmCx/EVNNhuhZym4=
Subject key identifier: EB:C6:99:DC:E2:11:D5:AE:59:C8:DE:13:C7:FD:3E:6D:35:B8:5F:FE
Authority key identifier: E5:AA:F7:6D:27:BA:81:2E:0D:5C:E2:30:5F:17:C5:31:88:C2:58:0C
Certificate issuer: /CN=e5aaf76d27ba812e0d5ce2305f17c53188c2580c
Certificate serial: 01A0CAEB9188329D86B8A5147CC6A4D845CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5ar3bSe6gS4NXOIwXxfFMYjCWAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9f5223-a56c-465b-ac65-fd152a6a0587/1/5ar3bSe6gS4NXOIwXxfFMYjCWAw.mft
Manifest number: 0C78
Signing time: Tue 22 Sep 2026 21:00:30 +0000
Manifest this update: Tue 22 Sep 2026 21:00:30 +0000
Manifest next update: Wed 23 Sep 2026 21:00:30 +0000
Files and hashes: 1: 5ar3bSe6gS4NXOIwXxfFMYjCWAw.crl (hash: S9AYx5KWTqntuOOOUGNwT5bD8UryUeibGtVFZelfXF8=)
2: oPgrYeYQdKE5w12V1Qsc5asf-z0.roa (hash: DyrqcRbA6WGivtdHIlCxrVDtSLyegGOpED1YlRSd3w0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9f5223-a56c-465b-ac65-fd152a6a0587/1/5ar3bSe6gS4NXOIwXxfFMYjCWAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/9f5223-a56c-465b-ac65-fd152a6a0587/1/5ar3bSe6gS4NXOIwXxfFMYjCWAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5ar3bSe6gS4NXOIwXxfFMYjCWAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:eb:91:88:32:9d:86:b8:a5:14:7c:c6:a4:d8:45:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5aaf76d27ba812e0d5ce2305f17c53188c2580c
Validity
Not Before: Sep 22 21:00:30 2026 GMT
Not After : Sep 23 21:00:30 2026 GMT
Subject: CN=ebc699dce211d5ae59c8de13c7fd3e6d35b85ffe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:82:e8:e6:e1:6d:b3:94:dc:44:c0:df:5a:94:
ae:b0:7c:3d:02:06:98:04:a2:a1:f0:66:a7:b2:fe:
f6:3c:1d:c1:c0:4b:be:0f:ba:6c:b8:dc:98:f5:59:
e6:2b:75:8e:23:97:cf:04:4b:a3:b1:61:96:f0:a6:
cc:91:83:1a:ba:08:3c:e8:09:d4:6b:27:38:2a:9f:
c4:99:26:7a:56:8f:01:23:cb:fd:15:42:50:2b:f5:
37:62:c7:a3:a0:d6:cf:ab:ea:d0:0f:ec:0a:26:22:
9c:ec:c4:08:69:d0:b8:91:13:86:d8:b4:df:98:a0:
ec:d9:a5:d6:6b:d4:af:e6:18:79:44:28:3f:fb:8f:
ed:32:84:9b:a7:ec:e9:04:ac:10:21:9a:32:b4:a2:
8a:0c:98:45:92:fa:56:88:e5:01:00:81:fb:31:ce:
55:87:17:e9:8c:47:ea:20:e8:a3:01:51:dd:f9:2f:
5b:00:2d:0f:86:20:d3:55:55:e4:bf:75:0a:53:8a:
d5:c7:29:7e:d2:02:ea:c7:ea:8f:b9:4f:f3:b7:7d:
41:b4:9c:53:76:da:57:df:36:db:a3:1c:61:f0:93:
40:ab:27:64:59:20:41:67:3a:f7:ec:5c:46:3b:9e:
93:4a:70:22:ad:7b:81:69:c0:82:7b:50:8d:92:a8:
e5:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:C6:99:DC:E2:11:D5:AE:59:C8:DE:13:C7:FD:3E:6D:35:B8:5F:FE
X509v3 Authority Key Identifier:
keyid:E5:AA:F7:6D:27:BA:81:2E:0D:5C:E2:30:5F:17:C5:31:88:C2:58:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5ar3bSe6gS4NXOIwXxfFMYjCWAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9f5223-a56c-465b-ac65-fd152a6a0587/1/5ar3bSe6gS4NXOIwXxfFMYjCWAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9f5223-a56c-465b-ac65-fd152a6a0587/1/5ar3bSe6gS4NXOIwXxfFMYjCWAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:75:8d:b0:aa:a5:3e:14:c2:0d:1f:d9:9d:65:fd:5d:f5:92:
75:34:3a:96:e7:cb:eb:6f:a9:eb:e6:df:13:d3:5a:ed:71:1d:
5f:e6:1c:4d:e1:f5:85:0a:9a:9e:fe:c2:3e:87:26:d4:0c:d7:
8b:14:30:1c:fb:6a:b3:59:c8:a7:b7:44:c5:0b:be:2c:68:27:
b4:6b:dd:7f:fc:ef:98:1a:cc:80:75:43:86:d9:b0:4b:ef:1b:
10:14:46:aa:9d:51:0e:e5:c3:26:8c:ec:0c:c0:e2:3d:61:81:
81:a1:7c:55:7a:bf:8e:f0:0c:ae:33:ec:15:4b:19:dc:b3:1d:
91:32:a0:1c:ff:98:89:e1:19:c0:f0:fe:4e:4f:fe:2a:18:b0:
6f:5d:b6:ce:97:70:92:c5:a5:32:48:58:0b:23:4c:36:2d:af:
41:9c:00:7e:01:35:8c:a8:80:95:bc:31:0c:60:bb:88:95:3d:
db:f1:9d:b9:32:19:a3:64:60:0e:50:da:ed:1b:04:fd:79:f2:
b2:fb:20:c1:5e:10:a4:a3:6e:76:b9:db:5b:78:2d:4b:a1:78:
05:44:e7:db:53:97:60:37:a6:9a:bd:78:f1:0d:52:1a:22:2c:
a4:64:70:98:3d:7e:9e:1a:e3:e6:e0:7c:a7:47:6a:ca:c7:e1:
13:ba:6e:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 23:20:34 2026 by rpki-client