Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/22d20e-0bd6-49fb-b9c3-e20d707c00fb/1/1aiQlOEuVN2QHjLTPOUTHgRu5ww.mft
File: 1aiQlOEuVN2QHjLTPOUTHgRu5ww.mft (raw, json)
Hash identifier: 94utYGu8zylTHgb6Hx5LLL5Y+FiJigqtmHAekw16OcY=
Subject key identifier: 0E:A5:F8:3F:7D:2F:87:AA:F6:22:98:6A:1B:C3:18:F3:77:FD:C5:C4
Authority key identifier: D5:A8:90:94:E1:2E:54:DD:90:1E:32:D3:3C:E5:13:1E:04:6E:E7:0C
Certificate issuer: /CN=d5a89094e12e54dd901e32d33ce5131e046ee70c
Certificate serial: 019D27720B769F4A6C2C802865C96ECC1CB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1aiQlOEuVN2QHjLTPOUTHgRu5ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/22d20e-0bd6-49fb-b9c3-e20d707c00fb/1/1aiQlOEuVN2QHjLTPOUTHgRu5ww.mft
Manifest number: 051C
Signing time: Thu 26 Mar 2026 00:01:18 +0000
Manifest this update: Thu 26 Mar 2026 00:01:18 +0000
Manifest next update: Fri 27 Mar 2026 00:01:18 +0000
Files and hashes: 1: 1aiQlOEuVN2QHjLTPOUTHgRu5ww.crl (hash: eZJPqLP5L2hjSCNZGe0p4dajHE22cCAtNker4O2uVGg=)
2: lFXW11JmtXkBjm-uNTCzHeFzM7o.roa (hash: ehAd9mUsbggx1/mGegpTmvG9odTX8xtW0ahGr9D7dD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/22d20e-0bd6-49fb-b9c3-e20d707c00fb/1/1aiQlOEuVN2QHjLTPOUTHgRu5ww.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/22d20e-0bd6-49fb-b9c3-e20d707c00fb/1/1aiQlOEuVN2QHjLTPOUTHgRu5ww.mft
rsync://rpki.ripe.net/repository/DEFAULT/1aiQlOEuVN2QHjLTPOUTHgRu5ww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:0b:76:9f:4a:6c:2c:80:28:65:c9:6e:cc:1c:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5a89094e12e54dd901e32d33ce5131e046ee70c
Validity
Not Before: Mar 26 00:01:18 2026 GMT
Not After : Mar 27 00:01:18 2026 GMT
Subject: CN=0ea5f83f7d2f87aaf622986a1bc318f377fdc5c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:47:fd:bb:7d:73:7f:4b:a4:19:e2:4b:46:c5:
f6:f7:2f:27:9a:4d:89:84:62:52:0d:a1:f3:6d:8e:
38:e2:76:f5:e2:1a:ed:79:85:02:e2:95:60:27:4d:
03:d7:90:6f:f5:c2:99:e5:0c:0d:e1:ac:92:34:53:
b7:e7:30:95:11:e5:e2:28:9f:a8:99:8f:e5:3f:cb:
f0:ea:2d:b9:f8:5b:68:41:7c:6c:32:4b:33:1d:87:
d3:b5:35:32:bc:db:6d:7c:21:1f:7d:c3:e6:8b:5a:
6a:0f:8c:28:0a:47:08:80:c5:0f:11:e7:c7:48:48:
2b:01:38:b6:42:4a:0c:72:da:06:47:d1:e8:d5:04:
8e:46:93:e8:b9:35:84:67:b4:0b:b0:12:e7:66:4a:
f3:61:58:23:e6:46:84:a9:05:63:06:63:33:f6:0a:
82:29:f0:91:34:79:0e:7e:6e:c3:be:ed:57:11:d3:
fe:a4:6d:ba:6a:f6:fd:af:73:96:7e:25:3d:1d:9c:
2b:09:73:df:37:61:32:11:82:06:fa:86:28:a7:65:
80:43:54:fc:9a:fb:ee:b8:cf:fa:a5:19:29:c8:06:
f7:1d:f2:67:a1:3d:40:40:e3:93:96:92:bc:6f:82:
b8:50:c8:b5:3b:e8:6b:93:fa:c5:81:d3:6e:18:8d:
a2:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:A5:F8:3F:7D:2F:87:AA:F6:22:98:6A:1B:C3:18:F3:77:FD:C5:C4
X509v3 Authority Key Identifier:
keyid:D5:A8:90:94:E1:2E:54:DD:90:1E:32:D3:3C:E5:13:1E:04:6E:E7:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1aiQlOEuVN2QHjLTPOUTHgRu5ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/22d20e-0bd6-49fb-b9c3-e20d707c00fb/1/1aiQlOEuVN2QHjLTPOUTHgRu5ww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/22d20e-0bd6-49fb-b9c3-e20d707c00fb/1/1aiQlOEuVN2QHjLTPOUTHgRu5ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:c2:65:c7:28:f8:2e:83:de:fb:99:1b:fc:91:b9:df:39:27:
51:08:ad:89:6a:72:36:fc:11:07:ed:fe:55:3c:db:f3:b7:b0:
ef:91:0f:5f:62:48:aa:07:2c:a5:79:69:1c:3b:1b:f4:c9:d6:
55:cc:e3:56:92:15:d4:56:73:c8:40:a9:db:3e:f6:64:8d:06:
9a:c2:ee:d8:f8:6a:ae:91:9b:11:43:0b:af:4f:06:71:36:ec:
56:c1:9e:b1:df:f8:93:bd:4e:d5:c4:15:13:8b:da:64:d9:9d:
5b:0f:be:c2:97:2f:ee:71:8f:a9:01:03:31:04:65:cf:5b:4f:
9a:65:ba:4a:88:13:26:bf:db:c2:75:5f:04:b3:34:99:23:79:
2e:38:30:30:3c:b5:2d:e7:40:81:cb:ad:e7:ef:e0:8a:1c:21:
48:c8:a0:b1:32:1c:4c:19:41:d6:2a:11:00:2d:ac:54:64:84:
00:a9:e5:81:8e:b6:a4:91:b2:b3:13:5d:f7:92:40:37:32:27:
64:ef:d2:1e:63:cb:91:8e:a8:3c:4e:f5:70:4a:76:57:7b:d8:
07:35:d6:ab:17:6e:86:9b:3e:4e:b6:ab:31:c5:39:bd:ac:2f:
ba:20:13:0e:9a:cc:30:2f:41:19:b9:d0:ac:d0:98:44:74:cf:
33:fb:53:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:57:51 2026 by rpki-client