Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/3afc81-30e6-4b8e-8d3b-57f54ea43e16/1/5aiGWRTezNyYByQf1wtrsIOkRLM.mft
File: 5aiGWRTezNyYByQf1wtrsIOkRLM.mft (raw, json)
Hash identifier: l4u0ERUz+bUqJantqLQBjlFV0j33aj9BcxkxVu0oZfo=
Subject key identifier: C4:98:88:D6:9F:8C:8A:91:7C:DA:92:EF:0E:3B:EF:DD:E1:C9:B3:37
Authority key identifier: E5:A8:86:59:14:DE:CC:DC:98:07:24:1F:D7:0B:6B:B0:83:A4:44:B3
Certificate issuer: /CN=e5a8865914deccdc9807241fd70b6bb083a444b3
Certificate serial: 019EBE10E67B71F39BFFF858E3A46F0B67DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5aiGWRTezNyYByQf1wtrsIOkRLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/3afc81-30e6-4b8e-8d3b-57f54ea43e16/1/5aiGWRTezNyYByQf1wtrsIOkRLM.mft
Manifest number: 12D5
Signing time: Fri 12 Jun 2026 23:00:38 +0000
Manifest this update: Fri 12 Jun 2026 23:00:38 +0000
Manifest next update: Sat 13 Jun 2026 23:00:38 +0000
Files and hashes: 1: 5aiGWRTezNyYByQf1wtrsIOkRLM.crl (hash: N68mbvR8d+0KM8WkH+VQ7dgRWnEGYDroVJS5BQkkDCE=)
2: wnKKZs8CL5sITpd1bsL8mCN_whw.roa (hash: x/oWyELUEfox1cdM+OjmJcPeW5wZ59veRKaEMseu1OM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/3afc81-30e6-4b8e-8d3b-57f54ea43e16/1/5aiGWRTezNyYByQf1wtrsIOkRLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/3afc81-30e6-4b8e-8d3b-57f54ea43e16/1/5aiGWRTezNyYByQf1wtrsIOkRLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/5aiGWRTezNyYByQf1wtrsIOkRLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 23:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:10:e6:7b:71:f3:9b:ff:f8:58:e3:a4:6f:0b:67:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5a8865914deccdc9807241fd70b6bb083a444b3
Validity
Not Before: Jun 12 23:00:38 2026 GMT
Not After : Jun 13 23:00:38 2026 GMT
Subject: CN=c49888d69f8c8a917cda92ef0e3befdde1c9b337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e6:63:64:f6:a7:a1:12:a2:f1:26:06:70:c0:
10:8c:f9:5a:30:b4:fc:48:fd:1c:e4:2d:82:88:e3:
7a:92:f4:98:34:44:42:ca:5d:ab:63:a8:e0:c0:d4:
8b:fe:46:b8:bb:9d:68:12:b5:38:33:ed:85:b5:40:
52:26:bf:d4:46:7f:f9:85:17:08:77:af:c1:14:e4:
aa:ab:7e:be:ca:d0:6d:7d:22:3d:0a:82:16:46:03:
11:07:61:40:f4:af:f3:2a:9f:48:dc:e3:a9:10:93:
f3:4f:59:ec:e8:bc:16:c6:83:72:d1:48:85:70:e7:
a5:84:e7:84:0b:0c:a4:fe:92:5f:8a:be:c7:28:da:
d9:01:80:53:3a:c8:08:7a:05:42:74:46:7f:a1:1b:
11:9b:9d:8a:5e:74:dc:e6:61:4c:75:4a:43:28:2d:
20:34:c0:08:52:59:19:8c:03:f1:bb:98:1b:2b:df:
d6:03:33:b0:bb:2d:09:4f:93:e0:ea:d5:c6:e5:4c:
1a:3c:52:51:a1:02:8f:5a:7d:c0:b5:fe:01:ea:bf:
19:84:d7:c7:50:ea:d1:8c:b7:17:92:72:88:45:3c:
61:40:e2:dd:9a:b9:cc:96:9b:00:4a:20:fc:a2:cf:
f6:c7:15:04:7a:cc:f6:e1:df:83:71:83:3c:c9:74:
35:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:98:88:D6:9F:8C:8A:91:7C:DA:92:EF:0E:3B:EF:DD:E1:C9:B3:37
X509v3 Authority Key Identifier:
keyid:E5:A8:86:59:14:DE:CC:DC:98:07:24:1F:D7:0B:6B:B0:83:A4:44:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5aiGWRTezNyYByQf1wtrsIOkRLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/3afc81-30e6-4b8e-8d3b-57f54ea43e16/1/5aiGWRTezNyYByQf1wtrsIOkRLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/3afc81-30e6-4b8e-8d3b-57f54ea43e16/1/5aiGWRTezNyYByQf1wtrsIOkRLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:ad:fb:41:a7:eb:60:98:ae:b5:55:16:f6:ef:15:35:f2:e8:
03:a2:3b:4c:04:f1:5c:51:b6:5b:ef:c9:2f:28:1e:cb:55:34:
5c:41:93:64:67:7f:00:98:1b:db:0a:fa:d5:ea:0e:8c:8d:14:
83:8d:69:50:70:19:8e:42:07:ff:22:37:b1:bb:4f:c7:fc:05:
19:db:a6:41:72:5a:54:08:49:bc:b3:d6:05:7a:67:05:6c:69:
19:c7:6e:e6:a4:7a:3e:ed:ab:af:cb:90:4b:c7:82:30:ad:a2:
55:55:d2:c1:8a:1f:90:9f:a1:04:76:18:26:53:0d:8c:c2:5c:
a0:b4:d4:b7:cb:18:c2:5d:e3:bc:46:72:cf:51:83:32:86:65:
72:25:22:92:ad:83:b5:97:82:97:eb:e3:f9:02:46:f6:70:ff:
ea:24:0f:4c:4f:dc:2b:2e:59:26:18:3d:2c:51:2b:a8:e3:e7:
ca:41:b3:b7:71:ee:74:f9:f3:03:de:c3:62:37:83:3f:13:99:
d3:8d:4a:86:24:79:fe:9c:3f:dd:4b:1e:98:4b:06:f8:1b:b7:
58:96:43:91:83:da:5b:2f:d0:bf:c6:fe:22:d7:a3:50:09:78:
ec:d5:c4:0d:74:c9:cd:87:9c:a3:6d:bd:58:68:d8:e8:70:6c:
0d:37:1a:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:17:24 2026 by rpki-client