Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/22d20e-0bd6-49fb-b9c3-e20d707c00fb/1/1aiQlOEuVN2QHjLTPOUTHgRu5ww.mft
File: 1aiQlOEuVN2QHjLTPOUTHgRu5ww.mft (raw, json)
Hash identifier: /xAC1E1UDQwBgHELbM3EHsQ8xZrzuDnKrsh+FG0QSmk=
Subject key identifier: 6C:9F:5B:52:4C:F4:17:55:66:92:2F:25:D2:8E:82:7D:20:78:87:DE
Authority key identifier: D5:A8:90:94:E1:2E:54:DD:90:1E:32:D3:3C:E5:13:1E:04:6E:E7:0C
Certificate issuer: /CN=d5a89094e12e54dd901e32d33ce5131e046ee70c
Certificate serial: 019E1CB466119395EC90E5D6AC6EF3A1999E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1aiQlOEuVN2QHjLTPOUTHgRu5ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/22d20e-0bd6-49fb-b9c3-e20d707c00fb/1/1aiQlOEuVN2QHjLTPOUTHgRu5ww.mft
Manifest number: 059B
Signing time: Tue 12 May 2026 15:00:45 +0000
Manifest this update: Tue 12 May 2026 15:00:45 +0000
Manifest next update: Wed 13 May 2026 15:00:45 +0000
Files and hashes: 1: 1aiQlOEuVN2QHjLTPOUTHgRu5ww.crl (hash: vw7DGrPGflPb2BIoXdCXBvQakIVO+/WhdcRdxHCf8WM=)
2: lFXW11JmtXkBjm-uNTCzHeFzM7o.roa (hash: ehAd9mUsbggx1/mGegpTmvG9odTX8xtW0ahGr9D7dD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/22d20e-0bd6-49fb-b9c3-e20d707c00fb/1/1aiQlOEuVN2QHjLTPOUTHgRu5ww.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/22d20e-0bd6-49fb-b9c3-e20d707c00fb/1/1aiQlOEuVN2QHjLTPOUTHgRu5ww.mft
rsync://rpki.ripe.net/repository/DEFAULT/1aiQlOEuVN2QHjLTPOUTHgRu5ww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b4:66:11:93:95:ec:90:e5:d6:ac:6e:f3:a1:99:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5a89094e12e54dd901e32d33ce5131e046ee70c
Validity
Not Before: May 12 15:00:45 2026 GMT
Not After : May 13 15:00:45 2026 GMT
Subject: CN=6c9f5b524cf4175566922f25d28e827d207887de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:d7:7c:d5:ff:74:36:49:23:a2:0d:7f:f8:16:
33:0c:73:51:51:e8:6f:8f:1a:24:05:b9:d1:13:9a:
de:86:92:5a:f9:70:c7:1b:bc:12:9a:3b:8a:29:09:
e7:03:6d:82:75:8a:59:21:20:91:9c:65:34:bd:d3:
be:2a:86:8d:ca:4a:2f:39:94:a1:09:ab:fb:c7:c8:
ec:74:a8:c2:f5:c0:16:be:6a:e7:51:b3:6a:92:a5:
c2:0a:be:34:21:34:47:fa:79:3e:c1:6b:2b:b0:07:
34:be:78:e5:f1:9d:95:80:47:b3:64:f8:0a:e8:32:
03:89:08:a0:eb:0f:27:e2:96:cf:80:94:8e:b4:ff:
d0:a3:36:32:c1:76:41:67:71:00:48:19:9a:57:8b:
01:99:90:92:55:7a:85:30:f9:60:eb:c3:3d:9b:0f:
d6:e0:a8:19:9a:a5:fe:d9:33:bd:81:08:4c:47:6f:
fd:1c:c6:34:6f:2c:a9:53:0d:e2:62:54:28:20:9b:
2c:8a:1b:2b:77:94:d6:74:6b:0a:ea:01:41:69:d2:
fd:92:70:50:44:85:55:21:ea:3b:28:ba:73:17:7e:
4e:81:7c:2e:24:44:40:bd:dd:68:81:61:81:c0:5a:
e5:ad:37:08:80:a4:61:0a:e0:12:19:ea:54:07:55:
5e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:9F:5B:52:4C:F4:17:55:66:92:2F:25:D2:8E:82:7D:20:78:87:DE
X509v3 Authority Key Identifier:
keyid:D5:A8:90:94:E1:2E:54:DD:90:1E:32:D3:3C:E5:13:1E:04:6E:E7:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1aiQlOEuVN2QHjLTPOUTHgRu5ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/22d20e-0bd6-49fb-b9c3-e20d707c00fb/1/1aiQlOEuVN2QHjLTPOUTHgRu5ww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/22d20e-0bd6-49fb-b9c3-e20d707c00fb/1/1aiQlOEuVN2QHjLTPOUTHgRu5ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:9e:01:30:68:7c:65:67:db:9f:eb:a7:6a:f1:01:95:9c:a0:
fd:e8:3c:b7:45:62:ea:2d:68:63:23:07:c1:a4:55:e0:7b:10:
a3:3c:d4:e0:6e:b5:20:3f:96:a0:b3:c6:a7:de:c6:d5:86:da:
37:4a:e0:31:0b:5e:6e:5e:5f:bd:05:47:5d:80:bb:b1:44:cc:
70:a7:ed:5d:15:94:bb:89:61:1e:62:80:04:2c:31:a6:8b:3e:
2b:60:03:f3:4a:99:8c:1a:9c:e6:3b:99:c6:60:4d:e7:7b:23:
ce:61:f9:c4:b4:01:c4:f2:dd:99:fe:bb:a5:a0:5b:a0:1b:44:
18:b7:ec:95:46:50:88:76:8d:72:f2:3b:ef:63:4b:43:22:48:
c2:8f:f7:f9:95:19:e9:a2:81:5e:c5:d1:b7:0c:c6:bd:77:0f:
16:15:ff:2a:b6:19:ce:93:aa:e5:c1:6f:7c:a7:0d:9f:b1:8c:
c1:da:64:ec:09:fd:3b:b4:ae:18:16:2e:af:d4:4b:d9:0f:2a:
32:d2:20:77:c2:66:68:b4:4f:6c:da:ad:89:a5:4a:48:77:06:
83:16:cc:12:2d:7f:6d:7b:39:64:94:ef:4b:8b:7c:5c:7d:8f:
ad:e7:ba:42:71:75:cf:f7:dd:74:0d:67:47:9f:85:41:ac:72:
33:cd:68:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:50:08 2026 by rpki-client