Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/40f1bb-e868-479c-a515-7b47b5ba6aed/1/5Y_3OSWiNpKEftkrxmYT_UcGjc8.mft
File: 5Y_3OSWiNpKEftkrxmYT_UcGjc8.mft (raw, json)
Hash identifier: qDL+BTDLBlqa9sath580TPkhXqYeytIsPRLHl8v607o=
Subject key identifier: AF:6B:4A:01:C5:05:21:C0:2F:1B:98:9B:43:47:55:0E:77:31:94:49
Authority key identifier: E5:8F:F7:39:25:A2:36:92:84:7E:D9:2B:C6:66:13:FD:47:06:8D:CF
Certificate issuer: /CN=e58ff73925a23692847ed92bc66613fd47068dcf
Certificate serial: 019DA3786FCEF1CD312EE2F0135362FDEE42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Y_3OSWiNpKEftkrxmYT_UcGjc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/40f1bb-e868-479c-a515-7b47b5ba6aed/1/5Y_3OSWiNpKEftkrxmYT_UcGjc8.mft
Manifest number: 0595
Signing time: Sun 19 Apr 2026 02:01:12 +0000
Manifest this update: Sun 19 Apr 2026 02:01:12 +0000
Manifest next update: Mon 20 Apr 2026 02:01:12 +0000
Files and hashes: 1: 4EDArNOkG9t_0drf9CtWRkAhPjQ.roa (hash: phvxGgDMB6MgrvAkeQunZHUKlxxS4J2n/S+31+NbGrQ=)
2: 5Y_3OSWiNpKEftkrxmYT_UcGjc8.crl (hash: yTMFll5SSYicLFpHmv8AeN59/Og6KFUfcpCEl+1Rypk=)
3: Uz71caARu_XJuPpplyjW4XbtH-g.roa (hash: RlsKWNdrrUUbHvw1YedMbug/yEWME3WBPDVS/CI+ee8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/40f1bb-e868-479c-a515-7b47b5ba6aed/1/5Y_3OSWiNpKEftkrxmYT_UcGjc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/40f1bb-e868-479c-a515-7b47b5ba6aed/1/5Y_3OSWiNpKEftkrxmYT_UcGjc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Y_3OSWiNpKEftkrxmYT_UcGjc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:78:6f:ce:f1:cd:31:2e:e2:f0:13:53:62:fd:ee:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e58ff73925a23692847ed92bc66613fd47068dcf
Validity
Not Before: Apr 19 02:01:12 2026 GMT
Not After : Apr 20 02:01:12 2026 GMT
Subject: CN=af6b4a01c50521c02f1b989b4347550e77319449
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:d7:b6:35:99:e8:3f:2e:70:b7:5e:1c:8d:13:
55:fc:e9:f9:78:ac:ab:eb:91:4e:f4:0d:e2:f7:52:
b4:73:83:18:53:ca:b0:72:f4:2b:4a:1f:ea:b5:d9:
98:35:b7:e9:7b:84:80:c0:3d:d0:5a:9b:7e:d8:43:
c6:0f:21:62:57:af:62:42:cc:6f:74:3c:43:93:c8:
a7:b0:0d:3b:31:40:29:ee:ec:9b:78:b6:52:32:d9:
e1:73:e3:3b:46:e4:e4:2d:65:c8:fb:96:de:84:ff:
e2:c2:76:57:a5:53:b6:ee:d1:fb:6b:df:06:3b:72:
96:52:df:34:69:90:35:94:55:07:1d:d9:3f:2d:b2:
bc:3a:f5:24:30:27:92:78:58:c7:d4:09:2b:8f:d5:
96:e5:1c:5a:d2:54:36:d7:1f:9a:ae:49:47:dc:9e:
41:5a:00:bf:f3:62:5b:69:20:bd:fa:7d:c3:65:73:
ab:39:8d:46:e5:de:af:d6:19:8f:9b:e3:4a:34:b8:
c3:fe:bb:2c:62:bb:e4:ad:e4:95:70:8e:50:6e:e1:
04:40:8d:c9:3f:32:5f:bf:7e:5b:65:3f:b4:14:52:
32:6b:52:9f:94:8e:37:f9:67:8b:bf:23:c8:57:27:
fe:db:73:b4:9c:8a:51:9e:21:6a:63:73:87:ca:79:
73:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:6B:4A:01:C5:05:21:C0:2F:1B:98:9B:43:47:55:0E:77:31:94:49
X509v3 Authority Key Identifier:
keyid:E5:8F:F7:39:25:A2:36:92:84:7E:D9:2B:C6:66:13:FD:47:06:8D:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Y_3OSWiNpKEftkrxmYT_UcGjc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/40f1bb-e868-479c-a515-7b47b5ba6aed/1/5Y_3OSWiNpKEftkrxmYT_UcGjc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/40f1bb-e868-479c-a515-7b47b5ba6aed/1/5Y_3OSWiNpKEftkrxmYT_UcGjc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:37:e0:ae:e7:7d:97:ce:94:df:e3:8c:33:9a:85:03:db:f5:
bd:4f:9e:33:c6:2a:25:33:eb:79:58:55:45:f0:28:c7:64:de:
ff:31:af:88:44:5b:c9:2c:a6:69:8c:6f:73:aa:95:e3:3e:dd:
20:3e:cb:4c:85:6f:6e:f9:ef:25:99:28:fb:d9:19:7b:1e:bf:
bc:da:6a:98:e0:cd:45:0f:72:48:d1:01:ab:de:5f:c0:75:e8:
42:12:ef:d1:70:bf:57:3a:d9:b1:07:02:93:ba:8c:3f:e0:07:
6b:f2:13:80:8c:d0:a9:97:36:2e:7e:76:c1:3f:61:9c:e8:96:
b0:89:ee:98:c6:98:0b:49:a4:8c:85:df:41:57:af:28:7a:b6:
8c:9e:02:e3:11:be:8f:47:cb:49:8b:4b:5b:37:13:be:dd:45:
ea:33:0f:54:4b:a8:ad:75:c8:06:d3:7c:c6:e1:b5:53:e9:3b:
06:5d:d6:8a:df:ad:00:96:b4:61:01:5d:d8:85:5c:a8:3b:15:
40:f7:a4:ef:4a:54:61:ab:09:03:84:6c:e5:62:e9:bd:46:f7:
ac:bc:19:73:eb:04:05:ef:ed:cf:5f:a5:81:80:1e:b2:37:80:
82:0e:9e:76:e5:9a:bd:8a:3d:af:24:31:f4:b7:84:c6:00:45:
ad:56:9a:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:30:02 2026 by rpki-client