
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/5eAzVGZsTLKr_VFBHspdUksNW-U.mft
File: 5eAzVGZsTLKr_VFBHspdUksNW-U.mft (raw, json)
Hash identifier: IZGxM2S8fALxqLphZHqqfD9A2P705xCbgP5FVit6k6M=
Subject key identifier: 3F:7C:8A:93:87:43:6B:AA:A9:EE:2B:AB:4C:EC:52:6C:76:2A:89:EA
Authority key identifier: E5:E0:33:54:66:6C:4C:B2:AB:FD:51:41:1E:CA:5D:52:4B:0D:5B:E5
Certificate issuer: /CN=e5e03354666c4cb2abfd51411eca5d524b0d5be5
Certificate serial: 019CE380BE555FBB8B57BB5556354619CF37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5eAzVGZsTLKr_VFBHspdUksNW-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/5eAzVGZsTLKr_VFBHspdUksNW-U.mft
Manifest number: 02
Signing time: Thu 12 Mar 2026 19:23:11 +0000
Manifest this update: Thu 12 Mar 2026 19:23:11 +0000
Manifest next update: Fri 13 Mar 2026 19:23:11 +0000
Files and hashes: 1: 5eAzVGZsTLKr_VFBHspdUksNW-U.crl (hash: EgeQO5U9+PTuPZh+XDRB1aYzyBxksyw2neujaf9eS6U=)
2: w2BhL8IoeKHyOBrWe4qdH75R0rE.roa (hash: f7oxnga0mFy31MbGdu6HRoHXFf4LdXAjl0cocBZKmKw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/5eAzVGZsTLKr_VFBHspdUksNW-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/5eAzVGZsTLKr_VFBHspdUksNW-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/5eAzVGZsTLKr_VFBHspdUksNW-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 19:23:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e3:80:be:55:5f:bb:8b:57:bb:55:56:35:46:19:cf:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5e03354666c4cb2abfd51411eca5d524b0d5be5
Validity
Not Before: Mar 12 19:23:11 2026 GMT
Not After : Mar 13 19:23:11 2026 GMT
Subject: CN=3f7c8a9387436baaa9ee2bab4cec526c762a89ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:5a:df:fd:77:1e:97:76:c1:a7:8e:b7:01:42:
99:bc:d9:ab:27:1e:59:96:7a:5e:fb:3e:fb:be:a2:
cc:1b:67:6c:c5:b9:7e:95:cb:a9:6f:cd:ba:4f:29:
9f:16:3c:13:a9:d2:b6:b9:0d:7e:36:16:2c:fc:54:
4a:e1:97:3a:fc:58:92:17:25:ec:be:ef:62:b3:a3:
ed:ce:ec:b1:b5:56:b5:68:7d:46:10:ad:cc:fd:7e:
61:43:14:19:c2:6b:c8:8b:49:8d:a5:3b:f9:25:3a:
b9:ab:a4:3f:c8:54:12:65:41:a2:87:b6:8d:fd:d3:
3b:1f:02:dc:1c:ee:68:1c:e7:ce:c9:75:a4:ad:df:
eb:c8:d6:54:40:b5:bf:ce:6a:a3:15:6e:42:45:be:
db:0d:55:f1:95:a4:48:9c:37:0a:d7:b9:57:a1:54:
d5:d7:b5:b7:8c:c1:57:aa:8e:d5:09:bd:cc:90:09:
de:88:e5:66:60:a3:17:19:55:11:12:a8:45:eb:c2:
4c:62:63:a3:fa:4e:45:12:a6:f7:f5:f0:65:9d:d6:
f8:7e:b1:ad:0a:51:77:53:56:0a:67:4b:62:6e:04:
2e:ad:62:1b:6d:4d:43:d7:e8:81:d2:42:85:0d:82:
38:9c:5a:b1:68:cb:fd:b5:85:96:2c:ef:9f:66:21:
ce:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:7C:8A:93:87:43:6B:AA:A9:EE:2B:AB:4C:EC:52:6C:76:2A:89:EA
X509v3 Authority Key Identifier:
keyid:E5:E0:33:54:66:6C:4C:B2:AB:FD:51:41:1E:CA:5D:52:4B:0D:5B:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5eAzVGZsTLKr_VFBHspdUksNW-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/5eAzVGZsTLKr_VFBHspdUksNW-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/5eAzVGZsTLKr_VFBHspdUksNW-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:45:ba:24:16:74:42:28:61:94:0b:bd:cb:21:13:33:a3:7c:
e1:d1:e1:44:8a:9e:19:eb:37:e5:eb:af:ba:8a:c0:1f:32:05:
96:e2:61:34:af:a3:09:39:ef:e0:0e:eb:79:cc:85:cd:35:9a:
d8:db:51:6d:34:78:c4:33:7e:0a:05:77:f2:21:fd:dc:dc:65:
26:47:f7:1f:97:08:70:aa:0d:79:33:e0:e6:ba:27:b3:36:68:
13:74:04:67:83:9f:91:43:55:a3:eb:86:b1:0f:2b:69:d6:30:
37:51:11:a7:47:d6:08:ef:2f:b0:fd:45:fa:de:07:8f:06:34:
f6:30:35:42:51:a4:86:90:55:3c:76:66:a1:92:1b:93:0e:ac:
7c:a3:d6:4f:cb:83:2c:5b:d9:c2:bc:a3:92:95:d7:a6:f0:18:
7d:2c:9a:90:1f:81:d2:ad:c2:95:49:df:69:02:46:47:82:b7:
70:9e:ee:a7:a1:94:6c:2a:aa:7c:27:63:63:4a:f5:2c:0d:a6:
ef:4d:23:10:99:9c:fc:ec:a8:a3:3d:a8:76:63:f5:0c:30:8f:
c1:56:59:e2:29:ff:b2:7e:2e:eb:c6:6e:e7:8a:cf:6b:49:75:
c3:67:36:49:fb:31:36:15:d4:b2:85:3e:be:34:8b:40:94:a4:
2a:7f:11:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 05:20:01 2026 by rpki-client