Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/8efd80-7db3-4e52-ad76-0f896ebca4f8/1/5YBpdIdI6a69e-QFh9gUDv3lW2s.mft
File: 5YBpdIdI6a69e-QFh9gUDv3lW2s.mft (raw, json)
Hash identifier: 8uA+YQy8Jivp6pIrogNVYvbZH1kMTAXXL7EA6HUIJas=
Subject key identifier: 2B:9E:B9:E6:BB:B0:E0:54:23:A0:8A:30:3B:09:DA:8D:FE:F3:A0:73
Authority key identifier: E5:80:69:74:87:48:E9:AE:BD:7B:E4:05:87:D8:14:0E:FD:E5:5B:6B
Certificate issuer: /CN=e58069748748e9aebd7be40587d8140efde55b6b
Certificate serial: 019CE410EFF62326FF0D76766777A1F762A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5YBpdIdI6a69e-QFh9gUDv3lW2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/8efd80-7db3-4e52-ad76-0f896ebca4f8/1/5YBpdIdI6a69e-QFh9gUDv3lW2s.mft
Manifest number: 17F5
Signing time: Thu 12 Mar 2026 22:00:41 +0000
Manifest this update: Thu 12 Mar 2026 22:00:41 +0000
Manifest next update: Fri 13 Mar 2026 22:00:41 +0000
Files and hashes: 1: 5YBpdIdI6a69e-QFh9gUDv3lW2s.crl (hash: ace09PaVuUD69o89Lhs0x4wM4KJJ5MlO02u8njTBn50=)
2: sZxrSzhn7wD6WFSw7UC6NwZuEFk.roa (hash: kEkaa7N2aenPpjJ1vqccMcmAKJMsk4dI56LBorB67HM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/8efd80-7db3-4e52-ad76-0f896ebca4f8/1/5YBpdIdI6a69e-QFh9gUDv3lW2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/8efd80-7db3-4e52-ad76-0f896ebca4f8/1/5YBpdIdI6a69e-QFh9gUDv3lW2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/5YBpdIdI6a69e-QFh9gUDv3lW2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 22:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:10:ef:f6:23:26:ff:0d:76:76:67:77:a1:f7:62:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e58069748748e9aebd7be40587d8140efde55b6b
Validity
Not Before: Mar 12 22:00:41 2026 GMT
Not After : Mar 13 22:00:41 2026 GMT
Subject: CN=2b9eb9e6bbb0e05423a08a303b09da8dfef3a073
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f4:26:09:97:1d:9b:69:b4:23:cb:cd:43:2b:
e9:2d:f8:c3:be:58:37:61:51:38:6b:9c:27:82:e1:
f3:7c:68:4a:e4:de:d8:50:0f:e1:92:0d:7a:be:12:
61:ee:25:93:d6:8a:f5:ad:30:a5:65:4e:67:d4:1e:
b4:88:ce:49:2a:6e:7b:fc:d2:ed:dc:7d:79:79:91:
f5:22:6d:c2:ae:4a:ec:04:d7:b4:ff:54:2c:bf:cf:
04:a8:9f:d0:d6:e5:8d:77:c4:4d:de:36:5b:f1:2b:
e8:c5:b5:6b:fb:6d:9c:45:ee:c0:a2:13:13:3d:0c:
38:25:b2:36:f0:02:61:2b:cf:ad:6d:40:49:71:bb:
30:60:44:fa:70:8d:a1:8b:7f:36:53:7f:43:5e:1e:
4c:29:3e:6b:63:3e:61:9f:4c:39:e3:51:e2:64:c2:
0b:b8:8f:38:82:7e:ac:fc:40:c7:59:b2:a2:00:fe:
34:37:ea:fa:75:d4:90:53:31:39:c1:77:cf:08:5b:
a0:be:a0:56:7b:67:b1:b4:41:d6:78:51:11:73:79:
ee:25:7f:9b:07:d3:bb:b6:f0:6f:94:e1:13:54:a5:
ee:87:bb:77:62:e1:59:11:30:1b:03:6d:42:15:8f:
39:a0:9a:41:04:93:d3:01:f7:50:57:2c:df:55:36:
ea:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:9E:B9:E6:BB:B0:E0:54:23:A0:8A:30:3B:09:DA:8D:FE:F3:A0:73
X509v3 Authority Key Identifier:
keyid:E5:80:69:74:87:48:E9:AE:BD:7B:E4:05:87:D8:14:0E:FD:E5:5B:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YBpdIdI6a69e-QFh9gUDv3lW2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/8efd80-7db3-4e52-ad76-0f896ebca4f8/1/5YBpdIdI6a69e-QFh9gUDv3lW2s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/8efd80-7db3-4e52-ad76-0f896ebca4f8/1/5YBpdIdI6a69e-QFh9gUDv3lW2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:02:9f:2e:ed:df:b1:b0:74:e1:f0:ab:0a:00:72:43:d0:95:
bf:46:d0:98:50:9b:72:b1:b7:09:9e:4e:6a:58:83:fe:73:7c:
dd:6f:28:56:7e:e2:c0:16:f2:13:84:f3:13:82:c0:64:c3:5c:
dc:6c:c7:99:9b:e5:a5:26:fc:28:32:5c:fc:47:d4:04:ae:76:
20:90:09:fc:f8:42:9e:d5:8c:e7:6b:89:55:e7:26:8a:5b:3e:
90:0a:11:cb:d7:2c:2c:9a:40:c0:4c:a3:75:93:b0:e7:f9:c7:
d6:83:b9:10:fa:53:fd:ed:23:0b:59:0d:21:fb:0d:33:95:98:
7d:91:ed:af:b2:62:93:b8:40:b0:5d:53:a5:54:17:d2:8c:54:
d0:a9:9b:8b:98:b1:b0:21:c3:53:89:1e:22:eb:e6:d4:06:cc:
0d:2f:97:b5:9a:69:f8:7a:f4:72:40:eb:2e:14:28:72:f6:68:
70:97:d8:67:30:4d:76:3a:3e:76:4a:65:fe:53:a4:ef:20:c0:
ed:5f:ea:58:3d:c4:f5:f5:ab:75:de:8b:d8:9e:8c:9a:b4:e4:
cc:d3:89:af:c1:6c:5b:72:99:42:36:f8:42:45:4e:4f:28:6a:
80:b8:0d:2d:7e:96:43:ad:8e:7c:ae:14:dc:8a:1b:b0:b6:9d:
9c:b4:e4:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 08:37:39 2026 by rpki-client