
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/53208d-6c31-4e12-aa25-862684eceb46/1/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.mft
File: 4aIfhfm_F8AgmH6hMg09Y8Va5Ik.mft (raw, json)
Hash identifier: ZRYibstw/0IRKX8ssfv8JMpooOh73f2wJSLMPS69xIY=
Subject key identifier: 53:9A:FF:91:DA:4B:F0:D6:E8:A0:B2:B3:EC:49:62:50:A8:13:1D:E2
Authority key identifier: E1:A2:1F:85:F9:BF:17:C0:20:98:7E:A1:32:0D:3D:63:C5:5A:E4:89
Certificate issuer: /CN=e1a21f85f9bf17c020987ea1320d3d63c55ae489
Certificate serial: 019E30A99CF9CF62772B8AF5DADA27526F2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/53208d-6c31-4e12-aa25-862684eceb46/1/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.mft
Manifest number: 05E5
Signing time: Sat 16 May 2026 12:01:22 +0000
Manifest this update: Sat 16 May 2026 12:01:22 +0000
Manifest next update: Sun 17 May 2026 12:01:22 +0000
Files and hashes: 1: 4aIfhfm_F8AgmH6hMg09Y8Va5Ik.crl (hash: E4cBM7YmyRbgPnqPXkRerRFKeM6ID6xyltYYsOzMqcs=)
2: kAQRnXnn1bepnTjDte_6dOnnntw.roa (hash: fvCT2Eh+lUDVebIFnLuZITE86ooUogC2tmwd5l7+wO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/53208d-6c31-4e12-aa25-862684eceb46/1/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/53208d-6c31-4e12-aa25-862684eceb46/1/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.mft
rsync://rpki.ripe.net/repository/DEFAULT/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:a9:9c:f9:cf:62:77:2b:8a:f5:da:da:27:52:6f:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1a21f85f9bf17c020987ea1320d3d63c55ae489
Validity
Not Before: May 16 12:01:22 2026 GMT
Not After : May 17 12:01:22 2026 GMT
Subject: CN=539aff91da4bf0d6e8a0b2b3ec496250a8131de2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:65:74:f6:fe:e4:51:fc:f3:1a:5d:b5:a6:87:
9c:bb:4e:be:61:d9:f8:80:63:13:c8:f7:aa:07:e5:
bf:72:0d:cc:12:93:c9:46:d4:3c:3f:bf:d5:27:ff:
ae:a3:de:13:86:2b:a9:58:80:ff:b9:81:45:22:c2:
6a:b0:3b:0f:07:a4:b8:18:d3:e5:9f:10:2f:85:0d:
7d:cf:cb:9a:75:a0:bd:b4:85:76:70:fa:0f:8c:08:
ce:2e:54:fb:0d:bc:5a:63:05:0f:93:de:09:e8:29:
e8:67:3b:d2:46:49:cc:4c:07:b9:b6:da:b5:f1:3d:
d5:ce:87:7d:b8:1c:2b:4b:be:39:49:5d:3f:0c:eb:
ca:9b:82:eb:ea:fa:e3:31:eb:ce:c3:54:50:3b:a1:
0e:f6:83:ce:01:6a:ba:dd:2e:de:71:17:16:ff:9f:
fa:05:ff:6f:15:f1:99:54:b2:52:fe:a7:e8:cb:63:
1e:52:d5:6a:b7:67:46:2b:59:fb:a8:2b:b0:5e:74:
4a:6d:b3:08:48:68:68:db:9d:ca:33:b2:e5:e9:30:
d8:e5:1f:48:90:97:5c:1c:c5:1d:af:16:da:97:5d:
1c:cb:93:7d:55:16:0c:2b:ed:df:90:6b:61:d7:da:
16:5b:53:b9:3b:18:b1:08:43:0c:a9:0b:80:dc:fd:
6b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:9A:FF:91:DA:4B:F0:D6:E8:A0:B2:B3:EC:49:62:50:A8:13:1D:E2
X509v3 Authority Key Identifier:
keyid:E1:A2:1F:85:F9:BF:17:C0:20:98:7E:A1:32:0D:3D:63:C5:5A:E4:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/53208d-6c31-4e12-aa25-862684eceb46/1/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/53208d-6c31-4e12-aa25-862684eceb46/1/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:2f:b6:d7:d8:64:e7:34:67:97:07:4c:96:10:01:ab:6d:b1:
0b:e1:5e:08:34:f2:bd:1c:b2:da:8a:a9:a3:51:65:3d:a1:f8:
b6:87:b8:4e:9d:eb:69:f2:fc:40:6a:19:c6:41:33:92:84:ae:
8c:e0:e9:6e:21:58:a0:ae:8f:64:f6:0a:d4:69:4c:12:26:60:
ad:f3:c3:f5:0f:a7:99:68:f6:37:e4:4b:02:9c:c1:f1:49:7e:
7a:b8:df:a7:0c:78:a4:61:37:23:02:05:d1:c8:14:fc:1a:fe:
43:03:63:70:c0:0e:0f:46:37:63:64:4a:a6:d5:67:8c:34:83:
4b:ba:4f:3a:36:e8:b1:ae:46:1b:f9:e4:14:f8:92:18:1a:4f:
84:ac:ef:99:ef:05:d9:f8:2c:2d:13:93:14:8d:b9:45:95:3b:
df:f4:36:43:54:49:75:32:5e:a9:70:12:b0:1d:17:0d:ed:21:
3b:0f:43:6e:2f:42:d9:41:31:1a:a7:7c:d8:a4:df:7e:64:15:
db:61:0d:ad:d7:16:66:9f:cd:f8:a6:e6:04:03:03:e3:01:c7:
2c:09:8c:cb:c6:5a:79:54:a5:9a:7f:ba:62:3e:4d:d8:be:6a:
29:5c:31:a4:6d:a5:56:dc:b9:80:f7:1b:6c:20:b2:98:1d:8f:
ec:77:0b:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:24:57 2026 by rpki-client