Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/3afc81-30e6-4b8e-8d3b-57f54ea43e16/1/5aiGWRTezNyYByQf1wtrsIOkRLM.mft
File: 5aiGWRTezNyYByQf1wtrsIOkRLM.mft (raw, json)
Hash identifier: TGFxxwZ6L6uJ4KcMRX+Xk2tygP18BCemyTi4m1KMVU4=
Subject key identifier: 41:CD:3C:AE:D6:8F:DC:4E:B7:B3:0F:A9:80:40:66:3B:9A:DE:25:A3
Authority key identifier: E5:A8:86:59:14:DE:CC:DC:98:07:24:1F:D7:0B:6B:B0:83:A4:44:B3
Certificate issuer: /CN=e5a8865914deccdc9807241fd70b6bb083a444b3
Certificate serial: 01A13D4AB313588F0E461B32A0E3B8BE2787
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5aiGWRTezNyYByQf1wtrsIOkRLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/3afc81-30e6-4b8e-8d3b-57f54ea43e16/1/5aiGWRTezNyYByQf1wtrsIOkRLM.mft
Manifest number: 1420
Signing time: Thu 15 Oct 2026 02:01:08 +0000
Manifest this update: Thu 15 Oct 2026 02:01:08 +0000
Manifest next update: Fri 16 Oct 2026 02:01:08 +0000
Files and hashes: 1: 5aiGWRTezNyYByQf1wtrsIOkRLM.crl (hash: AHNKnOTqWCd6k0zabr8rHTY025VVLgUoj9QGha4iRGU=)
2: wnKKZs8CL5sITpd1bsL8mCN_whw.roa (hash: x/oWyELUEfox1cdM+OjmJcPeW5wZ59veRKaEMseu1OM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/3afc81-30e6-4b8e-8d3b-57f54ea43e16/1/5aiGWRTezNyYByQf1wtrsIOkRLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/3afc81-30e6-4b8e-8d3b-57f54ea43e16/1/5aiGWRTezNyYByQf1wtrsIOkRLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/5aiGWRTezNyYByQf1wtrsIOkRLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:4a:b3:13:58:8f:0e:46:1b:32:a0:e3:b8:be:27:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5a8865914deccdc9807241fd70b6bb083a444b3
Validity
Not Before: Oct 15 02:01:08 2026 GMT
Not After : Oct 16 02:01:08 2026 GMT
Subject: CN=41cd3caed68fdc4eb7b30fa98040663b9ade25a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:1d:39:2d:94:e6:bd:d6:53:83:38:00:c3:f0:
6a:15:b2:64:1a:b9:5a:70:d2:75:1b:5b:11:5b:3d:
77:c9:ad:13:63:a4:46:72:93:6a:33:96:97:9a:54:
01:d6:9d:83:a7:5c:71:1b:71:68:d7:d3:74:b4:42:
30:86:0d:d8:4a:bf:05:76:7e:58:a9:e8:9a:05:11:
f2:f6:b5:77:ca:c1:99:64:7d:8a:76:61:a2:71:92:
80:94:92:7e:f9:20:bf:5b:ea:6a:e8:26:66:af:6b:
22:9d:76:33:9d:0a:11:e8:3b:27:5e:78:d6:3e:83:
b3:1b:0f:ea:d9:dc:78:44:28:07:0d:1c:42:79:a2:
98:2d:89:77:ea:e1:94:82:27:25:29:37:73:ad:f8:
53:7a:af:fc:ca:50:44:ea:60:e5:99:c8:18:05:e8:
d7:26:92:9e:d2:00:8a:79:30:57:86:8f:88:1f:83:
e4:b7:ef:7b:ce:7d:e7:af:67:f0:94:52:6c:80:9b:
ee:5c:8e:9a:47:35:db:c6:fc:9e:2e:91:f0:30:dc:
26:ec:53:17:3f:e9:4c:be:18:76:8c:4c:23:a3:3e:
9c:80:c7:50:a4:d4:9f:49:93:36:f1:10:6f:bd:41:
0b:bf:aa:d9:1e:d5:c2:ef:72:ae:f6:f7:3d:c2:75:
45:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:CD:3C:AE:D6:8F:DC:4E:B7:B3:0F:A9:80:40:66:3B:9A:DE:25:A3
X509v3 Authority Key Identifier:
keyid:E5:A8:86:59:14:DE:CC:DC:98:07:24:1F:D7:0B:6B:B0:83:A4:44:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5aiGWRTezNyYByQf1wtrsIOkRLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/3afc81-30e6-4b8e-8d3b-57f54ea43e16/1/5aiGWRTezNyYByQf1wtrsIOkRLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/3afc81-30e6-4b8e-8d3b-57f54ea43e16/1/5aiGWRTezNyYByQf1wtrsIOkRLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:e6:45:6c:7d:e2:7f:ea:11:b0:de:5d:0e:60:ed:1f:bb:e9:
fc:ea:53:fd:c1:62:db:8e:fd:ad:b8:0a:d0:d8:ce:e0:4a:21:
13:a6:13:89:d3:e9:16:c9:1e:14:fc:19:d8:6a:20:91:06:ac:
4a:8b:7c:46:95:a2:a1:42:98:fe:c7:e2:70:f5:3b:c3:63:5e:
d1:87:8d:86:94:21:80:d9:19:5f:27:88:13:b0:be:87:28:7f:
87:2e:c0:7b:60:58:df:ab:7e:f5:ce:79:dc:5f:95:a8:79:7d:
52:8c:e3:5e:cf:17:89:54:4d:3a:ef:45:8e:37:ea:ab:86:6e:
aa:4a:39:ae:7d:4d:6a:1b:a7:b2:75:df:6f:94:6a:b5:b1:46:
45:e6:d7:e5:27:0f:d7:40:e0:c5:07:07:8e:d7:b7:94:05:c2:
4e:2d:c3:08:73:6e:59:58:99:eb:09:e8:99:74:ea:42:a1:1c:
0f:e9:4d:0b:48:66:81:47:e7:a2:42:9e:9c:37:2b:88:42:d3:
17:a2:20:b6:6b:31:fb:d4:4f:b7:a6:31:f8:3c:09:bb:81:c6:
71:f6:8a:34:f0:2b:53:f0:76:69:bd:13:bf:58:82:39:cd:01:
3a:f8:c5:94:50:21:42:fb:cf:4f:d2:67:5f:63:93:24:27:b4:
33:59:ad:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 09:08:25 2026 by rpki-client