Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.mft
File: 5YJfvufEOimDjqvk_IfXlDScDIA.mft (raw, json)
Hash identifier: OZygMoyMa39pm8MK37SwuuQ+Z6gpcoN8RmrgPnfaezk=
Subject key identifier: 06:00:59:8F:F1:23:2E:D1:18:90:E3:7F:C6:10:51:B9:9A:19:0C:D2
Authority key identifier: E5:82:5F:BE:E7:C4:3A:29:83:8E:AB:E4:FC:87:D7:94:34:9C:0C:80
Certificate issuer: /CN=e5825fbee7c43a29838eabe4fc87d794349c0c80
Certificate serial: 01A0C7B3BCAD47A59D825487859285A8E1F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5YJfvufEOimDjqvk_IfXlDScDIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.mft
Manifest number: 17C1
Signing time: Tue 22 Sep 2026 06:00:40 +0000
Manifest this update: Tue 22 Sep 2026 06:00:40 +0000
Manifest next update: Wed 23 Sep 2026 06:00:40 +0000
Files and hashes: 1: 5YJfvufEOimDjqvk_IfXlDScDIA.crl (hash: smqZupJroXC20Uu6O+ZnEFHPZvc6j9WMgZK5UGLHguc=)
2: WV1VFgh4UO5OQIjFi5jAdPHFRJ0.roa (hash: Wkox25tOHoYYnIadh8Euo0eCJ3gQ8TbFrbaKdOwZ2Jw=)
3: qIXEy_F6qfNB1iqYTrvJEkvpTsQ.roa (hash: 04pk0BNn+nyzGxexSqXjPihhWnR9IS/ncaQz3LI+rOs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5YJfvufEOimDjqvk_IfXlDScDIA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 06:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:b3:bc:ad:47:a5:9d:82:54:87:85:92:85:a8:e1:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5825fbee7c43a29838eabe4fc87d794349c0c80
Validity
Not Before: Sep 22 06:00:40 2026 GMT
Not After : Sep 23 06:00:40 2026 GMT
Subject: CN=0600598ff1232ed11890e37fc61051b99a190cd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:73:20:84:01:c4:47:e5:7c:83:c5:f6:49:70:
cd:e4:5f:36:30:69:ba:80:ce:40:e5:20:71:48:37:
69:c6:cf:d7:d1:82:ad:36:1a:2b:0f:6f:c9:e8:ad:
6e:cc:e6:ab:16:5f:43:29:27:17:0f:e9:ab:24:b8:
cc:5c:cb:82:a1:b5:bb:6f:5a:46:01:99:82:b0:49:
29:77:a0:6b:1a:2f:12:11:6a:28:f1:52:1f:5d:7d:
45:c4:70:67:06:d3:43:10:6f:be:f7:f9:96:7c:78:
49:1a:0c:4a:1b:55:66:16:4d:f9:0d:67:ee:f8:50:
9a:57:9f:a3:70:d6:76:97:8b:8b:9a:e9:fe:8a:7d:
87:d9:65:c8:53:89:15:5e:01:af:20:98:54:b2:cd:
7c:02:58:68:2e:3c:5a:6d:cc:93:62:e2:0f:b9:36:
34:c0:14:d0:3a:ef:10:cf:81:a7:17:00:83:7f:0d:
85:8e:26:3f:01:7f:ee:fb:28:92:95:1f:8c:3c:df:
22:40:25:58:43:d7:78:b6:9d:58:8e:bc:02:26:56:
12:ff:5a:03:ed:01:14:c2:41:83:4a:d9:e6:f3:c3:
d0:2c:67:a3:4e:bb:a7:97:01:86:e4:33:96:1e:ee:
0e:05:55:7e:7e:b7:51:36:e5:ca:f9:ee:34:f8:c8:
56:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:00:59:8F:F1:23:2E:D1:18:90:E3:7F:C6:10:51:B9:9A:19:0C:D2
X509v3 Authority Key Identifier:
keyid:E5:82:5F:BE:E7:C4:3A:29:83:8E:AB:E4:FC:87:D7:94:34:9C:0C:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YJfvufEOimDjqvk_IfXlDScDIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:30:ec:d6:de:a5:f8:4e:8f:e6:44:eb:a8:1b:a4:8c:0b:39:
cd:86:da:ae:99:36:07:b4:f2:6c:80:20:79:ef:50:1c:60:cb:
e2:78:7d:5b:d6:ab:b9:5e:56:ce:2a:b9:5c:ef:7d:c7:59:99:
94:55:56:73:60:d5:ae:6a:03:ad:4c:e6:9b:41:5a:30:d1:e4:
f9:b8:a6:c3:e7:52:71:cf:eb:23:a0:86:f2:61:77:52:40:1e:
d0:17:80:20:7a:62:d8:b0:78:8d:ce:0e:b5:69:fd:70:e7:4c:
fa:2c:25:f8:00:83:77:83:a4:be:6a:de:8a:7b:9b:bd:eb:87:
7b:56:63:d4:2c:2f:46:97:85:da:a7:30:b3:c1:aa:c4:7a:c8:
48:97:5e:8e:68:fa:17:bd:3f:08:9e:ce:cf:3e:66:cf:2a:95:
32:07:29:0a:4e:b4:16:09:8c:64:e7:34:46:7c:7b:d4:34:a4:
60:6e:d3:e6:aa:c6:eb:15:f2:be:f6:0b:47:79:2a:15:75:a6:
f6:21:b6:93:60:4d:6b:00:c2:d8:8c:44:61:32:00:d4:9a:e1:
a5:1e:a5:29:02:39:7a:53:df:60:57:dc:87:6e:3e:e1:e0:f6:
fd:ae:94:3b:b3:91:4e:67:89:92:71:7b:3a:cb:2c:54:47:49:
a6:7b:d0:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 17:26:27 2026 by rpki-client