Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/a16ea5-3867-4406-9f2a-a4944e9625c0/1/YRBtLf9xFvNat_oQJ1pF44O85SM.mft
File: YRBtLf9xFvNat_oQJ1pF44O85SM.mft (raw, json)
Hash identifier: mcaziWOICxcqsXRtcu9alvNHkJpElsKZoJCcjB5tQL8=
Subject key identifier: E7:DB:C4:F6:C9:19:B1:85:1B:B2:DC:61:44:E3:1A:75:6B:D4:D2:50
Authority key identifier: 61:10:6D:2D:FF:71:16:F3:5A:B7:FA:10:27:5A:45:E3:83:BC:E5:23
Certificate issuer: /CN=61106d2dff7116f35ab7fa10275a45e383bce523
Certificate serial: 019E1FED05437F8FA116289AA39C713C1F5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YRBtLf9xFvNat_oQJ1pF44O85SM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/a16ea5-3867-4406-9f2a-a4944e9625c0/1/YRBtLf9xFvNat_oQJ1pF44O85SM.mft
Manifest number: 17DC
Signing time: Wed 13 May 2026 06:01:27 +0000
Manifest this update: Wed 13 May 2026 06:01:27 +0000
Manifest next update: Thu 14 May 2026 06:01:27 +0000
Files and hashes: 1: YRBtLf9xFvNat_oQJ1pF44O85SM.crl (hash: rZ9k7zEE2ofhTTinI60vztl8SDSg5C/FD5hLXJe8gC4=)
2: ds0HwgnE1wK4tusqij2iDAo4C4w.roa (hash: AV7GAfjJkTxxVqb/RhgxTIb2SMDdBmXXWKpB5XXq9g8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/a16ea5-3867-4406-9f2a-a4944e9625c0/1/YRBtLf9xFvNat_oQJ1pF44O85SM.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/a16ea5-3867-4406-9f2a-a4944e9625c0/1/YRBtLf9xFvNat_oQJ1pF44O85SM.mft
rsync://rpki.ripe.net/repository/DEFAULT/YRBtLf9xFvNat_oQJ1pF44O85SM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:ed:05:43:7f:8f:a1:16:28:9a:a3:9c:71:3c:1f:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61106d2dff7116f35ab7fa10275a45e383bce523
Validity
Not Before: May 13 06:01:27 2026 GMT
Not After : May 14 06:01:27 2026 GMT
Subject: CN=e7dbc4f6c919b1851bb2dc6144e31a756bd4d250
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:56:b8:a5:e0:8b:82:dd:da:d0:a7:9a:47:fe:
3c:c9:aa:20:a4:ff:64:01:b6:32:58:d0:68:4e:54:
1d:46:34:c7:b2:1a:98:c3:c4:22:66:65:b7:7b:81:
ec:4d:95:42:f0:99:da:7c:2e:34:1d:44:18:a3:61:
2c:d7:83:ba:ac:59:53:33:5f:98:7b:98:33:26:f2:
1f:38:d5:29:0a:4b:02:1d:e6:49:41:3a:ee:b6:ec:
3c:90:0a:43:33:de:c8:c1:a0:69:1c:41:29:26:ed:
86:fb:03:dc:53:e9:d8:7a:c5:77:1b:64:d7:1d:ed:
23:d9:28:40:fa:5b:8a:52:c9:5b:e4:da:6a:20:0e:
38:94:cc:a7:40:c5:dd:c0:df:99:5c:90:75:4d:36:
31:8b:24:e5:9f:cf:05:b8:f2:39:18:f1:7d:90:e0:
4e:67:6d:27:d8:62:06:33:10:2f:f3:9a:81:4e:55:
2e:90:9e:a5:60:8c:9c:a4:82:06:50:95:b7:a5:31:
d5:b5:75:87:49:a1:09:fb:15:f6:45:d3:c8:63:34:
e1:cd:35:16:0b:2c:9f:ef:0c:f2:02:df:d5:f4:8d:
88:2e:e9:a7:8a:a6:4b:e0:3c:d3:4b:6c:8e:66:61:
af:7b:87:12:e9:ad:0d:68:23:d0:7f:a3:6c:2c:86:
da:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:DB:C4:F6:C9:19:B1:85:1B:B2:DC:61:44:E3:1A:75:6B:D4:D2:50
X509v3 Authority Key Identifier:
keyid:61:10:6D:2D:FF:71:16:F3:5A:B7:FA:10:27:5A:45:E3:83:BC:E5:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YRBtLf9xFvNat_oQJ1pF44O85SM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/a16ea5-3867-4406-9f2a-a4944e9625c0/1/YRBtLf9xFvNat_oQJ1pF44O85SM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/a16ea5-3867-4406-9f2a-a4944e9625c0/1/YRBtLf9xFvNat_oQJ1pF44O85SM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:cb:50:92:94:b2:98:83:91:5e:92:dc:6c:ac:02:e0:ca:77:
dc:53:00:df:45:92:c7:b4:c4:2a:6b:f8:ac:65:1d:e5:86:db:
1a:28:c9:c2:b3:1b:2f:e2:5c:d3:ba:38:17:21:1b:d7:70:fd:
9e:91:57:fe:6f:5a:e2:11:56:2b:01:cd:2a:41:e3:c3:88:de:
83:d3:1d:ad:09:a0:42:79:64:ff:78:f3:10:21:86:9c:f9:29:
5b:7c:bc:a3:9f:7c:9e:f5:57:65:e5:8a:c7:23:f2:8e:69:84:
76:50:ec:cd:08:de:5a:e0:4b:7a:ba:7a:bf:4a:6c:1d:05:45:
61:e7:bf:ea:86:56:8e:ae:bb:4c:2f:81:5a:21:cd:93:0d:ac:
a3:0a:59:e1:dc:90:09:db:e5:02:d4:22:ab:7d:83:64:9e:d9:
89:88:ec:38:17:a7:45:fe:32:ed:c0:f5:ae:5f:8e:96:10:23:
0d:ad:c9:c7:46:1c:02:a2:cc:92:e5:90:af:2f:f4:dc:79:c8:
a6:be:97:07:db:2d:e2:b0:00:fe:b1:b6:d0:32:2d:06:61:7c:
2e:d7:a2:d5:76:50:2c:69:34:51:38:fd:41:2f:07:e8:48:0f:
af:2b:53:5b:5a:36:ac:46:56:7b:e8:8e:79:45:e9:b3:65:ac:
29:cc:83:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:11:53 2026 by rpki-client