Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.mft
File: 5YJfvufEOimDjqvk_IfXlDScDIA.mft (raw, json)
Hash identifier: Y3ZaOc+8eGtPSdtHy+fmBoLJfe9+dZeJl1DHAZmVrqo=
Subject key identifier: C7:36:E3:7D:B2:74:F6:64:2D:69:B0:37:2E:28:71:5F:33:05:9E:D4
Authority key identifier: E5:82:5F:BE:E7:C4:3A:29:83:8E:AB:E4:FC:87:D7:94:34:9C:0C:80
Certificate issuer: /CN=e5825fbee7c43a29838eabe4fc87d794349c0c80
Certificate serial: 019E314DFB9CABCD50DD38D3F36590CB0A50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5YJfvufEOimDjqvk_IfXlDScDIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.mft
Manifest number: 166A
Signing time: Sat 16 May 2026 15:00:54 +0000
Manifest this update: Sat 16 May 2026 15:00:54 +0000
Manifest next update: Sun 17 May 2026 15:00:54 +0000
Files and hashes: 1: 5YJfvufEOimDjqvk_IfXlDScDIA.crl (hash: d40AvucMYRxGvg0LdoPvO3i1tBfCW45kNR/gh3oez/w=)
2: WV1VFgh4UO5OQIjFi5jAdPHFRJ0.roa (hash: Wkox25tOHoYYnIadh8Euo0eCJ3gQ8TbFrbaKdOwZ2Jw=)
3: qIXEy_F6qfNB1iqYTrvJEkvpTsQ.roa (hash: 04pk0BNn+nyzGxexSqXjPihhWnR9IS/ncaQz3LI+rOs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5YJfvufEOimDjqvk_IfXlDScDIA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:4d:fb:9c:ab:cd:50:dd:38:d3:f3:65:90:cb:0a:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5825fbee7c43a29838eabe4fc87d794349c0c80
Validity
Not Before: May 16 15:00:54 2026 GMT
Not After : May 17 15:00:54 2026 GMT
Subject: CN=c736e37db274f6642d69b0372e28715f33059ed4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:df:45:60:8f:db:e2:ae:13:b6:6c:35:4d:74:
4e:dd:51:d8:f2:bc:8e:a5:4b:a5:8d:87:50:ae:5d:
0e:30:f6:17:6c:04:1d:45:52:06:60:7e:1b:69:4f:
c4:dc:11:fa:71:df:b8:e8:d6:c0:10:4b:e2:c0:7d:
5a:c1:4d:c6:f1:50:cf:2a:fd:32:40:5d:3a:03:1e:
aa:bc:5e:96:04:fa:52:71:92:b2:32:3b:ff:c0:18:
15:51:c3:35:fe:f8:f2:f3:58:cb:42:86:14:9d:13:
cd:11:1c:b6:f3:be:57:12:aa:94:ac:ae:19:5e:40:
20:9f:ea:3b:41:b7:21:6a:12:9a:61:51:c0:95:52:
8f:32:01:77:40:b3:9b:62:31:c5:ea:43:12:6f:3c:
1f:12:da:93:8b:95:b1:6c:c0:b2:dc:1b:f8:05:e4:
b8:ed:30:0f:49:44:74:2f:2a:9c:32:cc:13:03:44:
3b:1e:70:92:60:21:ea:f7:09:10:db:f5:9c:12:84:
2e:7d:2c:b7:22:ef:0c:3b:99:cd:52:ed:8b:82:c6:
45:35:93:53:24:ec:f2:a8:de:1b:24:79:a0:b8:e6:
a1:a6:3e:6a:25:36:36:e5:ac:ab:b1:0c:f6:9e:42:
9c:91:b4:60:a2:ac:1b:49:8a:a7:f7:a5:b7:d9:85:
92:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:36:E3:7D:B2:74:F6:64:2D:69:B0:37:2E:28:71:5F:33:05:9E:D4
X509v3 Authority Key Identifier:
keyid:E5:82:5F:BE:E7:C4:3A:29:83:8E:AB:E4:FC:87:D7:94:34:9C:0C:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YJfvufEOimDjqvk_IfXlDScDIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:93:fc:ca:87:e3:fe:e7:b1:25:fe:5f:d0:7e:fb:16:e6:e5:
a3:5d:00:4e:a8:64:19:5f:c5:fd:c4:74:68:f0:fb:ed:a5:03:
a2:d7:ad:de:cc:d0:2c:90:bc:41:d8:53:82:c4:8a:ba:27:0a:
e1:1f:a0:6b:d4:3c:83:f1:ff:79:d6:de:00:69:e8:4a:26:ab:
34:4f:2b:6a:74:4d:3e:18:ea:99:23:cf:b3:a0:d6:b2:25:71:
54:4b:bf:4d:08:79:f7:43:82:26:ff:9d:0e:59:44:72:52:33:
3e:b3:e9:53:70:6b:a3:5b:47:21:5a:09:1f:f3:47:31:2f:4b:
e0:13:f5:a9:49:a8:5a:f2:e7:7a:7d:dd:1a:e5:c9:63:2b:0d:
b4:03:4a:0b:3b:53:ab:af:bf:e3:cc:49:13:14:fd:f3:48:69:
38:67:3b:81:89:b1:5a:71:49:0b:d3:21:00:68:47:5d:c2:02:
be:e1:19:40:e0:38:e2:bf:62:27:d3:f4:28:cf:e9:c7:fa:e4:
da:fb:d7:ec:fc:10:9e:f5:4d:e5:0e:5f:76:7a:e3:10:ea:2c:
7d:f3:27:96:9c:e8:39:dc:98:1f:3d:14:33:5e:ef:33:7b:40:
41:5a:37:c4:b2:72:2b:ad:a5:39:93:b0:4e:0d:db:b5:fa:9a:
72:af:98:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:55:49 2026 by rpki-client