Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.mft
File: 5YJfvufEOimDjqvk_IfXlDScDIA.mft (raw, json)
Hash identifier: D/hoA6AoHeoa4MLt/36Yi31bhkAIuVr7/I/2smOfFxM=
Subject key identifier: 05:14:EE:E1:9B:F9:68:D6:C5:4D:8B:30:64:EA:0B:6C:36:3B:0F:C0
Authority key identifier: E5:82:5F:BE:E7:C4:3A:29:83:8E:AB:E4:FC:87:D7:94:34:9C:0C:80
Certificate issuer: /CN=e5825fbee7c43a29838eabe4fc87d794349c0c80
Certificate serial: 019F92B6369BF5A56FDB8B9F3260FC007DF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5YJfvufEOimDjqvk_IfXlDScDIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.mft
Manifest number: 1721
Signing time: Fri 24 Jul 2026 06:00:42 +0000
Manifest this update: Fri 24 Jul 2026 06:00:42 +0000
Manifest next update: Sat 25 Jul 2026 06:00:42 +0000
Files and hashes: 1: 5YJfvufEOimDjqvk_IfXlDScDIA.crl (hash: U679C39rfW+E2Zp6Kq83Nto7wHF+FFrrIdyI053H3Iw=)
2: WV1VFgh4UO5OQIjFi5jAdPHFRJ0.roa (hash: Wkox25tOHoYYnIadh8Euo0eCJ3gQ8TbFrbaKdOwZ2Jw=)
3: qIXEy_F6qfNB1iqYTrvJEkvpTsQ.roa (hash: 04pk0BNn+nyzGxexSqXjPihhWnR9IS/ncaQz3LI+rOs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5YJfvufEOimDjqvk_IfXlDScDIA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b6:36:9b:f5:a5:6f:db:8b:9f:32:60:fc:00:7d:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5825fbee7c43a29838eabe4fc87d794349c0c80
Validity
Not Before: Jul 24 06:00:42 2026 GMT
Not After : Jul 25 06:00:42 2026 GMT
Subject: CN=0514eee19bf968d6c54d8b3064ea0b6c363b0fc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:89:9c:4c:87:37:60:35:5b:51:ad:aa:c3:33:
93:1c:c9:41:28:d8:19:0c:a7:c4:3d:fc:65:f6:4d:
da:04:8d:14:d0:e1:a4:3f:c8:64:64:77:51:d3:ea:
d3:b1:34:5c:5b:83:df:43:c6:7c:f4:90:3b:56:18:
9b:94:1b:f9:1c:3b:1a:87:50:37:2b:60:df:ec:09:
d3:13:d3:76:68:5e:63:ec:43:36:40:6c:f7:3a:4b:
10:cb:62:65:6a:2d:bc:90:9b:7e:69:d0:26:00:aa:
11:0b:0c:4d:3a:36:f8:1e:fe:5a:a0:9f:14:6d:f4:
a5:a7:0f:fc:ee:b1:0c:21:4c:c8:0d:88:28:c1:6a:
d4:e9:52:f5:38:d3:a7:00:3f:83:f8:1e:5a:d4:58:
b5:67:0c:d6:32:12:2f:90:bd:c1:a8:9f:7d:62:bd:
7d:56:36:96:5f:72:1a:10:0e:ef:ce:e5:e5:31:f0:
ca:5f:f3:7d:c1:ce:1b:e5:00:37:f7:61:81:1d:e6:
52:19:94:6f:81:80:1b:29:d9:6f:91:28:78:8b:62:
cf:1d:09:26:bb:51:0e:9e:2d:03:d3:91:b0:e6:fa:
57:ef:df:2f:1f:f8:28:d9:f6:5b:d7:1b:cd:85:ff:
f9:26:dc:30:76:56:72:39:3a:d4:77:4e:11:72:e2:
d3:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:14:EE:E1:9B:F9:68:D6:C5:4D:8B:30:64:EA:0B:6C:36:3B:0F:C0
X509v3 Authority Key Identifier:
keyid:E5:82:5F:BE:E7:C4:3A:29:83:8E:AB:E4:FC:87:D7:94:34:9C:0C:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YJfvufEOimDjqvk_IfXlDScDIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:71:a2:14:f5:dd:b9:56:db:cc:eb:74:d8:b8:dd:e0:77:69:
49:c3:7f:06:0f:1c:74:dd:7a:2d:0f:de:89:2d:e0:3d:ee:27:
91:d1:a3:6a:18:c3:90:29:f7:d0:d6:1d:21:d7:b3:3c:37:6a:
e6:68:99:9f:6f:95:d6:54:dc:8c:c2:7e:e4:0a:b1:53:86:74:
b9:77:b0:13:0c:04:7d:e3:e7:0a:33:78:bb:64:21:b8:42:50:
d9:1a:47:07:90:b1:fe:06:e3:6c:fc:f8:18:29:b8:3b:53:1f:
5a:12:cb:38:0e:9f:91:d0:26:95:f2:6c:ea:05:73:60:13:2f:
db:2e:2f:32:96:9c:d7:c2:f4:5c:2a:ce:d8:4e:d0:8d:9c:d0:
d2:b1:df:1f:7c:c2:c0:b9:30:d7:68:58:f7:25:ec:64:45:8f:
11:ee:10:d3:81:83:b5:0e:05:b6:19:e6:53:57:e8:61:75:ed:
c9:58:f4:68:9b:d8:08:88:23:7f:af:a8:06:69:2a:c2:71:2b:
4d:8c:3e:98:e1:70:38:fe:c0:a3:8c:b9:dd:56:cb:94:e0:cf:
9d:60:44:6b:dd:c8:4a:5a:fe:23:0d:51:a5:6a:79:e1:d0:a5:
1e:f1:38:70:1a:84:f5:e6:05:3b:7d:6c:8f:6f:d9:6f:42:25:
4e:73:65:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:46:43 2026 by rpki-client