Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/3afc81-30e6-4b8e-8d3b-57f54ea43e16/1/5aiGWRTezNyYByQf1wtrsIOkRLM.mft
File: 5aiGWRTezNyYByQf1wtrsIOkRLM.mft (raw, json)
Hash identifier: ss5RjLcURqswkhI9e5pN2kcPgu0JN+Gz0KboeOAncf4=
Subject key identifier: A5:3D:62:38:A0:0E:A9:7A:4E:1E:B6:92:2A:99:3A:73:35:8C:A0:62
Authority key identifier: E5:A8:86:59:14:DE:CC:DC:98:07:24:1F:D7:0B:6B:B0:83:A4:44:B3
Certificate issuer: /CN=e5a8865914deccdc9807241fd70b6bb083a444b3
Certificate serial: 019CC4182968B223A3EFC22A5FC4E27ED148
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5aiGWRTezNyYByQf1wtrsIOkRLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/3afc81-30e6-4b8e-8d3b-57f54ea43e16/1/5aiGWRTezNyYByQf1wtrsIOkRLM.mft
Manifest number: 11CF
Signing time: Fri 06 Mar 2026 17:00:43 +0000
Manifest this update: Fri 06 Mar 2026 17:00:43 +0000
Manifest next update: Sat 07 Mar 2026 17:00:43 +0000
Files and hashes: 1: 5aiGWRTezNyYByQf1wtrsIOkRLM.crl (hash: aGkYqjG3VMzA6hnKydKwuUMM7A6zH4QjSLQw9KmKut8=)
2: wnKKZs8CL5sITpd1bsL8mCN_whw.roa (hash: x/oWyELUEfox1cdM+OjmJcPeW5wZ59veRKaEMseu1OM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/3afc81-30e6-4b8e-8d3b-57f54ea43e16/1/5aiGWRTezNyYByQf1wtrsIOkRLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/3afc81-30e6-4b8e-8d3b-57f54ea43e16/1/5aiGWRTezNyYByQf1wtrsIOkRLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/5aiGWRTezNyYByQf1wtrsIOkRLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Mar 2026 10:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c4:18:29:68:b2:23:a3:ef:c2:2a:5f:c4:e2:7e:d1:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5a8865914deccdc9807241fd70b6bb083a444b3
Validity
Not Before: Mar 6 17:00:43 2026 GMT
Not After : Mar 7 17:00:43 2026 GMT
Subject: CN=a53d6238a00ea97a4e1eb6922a993a73358ca062
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:3f:c5:e2:1c:fd:be:5c:0b:84:b4:30:a5:a1:
3f:b4:aa:b4:7f:eb:4c:99:90:3e:68:c4:ce:54:00:
d4:01:2d:ab:1f:fd:df:5d:e1:22:85:f2:7e:41:67:
28:5f:3f:39:3a:c2:a7:9d:53:52:31:33:21:1b:1c:
c9:25:80:12:2f:19:58:26:78:1a:8d:dd:f5:8e:ce:
c1:85:4b:bd:0f:a0:f3:18:67:c1:f6:02:24:a4:34:
aa:ab:1e:d9:73:0b:b6:72:53:ef:d9:9d:34:b8:26:
26:ef:9c:55:35:9d:62:0e:05:82:8b:61:64:38:b0:
35:ea:2f:6f:09:df:69:6b:9e:bc:cd:c4:88:23:1a:
d6:4b:59:66:25:7b:cc:5e:0a:0e:bd:b7:18:38:cc:
98:86:25:5f:51:e0:bc:52:8a:08:6e:0b:a0:41:76:
c4:1d:32:ee:3b:0a:d4:d9:97:05:13:6e:a4:5c:4f:
ac:c0:d4:c8:6f:0d:d0:f1:36:ab:dd:37:bb:a2:f8:
c2:dd:f3:d0:d1:df:39:56:90:07:d7:5f:73:03:3a:
f1:4b:00:55:ae:5f:5a:5a:ff:93:03:e1:c3:ef:1a:
56:5f:17:21:6f:ae:a1:d8:56:57:bc:fc:e7:01:d3:
3a:c7:d5:7c:03:71:51:e4:cc:34:8a:53:d6:17:9d:
13:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:3D:62:38:A0:0E:A9:7A:4E:1E:B6:92:2A:99:3A:73:35:8C:A0:62
X509v3 Authority Key Identifier:
keyid:E5:A8:86:59:14:DE:CC:DC:98:07:24:1F:D7:0B:6B:B0:83:A4:44:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5aiGWRTezNyYByQf1wtrsIOkRLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/3afc81-30e6-4b8e-8d3b-57f54ea43e16/1/5aiGWRTezNyYByQf1wtrsIOkRLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/3afc81-30e6-4b8e-8d3b-57f54ea43e16/1/5aiGWRTezNyYByQf1wtrsIOkRLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:60:76:36:d2:15:83:0b:d4:d8:2e:6d:a6:2c:1d:68:ad:9d:
e7:c1:70:7b:3f:a8:fd:66:50:ef:f5:12:13:16:c8:c0:e0:5a:
bb:a8:44:4b:05:c9:f6:59:76:61:08:aa:ba:d2:f0:c1:ae:b8:
cc:50:82:1e:18:23:25:97:b2:fc:1c:be:cd:3d:2d:83:b3:4b:
78:ef:88:b1:ec:fd:db:4f:8e:bc:b7:ff:3d:e5:de:54:e7:50:
b4:38:db:9a:81:2a:45:af:3e:57:d1:97:a6:51:af:fe:2e:e4:
8d:ed:3b:71:9a:7a:a5:97:00:2f:2f:1d:ac:a8:5d:25:7d:9f:
6e:86:7e:08:75:37:b9:ba:3c:67:3c:e8:39:63:bd:ac:70:27:
8c:72:37:40:60:23:98:61:25:51:07:7c:68:45:22:cd:13:50:
20:73:4a:94:80:b5:3e:a6:9d:75:7f:f9:73:d1:d3:14:a4:99:
86:aa:a8:1b:0e:f2:a3:5e:cd:38:4e:cf:c2:8c:e7:5d:45:9b:
ac:69:4e:f6:f8:0a:f2:8a:11:99:47:c4:85:e0:18:63:3e:e8:
f5:cc:55:09:c6:71:14:6a:96:5d:7b:f5:d7:ed:6d:15:27:21:
2b:42:68:5c:62:44:0a:f1:44:3a:cd:22:2c:3d:09:89:1d:52:
41:34:e1:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 6 20:16:22 2026 by rpki-client