Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/3afc81-30e6-4b8e-8d3b-57f54ea43e16/1/5aiGWRTezNyYByQf1wtrsIOkRLM.mft
File: 5aiGWRTezNyYByQf1wtrsIOkRLM.mft (raw, json)
Hash identifier: hjldUFEnsMGxJnTpFVHUlXHwoYxuzIkYP6lJ1IhLWvI=
Subject key identifier: 89:B6:24:21:AD:23:9C:37:81:75:2E:06:94:D8:39:55:D6:BC:B8:65
Authority key identifier: E5:A8:86:59:14:DE:CC:DC:98:07:24:1F:D7:0B:6B:B0:83:A4:44:B3
Certificate issuer: /CN=e5a8865914deccdc9807241fd70b6bb083a444b3
Certificate serial: 01A1C668870CA885FA0EA679EB14F49926E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5aiGWRTezNyYByQf1wtrsIOkRLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/3afc81-30e6-4b8e-8d3b-57f54ea43e16/1/5aiGWRTezNyYByQf1wtrsIOkRLM.mft
Manifest number: 1467
Signing time: Tue 10 Nov 2026 17:01:41 +0000
Manifest this update: Tue 10 Nov 2026 17:01:41 +0000
Manifest next update: Wed 11 Nov 2026 17:01:41 +0000
Files and hashes: 1: 5aiGWRTezNyYByQf1wtrsIOkRLM.crl (hash: d8MsWWDX3mZ6OnDx/ch3FoQLhDW2ivuVw3m2d/8+HDo=)
2: wnKKZs8CL5sITpd1bsL8mCN_whw.roa (hash: x/oWyELUEfox1cdM+OjmJcPeW5wZ59veRKaEMseu1OM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/3afc81-30e6-4b8e-8d3b-57f54ea43e16/1/5aiGWRTezNyYByQf1wtrsIOkRLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/3afc81-30e6-4b8e-8d3b-57f54ea43e16/1/5aiGWRTezNyYByQf1wtrsIOkRLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/5aiGWRTezNyYByQf1wtrsIOkRLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 16:12:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c6:68:87:0c:a8:85:fa:0e:a6:79:eb:14:f4:99:26:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5a8865914deccdc9807241fd70b6bb083a444b3
Validity
Not Before: Nov 10 17:01:41 2026 GMT
Not After : Nov 11 17:01:41 2026 GMT
Subject: CN=89b62421ad239c3781752e0694d83955d6bcb865
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:9a:91:f8:a2:36:22:f7:37:31:fc:43:b2:d1:
c4:5d:ed:9f:9d:56:56:30:60:97:4b:f0:a2:14:cc:
db:3e:e3:17:bc:ba:e2:3a:1d:fd:b8:af:b6:b5:c4:
be:20:89:cb:e8:02:75:4e:6e:aa:ed:3c:e3:6c:1b:
c2:1b:a7:5d:ad:e5:b2:5b:09:f6:ae:a1:dd:66:31:
d8:dd:17:30:f6:0e:68:11:b7:67:84:a6:35:65:04:
fb:6c:8c:95:ee:f2:0a:7b:d0:9f:72:fc:ed:92:b4:
72:31:82:5f:8c:36:30:99:d1:54:f5:d3:56:33:1a:
96:bf:8a:56:b1:0e:40:86:e0:9e:d5:9f:b9:b5:8e:
44:3f:92:30:35:5b:53:ef:1b:c6:a3:53:1b:96:62:
fe:85:71:10:57:5b:cf:a0:da:b2:3c:bd:bb:f6:dd:
fe:b7:4a:a5:f0:90:e3:ab:a3:a9:e1:2a:a0:05:d2:
2c:b4:2a:72:3f:0a:18:4a:d9:1e:73:2c:f9:64:04:
cc:d1:5a:de:88:0b:3c:ed:2d:92:d7:c4:90:df:15:
93:3f:83:c1:a3:29:51:86:a5:9d:1c:43:d0:a6:41:
ba:a4:c1:28:af:67:f7:97:1d:fb:5f:71:c0:55:bb:
d9:10:2f:bc:bf:da:d2:24:97:6d:f4:89:d7:78:22:
11:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:B6:24:21:AD:23:9C:37:81:75:2E:06:94:D8:39:55:D6:BC:B8:65
X509v3 Authority Key Identifier:
keyid:E5:A8:86:59:14:DE:CC:DC:98:07:24:1F:D7:0B:6B:B0:83:A4:44:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5aiGWRTezNyYByQf1wtrsIOkRLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/3afc81-30e6-4b8e-8d3b-57f54ea43e16/1/5aiGWRTezNyYByQf1wtrsIOkRLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/3afc81-30e6-4b8e-8d3b-57f54ea43e16/1/5aiGWRTezNyYByQf1wtrsIOkRLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:98:fc:54:0b:f9:68:e0:d0:c3:ea:ed:a5:2f:ed:04:07:0b:
8b:d0:8e:54:31:aa:a4:01:c0:55:f1:ff:1f:aa:e6:f7:dd:8c:
03:ac:fb:55:a3:84:44:ab:b9:c5:d3:62:f4:3b:76:31:ce:89:
15:e4:82:7e:58:59:68:01:ab:de:61:b8:7c:06:8a:95:a3:02:
2e:38:5f:0c:77:7c:3f:a2:71:84:15:da:fd:5a:14:65:a7:e5:
4b:e7:fa:9f:07:bc:22:94:c5:e6:30:67:f8:e7:f5:b8:9c:26:
72:54:f4:07:41:33:43:ea:2f:31:7a:39:d3:f0:11:f5:74:62:
75:48:cc:64:b2:14:d4:99:9a:64:67:c8:95:52:35:c7:09:56:
d0:63:ee:a3:68:f8:19:fd:11:8a:3a:83:aa:1b:fc:ef:2c:b0:
c9:57:bc:d3:de:2c:f3:3c:bf:d5:16:67:21:d4:fb:6a:04:80:
11:24:d8:09:69:09:95:f8:63:ec:04:0c:32:f6:ff:4e:f8:7a:
52:4b:db:e8:23:50:83:d1:53:d9:89:3b:40:0c:7d:2d:4a:f9:
9a:bf:b0:a0:20:72:83:0e:9d:2c:6c:22:31:f1:7c:9c:a4:44:
73:af:5b:6e:1c:f1:cb:52:01:d7:ac:08:59:d7:6b:f1:15:00:
53:df:bd:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 20:36:51 2026 by rpki-client