Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.mft
File: 5YJfvufEOimDjqvk_IfXlDScDIA.mft (raw, json)
Hash identifier: 5j+dZQQqsed4VAqIfecqrReJLTjhjGY32OgUNcRzFuQ=
Subject key identifier: 95:FE:84:39:5C:F8:FA:6C:59:EF:29:F2:84:1D:FC:8C:4E:55:6D:74
Authority key identifier: E5:82:5F:BE:E7:C4:3A:29:83:8E:AB:E4:FC:87:D7:94:34:9C:0C:80
Certificate issuer: /CN=e5825fbee7c43a29838eabe4fc87d794349c0c80
Certificate serial: 019CAD23051A16C431BB201EB36324814728
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5YJfvufEOimDjqvk_IfXlDScDIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.mft
Manifest number: 15A1
Signing time: Mon 02 Mar 2026 06:01:19 +0000
Manifest this update: Mon 02 Mar 2026 06:01:19 +0000
Manifest next update: Tue 03 Mar 2026 06:01:19 +0000
Files and hashes: 1: 5YJfvufEOimDjqvk_IfXlDScDIA.crl (hash: ELdPI3d/rh1u6nG9xDsgzAwUd1PUGB8jH7GBHM9Jyy4=)
2: WV1VFgh4UO5OQIjFi5jAdPHFRJ0.roa (hash: Wkox25tOHoYYnIadh8Euo0eCJ3gQ8TbFrbaKdOwZ2Jw=)
3: qIXEy_F6qfNB1iqYTrvJEkvpTsQ.roa (hash: 04pk0BNn+nyzGxexSqXjPihhWnR9IS/ncaQz3LI+rOs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5YJfvufEOimDjqvk_IfXlDScDIA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:23:05:1a:16:c4:31:bb:20:1e:b3:63:24:81:47:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5825fbee7c43a29838eabe4fc87d794349c0c80
Validity
Not Before: Mar 2 06:01:19 2026 GMT
Not After : Mar 3 06:01:19 2026 GMT
Subject: CN=95fe84395cf8fa6c59ef29f2841dfc8c4e556d74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:07:12:ad:00:f9:ba:73:f7:9e:ba:54:29:6f:
18:5c:8b:f2:6f:4b:a4:78:08:5b:34:8d:da:66:c4:
94:6e:1d:fb:71:ef:d3:e3:90:1c:0a:b7:6a:5e:29:
00:26:57:10:78:fd:3d:75:f1:b1:64:39:7d:2b:67:
09:4a:33:3f:eb:03:f1:f0:a4:6f:b0:5a:db:8b:7f:
a5:f8:74:b1:f4:38:5b:41:2f:0f:0c:bf:63:f4:43:
82:4c:60:64:79:a9:b9:99:04:cb:5b:fb:e9:2b:71:
5c:74:84:9f:0f:7a:df:87:3e:55:4f:ba:e3:0a:91:
fa:84:ed:f4:63:af:2d:a3:d6:31:66:1d:d1:32:6b:
7a:0a:e6:bc:ac:34:8d:41:98:fe:ec:5a:0f:88:e0:
d6:c1:de:ac:32:71:34:71:42:5e:23:a8:6d:ad:c5:
1e:5e:17:fd:3a:49:dd:5d:cb:ec:db:ae:7e:a9:68:
0c:f4:7a:37:15:4f:35:04:86:5c:cf:0d:52:59:89:
b2:59:b3:74:22:7a:af:80:48:81:fb:b7:b3:13:3d:
af:0a:fa:91:51:68:b2:53:0d:b1:2e:e2:a5:91:c6:
33:e1:eb:bc:47:32:82:1a:b6:fe:0f:2a:c4:a1:b3:
bf:04:c7:71:7a:2e:f8:be:39:02:0e:93:f0:92:7f:
f4:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:FE:84:39:5C:F8:FA:6C:59:EF:29:F2:84:1D:FC:8C:4E:55:6D:74
X509v3 Authority Key Identifier:
keyid:E5:82:5F:BE:E7:C4:3A:29:83:8E:AB:E4:FC:87:D7:94:34:9C:0C:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YJfvufEOimDjqvk_IfXlDScDIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:43:ad:fb:32:4f:8e:68:1f:21:6c:3c:ff:df:d6:3a:57:3b:
0f:bd:bf:d9:b4:64:68:03:87:39:bf:d8:76:48:9b:25:73:b0:
83:13:8a:5b:30:40:6e:1e:fb:0f:ee:85:42:79:2b:f3:24:7b:
f8:eb:4f:d0:54:9a:42:5a:18:c0:d7:22:ea:b0:03:19:6e:d6:
e3:52:69:e2:88:fb:95:b6:35:fd:64:15:41:0b:80:f7:98:79:
b9:e3:c6:49:04:56:4f:f4:d2:bf:9f:e6:12:b7:5f:33:e4:44:
5a:26:cb:f5:d8:a7:1f:bf:8b:64:25:62:a5:64:c1:0d:a5:d8:
d7:60:fa:b5:99:3a:66:1d:28:e7:3d:6c:7b:18:21:5b:aa:0a:
11:74:f7:10:a7:7f:6c:a2:e8:91:a8:b6:67:d8:f9:50:61:92:
9e:4f:ad:d2:c0:14:a2:18:00:90:51:c5:e3:91:08:16:df:0b:
2e:8f:07:b1:05:13:c7:c7:15:82:64:4b:f6:dc:94:a9:1a:25:
7d:fe:fd:eb:76:fe:31:22:7a:04:2b:86:db:27:10:f2:93:99:
01:2d:ca:1b:9b:7e:b4:6d:c9:ac:08:44:d3:56:ad:12:77:15:
45:63:99:66:0a:48:11:7a:a7:c9:1e:c0:f0:b1:e8:bc:78:2e:
00:0d:1f:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:28:19 2026 by rpki-client