Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.mft
File: 5YJfvufEOimDjqvk_IfXlDScDIA.mft (raw, json)
Hash identifier: YucNc+8N1IpRcHDtEYgcTkXsOu0PBAmbEVh8lLXAOUo=
Subject key identifier: 25:1D:A8:2C:92:2A:EC:FB:AA:56:87:D1:D0:E9:E2:13:DC:FD:B6:E8
Authority key identifier: E5:82:5F:BE:E7:C4:3A:29:83:8E:AB:E4:FC:87:D7:94:34:9C:0C:80
Certificate issuer: /CN=e5825fbee7c43a29838eabe4fc87d794349c0c80
Certificate serial: 01A000CA876F9277FA0921C1FAD3FF3DB85F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5YJfvufEOimDjqvk_IfXlDScDIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.mft
Manifest number: 175A
Signing time: Fri 14 Aug 2026 15:01:07 +0000
Manifest this update: Fri 14 Aug 2026 15:01:07 +0000
Manifest next update: Sat 15 Aug 2026 15:01:07 +0000
Files and hashes: 1: 5YJfvufEOimDjqvk_IfXlDScDIA.crl (hash: 1o87bfZysb00Ded9VeAuh0gkSdhmMKK+AT3AHX3PCGk=)
2: WV1VFgh4UO5OQIjFi5jAdPHFRJ0.roa (hash: Wkox25tOHoYYnIadh8Euo0eCJ3gQ8TbFrbaKdOwZ2Jw=)
3: qIXEy_F6qfNB1iqYTrvJEkvpTsQ.roa (hash: 04pk0BNn+nyzGxexSqXjPihhWnR9IS/ncaQz3LI+rOs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5YJfvufEOimDjqvk_IfXlDScDIA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:ca:87:6f:92:77:fa:09:21:c1:fa:d3:ff:3d:b8:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5825fbee7c43a29838eabe4fc87d794349c0c80
Validity
Not Before: Aug 14 15:01:07 2026 GMT
Not After : Aug 15 15:01:07 2026 GMT
Subject: CN=251da82c922aecfbaa5687d1d0e9e213dcfdb6e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:fd:3a:9a:b3:5d:d1:00:1f:25:90:0a:02:14:
3f:96:16:f7:93:ee:83:6a:b7:b9:9e:3e:d9:2a:09:
57:b2:ac:8f:57:5d:99:6f:6e:d8:42:c8:b0:07:70:
e6:fd:26:38:56:51:84:2f:35:6f:6f:f8:df:01:e7:
50:48:17:af:0b:97:ea:1a:78:12:bd:6e:57:e7:55:
d8:5e:11:51:92:6b:39:aa:e6:38:22:05:53:35:cb:
45:3d:e2:3e:66:af:17:f6:1d:62:7a:dc:a0:55:a2:
76:73:6f:b1:df:d4:e1:88:c4:39:b3:e6:37:c6:01:
05:ea:71:46:c6:da:06:96:2b:14:a9:67:f8:a8:78:
86:83:ba:07:1d:fa:bd:6e:0e:27:89:c4:83:c7:70:
21:c8:7a:0d:82:8d:d4:ab:ac:5e:34:d5:9d:7a:fd:
26:29:f9:1f:c1:1a:33:e4:31:ab:ac:f4:61:a8:8a:
0a:9b:bf:b4:8c:62:e7:4f:49:10:ec:fb:d9:08:8a:
10:80:3e:4a:36:79:cc:b1:d4:7c:e8:e2:6c:a6:da:
67:66:8e:36:23:7f:83:4c:25:80:55:9e:a4:81:9a:
11:c7:d2:38:f0:88:28:73:b1:3a:9b:05:df:f9:d2:
65:4a:85:7d:08:5e:3e:fe:f1:25:6e:8b:2b:dd:23:
3b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:1D:A8:2C:92:2A:EC:FB:AA:56:87:D1:D0:E9:E2:13:DC:FD:B6:E8
X509v3 Authority Key Identifier:
keyid:E5:82:5F:BE:E7:C4:3A:29:83:8E:AB:E4:FC:87:D7:94:34:9C:0C:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YJfvufEOimDjqvk_IfXlDScDIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:1e:84:41:6b:82:84:5a:90:1b:00:ec:54:73:e6:e5:0f:d5:
1c:b3:e2:e2:b9:f6:74:02:51:4e:e4:10:a3:f2:ea:5b:de:27:
19:ad:13:73:3e:b4:c6:34:97:19:0e:7b:e3:5e:c5:e7:1d:c0:
e0:0f:cf:f1:4a:e4:2b:cd:c8:28:6b:b5:a5:11:05:32:4f:ec:
d2:54:bb:c1:de:09:f9:e4:cb:47:0c:68:4d:51:ec:48:08:0c:
ea:1f:6d:b1:52:c8:d1:f0:5a:9f:b1:0e:8d:5a:df:44:d1:65:
4a:ce:10:f6:5a:24:3a:f2:d7:48:ec:a7:9f:0f:0b:f3:77:ab:
67:75:a5:17:2c:59:f3:f2:15:8a:f3:fd:bb:5e:53:b2:b5:02:
9c:f3:45:84:1e:96:21:6f:3b:5a:67:19:06:59:a4:b2:56:30:
f3:f7:8c:75:11:af:0b:b8:5a:27:26:4c:1f:6b:2c:9f:3d:43:
18:44:52:69:f2:52:70:3a:00:92:d5:6f:f5:0f:89:77:03:17:
33:ec:93:6a:2a:48:f0:f6:7f:32:14:d1:9f:ab:d1:1f:44:68:
0a:e7:a9:8f:bf:dd:e5:ec:75:71:2b:2e:6d:87:77:34:82:18:
8d:3a:95:b7:9a:ee:7e:e2:3b:93:95:e1:a0:8f:b2:a9:31:9e:
88:65:f5:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:00 2026 by rpki-client