Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.mft
File: 5YJfvufEOimDjqvk_IfXlDScDIA.mft (raw, json)
Hash identifier: r3N+US9oCm1p61wc7JvcnCICc99r4DiV8HgOfHihvEs=
Subject key identifier: FB:F2:F8:A8:3F:70:49:7F:D2:78:22:DE:51:17:B6:DB:FE:99:3E:B8
Authority key identifier: E5:82:5F:BE:E7:C4:3A:29:83:8E:AB:E4:FC:87:D7:94:34:9C:0C:80
Certificate issuer: /CN=e5825fbee7c43a29838eabe4fc87d794349c0c80
Certificate serial: 019D9AAC12BE69E867B1989F61EBE8129B9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5YJfvufEOimDjqvk_IfXlDScDIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.mft
Manifest number: 161C
Signing time: Fri 17 Apr 2026 09:01:01 +0000
Manifest this update: Fri 17 Apr 2026 09:01:01 +0000
Manifest next update: Sat 18 Apr 2026 09:01:01 +0000
Files and hashes: 1: 5YJfvufEOimDjqvk_IfXlDScDIA.crl (hash: K5r8iKnZrY1DwInde734QSty7sGDcPl76i+sW3VSiBc=)
2: WV1VFgh4UO5OQIjFi5jAdPHFRJ0.roa (hash: Wkox25tOHoYYnIadh8Euo0eCJ3gQ8TbFrbaKdOwZ2Jw=)
3: qIXEy_F6qfNB1iqYTrvJEkvpTsQ.roa (hash: 04pk0BNn+nyzGxexSqXjPihhWnR9IS/ncaQz3LI+rOs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5YJfvufEOimDjqvk_IfXlDScDIA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ac:12:be:69:e8:67:b1:98:9f:61:eb:e8:12:9b:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5825fbee7c43a29838eabe4fc87d794349c0c80
Validity
Not Before: Apr 17 09:01:01 2026 GMT
Not After : Apr 18 09:01:01 2026 GMT
Subject: CN=fbf2f8a83f70497fd27822de5117b6dbfe993eb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3b:6d:0b:72:c8:2c:5c:c3:73:60:04:42:d9:
d4:69:e9:15:65:e0:b6:09:83:ef:82:bf:7f:29:bd:
53:5b:cb:13:75:35:af:08:ba:e6:7d:7a:56:c8:88:
36:3f:82:d6:3e:9c:ad:06:77:cc:0d:4d:a6:69:ba:
e8:52:02:2f:c5:b5:0e:a0:f0:05:24:d2:a0:74:33:
db:33:71:09:bb:48:0b:71:97:a0:92:14:96:96:d2:
28:4b:87:e2:63:47:09:e0:b2:f9:87:38:0b:ba:ab:
ba:3d:da:00:e1:22:46:32:0b:78:52:2f:9c:33:d3:
b5:98:df:1c:fb:fa:97:f3:41:0c:67:38:60:be:1f:
6c:dc:bd:8e:d3:ed:79:ba:b5:1c:fa:72:b3:f3:7f:
e9:ec:81:a5:6e:59:3b:a6:5b:a5:12:fd:e5:0f:49:
a7:6d:5e:aa:c6:a3:c2:41:d4:22:ef:89:48:46:81:
2c:73:7f:9b:c9:64:86:ba:1d:55:b8:23:5b:eb:b2:
8e:ea:e4:7b:1c:87:c4:ab:ed:8c:4d:9f:f7:72:57:
f5:3e:52:3b:97:b6:b0:67:cc:61:50:1b:c0:6b:c9:
7e:11:39:0a:ce:1c:83:a5:47:ac:e4:bb:42:f7:64:
72:42:c7:19:1e:81:ff:65:bd:61:11:6f:04:3e:6c:
36:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:F2:F8:A8:3F:70:49:7F:D2:78:22:DE:51:17:B6:DB:FE:99:3E:B8
X509v3 Authority Key Identifier:
keyid:E5:82:5F:BE:E7:C4:3A:29:83:8E:AB:E4:FC:87:D7:94:34:9C:0C:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YJfvufEOimDjqvk_IfXlDScDIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:8d:5e:6d:94:8f:4d:6d:9b:63:ae:4a:0a:01:5a:e9:1d:27:
5a:07:64:da:0d:0d:d2:27:86:33:b4:34:fa:f8:f1:87:b6:be:
d6:2d:02:e8:3d:ab:8d:19:05:aa:be:84:a7:7a:9d:40:f7:91:
29:60:09:61:ef:cf:e5:45:55:76:e7:e2:25:25:eb:0b:6a:33:
b5:00:1b:45:9d:e2:14:06:8e:97:8c:fa:28:b7:c2:16:6e:05:
97:28:12:7e:bb:14:1f:bb:7d:43:7f:9b:0a:d0:63:57:b6:54:
97:f7:73:13:a6:60:2c:3f:3b:8f:79:e0:9b:7c:79:b6:2f:03:
70:06:cd:ed:db:e5:f2:33:9a:3e:d2:70:5d:37:3f:03:96:98:
bf:29:2f:cc:51:3e:56:f4:b4:ca:d2:3f:a9:14:34:b8:30:65:
81:2a:ed:5c:f5:12:07:6e:56:4b:fb:69:08:34:13:4f:db:3a:
d1:a0:82:5c:c0:ee:c8:89:a1:ca:cf:3a:a1:1b:58:d2:a4:17:
cc:23:f9:7c:94:fd:0f:ea:7a:da:5a:d6:bb:82:f9:d5:70:83:
80:0e:af:f9:1b:37:07:bd:b0:7d:1f:f3:01:07:df:40:c7:56:
10:ec:60:05:8f:4f:cc:04:4c:12:4b:3d:b9:d3:74:d8:ee:ae:
b6:79:69:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:06:11 2026 by rpki-client