Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/cd57e2-57c7-4cc5-8714-3496c9d794bc/1/5YAuENSvnLelksYbu0sJLqw4htY.mft
File: 5YAuENSvnLelksYbu0sJLqw4htY.mft (raw, json)
Hash identifier: CUimshKBn73aGG4YxH/9HEQq1lr+5Dl2Lr0TXLsWqAQ=
Subject key identifier: 40:2C:78:C0:83:4E:C9:AE:1A:EF:D6:F2:12:1F:73:80:ED:54:B6:CB
Authority key identifier: E5:80:2E:10:D4:AF:9C:B7:A5:92:C6:1B:BB:4B:09:2E:AC:38:86:D6
Certificate issuer: /CN=e5802e10d4af9cb7a592c61bbb4b092eac3886d6
Certificate serial: 019F8F7E3AC343A1277F69E7CE2C4D86BBED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5YAuENSvnLelksYbu0sJLqw4htY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/cd57e2-57c7-4cc5-8714-3496c9d794bc/1/5YAuENSvnLelksYbu0sJLqw4htY.mft
Manifest number: 02F3
Signing time: Thu 23 Jul 2026 15:00:42 +0000
Manifest this update: Thu 23 Jul 2026 15:00:42 +0000
Manifest next update: Fri 24 Jul 2026 15:00:42 +0000
Files and hashes: 1: 5YAuENSvnLelksYbu0sJLqw4htY.crl (hash: MXscOL8SAduVU3v5/AT+5itPvBG7AwaaiOQjgQWepYE=)
2: V7uoSOO7xuQ-5mC33-G196G_a8s.roa (hash: tVW62BhhbXSwkMQ25NQGkX/bauxI9OvjWozYd+KEyP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/cd57e2-57c7-4cc5-8714-3496c9d794bc/1/5YAuENSvnLelksYbu0sJLqw4htY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/cd57e2-57c7-4cc5-8714-3496c9d794bc/1/5YAuENSvnLelksYbu0sJLqw4htY.mft
rsync://rpki.ripe.net/repository/DEFAULT/5YAuENSvnLelksYbu0sJLqw4htY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:3a:c3:43:a1:27:7f:69:e7:ce:2c:4d:86:bb:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5802e10d4af9cb7a592c61bbb4b092eac3886d6
Validity
Not Before: Jul 23 15:00:42 2026 GMT
Not After : Jul 24 15:00:42 2026 GMT
Subject: CN=402c78c0834ec9ae1aefd6f2121f7380ed54b6cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:a7:c1:8f:5d:58:67:a8:10:1b:6f:58:d3:6f:
fd:01:bf:8e:c9:75:ce:72:6f:38:cf:7f:02:bc:29:
e8:ce:ab:1b:bc:a9:80:53:0c:d0:7a:39:b8:66:c2:
46:85:c8:64:90:05:f2:22:8e:83:91:e1:f7:00:c7:
f3:a0:75:82:a8:b8:c1:16:db:55:7a:9c:24:c2:f7:
01:94:bb:62:72:cb:36:18:6e:a7:52:8b:e4:a2:e0:
f7:ac:c6:51:a1:b8:1f:95:26:07:53:88:26:70:ba:
fc:07:72:da:aa:59:1e:9c:4a:65:80:09:f1:9b:50:
0e:71:14:e8:18:b0:b4:07:37:9f:4f:c4:80:42:fa:
72:f8:cf:cb:fe:59:8a:ee:1f:82:e5:a1:73:37:fc:
ae:ad:d4:dc:f3:15:fb:a5:2e:bb:f6:15:24:de:16:
b7:4d:57:f7:5e:42:c7:41:bd:31:03:48:c9:a5:64:
30:65:da:54:cf:a9:39:96:f5:ff:84:fc:b0:4c:01:
86:df:11:8e:1f:93:87:66:63:ee:80:92:0f:ff:e9:
d1:7f:a5:6c:06:30:51:6e:e9:82:b0:8d:68:14:a4:
87:28:61:cb:ee:07:56:47:ea:80:d0:6e:a2:35:ed:
7b:e2:7a:e7:ab:06:39:f6:2d:95:cf:74:4d:89:2f:
a4:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:2C:78:C0:83:4E:C9:AE:1A:EF:D6:F2:12:1F:73:80:ED:54:B6:CB
X509v3 Authority Key Identifier:
keyid:E5:80:2E:10:D4:AF:9C:B7:A5:92:C6:1B:BB:4B:09:2E:AC:38:86:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YAuENSvnLelksYbu0sJLqw4htY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/cd57e2-57c7-4cc5-8714-3496c9d794bc/1/5YAuENSvnLelksYbu0sJLqw4htY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/cd57e2-57c7-4cc5-8714-3496c9d794bc/1/5YAuENSvnLelksYbu0sJLqw4htY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:63:3e:7d:a7:39:c4:28:d3:e9:0e:83:df:31:66:1f:8a:09:
f3:14:3e:3b:6d:0b:27:91:58:8c:5b:43:7c:1a:94:4a:b5:8b:
b8:d8:a8:7a:9d:54:e4:3b:e4:b1:b4:5c:5d:d7:45:cb:d9:b5:
f7:d5:73:81:c7:17:15:57:be:f0:4f:46:e4:51:1d:cc:34:26:
bb:11:49:6f:f2:66:b6:78:dd:28:11:be:66:47:c9:bd:2f:83:
65:b4:8e:af:ee:d0:eb:2d:d1:b4:b9:5b:f7:eb:34:29:49:37:
25:91:f4:d7:ce:52:4e:90:1b:d5:8a:15:3e:85:18:00:45:8f:
07:62:61:9a:19:9e:e3:da:52:29:14:e7:ab:88:fe:9b:77:ba:
fe:50:03:1b:74:d4:ef:11:83:2d:79:70:8f:ec:91:3f:98:ca:
2c:1c:8e:b9:c0:57:20:5b:d2:93:30:49:6e:9f:4e:b0:63:b2:
73:8e:ff:f7:25:25:f4:ac:8a:2c:a2:9b:7f:91:64:68:56:85:
52:1c:a0:ea:f0:ef:04:42:2f:0b:25:c9:08:27:56:40:e6:0e:
7a:b5:0d:8d:6a:04:5c:09:a3:f5:6b:1c:e3:72:36:b9:70:13:
40:45:a1:36:b7:32:53:9d:b9:11:4c:37:85:44:60:00:20:48:
20:e6:f6:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:15:32 2026 by rpki-client