Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/bda3ef-4a2f-4ccc-b295-b22eb948515c/1/5YW66mL41gYmJIc4xF370iFzf0w.mft
File: 5YW66mL41gYmJIc4xF370iFzf0w.mft (raw, json)
Hash identifier: 4jflc0tDr3Ce08NxuYznEjDCMlM9hCoI3QlLRGLpHD0=
Subject key identifier: 5E:19:9A:DB:85:A8:BD:12:01:84:E6:FA:1A:DF:30:81:FD:1B:AB:22
Authority key identifier: E5:85:BA:EA:62:F8:D6:06:26:24:87:38:C4:5D:FB:D2:21:73:7F:4C
Certificate issuer: /CN=e585baea62f8d60626248738c45dfbd221737f4c
Certificate serial: 019D273B3AC9BCBFD1DEE8977D2242A022E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5YW66mL41gYmJIc4xF370iFzf0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/bda3ef-4a2f-4ccc-b295-b22eb948515c/1/5YW66mL41gYmJIc4xF370iFzf0w.mft
Manifest number: 1817
Signing time: Wed 25 Mar 2026 23:01:26 +0000
Manifest this update: Wed 25 Mar 2026 23:01:26 +0000
Manifest next update: Thu 26 Mar 2026 23:01:26 +0000
Files and hashes: 1: 5YW66mL41gYmJIc4xF370iFzf0w.crl (hash: jieVqFrEjxwq/bY5UG9Apst4cpgVVOHbgUC/NPxdgwg=)
2: 8sL7bBvUgTkJCvQisEREV4oTHTY.roa (hash: UVYp1CMTJL6S6Pi+AsLy1eQnDuTmz/e2tO8gZBGHYuI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/bda3ef-4a2f-4ccc-b295-b22eb948515c/1/5YW66mL41gYmJIc4xF370iFzf0w.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/bda3ef-4a2f-4ccc-b295-b22eb948515c/1/5YW66mL41gYmJIc4xF370iFzf0w.mft
rsync://rpki.ripe.net/repository/DEFAULT/5YW66mL41gYmJIc4xF370iFzf0w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3b:3a:c9:bc:bf:d1:de:e8:97:7d:22:42:a0:22:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e585baea62f8d60626248738c45dfbd221737f4c
Validity
Not Before: Mar 25 23:01:26 2026 GMT
Not After : Mar 26 23:01:26 2026 GMT
Subject: CN=5e199adb85a8bd120184e6fa1adf3081fd1bab22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2d:0f:c8:44:1c:a7:05:2f:60:f1:b4:d6:06:
f4:20:d2:ed:4b:e4:b4:61:9d:e3:a0:0d:d6:f6:d6:
49:fc:5a:0e:dc:70:4f:d1:fc:51:ce:00:2f:94:17:
e4:d7:fd:83:09:5f:81:9a:2a:cc:da:06:1d:ed:cb:
32:a9:e8:89:51:58:dc:5a:fc:1b:92:18:40:61:fe:
79:e6:af:fd:ee:a9:98:2f:79:2a:0b:0d:4c:96:f1:
7b:37:a4:eb:f2:09:fb:96:71:a8:b8:d1:a4:87:15:
e9:70:e8:ad:45:6a:ef:db:79:94:bd:4d:e5:09:3c:
80:99:8f:cd:34:64:60:3c:f3:47:f8:8b:8a:c1:c3:
6d:f5:44:1d:2d:09:a3:23:23:5b:34:5a:9d:bb:53:
d7:8a:2a:29:65:52:e4:03:eb:82:00:68:19:ce:c6:
4b:e4:80:0f:b4:a4:f4:4e:3f:a0:cf:64:a7:c7:8f:
56:d1:39:ef:4a:b0:58:0d:a0:b8:82:d0:58:1d:29:
77:32:5f:24:8e:3b:3d:d8:f8:30:14:8d:15:5b:68:
3a:32:9a:eb:a8:4f:ad:d0:17:45:f6:d8:54:b9:17:
9d:3c:f5:83:0e:c9:f8:c6:3b:6b:e9:76:de:40:ca:
ae:6b:5c:dc:2d:8d:66:92:4e:f5:6a:77:c2:3f:18:
2f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:19:9A:DB:85:A8:BD:12:01:84:E6:FA:1A:DF:30:81:FD:1B:AB:22
X509v3 Authority Key Identifier:
keyid:E5:85:BA:EA:62:F8:D6:06:26:24:87:38:C4:5D:FB:D2:21:73:7F:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YW66mL41gYmJIc4xF370iFzf0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/bda3ef-4a2f-4ccc-b295-b22eb948515c/1/5YW66mL41gYmJIc4xF370iFzf0w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/bda3ef-4a2f-4ccc-b295-b22eb948515c/1/5YW66mL41gYmJIc4xF370iFzf0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:c8:bd:a1:88:35:07:b3:86:58:e9:e9:22:40:37:74:df:49:
7f:78:6f:71:69:c1:f5:2f:e1:4e:4c:19:a3:66:75:d7:59:06:
8b:f1:23:90:0e:c8:9f:06:4d:57:46:d8:90:83:ca:3f:52:e8:
88:16:d6:03:98:72:22:bb:21:ca:5d:14:b1:6e:50:5a:a0:5d:
5c:a4:67:68:87:d3:b5:84:1c:9f:4f:18:17:6a:00:41:17:d4:
6f:a1:b1:85:d9:92:2f:95:39:9c:79:62:7c:03:21:d3:a9:c8:
5b:70:7f:56:50:7c:b2:ef:91:b5:b6:81:d6:a6:b7:ba:97:59:
54:6d:12:1d:9b:34:ea:ed:e0:f0:3a:94:7c:04:e7:09:d1:15:
b1:b3:d0:96:08:a3:e8:1e:0a:d2:67:13:79:eb:6e:f5:1c:be:
49:0b:2c:44:fa:3f:e5:81:1b:12:43:15:ae:ca:a6:19:c1:c1:
4f:1c:cf:55:bb:e8:29:dd:cc:37:3e:8c:77:26:60:8a:13:c8:
f4:36:8f:47:f5:ab:30:ff:1e:54:17:d6:60:52:95:b4:95:2a:
fc:6f:38:0c:9f:66:26:d8:56:0f:02:58:a2:f6:81:3e:58:81:
dc:91:86:b5:69:e3:2f:e9:b4:c1:ec:33:ac:6f:d1:ad:31:c9:
3e:e9:8e:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:00:49 2026 by rpki-client