Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/3afc81-30e6-4b8e-8d3b-57f54ea43e16/1/5aiGWRTezNyYByQf1wtrsIOkRLM.mft
File: 5aiGWRTezNyYByQf1wtrsIOkRLM.mft (raw, json)
Hash identifier: dPTgkqyq8e5vWhdhWxv2ODq4LtPilfLImE4Xgbfc3z8=
Subject key identifier: 73:A4:AF:32:55:B4:E3:5F:91:33:F6:6C:04:AB:93:47:E4:D7:1D:7F
Authority key identifier: E5:A8:86:59:14:DE:CC:DC:98:07:24:1F:D7:0B:6B:B0:83:A4:44:B3
Certificate issuer: /CN=e5a8865914deccdc9807241fd70b6bb083a444b3
Certificate serial: 019F927FB11688393FAD6B938BA3F749427B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5aiGWRTezNyYByQf1wtrsIOkRLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/3afc81-30e6-4b8e-8d3b-57f54ea43e16/1/5aiGWRTezNyYByQf1wtrsIOkRLM.mft
Manifest number: 1343
Signing time: Fri 24 Jul 2026 05:01:09 +0000
Manifest this update: Fri 24 Jul 2026 05:01:09 +0000
Manifest next update: Sat 25 Jul 2026 05:01:09 +0000
Files and hashes: 1: 5aiGWRTezNyYByQf1wtrsIOkRLM.crl (hash: EMA4JvVDQOC3HLR8KCXd8XNUigkMqj5kGI7Tgpg4Xp4=)
2: wnKKZs8CL5sITpd1bsL8mCN_whw.roa (hash: x/oWyELUEfox1cdM+OjmJcPeW5wZ59veRKaEMseu1OM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/3afc81-30e6-4b8e-8d3b-57f54ea43e16/1/5aiGWRTezNyYByQf1wtrsIOkRLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/3afc81-30e6-4b8e-8d3b-57f54ea43e16/1/5aiGWRTezNyYByQf1wtrsIOkRLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/5aiGWRTezNyYByQf1wtrsIOkRLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7f:b1:16:88:39:3f:ad:6b:93:8b:a3:f7:49:42:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5a8865914deccdc9807241fd70b6bb083a444b3
Validity
Not Before: Jul 24 05:01:09 2026 GMT
Not After : Jul 25 05:01:09 2026 GMT
Subject: CN=73a4af3255b4e35f9133f66c04ab9347e4d71d7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:17:a6:f5:13:8d:5e:7b:e5:f6:62:84:b9:99:
56:a1:09:b3:14:8b:04:bb:67:e8:c6:d1:5f:1c:49:
82:84:2b:c0:03:8b:72:30:0a:6d:7d:d2:fa:d1:a7:
c6:f2:0d:bb:05:a2:9c:40:c5:41:1b:6b:19:11:d1:
a9:36:35:f9:d3:28:fd:74:34:86:6f:f4:b8:16:d8:
e9:cc:ef:2d:fa:8e:c2:7c:3d:a2:fe:54:5b:4a:2b:
89:e4:02:b0:8d:be:c2:39:86:18:97:94:a8:5a:c6:
9b:5a:d5:95:02:18:e1:3a:b8:31:c2:8f:62:ee:c1:
b5:94:ab:0b:da:e5:0d:dc:d4:7b:27:a2:84:cf:6e:
88:c3:c1:1b:d4:19:e7:39:24:e1:f4:07:ed:0d:fe:
7e:c6:f8:34:84:4d:67:c9:fb:99:e0:f7:38:c8:6a:
f0:3f:7d:21:2c:f1:4d:e9:5f:52:a0:87:63:fb:04:
ae:dd:81:d3:59:ba:e1:7e:60:b6:d9:b8:bb:7b:cf:
2d:0c:7c:bc:11:b4:ef:27:c7:26:ec:ea:dd:3b:7a:
43:28:0c:d5:9e:68:e7:28:4c:af:da:7b:96:8e:92:
b7:47:22:62:20:de:d7:f0:5c:50:5c:d3:1e:61:d2:
c6:0e:9a:28:8d:ec:31:19:e7:38:07:23:9c:22:52:
f4:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:A4:AF:32:55:B4:E3:5F:91:33:F6:6C:04:AB:93:47:E4:D7:1D:7F
X509v3 Authority Key Identifier:
keyid:E5:A8:86:59:14:DE:CC:DC:98:07:24:1F:D7:0B:6B:B0:83:A4:44:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5aiGWRTezNyYByQf1wtrsIOkRLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/3afc81-30e6-4b8e-8d3b-57f54ea43e16/1/5aiGWRTezNyYByQf1wtrsIOkRLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/3afc81-30e6-4b8e-8d3b-57f54ea43e16/1/5aiGWRTezNyYByQf1wtrsIOkRLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:1f:6a:ec:d0:3e:04:be:3a:8f:88:52:62:89:d9:1b:53:c3:
63:00:4f:27:95:40:28:cc:d4:ec:03:ed:11:cc:af:74:b1:d8:
28:c0:59:c5:6e:e0:98:df:2f:7f:55:27:85:db:f6:14:74:9b:
0c:42:d0:90:69:5c:c4:6c:c2:59:48:82:43:da:ea:c8:6c:72:
96:7e:7d:0e:d4:30:a4:05:6a:c2:d5:60:4b:e9:38:90:3e:99:
b7:dc:43:df:68:14:3e:1c:63:2d:75:52:67:40:a3:59:3c:b9:
d5:54:5a:da:13:e5:b1:23:2d:ac:fb:7b:06:33:45:66:72:ec:
3e:a4:fe:6f:87:16:84:08:47:b9:5e:9d:73:82:88:75:e8:41:
82:17:42:f6:14:83:44:78:a9:75:ac:78:82:74:51:22:7a:cb:
3b:70:35:aa:48:67:ed:19:13:71:4f:8f:d0:ff:b4:33:36:f4:
6f:dc:81:fa:85:b3:6a:ae:a5:d3:d7:38:d1:d4:15:d2:ff:40:
42:3d:9e:b0:99:95:e2:46:eb:6a:52:bc:0c:7b:54:61:04:04:
b7:90:fc:7c:9a:c7:4d:ae:de:ac:33:34:02:9f:8d:95:cc:4c:
8a:97:af:1f:86:f6:87:11:34:65:a9:dc:4f:a9:d0:be:77:3e:
c5:3d:c5:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:23:06 2026 by rpki-client