Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/3afc81-30e6-4b8e-8d3b-57f54ea43e16/1/5aiGWRTezNyYByQf1wtrsIOkRLM.mft
File: 5aiGWRTezNyYByQf1wtrsIOkRLM.mft (raw, json)
Hash identifier: Fiiojgc1nZF9cQ0nHcrj7NtEM8E0+wOrao0Q6Orcq/M=
Subject key identifier: AB:EB:E1:52:97:36:B8:4C:93:B5:E5:85:59:C8:FE:FD:E4:25:44:DE
Authority key identifier: E5:A8:86:59:14:DE:CC:DC:98:07:24:1F:D7:0B:6B:B0:83:A4:44:B3
Certificate issuer: /CN=e5a8865914deccdc9807241fd70b6bb083a444b3
Certificate serial: 019CAAFCF4D1EADE2494198D253E806AD49C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5aiGWRTezNyYByQf1wtrsIOkRLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/3afc81-30e6-4b8e-8d3b-57f54ea43e16/1/5aiGWRTezNyYByQf1wtrsIOkRLM.mft
Manifest number: 11C2
Signing time: Sun 01 Mar 2026 20:00:30 +0000
Manifest this update: Sun 01 Mar 2026 20:00:30 +0000
Manifest next update: Mon 02 Mar 2026 20:00:30 +0000
Files and hashes: 1: 5aiGWRTezNyYByQf1wtrsIOkRLM.crl (hash: vlUurJcH0AmfhMxkllN3vSq79k/Hz6LnIQQckwRlOCQ=)
2: wnKKZs8CL5sITpd1bsL8mCN_whw.roa (hash: x/oWyELUEfox1cdM+OjmJcPeW5wZ59veRKaEMseu1OM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/3afc81-30e6-4b8e-8d3b-57f54ea43e16/1/5aiGWRTezNyYByQf1wtrsIOkRLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/3afc81-30e6-4b8e-8d3b-57f54ea43e16/1/5aiGWRTezNyYByQf1wtrsIOkRLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/5aiGWRTezNyYByQf1wtrsIOkRLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fc:f4:d1:ea:de:24:94:19:8d:25:3e:80:6a:d4:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5a8865914deccdc9807241fd70b6bb083a444b3
Validity
Not Before: Mar 1 20:00:30 2026 GMT
Not After : Mar 2 20:00:30 2026 GMT
Subject: CN=abebe1529736b84c93b5e58559c8fefde42544de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a8:de:0a:7a:48:a2:69:b6:0b:d7:61:21:df:
ba:3a:da:dc:dd:c8:44:3d:d9:b3:22:43:28:81:d0:
c2:88:4a:57:17:c3:ee:cd:0b:f7:c4:d7:3e:4b:d8:
18:3c:eb:79:e2:dd:d0:43:83:82:46:07:1b:32:9e:
ec:70:78:b3:cf:24:1e:24:f4:76:72:72:df:34:cf:
8f:0d:e4:57:91:3c:3b:8e:bc:01:ed:1e:a1:89:c3:
e1:d5:f2:d9:d1:97:b5:af:f3:ff:82:9f:b7:87:6e:
fe:d2:b3:7a:d6:41:71:b7:90:6c:c5:db:71:51:4f:
eb:86:45:a9:eb:73:90:84:4c:e7:e3:ee:bb:ca:cb:
da:8f:f2:be:07:86:5e:22:c4:14:c8:90:0d:49:25:
9a:b2:8f:1c:8f:65:7c:76:4e:c2:3e:07:5d:6c:15:
76:e2:f9:9c:05:29:11:bc:70:a6:0f:18:7a:92:f2:
90:ed:21:2a:4b:51:35:06:09:a9:c2:27:68:a6:12:
7d:6a:d3:db:1a:55:79:91:d1:1c:47:c2:0f:11:80:
10:4c:e9:c1:c1:c4:ba:2b:cb:e3:2d:c1:dd:d5:4c:
dc:2f:6b:66:55:4f:65:7f:7e:fd:3f:3f:db:87:0f:
88:e7:92:d4:80:72:2d:50:3d:de:f6:36:9b:42:1c:
ac:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:EB:E1:52:97:36:B8:4C:93:B5:E5:85:59:C8:FE:FD:E4:25:44:DE
X509v3 Authority Key Identifier:
keyid:E5:A8:86:59:14:DE:CC:DC:98:07:24:1F:D7:0B:6B:B0:83:A4:44:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5aiGWRTezNyYByQf1wtrsIOkRLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/3afc81-30e6-4b8e-8d3b-57f54ea43e16/1/5aiGWRTezNyYByQf1wtrsIOkRLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/3afc81-30e6-4b8e-8d3b-57f54ea43e16/1/5aiGWRTezNyYByQf1wtrsIOkRLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:7e:a1:2f:9c:0e:f0:ab:21:76:f7:7c:5e:1c:fc:85:e8:8d:
19:c8:38:3a:ae:b6:04:41:17:49:16:c2:96:14:35:9a:3c:97:
53:6b:aa:e5:31:c0:f8:aa:84:7a:1d:08:52:c9:74:e0:5b:f6:
e5:65:47:c1:af:e2:29:c6:3c:45:21:3e:9d:de:73:a9:b2:ba:
f4:bd:26:6c:49:ac:29:8e:06:42:2e:3b:a2:8c:bc:ae:96:5e:
a6:c1:f7:dd:29:3e:03:a8:ca:d3:2e:15:19:d9:87:e8:5f:7a:
bd:ae:dc:5d:eb:ce:3c:e0:d6:21:c0:7f:da:d6:3a:02:74:43:
cb:78:46:1b:f7:41:77:84:41:df:d7:1d:0f:95:51:53:22:18:
f1:c5:b4:5c:fb:a8:8b:b0:31:df:f7:c7:32:32:5b:66:cb:84:
72:46:9c:dc:3a:3c:0e:05:d5:5d:f3:4d:21:8b:6b:d9:2c:9f:
3d:81:11:8f:71:ad:86:3d:f3:58:f1:57:e3:c2:6c:20:d5:00:
f2:37:5d:65:98:60:eb:2c:6b:db:62:d6:d7:89:8d:9b:85:5e:
c3:61:27:7c:d4:2f:60:62:aa:db:af:cf:f6:2c:8e:47:38:6d:
06:bf:0c:b7:8e:70:f0:72:13:95:f2:b7:27:85:13:7b:df:36:
27:8e:29:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:50:27 2026 by rpki-client