Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.mft
File: 5YJfvufEOimDjqvk_IfXlDScDIA.mft (raw, json)
Hash identifier: RHRQKGewt61V+n5qfK5LR8W/HX/RlFr3A3dnBZ523/w=
Subject key identifier: B8:72:43:B6:07:39:EC:5C:57:72:F6:C9:B2:72:21:9D:50:FE:1C:2E
Authority key identifier: E5:82:5F:BE:E7:C4:3A:29:83:8E:AB:E4:FC:87:D7:94:34:9C:0C:80
Certificate issuer: /CN=e5825fbee7c43a29838eabe4fc87d794349c0c80
Certificate serial: 019D28BB2D6A6BEBCEB190290748A85C836E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5YJfvufEOimDjqvk_IfXlDScDIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.mft
Manifest number: 15E1
Signing time: Thu 26 Mar 2026 06:00:48 +0000
Manifest this update: Thu 26 Mar 2026 06:00:48 +0000
Manifest next update: Fri 27 Mar 2026 06:00:48 +0000
Files and hashes: 1: 5YJfvufEOimDjqvk_IfXlDScDIA.crl (hash: +qGcbC1qUzOUbRb2nntMdQtIvrCenKkynjH9n5rKWG8=)
2: WV1VFgh4UO5OQIjFi5jAdPHFRJ0.roa (hash: Wkox25tOHoYYnIadh8Euo0eCJ3gQ8TbFrbaKdOwZ2Jw=)
3: qIXEy_F6qfNB1iqYTrvJEkvpTsQ.roa (hash: 04pk0BNn+nyzGxexSqXjPihhWnR9IS/ncaQz3LI+rOs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5YJfvufEOimDjqvk_IfXlDScDIA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:2d:6a:6b:eb:ce:b1:90:29:07:48:a8:5c:83:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5825fbee7c43a29838eabe4fc87d794349c0c80
Validity
Not Before: Mar 26 06:00:48 2026 GMT
Not After : Mar 27 06:00:48 2026 GMT
Subject: CN=b87243b60739ec5c5772f6c9b272219d50fe1c2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:21:af:b4:ae:12:96:66:59:b4:49:39:94:a2:
21:0a:ff:6a:a3:65:a2:5a:f5:24:af:d6:ca:a2:4a:
71:ba:e6:44:59:33:2f:6e:a0:4a:b1:7f:21:e2:0f:
0c:74:fe:f3:02:d9:61:19:11:32:ea:83:7a:ff:a1:
4f:f3:ab:f0:61:55:f5:6c:18:4f:7e:50:82:01:91:
d7:34:f5:ac:d5:51:67:af:4a:68:c2:6a:43:0d:47:
8a:a1:a1:14:49:03:b7:44:c9:15:3a:c4:4d:8c:2d:
c2:6f:35:59:45:d0:4a:4b:62:2b:3a:5f:1c:ac:f8:
42:41:a1:4c:64:93:94:24:ef:3e:05:63:4c:8b:73:
26:75:ae:2d:60:10:df:68:a0:74:0b:89:ad:22:84:
63:0c:41:4b:cb:a7:dd:c7:0d:ca:fc:06:f3:9e:b0:
ac:ac:cc:0a:06:15:1f:b4:08:4f:32:02:4b:e7:09:
56:9a:42:70:20:63:a6:62:16:5d:37:38:15:b4:5a:
0a:4c:02:b8:81:8b:78:dd:08:8a:21:47:95:92:73:
5b:7b:52:cb:35:95:f2:3d:ce:0c:b2:12:56:3c:8f:
e4:0e:36:c9:09:71:20:ff:7b:1f:db:65:24:35:e7:
69:05:0c:39:5b:71:e8:16:7c:9c:f4:7e:cd:d8:2c:
78:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:72:43:B6:07:39:EC:5C:57:72:F6:C9:B2:72:21:9D:50:FE:1C:2E
X509v3 Authority Key Identifier:
