Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/841257-9d93-4918-a8ae-72ca13dfad2b/1/5yHQ6mg8xnWULAmPWcQRyGDorto.mft
File: 5yHQ6mg8xnWULAmPWcQRyGDorto.mft (raw, json)
Hash identifier: vbeJssYZzzJc7bg8hDC3aW9JBOB+eD9ZvtRzi+8oYMk=
Subject key identifier: 5C:3C:89:BD:03:5F:95:72:82:8E:4F:89:6E:1B:1E:D6:A2:8C:F5:B4
Authority key identifier: E7:21:D0:EA:68:3C:C6:75:94:2C:09:8F:59:C4:11:C8:60:E8:AE:DA
Certificate issuer: /CN=e721d0ea683cc675942c098f59c411c860e8aeda
Certificate serial: 019D99629D79429B9F9FBFC3EBB4C95327CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5yHQ6mg8xnWULAmPWcQRyGDorto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/841257-9d93-4918-a8ae-72ca13dfad2b/1/5yHQ6mg8xnWULAmPWcQRyGDorto.mft
Manifest number: 04A3
Signing time: Fri 17 Apr 2026 03:01:09 +0000
Manifest this update: Fri 17 Apr 2026 03:01:09 +0000
Manifest next update: Sat 18 Apr 2026 03:01:09 +0000
Files and hashes: 1: 5yHQ6mg8xnWULAmPWcQRyGDorto.crl (hash: G3+PsnQMsMFS94dgT36Zdjei4/MDG95iUaFusZLXLXM=)
2: STO2kom-zBw1tRgfWNcBAQ37NC8.roa (hash: a0Fmrw1wcNVYzRWWKC14G0JJl+6PihD7ZzdaxPHGENs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/841257-9d93-4918-a8ae-72ca13dfad2b/1/5yHQ6mg8xnWULAmPWcQRyGDorto.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/841257-9d93-4918-a8ae-72ca13dfad2b/1/5yHQ6mg8xnWULAmPWcQRyGDorto.mft
rsync://rpki.ripe.net/repository/DEFAULT/5yHQ6mg8xnWULAmPWcQRyGDorto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:9d:79:42:9b:9f:9f:bf:c3:eb:b4:c9:53:27:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e721d0ea683cc675942c098f59c411c860e8aeda
Validity
Not Before: Apr 17 03:01:09 2026 GMT
Not After : Apr 18 03:01:09 2026 GMT
Subject: CN=5c3c89bd035f9572828e4f896e1b1ed6a28cf5b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:bc:95:bf:23:a8:ae:fd:15:ea:44:c9:cb:16:
4b:1c:c2:86:14:32:1b:db:7b:42:f6:e2:74:44:11:
4e:ac:89:58:7a:6a:fd:59:9c:f7:2e:37:0a:82:8a:
c2:96:54:70:62:ee:2e:ec:be:94:b9:bc:72:86:47:
2b:46:5d:5c:8b:9b:03:65:9e:3c:b1:20:91:b0:a0:
f5:e6:fb:da:26:69:4b:9c:cc:27:1e:7c:74:95:3d:
d8:04:e7:de:6b:83:c1:ea:11:3f:95:3d:16:ca:ac:
5c:a2:d5:a9:18:20:2a:c3:8b:75:d8:98:d8:21:ec:
7b:65:5e:97:ae:b5:ce:6e:72:ed:f6:53:dc:6d:f8:
31:de:c9:96:ca:4f:65:f9:29:55:1a:2c:88:c5:b8:
1b:01:b6:9f:71:57:f0:4a:04:66:5e:63:b2:0f:96:
4e:33:cd:fa:41:77:b8:7d:37:74:3a:12:df:3d:20:
f7:e1:15:da:5f:31:d1:b1:9f:51:fa:80:41:a6:7c:
4c:3b:c5:2a:8b:e7:95:55:c4:ca:2e:82:5e:f9:42:
78:92:63:a7:ce:d4:67:1e:12:3d:29:66:7f:4b:0c:
25:fd:51:0c:83:02:62:14:2b:c1:ab:8c:50:19:9a:
33:bd:92:4f:00:78:65:e8:ae:f4:8c:d6:3d:e7:ee:
8b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:3C:89:BD:03:5F:95:72:82:8E:4F:89:6E:1B:1E:D6:A2:8C:F5:B4
X509v3 Authority Key Identifier:
keyid:E7:21:D0:EA:68:3C:C6:75:94:2C:09:8F:59:C4:11:C8:60:E8:AE:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5yHQ6mg8xnWULAmPWcQRyGDorto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/841257-9d93-4918-a8ae-72ca13dfad2b/1/5yHQ6mg8xnWULAmPWcQRyGDorto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/841257-9d93-4918-a8ae-72ca13dfad2b/1/5yHQ6mg8xnWULAmPWcQRyGDorto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:56:7e:35:17:66:4c:a3:e0:74:ae:ee:3c:f2:67:c3:81:88:
5e:76:91:c1:c8:b9:74:02:9f:aa:b5:0e:07:bf:19:f7:ba:95:
f3:60:a0:e1:7b:82:9b:b3:b6:99:50:8c:bb:4f:e8:65:99:9e:
7c:05:7c:09:48:3b:87:51:8e:00:d7:7c:d1:ec:22:22:6c:9e:
82:ed:d0:d5:79:8f:f3:2c:88:0a:80:5f:63:51:f9:3d:36:82:
a0:42:17:a3:be:60:5c:20:dc:6c:96:94:90:32:d1:85:d1:9d:
e0:b3:3f:05:0f:2f:e8:a7:d0:ae:57:ec:e2:f6:84:4c:90:31:
c3:65:14:4e:4f:7e:42:ad:af:19:eb:05:e6:1c:1e:f7:0b:02:
67:87:50:28:6e:c3:9d:dc:17:35:c7:a3:9d:8d:21:b9:98:77:
ae:b1:4f:7a:8a:0c:d8:59:4f:c8:e1:a9:c4:b9:9b:72:8c:bc:
b8:57:21:2c:29:ba:4d:80:ca:d0:d5:21:b5:7b:44:2f:0f:d8:
e7:e3:9c:5d:ae:1f:e4:e5:b0:b2:30:35:12:2a:54:89:9a:ca:
25:94:b8:4a:1e:7d:21:1f:38:75:45:56:0e:85:82:86:70:86:
34:c4:ad:ca:e2:ae:49:0a:3e:39:35:c0:d2:e9:f3:84:87:a8:
c8:be:96:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:03:51 2026 by rpki-client