Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/bda3ef-4a2f-4ccc-b295-b22eb948515c/1/5YW66mL41gYmJIc4xF370iFzf0w.mft
File: 5YW66mL41gYmJIc4xF370iFzf0w.mft (raw, json)
Hash identifier: RwapW0gxAgUSTVEAiyxtU2AfMS8MJ6dL9mRgATrczi8=
Subject key identifier: 54:9D:B4:72:A2:F4:29:29:AF:9D:F2:1E:C1:BC:44:84:BD:1C:D7:6F
Authority key identifier: E5:85:BA:EA:62:F8:D6:06:26:24:87:38:C4:5D:FB:D2:21:73:7F:4C
Certificate issuer: /CN=e585baea62f8d60626248738c45dfbd221737f4c
Certificate serial: 019DA2D347A01579C337C765E54F4B1ED490
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5YW66mL41gYmJIc4xF370iFzf0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/bda3ef-4a2f-4ccc-b295-b22eb948515c/1/5YW66mL41gYmJIc4xF370iFzf0w.mft
Manifest number: 1857
Signing time: Sat 18 Apr 2026 23:00:48 +0000
Manifest this update: Sat 18 Apr 2026 23:00:48 +0000
Manifest next update: Sun 19 Apr 2026 23:00:48 +0000
Files and hashes: 1: 5YW66mL41gYmJIc4xF370iFzf0w.crl (hash: ULMmKSEkamhq9BgUCsvwz1JQQM+1Pza2TD3sMF2Ho7g=)
2: 8sL7bBvUgTkJCvQisEREV4oTHTY.roa (hash: UVYp1CMTJL6S6Pi+AsLy1eQnDuTmz/e2tO8gZBGHYuI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/bda3ef-4a2f-4ccc-b295-b22eb948515c/1/5YW66mL41gYmJIc4xF370iFzf0w.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/bda3ef-4a2f-4ccc-b295-b22eb948515c/1/5YW66mL41gYmJIc4xF370iFzf0w.mft
rsync://rpki.ripe.net/repository/DEFAULT/5YW66mL41gYmJIc4xF370iFzf0w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 23:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a2:d3:47:a0:15:79:c3:37:c7:65:e5:4f:4b:1e:d4:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e585baea62f8d60626248738c45dfbd221737f4c
Validity
Not Before: Apr 18 23:00:48 2026 GMT
Not After : Apr 19 23:00:48 2026 GMT
Subject: CN=549db472a2f42929af9df21ec1bc4484bd1cd76f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6d:64:ba:c9:b7:09:c1:86:b1:38:ac:9c:b5:
fe:69:1a:d7:6e:ed:87:dc:32:8a:d3:df:0d:4a:fc:
1d:f4:46:d7:67:f0:2e:60:87:42:03:c9:bc:6c:e8:
35:84:ae:6a:d6:72:bf:c3:3a:45:88:03:81:f1:7e:
d6:8c:be:57:b0:cd:85:03:39:7b:af:62:54:da:6b:
94:24:16:67:29:fa:7b:75:e3:db:5f:09:b8:20:ce:
f8:8a:e2:b2:f2:c0:38:d1:81:c9:7d:8e:60:60:65:
eb:28:a0:3c:7b:bc:13:02:ed:16:49:15:18:26:10:
9a:13:a7:1c:e4:01:d3:38:80:72:d4:25:69:05:60:
d9:c9:be:97:8a:98:fc:c1:e6:a7:b9:77:e8:b7:68:
86:a4:bb:2e:94:f6:d2:e9:a4:59:d7:4d:8a:30:cf:
1d:a3:3e:49:6b:82:71:e4:80:0b:cd:b0:21:a2:4d:
a6:c5:7b:8e:86:4f:b0:0e:8b:b0:b5:e2:1f:2d:1a:
9a:ca:d0:88:b8:2f:c3:63:0c:7b:a9:7c:e2:dc:5c:
e8:23:02:7f:b9:30:06:01:ba:19:64:2a:e9:97:06:
b4:7c:ab:2f:6e:07:52:36:b5:0a:be:2e:98:d8:c9:
a6:59:6d:a8:c8:af:92:cf:4b:76:76:4a:b3:73:7d:
c9:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:9D:B4:72:A2:F4:29:29:AF:9D:F2:1E:C1:BC:44:84:BD:1C:D7:6F
X509v3 Authority Key Identifier:
keyid:E5:85:BA:EA:62:F8:D6:06:26:24:87:38:C4:5D:FB:D2:21:73:7F:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YW66mL41gYmJIc4xF370iFzf0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/bda3ef-4a2f-4ccc-b295-b22eb948515c/1/5YW66mL41gYmJIc4xF370iFzf0w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/bda3ef-4a2f-4ccc-b295-b22eb948515c/1/5YW66mL41gYmJIc4xF370iFzf0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:52:47:4f:aa:a0:aa:83:a7:de:16:87:59:f6:22:68:8b:ec:
1c:71:f5:31:e4:02:1e:9e:d1:ea:c1:f2:0b:a2:9c:22:d5:3b:
c2:a5:d3:0f:db:ed:c7:a3:d7:85:d2:ea:67:88:a3:4b:de:44:
d2:cf:fa:4a:e0:d7:17:87:8f:ca:23:30:52:a5:cb:44:75:da:
08:82:60:83:b1:4d:8e:1b:be:bf:f3:29:80:5a:28:ed:ab:67:
62:c8:c1:87:a1:89:9a:78:7f:66:94:83:ff:db:85:6b:9e:28:
f4:21:dc:3c:b0:a7:3c:c7:11:76:f8:06:ae:98:6d:2f:b0:07:
86:03:72:9b:88:b3:ba:de:4d:bc:4a:cf:41:56:4e:96:f9:c0:
f3:45:89:81:a3:1a:3b:35:51:94:fe:ca:80:61:67:bf:d8:e2:
04:a6:3c:1c:00:be:f3:59:a1:52:ee:79:aa:8f:86:c3:33:0b:
ff:e4:1c:49:2e:86:6f:36:c3:06:a5:9c:4b:56:b1:5f:e2:07:
70:ee:74:e4:2a:a6:a8:35:b4:fc:c2:72:fb:74:32:d6:c7:2a:
a7:f3:c8:e3:66:94:71:ff:b3:89:30:7b:ef:08:90:eb:9e:32:
f2:58:ce:81:89:0c:ce:bf:e4:07:60:04:9f:6e:c8:81:05:a7:
df:fc:59:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:50:26 2026 by rpki-client