Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.mft
File: 5YJfvufEOimDjqvk_IfXlDScDIA.mft (raw, json)
Hash identifier: 513iTB0F2fk8k75STXKk5wL2Elk88VOk3PLH6M4uxkI=
Subject key identifier: 7D:58:3D:6B:AF:7F:E5:F4:71:82:33:D2:4F:93:10:84:A9:2E:06:2E
Authority key identifier: E5:82:5F:BE:E7:C4:3A:29:83:8E:AB:E4:FC:87:D7:94:34:9C:0C:80
Certificate issuer: /CN=e5825fbee7c43a29838eabe4fc87d794349c0c80
Certificate serial: 01A0D15C043DA5F31E2199442A673814EC13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5YJfvufEOimDjqvk_IfXlDScDIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.mft
Manifest number: 17C6
Signing time: Thu 24 Sep 2026 03:01:03 +0000
Manifest this update: Thu 24 Sep 2026 03:01:03 +0000
Manifest next update: Fri 25 Sep 2026 03:01:03 +0000
Files and hashes: 1: 5YJfvufEOimDjqvk_IfXlDScDIA.crl (hash: cKbAPydWp9K30AzJMSpMpMTqWNzcYwSLA//KXIuYk6M=)
2: WV1VFgh4UO5OQIjFi5jAdPHFRJ0.roa (hash: Wkox25tOHoYYnIadh8Euo0eCJ3gQ8TbFrbaKdOwZ2Jw=)
3: qIXEy_F6qfNB1iqYTrvJEkvpTsQ.roa (hash: 04pk0BNn+nyzGxexSqXjPihhWnR9IS/ncaQz3LI+rOs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5YJfvufEOimDjqvk_IfXlDScDIA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 03:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:5c:04:3d:a5:f3:1e:21:99:44:2a:67:38:14:ec:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5825fbee7c43a29838eabe4fc87d794349c0c80
Validity
Not Before: Sep 24 03:01:03 2026 GMT
Not After : Sep 25 03:01:03 2026 GMT
Subject: CN=7d583d6baf7fe5f4718233d24f931084a92e062e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e4:09:fc:af:fb:4e:94:c9:a3:de:2f:63:13:
88:d7:df:e5:24:33:a9:e4:77:a7:7f:74:b9:03:8b:
10:77:c4:62:0a:db:02:96:4a:ed:14:b2:63:ff:ef:
79:83:27:b6:dd:9f:36:c0:27:0e:6e:33:60:2e:be:
a5:83:fb:78:2a:8d:7e:3a:b3:18:63:5f:ba:83:4e:
ee:1c:33:6d:97:40:88:f9:68:d7:9b:e8:60:14:86:
72:d6:9c:7e:28:26:f4:b2:6a:e0:6f:c6:7f:3e:dc:
f8:61:1c:9c:e3:11:9a:f4:8a:06:d3:ae:d8:39:f6:
79:55:1d:40:5d:b4:c8:bc:68:52:e8:e8:ae:bb:64:
cc:2c:3a:ce:3e:9a:21:87:e9:95:25:34:a7:ba:f9:
04:0a:f0:7a:97:57:10:35:9d:0f:a8:8b:11:0f:16:
4f:bc:5f:ff:8c:c6:8e:19:6f:35:42:16:ff:5e:4e:
e1:b8:07:e3:ab:c8:40:fa:35:19:c0:fc:48:f3:7c:
2a:f6:30:d9:ec:37:81:0a:f5:aa:df:05:2c:58:be:
b4:d6:d0:eb:a3:81:d5:a7:5c:86:9b:45:38:0a:a5:
bf:3e:44:fb:f0:81:fd:38:0d:70:f2:24:49:77:89:
5a:93:de:bf:3a:47:5f:08:46:1d:6f:76:12:83:b2:
4d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:58:3D:6B:AF:7F:E5:F4:71:82:33:D2:4F:93:10:84:A9:2E:06:2E
X509v3 Authority Key Identifier:
keyid:E5:82:5F:BE:E7:C4:3A:29:83:8E:AB:E4:FC:87:D7:94:34:9C:0C:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YJfvufEOimDjqvk_IfXlDScDIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:f1:9e:11:a6:a7:11:4e:7c:52:cf:2b:66:7a:b2:6a:c3:9a:
4f:66:ec:e9:b0:95:79:16:ca:e7:fa:49:6d:7a:74:cd:fa:1b:
a8:43:74:5e:3e:7b:34:f4:21:e3:29:01:b2:f9:a3:9f:23:8a:
1a:a2:aa:89:6c:9a:d5:13:ed:3a:4e:dd:1a:4b:55:a8:88:fc:
ab:a0:12:4e:26:41:3d:e3:e7:b7:7a:1c:b0:5b:40:ce:b5:2e:
5a:d8:7d:29:73:b6:89:42:e1:84:d5:35:66:94:42:f8:68:8d:
10:3c:29:80:33:02:87:4e:58:39:a2:72:fd:86:2d:2b:1b:9b:
e2:8e:d3:16:12:72:e9:a5:79:6b:72:5c:07:04:21:ac:7e:46:
67:c6:73:79:a3:21:79:a2:28:c9:9e:11:47:00:96:64:67:6b:
7a:bb:ce:cc:51:16:6e:af:71:cc:6f:79:0f:b7:55:64:20:be:
a3:eb:1c:bc:fb:67:16:1b:a7:58:b3:3a:91:fe:95:58:00:94:
9c:93:bf:a8:e3:da:1d:0b:26:01:0a:fa:9d:2c:33:68:62:26:
58:e3:5f:41:10:11:76:de:d1:df:cd:d9:c0:e8:d2:7a:e6:8d:
d4:e7:d0:8b:e8:44:34:b1:11:80:e8:36:1d:06:28:b4:c7:90:
7b:b1:d1:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:01:08 2026 by rpki-client