Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/3afc81-30e6-4b8e-8d3b-57f54ea43e16/1/5aiGWRTezNyYByQf1wtrsIOkRLM.mft
File: 5aiGWRTezNyYByQf1wtrsIOkRLM.mft (raw, json)
Hash identifier: MY6WNplT8DVLagwwNmKzLxBshsYIjZp/xRRmp1NjCZo=
Subject key identifier: 03:A5:03:8F:60:A1:84:D3:86:EC:88:3B:49:36:F8:8E:A1:55:C3:F0
Authority key identifier: E5:A8:86:59:14:DE:CC:DC:98:07:24:1F:D7:0B:6B:B0:83:A4:44:B3
Certificate issuer: /CN=e5a8865914deccdc9807241fd70b6bb083a444b3
Certificate serial: 019DA41D11228EF682D5DAB77FBBCE527588
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5aiGWRTezNyYByQf1wtrsIOkRLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/3afc81-30e6-4b8e-8d3b-57f54ea43e16/1/5aiGWRTezNyYByQf1wtrsIOkRLM.mft
Manifest number: 1243
Signing time: Sun 19 Apr 2026 05:01:01 +0000
Manifest this update: Sun 19 Apr 2026 05:01:01 +0000
Manifest next update: Mon 20 Apr 2026 05:01:01 +0000
Files and hashes: 1: 5aiGWRTezNyYByQf1wtrsIOkRLM.crl (hash: aCQWEXptcwe1A3BPThjdAWu25V+L7E2ahIRij2+7ozE=)
2: wnKKZs8CL5sITpd1bsL8mCN_whw.roa (hash: x/oWyELUEfox1cdM+OjmJcPeW5wZ59veRKaEMseu1OM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/3afc81-30e6-4b8e-8d3b-57f54ea43e16/1/5aiGWRTezNyYByQf1wtrsIOkRLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/3afc81-30e6-4b8e-8d3b-57f54ea43e16/1/5aiGWRTezNyYByQf1wtrsIOkRLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/5aiGWRTezNyYByQf1wtrsIOkRLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:1d:11:22:8e:f6:82:d5:da:b7:7f:bb:ce:52:75:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5a8865914deccdc9807241fd70b6bb083a444b3
Validity
Not Before: Apr 19 05:01:01 2026 GMT
Not After : Apr 20 05:01:01 2026 GMT
Subject: CN=03a5038f60a184d386ec883b4936f88ea155c3f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:39:71:1b:2f:10:12:37:f4:a3:d4:1a:6e:5d:
ad:30:27:1a:c1:c6:6f:6e:32:34:41:4a:7a:45:7e:
13:13:d9:8b:2f:54:a6:35:42:33:67:79:ac:4e:1e:
6a:49:77:51:e9:eb:1b:50:41:8c:44:88:4f:cc:f1:
00:f4:69:b6:3c:07:15:e5:01:10:cd:9b:51:31:1d:
8d:84:8b:43:c9:85:e9:0e:94:ed:c8:98:b2:6a:9c:
42:93:76:71:73:ed:e5:99:8e:f9:73:63:68:51:23:
75:04:cb:44:77:5f:73:07:6e:4d:da:16:9f:42:54:
c8:92:91:94:f1:a9:9b:36:30:0c:99:c3:8d:de:3b:
89:bf:6f:5c:06:27:39:e9:91:54:77:f3:4e:ad:56:
9f:b3:99:50:56:4e:6a:17:3d:dc:0d:a9:0b:14:05:
7b:14:87:13:db:29:89:c5:06:ed:8d:d6:dc:4a:3c:
10:b2:bf:c6:74:44:d9:5f:84:13:85:a5:61:c0:f4:
5a:ff:ae:bc:94:e7:24:c2:9b:db:2b:fa:c2:b6:e6:
5e:5b:f3:5d:a5:07:92:52:21:75:13:12:06:18:9c:
12:95:4b:f7:92:40:55:d2:b5:83:99:93:8c:ca:fc:
33:0a:b9:0b:75:90:28:89:a9:48:2b:6f:eb:f7:ba:
d7:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:A5:03:8F:60:A1:84:D3:86:EC:88:3B:49:36:F8:8E:A1:55:C3:F0
X509v3 Authority Key Identifier:
keyid:E5:A8:86:59:14:DE:CC:DC:98:07:24:1F:D7:0B:6B:B0:83:A4:44:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5aiGWRTezNyYByQf1wtrsIOkRLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/3afc81-30e6-4b8e-8d3b-57f54ea43e16/1/5aiGWRTezNyYByQf1wtrsIOkRLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/3afc81-30e6-4b8e-8d3b-57f54ea43e16/1/5aiGWRTezNyYByQf1wtrsIOkRLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:7b:12:37:c4:41:7b:c2:f5:4e:69:e0:2e:40:f0:c2:9d:21:
4c:bf:e9:fe:f3:ec:aa:00:ab:5d:f2:4a:43:c1:9b:19:11:a9:
d6:ca:59:60:b6:49:13:62:ca:f7:17:93:c4:e5:6e:a5:80:7e:
e1:ba:c9:b3:0d:b0:6d:f6:58:f0:09:3a:43:77:78:fb:43:1f:
fb:d0:06:85:c3:3a:9d:ba:ef:4a:26:82:7c:b4:a8:0a:a3:96:
5b:75:8a:ef:49:b5:44:52:73:5a:8f:e9:61:bb:fb:fb:c5:6e:
eb:bd:d4:3b:f9:a2:83:22:91:e8:b5:52:96:7d:70:f1:df:06:
44:47:e1:c6:a6:30:08:58:e8:09:f0:f0:30:d8:4b:56:e0:2f:
36:b5:b7:8c:71:90:b8:33:19:07:2b:c9:b4:d9:5e:90:b4:d8:
b1:06:42:e6:42:12:f1:6c:fe:44:95:92:57:4a:77:4f:d8:7d:
e6:ef:82:20:2a:c6:8e:4d:46:55:87:d5:c0:c6:a5:5c:09:3f:
89:2a:88:f1:80:ab:d0:e0:20:ef:e3:61:9c:81:2e:a1:e0:55:
8e:c4:79:2d:46:e5:e3:cd:dd:8f:8d:38:cb:15:54:89:2f:89:
1b:bb:a2:ed:af:bf:b4:b1:61:2c:9d:aa:a0:0b:57:e4:d7:0a:
62:20:30:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:03:31 2026 by rpki-client