Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/22d20e-0bd6-49fb-b9c3-e20d707c00fb/1/1aiQlOEuVN2QHjLTPOUTHgRu5ww.mft
File: 1aiQlOEuVN2QHjLTPOUTHgRu5ww.mft (raw, json)
Hash identifier: E6CT8UEmNboN4dezQyAx8pgCAaqwOpJ8gTl9dK5iQqE=
Subject key identifier: 1A:F2:07:CF:E2:AF:2A:D5:D8:73:A2:33:A4:F3:55:54:54:90:1A:8A
Authority key identifier: D5:A8:90:94:E1:2E:54:DD:90:1E:32:D3:3C:E5:13:1E:04:6E:E7:0C
Certificate issuer: /CN=d5a89094e12e54dd901e32d33ce5131e046ee70c
Certificate serial: 019D38D3132851E888B772C8ED11C1EBFFC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1aiQlOEuVN2QHjLTPOUTHgRu5ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/22d20e-0bd6-49fb-b9c3-e20d707c00fb/1/1aiQlOEuVN2QHjLTPOUTHgRu5ww.mft
Manifest number: 0525
Signing time: Sun 29 Mar 2026 09:00:50 +0000
Manifest this update: Sun 29 Mar 2026 09:00:50 +0000
Manifest next update: Mon 30 Mar 2026 09:00:50 +0000
Files and hashes: 1: 1aiQlOEuVN2QHjLTPOUTHgRu5ww.crl (hash: kxo+fJKoh715RMgcPEIGChU1xOHkZHKnELhhjuLOo7U=)
2: lFXW11JmtXkBjm-uNTCzHeFzM7o.roa (hash: ehAd9mUsbggx1/mGegpTmvG9odTX8xtW0ahGr9D7dD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/22d20e-0bd6-49fb-b9c3-e20d707c00fb/1/1aiQlOEuVN2QHjLTPOUTHgRu5ww.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/22d20e-0bd6-49fb-b9c3-e20d707c00fb/1/1aiQlOEuVN2QHjLTPOUTHgRu5ww.mft
rsync://rpki.ripe.net/repository/DEFAULT/1aiQlOEuVN2QHjLTPOUTHgRu5ww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:13:28:51:e8:88:b7:72:c8:ed:11:c1:eb:ff:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5a89094e12e54dd901e32d33ce5131e046ee70c
Validity
Not Before: Mar 29 09:00:50 2026 GMT
Not After : Mar 30 09:00:50 2026 GMT
Subject: CN=1af207cfe2af2ad5d873a233a4f3555454901a8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7e:b6:dd:b9:d0:6e:c3:01:1a:2e:14:28:de:
77:bc:86:1c:eb:ff:40:67:97:f4:e0:a4:c2:04:92:
4f:be:b9:6d:f0:2d:57:f7:68:88:9a:6a:0f:4f:b6:
a0:ac:4a:1f:38:97:44:10:34:a8:ec:65:db:cc:ab:
96:ed:02:f5:23:60:2f:0b:fe:11:de:4a:a1:fb:15:
19:19:e5:33:14:98:6c:80:c1:2a:8b:e2:11:74:81:
20:91:3c:20:f8:40:45:25:43:3b:6d:8d:1f:ae:ce:
b0:22:35:fd:e6:c5:a0:f2:f5:c7:40:05:de:ba:fb:
37:12:54:e6:d4:a9:31:ea:47:b8:11:fb:cc:30:08:
9c:ec:ae:17:05:e9:67:21:26:b5:79:41:d8:4e:28:
22:88:41:12:a2:02:14:9d:dd:78:a9:bc:b9:b9:f9:
09:be:ad:a7:e6:4a:5a:03:d6:54:ac:6d:57:62:1d:
14:ff:d3:d5:5b:de:26:c2:ff:a2:07:94:44:af:18:
6a:e8:89:d0:36:9c:ff:91:96:19:04:71:0a:27:81:
63:93:b5:bb:b2:78:13:59:5b:ff:7f:23:4f:74:24:
43:50:e2:b0:29:12:f9:cb:de:3e:69:f9:69:cb:ea:
d8:d0:a1:9f:8e:3d:07:4c:bb:98:54:73:11:59:16:
89:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:F2:07:CF:E2:AF:2A:D5:D8:73:A2:33:A4:F3:55:54:54:90:1A:8A
X509v3 Authority Key Identifier:
keyid:D5:A8:90:94:E1:2E:54:DD:90:1E:32:D3:3C:E5:13:1E:04:6E:E7:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1aiQlOEuVN2QHjLTPOUTHgRu5ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/22d20e-0bd6-49fb-b9c3-e20d707c00fb/1/1aiQlOEuVN2QHjLTPOUTHgRu5ww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/22d20e-0bd6-49fb-b9c3-e20d707c00fb/1/1aiQlOEuVN2QHjLTPOUTHgRu5ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:7a:fe:c1:b1:9a:64:be:e9:12:16:47:e8:c7:6b:69:91:10:
22:d3:a0:38:ae:2a:9d:f4:65:89:f8:f0:ba:17:9e:c3:95:20:
21:d0:cb:ac:31:fe:a3:06:3a:a1:36:86:81:8f:36:7e:05:48:
df:af:4a:47:f8:5a:80:18:84:be:2e:71:1b:d8:d1:52:fc:82:
cc:7a:12:d0:f6:f0:9a:18:d5:09:62:cc:f3:1b:93:f1:34:ff:
34:82:0c:46:98:74:e0:8d:69:b9:f1:c5:d1:d8:95:77:09:db:
31:8e:f3:7a:44:10:98:8a:3a:26:67:95:be:75:b8:fc:a2:c4:
f5:ed:c1:26:29:4b:57:89:5b:84:1e:4e:f9:a1:6e:83:6c:4b:
8f:21:ea:9c:49:31:85:be:5d:d9:51:4d:79:49:6f:b6:27:08:
a7:80:32:b6:bf:ba:fc:76:11:ee:04:70:92:47:1a:b6:ec:8a:
ad:f8:c4:62:24:a5:72:61:1a:b1:5f:cb:50:4b:e2:fc:40:74:
e2:37:4e:83:e4:63:d3:d8:00:cf:16:1f:d0:37:2a:fb:14:ac:
51:21:53:4c:04:3a:e7:9c:e8:bf:ea:eb:c9:b6:6b:46:57:18:
98:89:1e:55:fb:de:2a:0a:94:ec:5e:0f:90:a2:53:10:82:7d:
e4:55:4b:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:43:18 2026 by rpki-client