Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.mft
File: 5YJfvufEOimDjqvk_IfXlDScDIA.mft (raw, json)
Hash identifier: wGnjO+wdSH/VW3Ef1X/ffwUsyNGNN5XxMuqHGyM1jxo=
Subject key identifier: 33:09:D3:A2:BB:B2:4E:63:FF:B5:BA:F3:BD:C5:DE:B9:3C:2B:63:3D
Authority key identifier: E5:82:5F:BE:E7:C4:3A:29:83:8E:AB:E4:FC:87:D7:94:34:9C:0C:80
Certificate issuer: /CN=e5825fbee7c43a29838eabe4fc87d794349c0c80
Certificate serial: 019EC035FAA7F107BEC6173D9C30B64203E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5YJfvufEOimDjqvk_IfXlDScDIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.mft
Manifest number: 16B4
Signing time: Sat 13 Jun 2026 09:00:23 +0000
Manifest this update: Sat 13 Jun 2026 09:00:23 +0000
Manifest next update: Sun 14 Jun 2026 09:00:23 +0000
Files and hashes: 1: 5YJfvufEOimDjqvk_IfXlDScDIA.crl (hash: zcfFqQy2BoaliXMCawgSjEFY7ZMW2t10GgfM334baeU=)
2: WV1VFgh4UO5OQIjFi5jAdPHFRJ0.roa (hash: Wkox25tOHoYYnIadh8Euo0eCJ3gQ8TbFrbaKdOwZ2Jw=)
3: qIXEy_F6qfNB1iqYTrvJEkvpTsQ.roa (hash: 04pk0BNn+nyzGxexSqXjPihhWnR9IS/ncaQz3LI+rOs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5YJfvufEOimDjqvk_IfXlDScDIA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:35:fa:a7:f1:07:be:c6:17:3d:9c:30:b6:42:03:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5825fbee7c43a29838eabe4fc87d794349c0c80
Validity
Not Before: Jun 13 09:00:23 2026 GMT
Not After : Jun 14 09:00:23 2026 GMT
Subject: CN=3309d3a2bbb24e63ffb5baf3bdc5deb93c2b633d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4d:10:ee:33:97:2d:e5:6b:38:4c:90:a8:8e:
5a:c0:1d:65:cf:49:b1:33:7b:1a:1f:8b:af:65:e4:
78:31:54:fa:68:27:ab:91:a3:db:47:8b:b6:69:24:
63:2a:e9:0e:79:8a:fd:0a:3a:9f:3c:a7:ad:e3:09:
fb:85:73:be:be:c0:3d:48:f7:5a:cc:f2:b3:6d:29:
98:bc:6b:a8:bf:5d:4b:9c:2d:ea:9e:0d:88:94:18:
05:09:f2:ff:b0:21:87:24:dd:7a:ef:6e:d3:61:0d:
1f:b6:ca:f1:72:1a:3a:18:81:4c:f3:1f:90:a5:68:
a2:f0:39:9b:94:ab:08:26:f1:a7:87:0e:f1:57:9e:
b7:68:ba:9b:a6:68:9b:f3:f2:dd:6b:88:e6:4e:45:
56:5a:5c:e1:46:8a:4e:63:12:70:9b:4b:b0:59:8c:
e9:53:62:86:7d:60:74:ef:57:4e:2e:ec:7b:5b:4a:
f6:09:4b:bd:20:b1:2c:79:5a:77:51:8e:84:c8:16:
00:a4:5f:23:e4:91:b5:33:87:34:c1:10:11:72:46:
67:cb:ba:6a:9f:fe:2f:68:76:42:2f:bc:a0:76:41:
d1:2d:28:77:82:e6:a2:3f:13:da:8a:14:60:c8:3e:
de:ab:ee:ce:0e:f3:f4:c4:a9:e4:20:74:38:45:8c:
83:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:09:D3:A2:BB:B2:4E:63:FF:B5:BA:F3:BD:C5:DE:B9:3C:2B:63:3D
X509v3 Authority Key Identifier:
keyid:E5:82:5F:BE:E7:C4:3A:29:83:8E:AB:E4:FC:87:D7:94:34:9C:0C:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YJfvufEOimDjqvk_IfXlDScDIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:1e:fc:98:43:91:63:f4:33:d2:8c:f1:91:e2:d7:35:54:ca:
66:4c:8f:ff:f6:39:03:8b:91:c8:74:f9:0f:3b:6b:37:58:4c:
30:8b:16:29:a3:4f:a7:4c:34:39:3f:ca:2c:74:5f:e1:81:60:
cf:ee:b3:84:12:a7:0e:89:c8:71:1e:df:bf:d1:d3:41:6e:01:
20:6c:26:f3:37:ec:41:00:f9:7f:83:4a:2b:cd:b3:cb:24:60:
fb:14:05:7a:90:83:3c:1e:14:75:3c:cd:22:e0:bc:8c:8c:9b:
46:63:b9:9b:51:e0:e0:0e:f0:84:8d:b2:da:b2:35:0e:7c:3a:
b3:5c:08:74:33:28:7b:9e:e6:8d:c4:f7:ce:57:01:ec:f7:38:
b3:33:93:0c:c0:35:e7:6b:75:cb:0c:99:64:26:3f:cc:f6:39:
5f:d8:28:90:0a:e7:10:07:bf:03:27:8c:1e:d9:80:f7:4c:70:
8f:61:87:b0:0b:55:bf:ff:02:92:96:e2:21:b5:4c:3f:90:83:
f9:50:ff:68:3f:84:64:c3:3e:88:2f:8c:28:9e:d2:2d:6d:04:
43:90:46:de:6f:7a:52:e4:20:e0:b6:9e:c7:7e:c0:a2:49:76:
4e:a5:18:e9:eb:29:3f:62:c1:e2:3a:4b:f5:0e:ad:b9:f6:4a:
54:0a:94:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:04:36 2026 by rpki-client