Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/5105c7-e393-43a9-aa96-225e90b37cdc/1/5Y8ma01YAFUs7adrgycbTI4V44o.mft
File: 5Y8ma01YAFUs7adrgycbTI4V44o.mft (raw, json)
Hash identifier: q4zdkJOjJ+1ZW5ocoWFSEAzr0y1ZhRcg/tgbwzCsg5c=
Subject key identifier: F8:E8:0B:28:0E:0C:BB:20:EA:05:C7:CD:56:CB:AC:4C:C6:6C:66:A1
Authority key identifier: E5:8F:26:6B:4D:58:00:55:2C:ED:A7:6B:83:27:1B:4C:8E:15:E3:8A
Certificate issuer: /CN=e58f266b4d5800552ceda76b83271b4c8e15e38a
Certificate serial: 01A1DD94CA4B31E3385B0BE41A7470879D02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Y8ma01YAFUs7adrgycbTI4V44o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/5105c7-e393-43a9-aa96-225e90b37cdc/1/5Y8ma01YAFUs7adrgycbTI4V44o.mft
Manifest number: 0173
Signing time: Sun 15 Nov 2026 05:01:18 +0000
Manifest this update: Sun 15 Nov 2026 05:01:18 +0000
Manifest next update: Mon 16 Nov 2026 05:01:18 +0000
Files and hashes: 1: 1-_1G1tATdFEJfv4st45_Q-d33kQ.roa (hash: p1aXapIIZWhXgIor7qn5hSGBNLqdBcmtQEmWKYSt1FY=)
2: 1Lrbwdn9oPlof5ajHq8YeOhYWPQ.roa (hash: 9ssYEoOHl8YOeIpzXb3TsKUuGip5v41JmeW+Sm6r4Hw=)
3: 5Y8ma01YAFUs7adrgycbTI4V44o.crl (hash: ILccj3xJiAJMkZcM9j6zGqeBBgDg5HOK+b8kOT9bL74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/5105c7-e393-43a9-aa96-225e90b37cdc/1/5Y8ma01YAFUs7adrgycbTI4V44o.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/5105c7-e393-43a9-aa96-225e90b37cdc/1/5Y8ma01YAFUs7adrgycbTI4V44o.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Y8ma01YAFUs7adrgycbTI4V44o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 05:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:94:ca:4b:31:e3:38:5b:0b:e4:1a:74:70:87:9d:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e58f266b4d5800552ceda76b83271b4c8e15e38a
Validity
Not Before: Nov 15 05:01:18 2026 GMT
Not After : Nov 16 05:01:18 2026 GMT
Subject: CN=f8e80b280e0cbb20ea05c7cd56cbac4cc66c66a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d2:1e:a6:6e:34:d5:11:f8:6e:73:0c:f3:82:
cf:92:a1:1e:9d:a8:69:65:2a:44:64:7a:cb:28:b2:
2d:67:e9:e3:a1:8c:de:3f:2b:7d:a0:41:dc:59:72:
5d:11:68:5e:32:f8:99:b0:b7:21:08:1d:76:76:73:
4c:68:08:c5:72:9a:24:ae:55:e8:5c:27:48:4b:b5:
34:ae:96:fa:04:dd:c2:ac:42:bb:5b:82:91:7f:2e:
3f:72:5d:c6:1b:9d:11:01:af:84:5f:b8:76:ff:cf:
63:ef:44:ee:f5:0a:7e:dc:64:93:9a:9f:f1:ca:f3:
5f:46:f3:0b:bb:f2:70:50:04:cc:e7:32:b1:b0:be:
2c:37:eb:9e:38:f0:85:69:74:0d:61:cf:39:af:56:
df:53:07:8f:0c:73:d2:08:6e:9c:59:f4:a3:6a:15:
26:e1:24:22:5b:a1:ab:e2:74:9d:2e:38:bc:e9:a7:
73:f8:39:bb:05:7b:96:96:5d:f1:11:c0:37:33:62:
ee:3d:ad:ff:79:cb:d2:33:1b:22:11:e0:c0:fd:00:
b6:67:a2:5f:14:b7:69:09:ef:57:95:b7:d3:77:cb:
69:1b:2b:bd:cf:42:11:3e:1f:48:88:25:61:a7:9d:
83:8a:86:a2:f4:ed:de:e3:4e:e7:64:f8:aa:3f:f1:
d4:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:E8:0B:28:0E:0C:BB:20:EA:05:C7:CD:56:CB:AC:4C:C6:6C:66:A1
X509v3 Authority Key Identifier:
keyid:E5:8F:26:6B:4D:58:00:55:2C:ED:A7:6B:83:27:1B:4C:8E:15:E3:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Y8ma01YAFUs7adrgycbTI4V44o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/5105c7-e393-43a9-aa96-225e90b37cdc/1/5Y8ma01YAFUs7adrgycbTI4V44o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/5105c7-e393-43a9-aa96-225e90b37cdc/1/5Y8ma01YAFUs7adrgycbTI4V44o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:65:3d:b8:1d:a0:bd:70:d0:59:38:be:6f:52:b2:fc:c1:db:
ca:09:d5:83:87:1c:bc:17:5a:92:48:f2:3b:b8:44:e8:1f:80:
61:78:b3:7f:48:d6:04:fe:f8:1e:b1:40:c7:54:d4:2d:0f:af:
1f:47:87:5a:b2:aa:09:d9:4f:35:a8:49:cc:59:38:87:2b:a8:
81:08:cc:6d:14:05:ef:c9:d8:09:9d:48:f0:d9:26:36:22:5a:
db:ff:62:76:07:49:88:c5:52:c0:f9:08:c7:25:b1:ee:36:8c:
00:cf:12:8b:40:6d:e8:4c:a5:03:56:ca:c7:4c:67:0f:51:4a:
b8:2c:f6:51:5e:aa:4f:44:f5:ce:69:36:f5:c6:57:04:9d:af:
80:1a:c3:aa:fa:3d:51:6a:ed:10:88:2f:05:11:c8:25:67:4b:
6c:be:85:0e:b3:a7:a4:8b:b2:60:48:6e:32:00:83:ec:8a:88:
3f:09:38:c3:fc:18:15:8b:6f:d5:7f:ac:c5:ac:fe:49:2f:d7:
b3:ca:76:d4:5d:98:5c:3b:d4:cc:a3:af:4b:23:9b:fa:2c:2d:
d6:76:2f:8b:db:b4:3d:71:52:a5:21:7f:af:ce:5f:5c:5e:5f:
e3:57:97:13:3b:4e:c5:f8:e5:e5:63:97:0d:15:80:27:31:57:
c7:7b:d4:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:16:05 2026 by rpki-client