Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.mft
File: 5YJfvufEOimDjqvk_IfXlDScDIA.mft (raw, json)
Hash identifier: WRUBTKYikX2R6JeG87eCybutK+JUt+dw040iap5I2CA=
Subject key identifier: DD:FC:D7:F3:A1:51:5C:1C:68:D6:C2:50:24:CC:67:AF:9C:9B:EE:D0
Authority key identifier: E5:82:5F:BE:E7:C4:3A:29:83:8E:AB:E4:FC:87:D7:94:34:9C:0C:80
Certificate issuer: /CN=e5825fbee7c43a29838eabe4fc87d794349c0c80
Certificate serial: 019E1C0FBA6702A19EC2899B8DFB1DEC0D75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5YJfvufEOimDjqvk_IfXlDScDIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.mft
Manifest number: 165F
Signing time: Tue 12 May 2026 12:00:53 +0000
Manifest this update: Tue 12 May 2026 12:00:53 +0000
Manifest next update: Wed 13 May 2026 12:00:53 +0000
Files and hashes: 1: 5YJfvufEOimDjqvk_IfXlDScDIA.crl (hash: +1p1Tuy6irSubWmrEdzi5mOHACU3WuuMYj3TRktaBBc=)
2: WV1VFgh4UO5OQIjFi5jAdPHFRJ0.roa (hash: Wkox25tOHoYYnIadh8Euo0eCJ3gQ8TbFrbaKdOwZ2Jw=)
3: qIXEy_F6qfNB1iqYTrvJEkvpTsQ.roa (hash: 04pk0BNn+nyzGxexSqXjPihhWnR9IS/ncaQz3LI+rOs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5YJfvufEOimDjqvk_IfXlDScDIA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:0f:ba:67:02:a1:9e:c2:89:9b:8d:fb:1d:ec:0d:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5825fbee7c43a29838eabe4fc87d794349c0c80
Validity
Not Before: May 12 12:00:53 2026 GMT
Not After : May 13 12:00:53 2026 GMT
Subject: CN=ddfcd7f3a1515c1c68d6c25024cc67af9c9beed0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e4:70:34:46:b6:f4:0f:8a:c8:b0:b5:c5:e7:
11:63:18:05:1e:fd:2a:ea:4f:be:4b:40:11:82:9a:
18:c5:64:45:3a:d4:5a:ee:7f:38:c1:05:06:63:96:
1c:36:fc:d2:85:87:12:a6:85:d9:1f:53:41:09:47:
ed:06:f9:e5:cd:9e:4b:a8:9e:70:72:e3:3b:5b:84:
a2:6f:4a:a3:f2:f8:fc:eb:5f:4a:4a:bb:eb:5f:d7:
53:be:56:4c:0b:8b:ac:de:3f:52:fe:c9:65:e8:77:
24:10:04:43:6e:37:0e:bc:e9:2c:75:4e:16:c7:0d:
d7:b1:81:8a:00:48:50:34:b5:02:59:0f:2e:f0:73:
96:a1:fe:65:82:05:9b:ff:b3:9a:10:53:9d:ac:6f:
18:e4:51:32:2a:db:d7:4d:50:b5:90:ed:6f:24:53:
df:be:df:8d:05:3d:45:64:bf:3a:6c:53:21:5e:92:
1c:c6:14:98:ec:ed:02:0d:e2:81:8b:41:0b:8d:45:
c2:ac:5a:50:16:4e:c3:59:cd:bd:2b:42:be:cc:f8:
b5:eb:de:7f:3a:09:9d:0a:dc:86:3f:b0:d4:48:80:
b7:11:ac:b5:d9:58:89:b2:ca:fb:ea:ea:bc:9c:46:
ba:85:4a:5a:c1:d8:69:08:fe:dd:b3:ce:da:de:2d:
4d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:FC:D7:F3:A1:51:5C:1C:68:D6:C2:50:24:CC:67:AF:9C:9B:EE:D0
X509v3 Authority Key Identifier:
keyid:E5:82:5F:BE:E7:C4:3A:29:83:8E:AB:E4:FC:87:D7:94:34:9C:0C:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YJfvufEOimDjqvk_IfXlDScDIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:ce:dc:23:09:89:4b:19:55:07:42:66:f7:6e:bc:69:5a:63:
de:09:51:f2:6f:e6:c9:06:4e:e6:93:1b:31:74:ba:cd:86:63:
97:b1:03:4f:55:3a:4a:11:d3:dc:3a:8a:08:59:cc:ad:8b:43:
0f:b5:94:f0:3a:87:93:6d:34:94:db:8b:f7:0b:b0:ff:bc:0a:
e5:ce:91:f4:83:5e:34:ed:e0:77:7b:23:51:6a:d4:85:dd:77:
aa:d2:5f:bf:c3:97:7c:d4:6d:e1:fa:03:0a:4d:9e:d0:94:55:
55:de:bf:d0:a5:22:69:a7:bb:e2:d0:14:28:8e:3d:e0:5f:e1:
4a:19:69:db:90:13:b8:32:33:bc:d4:f4:76:c0:e6:04:b3:39:
1f:16:2a:1b:60:3b:08:2a:69:7d:c9:31:f6:04:50:ee:4e:45:
57:35:68:b7:73:61:8a:cb:a5:f4:bb:d3:37:85:66:0e:9f:91:
ab:cb:43:74:28:e2:0b:bf:2f:a4:d2:b6:3f:7a:4c:78:b5:10:
52:cb:57:05:79:53:b6:50:e1:2a:b2:37:14:6c:99:e2:83:4d:
ac:d7:a7:b7:30:9f:4f:6a:c5:99:65:42:89:6b:da:0f:8e:a6:
c0:d1:56:a6:50:6d:e3:ee:6d:36:33:0c:e2:97:49:e4:b4:1f:
7c:20:43:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:22:24 2026 by rpki-client