Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.mft
File: Y7hCJUu9a_M-CdBaRY8AoEhM8W8.mft (raw, json)
Hash identifier: MvoTyBpz3jPkub2lPko6RxR937YoetF6TalQHCABj08=
Subject key identifier: 70:E8:F6:48:43:1E:98:C9:3C:A7:73:A6:6E:9A:E6:FC:DB:26:AB:80
Authority key identifier: 63:B8:42:25:4B:BD:6B:F3:3E:09:D0:5A:45:8F:00:A0:48:4C:F1:6F
Certificate issuer: /CN=63b842254bbd6bf33e09d05a458f00a0484cf16f
Certificate serial: 019E1E6C0E18AB217789BB5AB714DE3BA74B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.mft
Manifest number: 1906
Signing time: Tue 12 May 2026 23:00:58 +0000
Manifest this update: Tue 12 May 2026 23:00:58 +0000
Manifest next update: Wed 13 May 2026 23:00:58 +0000
Files and hashes: 1: 9BzFpLnLB1lQperfgmv4qrzYH0o.roa (hash: SqfjtbEZOdrWLg54xvBk/hWboyrJmqo9/XjbAhZrvws=)
2: Y7hCJUu9a_M-CdBaRY8AoEhM8W8.crl (hash: z1kr79PYXvN+LqB3vqk2b1COcRDiRFagJWhdozpqG6g=)
3: yxoCaKfgeTweKDIo2zxWc2jeH10.roa (hash: iUYOXpm89oJ723QbmJPdvxscW5Vo8+6ZFKBfX+z5wi8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:0e:18:ab:21:77:89:bb:5a:b7:14:de:3b:a7:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63b842254bbd6bf33e09d05a458f00a0484cf16f
Validity
Not Before: May 12 23:00:58 2026 GMT
Not After : May 13 23:00:58 2026 GMT
Subject: CN=70e8f648431e98c93ca773a66e9ae6fcdb26ab80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c1:7c:e8:b2:65:24:32:59:12:9c:75:55:34:
51:ba:28:86:22:1f:48:5c:85:4e:0f:a9:e4:e0:e8:
5e:55:0a:e0:1d:ac:3d:41:c8:17:07:e3:e5:04:b8:
9d:f3:76:87:cb:d9:58:3d:7d:3f:36:66:14:11:03:
89:a9:cf:c1:0d:95:f2:46:f9:33:a4:f1:8d:05:65:
01:fe:83:ba:27:44:de:47:2a:c0:c5:e1:ac:52:3f:
cc:91:40:c5:3d:7f:ae:3b:79:df:b2:28:57:1a:15:
de:12:e8:1d:30:ce:b8:9d:e7:df:d3:0a:36:62:73:
06:12:9f:d3:86:43:c5:81:f4:11:fc:56:54:0f:b1:
47:3d:54:b3:b8:83:1b:14:ab:34:88:4e:65:79:e3:
45:ff:5f:62:49:a4:65:2c:c4:1a:9a:7e:66:47:5a:
d5:32:84:bb:b9:0e:e2:13:f4:bc:80:25:db:b1:70:
fb:bf:01:34:14:2d:12:f7:7c:16:39:75:0d:bb:d6:
62:06:a3:7b:6e:8f:13:9e:d8:96:3b:67:1e:3c:18:
c8:b8:75:ef:a4:7e:e3:d5:c9:76:6e:8e:1f:6b:f6:
61:54:2e:3e:59:da:9f:39:8f:26:40:ce:5a:d0:6e:
34:36:0d:c9:fc:25:bf:a5:82:94:d9:66:32:93:66:
ef:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:E8:F6:48:43:1E:98:C9:3C:A7:73:A6:6E:9A:E6:FC:DB:26:AB:80
X509v3 Authority Key Identifier:
keyid:63:B8:42:25:4B:BD:6B:F3:3E:09:D0:5A:45:8F:00:A0:48:4C:F1:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:58:1e:ce:74:26:9e:77:0b:3a:bc:5f:7a:47:92:26:e3:1e:
f5:94:62:44:9a:a3:9b:f5:5c:19:13:5d:56:05:09:dc:40:19:
eb:0b:59:60:8b:40:0e:06:29:36:70:c9:90:7b:b5:d5:d8:8a:
4f:0e:63:22:0f:4f:66:72:08:82:a8:03:9d:d7:9e:fe:23:54:
70:33:28:4e:76:cf:87:31:8c:20:d6:79:fa:bc:e2:39:25:eb:
d2:6a:83:70:e7:bf:01:00:e5:45:a0:03:76:45:f6:37:94:1b:
82:55:53:4e:9f:86:fc:fa:06:4e:46:76:a1:7e:d4:94:4e:7e:
d9:81:23:c4:df:6d:e2:c0:60:49:51:57:35:ab:1e:2d:39:5e:
39:63:d8:48:ee:78:44:78:fb:75:ac:fb:26:1b:af:de:4b:9b:
f5:ac:cc:9f:ad:f4:17:ab:fb:11:30:82:74:45:a4:a8:5d:86:
d5:42:ea:06:5e:0e:42:9f:e7:e1:96:f5:eb:ce:6f:3f:d1:b9:
f0:76:e7:de:7f:2e:53:de:2d:2d:e9:77:44:d8:ff:dd:cc:a2:
ce:b7:84:f1:57:a5:db:d9:90:49:c8:e1:1b:72:a6:c5:f9:78:
8a:33:39:d4:1b:10:74:4d:48:02:d7:b6:14:13:98:3a:f3:11:
b8:fe:29:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:19:26 2026 by rpki-client