Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/3afc81-30e6-4b8e-8d3b-57f54ea43e16/1/5aiGWRTezNyYByQf1wtrsIOkRLM.mft
File: 5aiGWRTezNyYByQf1wtrsIOkRLM.mft (raw, json)
Hash identifier: agD+pjV2jZ5Y8M+Ue4/d408nnHCImSbSR7fnVYTBLGg=
Subject key identifier: 1C:0F:4A:5B:EB:C7:B1:25:02:A0:C8:93:E3:FA:B6:F0:82:0A:67:25
Authority key identifier: E5:A8:86:59:14:DE:CC:DC:98:07:24:1F:D7:0B:6B:B0:83:A4:44:B3
Certificate issuer: /CN=e5a8865914deccdc9807241fd70b6bb083a444b3
Certificate serial: 019E1DC79F175459E5F02EF0DFD2C01B4DCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5aiGWRTezNyYByQf1wtrsIOkRLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/3afc81-30e6-4b8e-8d3b-57f54ea43e16/1/5aiGWRTezNyYByQf1wtrsIOkRLM.mft
Manifest number: 1282
Signing time: Tue 12 May 2026 20:01:22 +0000
Manifest this update: Tue 12 May 2026 20:01:22 +0000
Manifest next update: Wed 13 May 2026 20:01:22 +0000
Files and hashes: 1: 5aiGWRTezNyYByQf1wtrsIOkRLM.crl (hash: vKLcMsCoCz0KsEyLEVKJK9cfLQhGeo2Fo4iZNqT0xIo=)
2: wnKKZs8CL5sITpd1bsL8mCN_whw.roa (hash: x/oWyELUEfox1cdM+OjmJcPeW5wZ59veRKaEMseu1OM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/3afc81-30e6-4b8e-8d3b-57f54ea43e16/1/5aiGWRTezNyYByQf1wtrsIOkRLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/3afc81-30e6-4b8e-8d3b-57f54ea43e16/1/5aiGWRTezNyYByQf1wtrsIOkRLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/5aiGWRTezNyYByQf1wtrsIOkRLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:9f:17:54:59:e5:f0:2e:f0:df:d2:c0:1b:4d:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5a8865914deccdc9807241fd70b6bb083a444b3
Validity
Not Before: May 12 20:01:22 2026 GMT
Not After : May 13 20:01:22 2026 GMT
Subject: CN=1c0f4a5bebc7b12502a0c893e3fab6f0820a6725
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:9b:f9:23:a5:1b:b9:93:0a:87:5a:bb:6f:d2:
3c:81:f3:d9:a0:30:af:17:5f:79:3f:94:4c:ca:70:
8a:48:f1:67:f9:5d:63:02:57:87:03:15:64:f9:b9:
22:68:29:46:75:a4:ba:94:90:e6:16:d5:30:09:31:
be:3d:7f:93:24:8d:8e:32:95:d6:56:13:6d:b1:85:
f4:68:fe:aa:26:07:ff:74:78:1d:34:df:aa:cc:18:
06:2f:a6:5b:ab:c0:d6:a2:56:0e:bb:c3:b4:c2:2f:
c8:0a:41:a5:db:5b:39:22:5c:38:73:c1:18:19:da:
2e:a8:f3:47:11:4e:65:55:f9:74:5e:56:da:4f:b3:
0a:68:f6:c4:96:65:42:c5:ed:71:83:a4:c0:cd:4e:
71:0b:64:4a:6a:39:34:65:b2:1c:bd:07:28:ba:7d:
a2:e5:83:6b:ae:f4:85:12:dd:75:c9:d3:a8:7d:c0:
34:1f:0c:c5:29:41:ba:d3:17:9f:57:d3:8e:e1:10:
ee:0f:73:79:4d:c8:40:d7:92:63:fe:a3:3f:de:b5:
82:a0:62:fc:0d:ef:a2:96:ed:f8:3f:2c:30:fb:b2:
ba:07:f3:51:02:fe:32:71:da:5a:89:ff:2a:74:b4:
2b:f1:7c:76:28:77:a6:c7:55:e0:02:eb:0d:9d:96:
e2:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:0F:4A:5B:EB:C7:B1:25:02:A0:C8:93:E3:FA:B6:F0:82:0A:67:25
X509v3 Authority Key Identifier:
keyid:E5:A8:86:59:14:DE:CC:DC:98:07:24:1F:D7:0B:6B:B0:83:A4:44:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5aiGWRTezNyYByQf1wtrsIOkRLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/3afc81-30e6-4b8e-8d3b-57f54ea43e16/1/5aiGWRTezNyYByQf1wtrsIOkRLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/3afc81-30e6-4b8e-8d3b-57f54ea43e16/1/5aiGWRTezNyYByQf1wtrsIOkRLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:99:b1:62:04:f9:26:3e:26:76:6b:6c:25:46:34:c9:96:25:
a5:7e:30:25:fc:27:fc:f4:1e:c3:8d:48:53:5b:bb:86:c0:b3:
21:e4:43:fa:a6:1b:19:1d:84:67:81:55:8e:18:70:d2:b3:f4:
e5:92:aa:a8:bf:ad:db:9f:02:02:87:52:31:89:7e:3f:be:3b:
ee:34:21:29:1e:ba:93:a8:7c:b7:98:39:8b:f0:9e:ba:19:a6:
c0:46:3e:64:70:a3:c7:ab:ec:1f:d4:23:60:65:84:af:46:5a:
6d:b2:d4:88:98:8c:40:3b:fa:7c:6c:7d:70:78:77:6c:58:18:
96:17:f0:6b:4a:70:4b:c8:ec:ad:42:b5:cb:50:00:0a:fd:d6:
a0:c9:d5:47:b8:71:65:9a:9c:75:80:63:9b:5f:23:64:81:8c:
b4:7e:d4:70:8a:03:ac:1c:42:cc:92:56:ef:8c:08:dd:85:a5:
fe:88:97:d6:3d:ea:a8:04:02:9c:64:d9:eb:6f:74:f4:18:8f:
87:0d:24:7a:8e:4c:d9:fe:55:b6:c1:8a:2a:6b:a8:a5:8d:85:
94:a0:87:b1:e0:11:bb:bc:c4:bf:4d:bc:3e:8b:a0:51:d2:81:
17:6b:09:6d:b8:47:eb:ff:c3:5a:f1:8a:d6:40:58:1d:7e:f9:
b2:3e:eb:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:31:43 2026 by rpki-client