keyid:E5:82:5F:BE:E7:C4:3A:29:83:8E:AB:E4:FC:87:D7:94:34:9C:0C:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YJfvufEOimDjqvk_IfXlDScDIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:8e:fb:9c:d1:13:c4:58:15:b8:b0:37:23:53:63:d1:b1:14:
b8:86:17:f7:8d:9b:e3:10:f2:64:b2:2c:d8:5a:a9:59:19:f7:
f7:2d:c7:14:48:40:6a:42:1a:93:36:4d:42:06:be:b4:5f:34:
a1:38:5e:a2:ba:b4:a9:0c:98:55:25:8d:fc:9d:cc:8c:20:d5:
67:7e:01:b5:ee:60:5c:ba:80:7b:69:20:96:ce:e7:25:0e:7d:
2e:5b:3d:a8:27:50:ef:28:b5:05:05:08:0a:06:11:af:2a:a9:
60:60:82:ce:ea:8b:96:d1:c8:a2:0b:b8:93:ae:82:08:88:d8:
94:3f:bf:ed:32:e3:96:1d:fb:8d:5f:81:61:c2:03:98:50:20:
6f:cb:d6:41:63:95:bd:2b:4d:89:b7:e3:c9:6d:bb:d3:a9:48:
4d:03:57:23:52:76:13:54:93:14:6f:a8:75:66:ae:17:dc:b7:
bd:32:87:cf:2b:a0:c8:e5:7a:5b:d4:c9:3f:07:de:51:6c:ab:
29:47:8c:cb:f8:e3:3f:03:5b:05:a3:28:c9:ae:0a:d4:a3:71:
b8:41:4f:7e:7c:78:6b:e5:82:97:05:59:92:25:c5:55:35:6d:
67:b0:7f:9b:c9:7a:2a:43:2a:03:95:fa:51:54:af:ef:0c:e1:
c6:6c:b4:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ouy1qa+vOsZApB0ioXINuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1ODI1ZmJlZTdjNDNhMjk4MzhlYWJlNGZjODdkNzk0MzQ5
YzBjODAwHhcNMjYwMzI2MDYwMDQ4WhcNMjYwMzI3MDYwMDQ4WjAzMTEwLwYDVQQD
EyhiODcyNDNiNjA3MzllYzVjNTc3MmY2YzliMjcyMjE5ZDUwZmUxYzJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0yGvtK4SlmZZtEk5lKIhCv9qo2Wi
WvUkr9bKokpxuuZEWTMvbqBKsX8h4g8MdP7zAtlhGREy6oN6/6FP86vwYVX1bBhP
flCCAZHXNPWs1VFnr0powmpDDUeKoaEUSQO3RMkVOsRNjC3CbzVZRdBKS2IrOl8c
rPhCQaFMZJOUJO8+BWNMi3Mmda4tYBDfaKB0C4mtIoRjDEFLy6fdxw3K/AbznrCs
rMwKBhUftAhPMgJL5wlWmkJwIGOmYhZdNzgVtFoKTAK4gYt43QiKIUeVknNbe1LL
NZXyPc4MshJWPI/kDjbJCXEg/3sf22UkNedpBQw5W3HoFnyc9H7N2Cx43wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLhyQ7YHOexcV3L2ybJyIZ1Q/hwuMB8GA1UdIwQY
MBaAFOWCX77nxDopg46r5PyH15Q0nAyAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVlKZnZ1ZkVPaW1EanF2a19JZlhsRFNjRElBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS83NThjOTYtNjExZC00MTY3LTgwY2Qt
MDQxYWIzMDJjMmY5LzEvNVlKZnZ1ZkVPaW1EanF2a19JZlhsRFNjRElBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS83NThjOTYtNjExZC00MTY3LTgwY2QtMDQxYWIzMDJjMmY5
LzEvNVlKZnZ1ZkVPaW1EanF2a19JZlhsRFNjRElBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG477nNET
xFgVuLA3I1Nj0bEUuIYX942b4xDyZLIs2FqpWRn39y3HFEhAakIakzZNQga+tF80
oTheorq0qQyYVSWN/J3MjCDVZ34Bte5gXLqAe2kgls7nJQ59Lls9qCdQ7yi1BQUI
CgYRryqpYGCCzuqLltHIogu4k66CCIjYlD+/7TLjlh37jV+BYcIDmFAgb8vWQWOV
vStNibfjyW2706lITQNXI1J2E1STFG+odWauF9y3vTKHzyugyOV6W9TJPwfeUWyr
KUeMy/jjPwNbBaMoya4K1KNxuEFPfnx4a+WClwVZkiXFVTVtZ7B/m8l6KkMqA5X6
UVSv7wzhxmy0DA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:49:49 2026 by rpki-client