Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.mft
File: 5YJfvufEOimDjqvk_IfXlDScDIA.mft (raw, json)
Hash identifier: dq4ajVpOr/JAdDLfnFPzrGNI/85yNhGfGAqk7tZeqqA=
Subject key identifier: 00:5E:E3:C5:DC:E2:8B:53:76:D9:9D:09:4D:87:15:A9:FF:D2:BB:93
Authority key identifier: E5:82:5F:BE:E7:C4:3A:29:83:8E:AB:E4:FC:87:D7:94:34:9C:0C:80
Certificate issuer: /CN=e5825fbee7c43a29838eabe4fc87d794349c0c80
Certificate serial: 019D382E09156A45B8931089A4BBA40894C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5YJfvufEOimDjqvk_IfXlDScDIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.mft
Manifest number: 15E9
Signing time: Sun 29 Mar 2026 06:00:34 +0000
Manifest this update: Sun 29 Mar 2026 06:00:34 +0000
Manifest next update: Mon 30 Mar 2026 06:00:34 +0000
Files and hashes: 1: 5YJfvufEOimDjqvk_IfXlDScDIA.crl (hash: ayBLIkMDHFd1ODyRmknnTmoL8ttvR7fcKM7QP9GwNDY=)
2: WV1VFgh4UO5OQIjFi5jAdPHFRJ0.roa (hash: Wkox25tOHoYYnIadh8Euo0eCJ3gQ8TbFrbaKdOwZ2Jw=)
3: qIXEy_F6qfNB1iqYTrvJEkvpTsQ.roa (hash: 04pk0BNn+nyzGxexSqXjPihhWnR9IS/ncaQz3LI+rOs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5YJfvufEOimDjqvk_IfXlDScDIA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:09:15:6a:45:b8:93:10:89:a4:bb:a4:08:94:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5825fbee7c43a29838eabe4fc87d794349c0c80
Validity
Not Before: Mar 29 06:00:34 2026 GMT
Not After : Mar 30 06:00:34 2026 GMT
Subject: CN=005ee3c5dce28b5376d99d094d8715a9ffd2bb93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:35:c6:ea:0a:58:b0:7d:1f:d6:41:46:81:b4:
45:7f:20:2a:50:ae:fd:3a:43:c8:74:7c:20:0d:85:
17:7a:be:9a:41:01:93:d1:8f:ec:e6:79:aa:65:16:
9a:fa:c7:37:b1:c9:c3:a6:51:32:55:64:f9:a5:c5:
e3:32:9d:f6:77:fe:43:54:d3:1f:d5:32:67:33:83:
03:5c:30:62:77:2e:a2:16:c0:42:c4:ec:f6:85:e5:
7c:e2:7b:63:ff:a0:0e:0b:0c:cb:0d:3b:88:b0:a2:
e5:ad:a2:fb:84:69:4f:56:fb:11:f3:87:10:8a:4c:
fe:6f:7a:6a:80:87:61:68:b9:a5:25:a4:6c:92:63:
8d:7f:68:15:f6:99:05:e8:3f:7f:2e:e3:a7:db:08:
af:49:9d:78:da:3f:69:0f:fe:49:73:c1:f2:3f:e9:
54:19:3f:20:02:74:7b:b5:51:62:9d:9e:46:94:44:
8f:b9:ab:a4:06:81:7b:78:ef:fb:56:cc:40:b0:74:
58:c5:cd:6e:4d:ba:30:2b:0e:16:45:70:5b:2e:0e:
7b:f4:c9:9e:3e:50:09:d2:0a:8b:f9:e2:e3:41:03:
82:82:35:74:1f:7d:59:82:78:15:55:bd:ef:4a:48:
cf:a5:c7:a2:54:1c:31:cc:84:7a:a8:d1:87:38:f9:
65:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:5E:E3:C5:DC:E2:8B:53:76:D9:9D:09:4D:87:15:A9:FF:D2:BB:93
X509v3 Authority Key Identifier:
keyid:E5:82:5F:BE:E7:C4:3A:29:83:8E:AB:E4:FC:87:D7:94:34:9C:0C:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YJfvufEOimDjqvk_IfXlDScDIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:e7:77:5c:c3:67:73:01:37:d3:45:05:0a:52:37:cf:e7:93:
37:e4:01:fd:5c:53:14:a0:23:64:8c:d3:d4:41:e8:01:9e:53:
95:46:7c:65:85:ce:ca:d7:b1:81:06:c1:89:fd:bd:8c:a6:af:
c7:e0:f0:6c:3d:94:5e:a3:d8:29:08:87:6e:c6:97:e3:cb:d4:
c0:41:ee:20:f3:71:c2:98:8e:9a:82:c7:6c:17:8d:2f:a3:54:
fe:2c:dd:db:7f:21:2f:61:a7:39:ae:d5:6d:68:a5:4b:e4:15:
32:69:97:43:ac:5a:1c:b2:e7:72:a0:5e:e9:f5:d8:51:96:68:
5b:65:2b:89:fc:f0:65:34:39:2a:c0:da:5b:9f:92:37:74:43:
23:3a:53:89:b2:bf:47:9e:96:19:63:7f:b6:77:19:80:5c:ac:
1d:c4:71:db:7f:c1:a9:c8:bb:36:1a:26:4a:10:1f:83:b7:9f:
aa:e5:14:3d:9c:98:3e:67:5b:8f:6d:93:8d:c3:a9:fd:09:d8:
96:a2:7f:a8:d8:c1:fd:95:6f:c3:d7:25:50:e0:b1:4d:60:13:
ea:4a:c9:6c:69:0b:e5:de:f1:92:9e:a1:30:87:0c:29:bd:58:
cd:f4:bb:b2:9d:86:1c:c1:6d:1a:d6:44:39:a0:db:c8:9f:d4:
a3:a4:cb:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:27:53 2026 by rpki-client