Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/cd57e2-57c7-4cc5-8714-3496c9d794bc/1/5YAuENSvnLelksYbu0sJLqw4htY.mft
File: 5YAuENSvnLelksYbu0sJLqw4htY.mft (raw, json)
Hash identifier: kLJXcXWYyIIilzEut67/ScrzKMiguT5YvD4af9PUYjo=
Subject key identifier: D7:C1:AA:CB:EA:F4:D8:B4:7F:64:61:C8:1C:96:DC:E2:5B:B5:E4:77
Authority key identifier: E5:80:2E:10:D4:AF:9C:B7:A5:92:C6:1B:BB:4B:09:2E:AC:38:86:D6
Certificate issuer: /CN=e5802e10d4af9cb7a592c61bbb4b092eac3886d6
Certificate serial: 019D27725AE103B2434061B4428A134EFD56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5YAuENSvnLelksYbu0sJLqw4htY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/cd57e2-57c7-4cc5-8714-3496c9d794bc/1/5YAuENSvnLelksYbu0sJLqw4htY.mft
Manifest number: 01B4
Signing time: Thu 26 Mar 2026 00:01:38 +0000
Manifest this update: Thu 26 Mar 2026 00:01:38 +0000
Manifest next update: Fri 27 Mar 2026 00:01:38 +0000
Files and hashes: 1: 5YAuENSvnLelksYbu0sJLqw4htY.crl (hash: bzNm7vStLdTAievqtzcaWqfY/T+xZovHoQmmrdPTMXw=)
2: V7uoSOO7xuQ-5mC33-G196G_a8s.roa (hash: tVW62BhhbXSwkMQ25NQGkX/bauxI9OvjWozYd+KEyP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/cd57e2-57c7-4cc5-8714-3496c9d794bc/1/5YAuENSvnLelksYbu0sJLqw4htY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/cd57e2-57c7-4cc5-8714-3496c9d794bc/1/5YAuENSvnLelksYbu0sJLqw4htY.mft
rsync://rpki.ripe.net/repository/DEFAULT/5YAuENSvnLelksYbu0sJLqw4htY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:5a:e1:03:b2:43:40:61:b4:42:8a:13:4e:fd:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5802e10d4af9cb7a592c61bbb4b092eac3886d6
Validity
Not Before: Mar 26 00:01:38 2026 GMT
Not After : Mar 27 00:01:38 2026 GMT
Subject: CN=d7c1aacbeaf4d8b47f6461c81c96dce25bb5e477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:56:b4:ff:93:09:c3:8f:d6:14:72:a8:2a:6a:
34:35:97:63:34:cb:b1:be:ac:f4:29:39:cd:1f:67:
c9:b2:0d:11:be:b2:ce:45:51:f7:4b:14:cc:0b:45:
ba:60:6b:ba:53:f5:4c:4c:9d:b8:bd:f0:bf:e7:52:
74:a5:bb:ac:b7:d8:ff:08:36:ac:b5:7c:cd:54:07:
db:bc:de:0d:f0:c9:aa:ff:e9:37:12:12:77:51:bc:
a2:62:2e:f7:fa:64:63:b0:4e:bb:b3:43:d7:13:1c:
fc:3d:91:4e:3f:fb:70:f8:44:df:bb:52:44:9a:85:
0d:91:21:35:02:de:1d:66:e3:b8:79:74:4a:bd:f7:
37:7e:c7:77:32:02:c9:18:40:a3:81:ff:54:ae:14:
96:59:1b:f4:cc:47:31:6f:cf:95:0a:c0:cc:9f:8b:
88:92:6c:b0:99:05:6d:9a:c7:cf:9e:c1:2c:d4:38:
7c:a7:61:c1:35:88:91:a4:00:5c:80:b9:d4:ef:63:
0a:cd:90:59:c1:2a:dd:54:c8:d7:86:74:fc:94:39:
80:05:33:b4:78:61:16:7a:3e:86:ed:43:93:ac:be:
e8:a1:88:b5:24:4c:b5:98:f8:80:18:22:5d:d9:44:
40:0e:ad:3f:3a:c1:ee:65:35:c5:ca:aa:32:61:ac:
11:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:C1:AA:CB:EA:F4:D8:B4:7F:64:61:C8:1C:96:DC:E2:5B:B5:E4:77
X509v3 Authority Key Identifier:
keyid:E5:80:2E:10:D4:AF:9C:B7:A5:92:C6:1B:BB:4B:09:2E:AC:38:86:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YAuENSvnLelksYbu0sJLqw4htY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/cd57e2-57c7-4cc5-8714-3496c9d794bc/1/5YAuENSvnLelksYbu0sJLqw4htY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/cd57e2-57c7-4cc5-8714-3496c9d794bc/1/5YAuENSvnLelksYbu0sJLqw4htY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:f5:c4:f1:70:34:96:16:06:9a:25:0b:9b:e2:1a:68:c7:fb:
1e:9d:37:76:95:65:19:b3:08:cf:6c:62:dc:19:83:0f:76:f4:
4c:80:7b:1d:01:d7:59:8b:7c:e9:7c:65:45:df:15:a9:cb:0f:
1a:08:3d:78:4e:28:ea:aa:f7:f8:0b:9c:ab:d4:dc:d9:70:51:
34:51:b5:31:e2:00:5e:5b:8d:df:ee:23:73:1a:0a:69:b7:d5:
4f:f8:85:12:cb:df:96:18:5a:16:2b:44:99:5a:a4:c7:a7:3e:
4c:e7:29:bd:ca:6c:ba:88:b2:f1:5e:db:f8:63:d9:3d:aa:93:
d1:83:0c:c1:7e:cf:58:38:98:a6:96:e0:30:01:c8:10:2b:ff:
db:30:37:27:76:c2:4d:95:11:c4:cf:2b:74:12:52:f7:62:d9:
31:6b:21:f0:59:b0:8b:02:e6:21:83:a1:fc:16:d7:3e:44:91:
0e:25:67:3d:d8:01:50:68:7f:a9:7a:83:24:8d:c4:4c:cb:20:
da:1e:8a:43:12:38:c9:c5:02:f7:97:df:b7:f1:75:48:fb:53:
d9:9a:e0:fb:3f:82:f9:19:33:bc:e2:96:d4:6f:fd:09:ae:35:
c5:41:e4:eb:66:de:12:03:31:78:13:28:67:17:0d:8e:73:d7:
b0:ab:30:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:27:27 2026 by rpki-client