Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/dfbab4-a7e3-4b69-bd40-67f8ce814acb/1/yBEbEYJKUeh1t-BnsErHj97koRw.mft
File: yBEbEYJKUeh1t-BnsErHj97koRw.mft (raw, json)
Hash identifier: ZQamG0dT9biqNEuzcMLYCcNvdUYUdFaKD0Ggk7CwrdM=
Subject key identifier: D1:BC:B2:02:AD:6A:E6:2C:B3:E1:93:49:22:89:00:C1:D4:D4:02:D1
Authority key identifier: C8:11:1B:11:82:4A:51:E8:75:B7:E0:67:B0:4A:C7:8F:DE:E4:A1:1C
Certificate issuer: /CN=c8111b11824a51e875b7e067b04ac78fdee4a11c
Certificate serial: 019E1F10D84724A41228F3230656A10445DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yBEbEYJKUeh1t-BnsErHj97koRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/dfbab4-a7e3-4b69-bd40-67f8ce814acb/1/yBEbEYJKUeh1t-BnsErHj97koRw.mft
Manifest number: 92
Signing time: Wed 13 May 2026 02:00:58 +0000
Manifest this update: Wed 13 May 2026 02:00:58 +0000
Manifest next update: Thu 14 May 2026 02:00:58 +0000
Files and hashes: 1: a6qm2G8bP-6TfcIWHf4qN9k0lXk.roa (hash: AAGltJSHEt26RftxskOpRrCiKKvAykf8bEWROHtz0kQ=)
2: qe9-3QkjBxFyWxL_vzoUOFw2A1Y.roa (hash: TvC61ITQGltf4rYIHmX8krv+oGoHgURt5QCIo015ems=)
3: yBEbEYJKUeh1t-BnsErHj97koRw.crl (hash: 7YwFCm+W2zgLpMkC/ktZPKh1RSnz1mEwVpRPP7nY3rg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/dfbab4-a7e3-4b69-bd40-67f8ce814acb/1/yBEbEYJKUeh1t-BnsErHj97koRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/dfbab4-a7e3-4b69-bd40-67f8ce814acb/1/yBEbEYJKUeh1t-BnsErHj97koRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/yBEbEYJKUeh1t-BnsErHj97koRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:10:d8:47:24:a4:12:28:f3:23:06:56:a1:04:45:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8111b11824a51e875b7e067b04ac78fdee4a11c
Validity
Not Before: May 13 02:00:58 2026 GMT
Not After : May 14 02:00:58 2026 GMT
Subject: CN=d1bcb202ad6ae62cb3e19349228900c1d4d402d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:0f:9c:ea:53:6b:a3:e5:10:e4:c7:15:8e:9e:
30:93:ec:ac:a1:ab:06:64:e2:6b:93:01:25:e4:86:
7a:65:af:01:64:1b:91:c3:d1:ec:10:de:ff:57:ef:
dd:1e:dc:fc:51:c8:fb:0b:08:60:52:26:09:da:27:
10:fe:e1:f0:b1:77:13:e4:4f:fe:42:4c:f5:b3:06:
86:19:84:ee:66:df:b2:89:6b:5f:9d:15:61:d6:b8:
f3:7a:dc:fe:41:2d:7a:f6:4c:e0:7b:60:f8:83:e0:
16:12:6d:92:6c:47:31:11:1f:cc:6a:e3:14:90:eb:
48:80:e0:fc:c1:b2:40:7b:f0:02:c3:30:d7:41:f3:
5d:1c:36:ed:fa:14:16:d2:33:93:d7:e9:96:95:7a:
04:cd:c8:a3:1d:0d:95:76:a4:37:eb:e2:f1:ed:6c:
ee:35:15:96:92:e5:64:2d:cb:40:07:7d:4f:0e:4d:
7f:6e:41:b9:86:c3:bd:a1:5f:75:5d:2e:ce:bb:86:
26:73:0b:55:d7:44:1f:f1:61:aa:22:f3:3f:2d:d3:
05:8a:b5:3d:31:9d:b0:94:99:3e:84:aa:11:54:2b:
1c:c8:47:23:f3:08:46:db:98:ac:dd:d4:41:e0:8f:
53:98:ed:51:f0:49:ec:1c:af:59:c8:8e:47:09:a1:
6e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:BC:B2:02:AD:6A:E6:2C:B3:E1:93:49:22:89:00:C1:D4:D4:02:D1
X509v3 Authority Key Identifier:
keyid:C8:11:1B:11:82:4A:51:E8:75:B7:E0:67:B0:4A:C7:8F:DE:E4:A1:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yBEbEYJKUeh1t-BnsErHj97koRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/dfbab4-a7e3-4b69-bd40-67f8ce814acb/1/yBEbEYJKUeh1t-BnsErHj97koRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/dfbab4-a7e3-4b69-bd40-67f8ce814acb/1/yBEbEYJKUeh1t-BnsErHj97koRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:e3:15:1d:18:14:f0:d5:22:65:b4:07:18:01:81:d7:4a:6a:
98:f8:9a:5e:40:e6:bc:ed:91:7c:e9:82:08:41:0d:c9:fe:1f:
92:bc:dc:74:1c:de:89:01:81:ce:bf:aa:dc:52:4d:0e:3f:25:
07:90:ab:8e:29:89:c8:71:a5:f9:a3:68:9a:73:08:ed:29:fe:
8c:f0:d9:e3:92:23:39:86:fc:ad:92:4f:2e:ee:34:14:d3:a7:
32:38:52:62:58:d4:f3:18:dd:cb:e9:99:0c:8b:37:50:c8:ad:
a9:9a:cf:e5:d6:9b:40:3f:b1:6a:a2:cb:db:e4:e7:cd:f4:5f:
4c:8d:ae:d8:ad:b7:dd:ed:41:06:08:7a:0d:4f:9a:89:f9:85:
e3:a0:d9:ca:c6:19:4b:a7:c4:08:60:20:0a:5a:1d:e2:09:a4:
cc:28:58:9b:21:47:b4:52:cd:a5:a4:5b:be:41:3e:7a:85:80:
d6:85:a0:14:c7:db:1f:ad:45:56:72:f0:be:30:c7:47:63:1d:
b3:3b:de:0c:17:9e:f5:65:6c:36:6a:54:21:cb:f8:c2:67:d1:
39:86:d3:d2:3a:02:86:0c:47:8a:04:95:c9:5f:b9:79:51:22:
6b:07:77:63:05:98:61:46:04:41:65:82:68:df:f5:e9:60:9e:
bf:e9:7b:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:46:30 2026 by rpki-client