Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/3afc81-30e6-4b8e-8d3b-57f54ea43e16/1/5aiGWRTezNyYByQf1wtrsIOkRLM.mft
File: 5aiGWRTezNyYByQf1wtrsIOkRLM.mft (raw, json)
Hash identifier: upbdYpIi5sT2NcHwCLWnrpFF1Hj0xZyF7umX4VGSTTI=
Subject key identifier: F9:22:D8:0C:FB:31:97:B6:2B:B9:25:46:24:07:EE:CD:C3:85:6C:18
Authority key identifier: E5:A8:86:59:14:DE:CC:DC:98:07:24:1F:D7:0B:6B:B0:83:A4:44:B3
Certificate issuer: /CN=e5a8865914deccdc9807241fd70b6bb083a444b3
Certificate serial: 01A0C39FFDF26FC4A3C43D2D10E9883F1267
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5aiGWRTezNyYByQf1wtrsIOkRLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/3afc81-30e6-4b8e-8d3b-57f54ea43e16/1/5aiGWRTezNyYByQf1wtrsIOkRLM.mft
Manifest number: 13E1
Signing time: Mon 21 Sep 2026 11:00:37 +0000
Manifest this update: Mon 21 Sep 2026 11:00:37 +0000
Manifest next update: Tue 22 Sep 2026 11:00:37 +0000
Files and hashes: 1: 5aiGWRTezNyYByQf1wtrsIOkRLM.crl (hash: ujrdEJ5Gk3Uqx3nI6xzwyxpkyJ9VL0Q2RtsI4SfaRSk=)
2: wnKKZs8CL5sITpd1bsL8mCN_whw.roa (hash: x/oWyELUEfox1cdM+OjmJcPeW5wZ59veRKaEMseu1OM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/3afc81-30e6-4b8e-8d3b-57f54ea43e16/1/5aiGWRTezNyYByQf1wtrsIOkRLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/3afc81-30e6-4b8e-8d3b-57f54ea43e16/1/5aiGWRTezNyYByQf1wtrsIOkRLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/5aiGWRTezNyYByQf1wtrsIOkRLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 11:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:9f:fd:f2:6f:c4:a3:c4:3d:2d:10:e9:88:3f:12:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5a8865914deccdc9807241fd70b6bb083a444b3
Validity
Not Before: Sep 21 11:00:37 2026 GMT
Not After : Sep 22 11:00:37 2026 GMT
Subject: CN=f922d80cfb3197b62bb925462407eecdc3856c18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:d0:54:5f:8c:8a:57:da:3f:48:f9:b3:ac:e1:
c6:60:f4:cd:87:65:92:29:03:52:14:17:0d:59:73:
11:8e:d9:06:ad:87:2b:d3:0d:ff:e1:1f:0b:67:b8:
75:30:db:d2:90:7f:b0:9c:8e:20:ac:4f:e1:61:dc:
91:b8:88:81:04:16:7a:b7:bb:6f:50:0d:18:27:47:
eb:fd:ce:8e:4a:d6:90:3f:a1:0e:99:a5:32:e9:41:
9e:72:bb:9a:75:c4:21:33:58:6a:fd:9d:5b:fd:8c:
b8:54:3e:5a:02:52:d6:89:f4:6f:5c:d0:39:9c:a7:
f1:69:2b:bc:a4:9d:5b:03:04:93:33:e8:79:da:73:
7b:7f:66:19:91:69:f6:e6:bf:30:9c:8f:2e:f1:fd:
e0:0e:9f:b9:17:c9:17:13:fc:06:ec:52:3c:df:3d:
42:1c:13:cb:0a:81:d7:16:a2:11:e0:40:fe:55:9a:
0d:f3:a4:5b:42:f4:09:df:a8:fc:9f:dc:76:0a:3e:
f0:b4:d3:d4:41:98:f0:98:e7:e4:2f:e3:91:2e:aa:
cb:1c:82:cd:01:02:e7:81:50:ac:11:22:59:cb:87:
ed:11:eb:41:42:33:c6:76:4c:0e:6a:3e:5d:24:33:
ea:f9:2d:4c:0f:44:12:b4:0c:66:f5:9a:90:b7:f5:
07:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:22:D8:0C:FB:31:97:B6:2B:B9:25:46:24:07:EE:CD:C3:85:6C:18
X509v3 Authority Key Identifier:
keyid:E5:A8:86:59:14:DE:CC:DC:98:07:24:1F:D7:0B:6B:B0:83:A4:44:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5aiGWRTezNyYByQf1wtrsIOkRLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/3afc81-30e6-4b8e-8d3b-57f54ea43e16/1/5aiGWRTezNyYByQf1wtrsIOkRLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/3afc81-30e6-4b8e-8d3b-57f54ea43e16/1/5aiGWRTezNyYByQf1wtrsIOkRLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:6c:8b:c8:c9:b2:11:bb:82:02:d1:c3:0e:67:fb:b9:e5:5c:
5d:f5:95:f7:2e:c1:0a:a3:2c:4e:c4:84:17:79:cd:08:a9:7c:
7f:d4:43:9f:e8:52:da:e5:a3:15:fe:cc:8f:68:71:77:6e:33:
d4:0f:cb:5d:55:37:b8:e3:37:89:0a:fe:1d:e0:93:1e:44:3e:
1f:f9:b3:43:1b:ca:f7:96:6d:bd:4f:a1:0f:e6:05:42:fa:9b:
df:82:00:f0:3a:db:a7:21:ae:2b:cb:d1:20:03:07:11:af:cf:
e0:e6:c6:7c:89:9c:5b:cc:67:fa:e4:5f:3d:7d:6d:a0:1c:e0:
7b:41:10:4d:05:6b:64:b9:75:69:37:5d:2b:da:e3:d4:f7:33:
6b:29:8e:85:10:e0:51:76:c4:95:94:0f:54:da:c2:b2:25:7d:
ba:a1:bc:14:99:93:b9:c3:05:c4:0c:ab:d3:79:33:78:84:25:
86:aa:dc:a4:12:94:c6:e2:22:3b:03:06:89:be:b0:80:ed:02:
2c:2d:15:a9:d1:50:68:1e:af:bb:35:c3:94:2b:f4:9b:1c:a8:
5b:1e:ca:96:f1:a8:f9:94:ae:a0:ad:b6:6f:1a:a0:b3:92:da:
ee:f5:4b:fe:f1:2f:d9:0e:47:37:d4:bd:64:0e:fb:4b:ef:f2:
b5:a1:cc:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:34:38 2026 by rpki-client